Možný Keylogger (Nebo nějaký spyware)

[teknodeu]

Zdravím, prosil bych vás o takovou preventivku.

Protože před 2-ma dny jsem nechtěně klikl na jednu webovou stránku a myslím si, že se mi do prohlížeče/počítače dostal nějaký spyware, prostě nějaký špehovací program (keylogger), mohli by jste mi pomoc prosím? Udělám to, co po mě budete chtít!

Přikládám ze LOG z FRST:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:17-10-2015
Ran by Phong (administrator) on PHONG-VAIO (17-10-2015 23:07:31)
Running from C:\Users\Phong\Desktop
Loaded Profiles: Phong (Available Profiles: Phong)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 10 (Default browser not detected!)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IObit) D:\Advanced SystemCare 8\ASCService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Akamai Technologies, Inc.) C:\Users\Phong\AppData\Local\Akamai\netsession_win.exe
(Spotify Ltd) C:\Users\Phong\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Akamai Technologies, Inc.) C:\Users\Phong\AppData\Local\Akamai\netsession_win.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ElevationManager\AdobeUpdateService.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Threat Expert Ltd.) C:\Program Files (x86)\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe
(IObit) D:\Advanced SystemCare 8\Monitor.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(WiseCleaner.com) D:\Wise Registry Cleaner\AssistService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(Valve Corporation) D:\Steam\Steam.exe
(Valve Corporation) D:\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) D:\Steam\bin\steamwebhelper.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Phong\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [518784 2011-03-29] (Conexant Systems, Inc.)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [226672 2011-02-17] (Alps Electric Co., Ltd.)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [2757312 2011-02-15] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] => c:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [648032 2010-11-27] (Sony Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKU\S-1-5-21-2338150882-3624695077-237545274-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Phong\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2338150882-3624695077-237545274-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7063832 2014-11-21] (Piriform Ltd)
HKU\S-1-5-21-2338150882-3624695077-237545274-1000\...\Run: [Google Update] => C:\Users\Phong\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-09-04] (Google Inc.)
HKU\S-1-5-21-2338150882-3624695077-237545274-1000\...\Run: [Spotify Web Helper] => C:\Users\Phong\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-09-05] (Spotify Ltd)
HKU\S-1-5-21-2338150882-3624695077-237545274-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2014-12-19] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2014-12-19] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2014-12-19] ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => No File
CHR HKU\S-1-5-21-2338150882-3624695077-237545274-1000\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{185E5B43-4309-4573-9D42-493F22A95F7D}: [DhcpNameServer] 213.46.172.37 213.46.172.36

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-2338150882-3624695077-237545274-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2338150882-3624695077-237545274-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2338150882-3624695077-237545274-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.cz/
URLSearchHook: HKU\S-1-5-21-2338150882-3624695077-237545274-1000 - (No Name) - {472734EA-242A-422b-ADF8-83D1E48CC825} - No File
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2338150882-3624695077-237545274-1000 -> {2800457D-ECC9-4CD5-AC17-E1CE6368BA14} URL = hxxp://rover.ebay.com/rover/1/14361-113527-36183-6/4?satitle={searchTerms}
SearchScopes: HKU\S-1-5-21-2338150882-3624695077-237545274-1000 -> {B0DC2BF5-EB0B-41C1-BAC1-0EEB90F4B23B} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2013-05-14] (Skype Technologies S.A.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18] (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2014-11-23] (Sun Microsystems, Inc.)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-03-31] (Atheros Commnucations)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-05-14] (Skype Technologies S.A.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2014-11-23] (Sun Microsystems, Inc.)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM-x32 - No Name - {472734EA-242A-422B-ADF8-83D1E48CC825} - No File
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2013-05-14] (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-05-14] (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Filter: application/x-mfe-ipt - No CLSID Value

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll [2015-09-22] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-01-07] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-22] ()
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_45 -> C:\Windows\SysWOW64\npdeployJava1.dll [2014-11-23] (Sun Microsystems, Inc.)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll [2014-11-23] (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2011-02-18] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2011-02-18] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-14] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-02-16] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-01-07] (Adobe Systems)
FF Plugin HKU\S-1-5-21-2338150882-3624695077-237545274-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Phong\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-2338150882-3624695077-237545274-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Phong\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-2338150882-3624695077-237545274-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2012-11-29] (Ubisoft)

Chrome:
=======
CHR Profile: C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Disk Google) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-15]
CHR Extension: (YouTube) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-15]
CHR Extension: (Dota 2 / CS:GO lounge autobump) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cefaeceoipbbajophehdidoeamkmkhej [2015-03-10]
CHR Extension: (Steam theme) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ciomdfgkibhfdaocjomnjlolnmbmnakk [2015-01-15]
CHR Extension: (Steam inventory helper) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2015-03-10]
CHR Extension: (Vyhledávání Google) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-15]
CHR Extension: (Floating YouTube Extension) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\egncdnniomonjgpjbapalkckojhkfddk [2015-09-27]
CHR Extension: (Lounge Assistant) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\enjonnlehciedbcidabdglnnihcncbml [2015-03-10]
CHR Extension: (LoungeDestroyer) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghahcnmfjfckcedfajbhekgknjdplfcl [2015-08-16]
CHR Extension: (AdBlock) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-01-15]
CHR Extension: (Facebook Unseen) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\iicapmagmhahddefgokbabbgieiogjop [2015-07-14]
CHR Extension: (Emoji Input by EmojiStuff.com) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\immhpnclomdloikkpcefncmfgjbkojmh [2015-06-10]
CHR Extension: (Floating YouTube™) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jjphmlaoffndcnecccgemfdaaoighkel [2015-09-27]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-15]
CHR Extension: (Gmail) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-15]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-05-14]
StartMenuInternet: Google Chrome - C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ElevationManager\AdobeUpdateService.exe [710320 2015-01-07] (Adobe Systems Incorporated)
R2 AdvancedSystemCareService8; D:\Advanced SystemCare 8\ASCService.exe [815392 2014-11-04] (IObit)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-03-31] (Atheros) [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [75936 2011-03-31] (Atheros Commnucations) [File not signed]
R2 Browser Defender Update Service; C:\Program Files (x86)\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe [580728 2012-10-23] (Threat Expert Ltd.)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2361344 2011-03-29] (Realsil Microelectronics Inc.) [File not signed]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3611808 2015-07-22] (INCA Internet Co., Ltd.)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.)
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [887000 2011-01-20] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1642544 2014-02-28] (Sony Corporation)
R2 wasnotify; D:\Wise Registry Cleaner\AssistService.exe [643392 2015-04-28] (WiseCleaner.com)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2014-06-21] (DT Soft Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 HPMo4DE3; C:\Windows\System32\DRIVERS\HPMo4DE3.sys [25088 2011-03-09] (TPMX Electronics Ltd.)
S3 HPub4DE3; C:\Windows\System32\Drivers\HPub4DE3.sys [18432 2011-04-12] (TPMX Electronics Ltd.)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-01-10] (REALiX(tm))
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2014-11-23] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33008 2014-11-23] (Synaptics Incorporated)
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] ()
S3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex) [File not signed]
S3 Huawei; system32\DRIVERS\ewdcsc.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-17 23:07 - 2015-10-17 23:08 - 00023482 _____ C:\Users\Phong\Desktop\FRST.txt
2015-10-17 23:06 - 2015-10-17 23:07 - 00000000 ____D C:\FRST
2015-10-17 23:05 - 2015-10-17 23:05 - 02196992 _____ (Farbar) C:\Users\Phong\Desktop\FRST64.exe
2015-10-17 23:01 - 2015-10-17 23:01 - 00112640 _____ (forum.viry.cz) C:\Users\Phong\Desktop\FRSTLauncher.exe
2015-10-17 21:46 - 2015-10-17 21:46 - 00000000 ____D C:\rsit
2015-10-17 20:49 - 2015-10-17 20:49 - 00000056 _____ C:\Windows\setupact.log
2015-10-17 20:49 - 2015-10-17 20:49 - 00000000 _____ C:\Windows\setuperr.log
2015-10-16 19:13 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2015-10-16 19:13 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2015-10-16 19:13 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-10-16 19:13 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-10-16 19:13 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-10-16 19:13 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2015-10-16 19:13 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2015-10-16 19:13 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2015-10-16 19:12 - 2015-10-16 19:13 - 00000000 ___SD C:\ComboFix
2015-10-16 19:11 - 2015-10-16 19:11 - 00000000 ____D C:\Windows\erdnt
2015-10-16 19:03 - 2015-10-17 20:47 - 00000000 ____D C:\AdwCleaner
2015-10-16 19:02 - 2015-10-16 19:02 - 00003058 _____ C:\Windows\System32\Tasks\{3191BDE4-7A19-41BC-87DB-5D26A3D270C3}
2015-10-16 18:57 - 2015-10-16 18:57 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2015-10-15 22:50 - 2015-10-15 22:50 - 08218312 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-10-07 18:21 - 2015-10-07 18:21 - 03168768 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-10-07 18:21 - 2015-10-07 18:21 - 02607104 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-10-07 18:21 - 2015-10-07 18:21 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-10-07 18:21 - 2015-10-07 18:21 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-10-07 18:21 - 2015-10-07 18:21 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-10-07 18:21 - 2015-10-07 18:21 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-10-07 18:21 - 2015-10-07 18:21 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-10-07 18:21 - 2015-10-07 18:21 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-10-07 18:21 - 2015-10-07 18:21 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-10-07 18:21 - 2015-10-07 18:21 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-10-07 18:21 - 2015-10-07 18:21 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-10-07 18:21 - 2015-10-07 18:21 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-10-07 18:21 - 2015-10-07 18:21 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-10-07 18:21 - 2015-10-07 18:21 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-10-07 18:21 - 2015-10-07 18:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-10-07 18:21 - 2015-10-07 18:21 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-10-03 22:37 - 2015-10-03 22:37 - 00000000 ____D C:\Users\Phong\AppData\Local\GWX
2015-09-27 19:14 - 2015-09-27 19:14 - 00000000 ____D C:\Users\Phong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome
2015-09-26 16:54 - 2015-09-26 16:54 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-17 22:59 - 2015-01-18 08:09 - 00000000 ____D C:\Windows\SysWOW64\WCID
2015-10-17 22:50 - 2013-02-26 15:52 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-10-17 22:46 - 2015-05-20 18:22 - 00000962 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2338150882-3624695077-237545274-1000UA.job
2015-10-17 21:52 - 2014-11-21 22:56 - 00000000 ____D C:\Program Files\trend micro
2015-10-17 21:03 - 2009-07-14 06:45 - 00028848 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-10-17 21:03 - 2009-07-14 06:45 - 00028848 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-10-17 21:01 - 2015-05-09 18:51 - 01959316 _____ C:\Windows\WindowsUpdate.log
2015-10-17 20:59 - 2015-01-16 17:21 - 00000000 ____D C:\ProgramData\TEMP
2015-10-17 20:52 - 2011-02-14 22:16 - 00669116 _____ C:\Windows\system32\perfh005.dat
2015-10-17 20:52 - 2011-02-14 22:16 - 00141744 _____ C:\Windows\system32\perfc005.dat
2015-10-17 20:52 - 2009-07-14 07:13 - 01584554 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-17 20:49 - 2012-03-18 23:17 - 00000000 ____D C:\ProgramData\NVIDIA
2015-10-17 20:49 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-17 20:39 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2015-10-17 20:16 - 2012-03-18 23:14 - 00003978 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{BA172C46-C51A-4723-B7D3-F69EB73167E2}
2015-10-16 19:34 - 2015-05-14 15:15 - 00000000 ___RD C:\Users\Phong\Desktop\Spyware & Malware
2015-10-16 19:12 - 2015-01-20 20:25 - 00000000 ____D C:\Qoobox
2015-10-15 22:50 - 2013-02-26 15:52 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-10-15 22:50 - 2013-02-26 15:52 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-10-15 22:50 - 2012-03-24 12:55 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-15 07:30 - 2012-03-27 15:50 - 00002326 _____ C:\Users\Phong\Desktop\Google Chrome.lnk
2015-10-12 16:25 - 2012-03-21 19:07 - 00000000 ____D C:\Users\Phong\AppData\Local\CrashDumps
2015-10-10 16:05 - 2015-05-09 17:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8
2015-10-08 16:04 - 2015-04-04 16:02 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-10-08 16:04 - 2015-04-04 16:02 - 00000000 ___SD C:\Windows\system32\GWX
2015-10-07 07:08 - 2015-02-05 15:18 - 00000000 ____D C:\Users\Phong\AppData\Local\Steam
2015-09-25 15:06 - 2013-12-21 16:26 - 00000000 ____D C:\Users\Phong\AppData\Local\Akamai
2015-09-24 20:41 - 2013-02-22 16:34 - 00000000 ____D C:\Users\Phong\AppData\Local\Microsoft Help
2015-09-20 20:13 - 2015-03-28 21:59 - 00000000 ____D C:\Users\Phong\AppData\Local\Spotify
2015-09-20 19:18 - 2015-03-28 21:58 - 00000000 ____D C:\Users\Phong\AppData\Roaming\Spotify
2015-09-18 22:16 - 2015-05-01 16:39 - 00000000 ____D C:\Users\Phong\AppData\Roaming\TS3Client
2015-09-17 16:56 - 2015-06-20 21:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune
2015-09-17 16:56 - 2015-05-14 15:13 - 00000000 ___RD C:\Users\Phong\Desktop\Photoshop & Edit

==================== Files in the root of some directories =======

2015-01-31 19:37 - 2015-08-10 22:15 - 0000132 _____ () C:\Users\Phong\AppData\Roaming\Adobe Formát PNG CS5 – předvolby
2013-03-02 17:42 - 2014-05-29 16:38 - 0006144 _____ () C:\Users\Phong\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-11-01 19:38 - 2014-11-01 19:38 - 0003752 _____ () C:\Users\Phong\AppData\Local\recently-used.xbel
2014-10-11 17:23 - 2014-10-11 17:23 - 0000000 _____ () C:\Users\Phong\AppData\Local\{7C5BF313-CB05-4DF1-9B2D-219B423B7EBB}

Some files in TEMP:
====================
C:\Users\Phong\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\COMODO Updater.job => D:\COMODO\Updater.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2338150882-3624695077-237545274-1000Core.job => C:\Users\Phong\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2338150882-3624695077-237545274-1000UA.job => C:\Users\Phong\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\ProgramData\TEMP:430C6D84
AlternateDataStreams: C:\ProgramData\TEMP:DFC5A2B2

==================== Security Center ==================

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Phong\Desktop" je 64 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher
"C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager
"C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 8
"D:\Advanced SystemCare 8\ASCTray.exe" /Auto [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AthBtTray
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AtherosBtStack
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync
"C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring
"C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update
"C:\Users\Phong\AppData\Local\Google\Update\GoogleUpdate.exe" /c [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAStorIcon
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mcui_exe
"C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mncercqdeSrv
C:\Windows\inf\mncercqde.vbe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mnceumtSrv
C:\Windows\inf\mnceumt.vbe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MouseDriver
D:\Razer Cortex\RazerCortex.exe -autorun [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RazerCortex
"C:\Users\Phong\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify
"C:\Users\Phong\AppData\Roaming\Spotify\SpotifyWebHelper.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper
Re�im ECHO je vypnut.


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
DoNotAllowExceptions REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
DoNotAllowExceptions REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

[Rudy]

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Zároveň přesouvám vaše vlákno do správné sekce.

[teknodeu]

Zde je LOG, ale jak vidím, tak nikde nic, ale pořád mám předtuchu/možná i vím, že v mém počítači je nějaký špehovací prográmek, nemohli by jsme zajít někam dále? Chci mít tu nejlepší jistotu, prosím... Děkuji vám mockrát za repost a pomoc, moc si toho vážím!


# AdwCleaner v5.013 - Logfile created 18/10/2015 at 12:44:37
# Updated 09/10/2015 by Xplode
# Database : 2015-10-18.3 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Phong - PHONG-VAIO
# Running from : C:\Users\Phong\Desktop\adwcleaner_5.013.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****


***** [ Files ] *****


***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****


*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C8].txt - [655 bytes] ##########

[Rudy]

OK. Otevřte poznámkový blok a zkopírujte do něj:

Start
C:\Users\Phong\AppData\Local\Akamai
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => No File
CHR HKU\S-1-5-21-2338150882-3624695077-237545274-1000\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-2338150882-3624695077-237545274-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
URLSearchHook: HKU\S-1-5-21-2338150882-3624695077-237545274-1000 - (No Name) - {472734EA-242A-422b-ADF8-83D1E48CC825} - No File
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2338150882-3624695077-237545274-1000 -> {B0DC2BF5-EB0B-41C1-BAC1-0EEB90F4B23B} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-05-14] (Skype Technologies S.A.)
C:\Program Files (x86)\Skype\Toolbars
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.)
C:\Program Files (x86)\Microsoft\BingBar
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM-x32 - No Name - {472734EA-242A-422B-ADF8-83D1E48CC825} - No File
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
CHR Extension: (Dota 2 / CS:GO lounge autobump) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cefaeceoipbbajophehdidoeamkmkhej [2015-03-10]
CHR Extension: (Facebook Unseen) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\iicapmagmhahddefgokbabbgieiogjop [2015-07-14]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-05-14]
C:\Users\Phong\AppData\Local\Temp
AlternateDataStreams: C:\ProgramData\TEMP:430C6D84
AlternateDataStreams: C:\ProgramData\TEMP:DFC5A2B2
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mncercqdeSrv
C:\Windows\inf\mncercqde.vbe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mnceumtSrv
C:\Windows\inf\mnceumt.vbe
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Co ten Combofix? Hodláte si nabořit systém, nebo nějakou aplikaci? CF je utilita pro profesionály.

[teknodeu]

Combofix? Něco mi to říká, ale už jsem ho odinstalovával...tedy myslím.
Jinak zde je ten LOG

Fix result of Farbar Recovery Scan Tool (x64) Version:17-10-2015
Ran by Phong (2015-10-18 13:29:31) Run:1
Running from C:\Users\Phong\Desktop
Loaded Profiles: Phong (Available Profiles: Phong)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
C:\Users\Phong\AppData\Local\Akamai
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => No File
CHR HKU\S-1-5-21-2338150882-3624695077-237545274-1000\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-2338150882-3624695077-237545274-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
URLSearchHook: HKU\S-1-5-21-2338150882-3624695077-237545274-1000 - (No Name) - {472734EA-242A-422b-ADF8-83D1E48CC825} - No File
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2338150882-3624695077-237545274-1000 -> {B0DC2BF5-EB0B-41C1-BAC1-0EEB90F4B23B} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-05-14] (Skype Technologies S.A.)
C:\Program Files (x86)\Skype\Toolbars
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.)
C:\Program Files (x86)\Microsoft\BingBar
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM-x32 - No Name - {472734EA-242A-422B-ADF8-83D1E48CC825} - No File
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
CHR Extension: (Dota 2 / CS:GO lounge autobump) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cefaeceoipbbajophehdidoeamkmkhej [2015-03-10]
CHR Extension: (Facebook Unseen) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\iicapmagmhahddefgokbabbgieiogjop [2015-07-14]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-05-14]
C:\Users\Phong\AppData\Local\Temp
AlternateDataStreams: C:\ProgramData\TEMP:430C6D84
AlternateDataStreams: C:\ProgramData\TEMP:DFC5A2B2
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mncercqdeSrv
C:\Windows\inf\mncercqde.vbe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mnceumtSrv
C:\Windows\inf\mnceumt.vbe
End
*****************


"C:\Users\Phong\AppData\Local\Akamai" folder move:

Could not move "C:\Users\Phong\AppData\Local\Akamai" => Scheduled to move on reboot.

"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => key removed successfully
HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\GDriveSharedOverlay" => key removed successfully
HKCR\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => key not found.
"HKU\S-1-5-21-2338150882-3624695077-237545274-1000\SOFTWARE\Policies\Google" => key removed successfully
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
"HKU\S-1-5-21-2338150882-3624695077-237545274-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
HKU\S-1-5-21-2338150882-3624695077-237545274-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{472734EA-242A-422b-ADF8-83D1E48CC825} => value removed successfully
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
"HKU\S-1-5-21-2338150882-3624695077-237545274-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B0DC2BF5-EB0B-41C1-BAC1-0EEB90F4B23B}" => key removed successfully
HKCR\CLSID\{B0DC2BF5-EB0B-41C1-BAC1-0EEB90F4B23B} => key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
"HKCR\Wow6432Node\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
C:\Program Files (x86)\Skype\Toolbars => moved successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}" => key removed successfully
"HKCR\Wow6432Node\CLSID\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}" => key removed successfully
C:\Program Files (x86)\Microsoft\BingBar => moved successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => value removed successfully
HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{472734EA-242A-422B-ADF8-83D1E48CC825} => value removed successfully
HKCR\Wow6432Node\CLSID\{472734EA-242A-422B-ADF8-83D1E48CC825} => key not found.
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => key removed successfully
C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cefaeceoipbbajophehdidoeamkmkhej => moved successfully
C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\iicapmagmhahddefgokbabbgieiogjop => moved successfully
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl" => key removed successfully
"C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx" => not found.

"C:\Users\Phong\AppData\Local\Temp" folder move:

Could not move "C:\Users\Phong\AppData\Local\Temp" => Scheduled to move on reboot.

C:\ProgramData\TEMP => ":430C6D84" ADS removed successfully.
C:\ProgramData\TEMP => ":DFC5A2B2" ADS removed successfully.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mncercqdeSrv => Error: No automatic fix found for this entry.
C:\Windows\inf\mncercqde.vbe => moved successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mnceumtSrv => Error: No automatic fix found for this entry.
C:\Windows\inf\mnceumt.vbe => moved successfully

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2015-10-18 13:31:50)

C:\Users\Phong\AppData\Local\Akamai => Is moved successfully
"C:\Users\Phong\AppData\Local\Temp" => Could not move

==== End of Fixlog 13:31:53 ====

[Rudy]

Smazáno. Nastala nějaká změna?

[teknodeu]

To já jsem se chtěl zeptat, jestli tam nemám nějaký špehovací program/spyware (Keylogger). Protože jsem omylem kliknul na jednu nedůvěřivou URL adresu a mám strach o svoje údaje (př. Bankovní účet) a jestli by jste mi doporučili ještě nějaké prográmky na takové škodlivky, prosím, jinak moc děkuji za vaši ochotu, vážím si toho!

[Rudy]

Našel jsem pouze AdWary a zbytečnosti. Vše bylo smazáno. Můžeme ještě udělat hloubkový sken. Stáhněte, nainstalujte a spusťte MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

[teknodeu]

Zde je LOG

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 18.10.2015
Čas skenování: 18:46
Protokol: loggg.txt
Správce: Ano

Verze: 2.2.0.1024
Databáze malwaru: v2015.10.18.04
Databáze rootkitů: v2015.10.16.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Phong

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 354407
Uplynulý čas: 34 min, 50 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 1
PUP.Optional.PCSpeedUp, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PCSUUCDRV, , [a8c4f4643655c57129aa4743c93a9b65],

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 1
Trojan.Agent.VBS, C:\Windows\SysWOW64\msstp.vbe, , [f17babad8902ee481c24d4c05ea442be],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

[Rudy]

Položky smažte. Ani toto není keylogger.

[teknodeu]

Takže mohu už počítač na 100% využívat, nebo jsou nějaké 'hračky' co by možná ještě něco našli? Jinak vám moc děkuji za pomoc, měl jsem totiž veliký strach!

[Rudy]

Jsou, ale na keylogger toto stačí. Myslím, že PC je čistý.

[teknodeu]

Dobře,tak vám děkuji moc za vaši ochotu se mi věnovat, moc děkuji a mějte se krásně!

[Rudy]

Vy též a nemáte zač!