Prosim o kontrolu logu v pocitaci existuje vic problemu
1. nejdou otevřít zadne stranky pomoci Google Chrome, a Mozilla (jedině funguje IExplorer)
2. Avast hlasi občas Rootkit
3. Nejdou odinstalovat některe toolbary.
Log:
Logfile of random's system information tool 1.10 (written by random/random)
Run by TATIANA at 2015-11-20 21:04:31
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 19 GB (12%) free of 153 GB
Total RAM: 8141 MB (68% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:04:35, on 20.11.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18098)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
C:\Windows\vsnp2std.exe
C:\Program Files (x86)\Clownfish\Clownfish.exe
C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe
C:\Users\TATIANA\AppData\Roaming\IMVUClient\IMVUClient.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Users\TATIANA\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe
C:\Windows\FixCamera.exe
C:\Windows\tsnp2std.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Windows\SysWOW64\DllHost.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Users\TATIANA\Downloads\Paint-Tool-SAI-bez-časového-omezení (1)\PaintTool SAI English Pack\sai.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Users\TATIANA\Desktop\RSIT.exe
C:\Program Files (x86)\trend micro\TATIANA.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://%66%65%65%64.%73%6F%6E%69%63-%73 ... ol1EQ,,&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://%66%65%65%64.%73%6F%6E%69%63-%73 ... ol1EQ,,&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://%66%65%65%64.%73%6F%6E%69%63-%73 ... ol1EQ,,&q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.globasearch.com/?serie=3209& ... 13ngNw3moh
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.globasearch.com/?serie=3209& ... 13ngNw3moh
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://%66%65%65%64.%73%6F%6E%69%63-%73 ... ol1EQ,,&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Sound Blaster Cinema] "C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\Windows\UpdReg.EXE
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [Super Charger] C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\Windows\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [FixCamera] C:\Windows\FixCamera.exe
O4 - HKLM\..\Run: [tsnp2std] C:\Windows\tsnp2std.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [Google Update] "C:\Users\TATIANA\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_AB79C1644CC2B2FACE22D2FCC846A90B] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKCU\..\Run: [Clownfish] "C:\Program Files (x86)\Clownfish\Clownfish.exe"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [GSplay.exe] C:\Users\TATIANA\Desktop\GSplay%20(2)\GSplay.exe
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\TATIANA\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\TATIANA\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: IMVU.lnk = TATIANA\AppData\Roaming\IMVUClient\IMVUQualityAgent.exe
O4 - Global Startup: Killer Network Manager.lnk = ?
O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O13 - DefaultPrefix: http://yamdex.net/?searchid=1&l10n=ru&f ... 05c5&text=
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\ProgramData\Medlight\VolTam.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Smart Connect Technology Agent (ISCTAgent) - Unknown owner - C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MSI_SuperCharger - MSI - C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
O23 - Service: MSI_Trigger_Service - MICRO-STAR INTERNATIONAL CO., LTD. - C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Qualcomm Atheros Killer Service V2 - Qualcomm Atheros - C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 14940 bytes
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1489076616-2120609490-2393241685-1000Core.job - C:\Users\TATIANA\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1489076616-2120609490-2393241685-1000UA.job - C:\Users\TATIANA\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\WpsNotifyTask_TATIANA.job - C:\Program Files (x86)\Kingsoft\Kingsoft Office\wtoolex\wpsnotify.exe -from=task
C:\Windows\tasks\WpsUpdateTask_TATIANA.job - C:\Program Files (x86)\Kingsoft\Kingsoft Office\wtoolex\wpsupdate.exe -from=task
=========Mozilla firefox=========
ProfilePath - C:\Users\TATIANA\AppData\Roaming\Mozilla\Firefox\Profiles\jjjubvi4.default-1433603431791
prefs.js - "browser.startup.homepage" - "http://www.globasearch.com/?serie=3209& ... 13ngNw3moh"
prefs.js - "keyword.URL" - "https://www.google.com/search?trackid=sp-006"
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw_1220162.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@alawar.com/npapi]
"Description"=
"Path"=C:\Windows\npapi.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.1.6\\npsitesafety.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.60.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.60.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
C:\Users\TATIANA\AppData\Roaming\Mozilla\Firefox\Profiles\jjjubvi4.default-1433603431791\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}
C:\Users\TATIANA\AppData\Roaming\Mozilla\Firefox\Profiles\jjjubvi4.default-1433603431791\searchplugins\
avg-secure-search.xml
findit.xml
google-avast.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-29 460384]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-05-17 565304]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12 1725056]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-29 172640]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Sound Blaster Cinema"=C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe [2013-08-16 711680]
"UpdReg"=C:\Windows\UpdReg.EXE [2000-05-11 90112]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2014-02-21 292848]
"Super Charger"=C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [2014-04-08 1047536]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"PinnacleDriverCheck"=C:\Windows\system32\PSDrvCheck.exe [2004-03-10 406016]
"FixCamera"=C:\Windows\FixCamera.exe [2007-07-11 20480]
"tsnp2std"=C:\Windows\tsnp2std.exe [2007-05-12 270336]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-05-17 5515496]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-08-04 597552]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2015-11-12 5565448]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\TATIANA\AppData\Local\Google\Update\GoogleUpdate.exe [2015-03-11 107848]
"msnmsgr"=C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [2014-03-31 4272840]
"GoogleChromeAutoLaunch_AB79C1644CC2B2FACE22D2FCC846A90B"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-11-07 811848]
"Clownfish"=C:\Program Files (x86)\Clownfish\Clownfish.exe [2012-09-27 1122040]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-09-16 8461224]
"GSplay.exe"=C:\Users\TATIANA\Desktop\GSplay%20(2)\GSplay.exe []
"cz.seznam.software.autoupdate"=C:\Users\TATIANA\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\TATIANA\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2015-05-26 103080]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Killer Network Manager.lnk - C:\Windows\Installer\{7364C716-1212-4EAE-B0C9-A31D1E797BF8}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe
C:\Users\TATIANA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
IMVU.lnk - C:\Users\TATIANA\AppData\Roaming\IMVUClient\IMVUQualityAgent.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\ProgramData\Medlight\VolTam.dll"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=vdrcodec.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\SysWOW64\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"vidc.VP60"=C:\Windows\system32\vp6vfw.dll
"vidc.VP61"=C:\Windows\system32\vp6vfw.dll
"VIDC.MJPG"=Pvmjpg21.dll
"VIDC.PIM1"=pclepim1.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"msacm.siren"=sirenacm.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2015-11-20 21:04:31 ----D---- C:\rsit
2015-11-20 21:04:31 ----D---- C:\Program Files (x86)\trend micro
2015-11-18 05:12:37 ----SHD---- C:\Config.Msi
2015-11-17 15:26:07 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2015-11-14 16:50:00 ----D---- C:\Users\TATIANA\AppData\Roaming\Windows Live Writer
2015-11-11 15:15:51 ----D---- C:\Program Files (x86)\Common Files\Plusfax
2015-11-11 15:15:45 ----D---- C:\ProgramData\Medlights
2015-11-11 15:15:45 ----D---- C:\ProgramData\ApplicationHosting
2015-11-11 15:15:38 ----D---- C:\ProgramData\Medlight
2015-11-11 15:14:43 ----D---- C:\Program Files (x86)\Seznam.cz
2015-11-11 15:14:29 ----D---- C:\Users\TATIANA\AppData\Roaming\Seznam.cz
2015-11-11 09:48:58 ----A---- C:\Windows\SysWOW64\wuwebv.dll
2015-11-11 09:48:58 ----A---- C:\Windows\SysWOW64\wups.dll
2015-11-11 09:48:58 ----A---- C:\Windows\SysWOW64\wudriver.dll
2015-11-11 09:48:58 ----A---- C:\Windows\SysWOW64\wuapp.exe
2015-11-11 09:48:58 ----A---- C:\Windows\SysWOW64\wuapi.dll
2015-11-11 09:48:54 ----A---- C:\Windows\SysWOW64\mshtmled.dll
2015-11-11 09:48:54 ----A---- C:\Windows\SysWOW64\MshtmlDac.dll
2015-11-11 09:48:54 ----A---- C:\Windows\SysWOW64\ieetwproxystub.dll
2015-11-11 09:48:53 ----A---- C:\Windows\SysWOW64\vbscript.dll
2015-11-11 09:48:53 ----A---- C:\Windows\SysWOW64\urlmon.dll
2015-11-11 09:48:53 ----A---- C:\Windows\SysWOW64\occache.dll
2015-11-11 09:48:53 ----A---- C:\Windows\SysWOW64\mshtml.dll
2015-11-11 09:48:53 ----A---- C:\Windows\SysWOW64\msfeeds.dll
2015-11-11 09:48:53 ----A---- C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-11-11 09:48:53 ----A---- C:\Windows\SysWOW64\iedkcs32.dll
2015-11-11 09:48:53 ----A---- C:\Windows\SysWOW64\dxtrans.dll
2015-11-11 09:48:52 ----A---- C:\Windows\SysWOW64\jsproxy.dll
2015-11-11 09:48:52 ----A---- C:\Windows\SysWOW64\jscript9diag.dll
2015-11-11 09:48:52 ----A---- C:\Windows\SysWOW64\jscript.dll
2015-11-11 09:48:52 ----A---- C:\Windows\SysWOW64\iesetup.dll
2015-11-11 09:48:52 ----A---- C:\Windows\SysWOW64\iertutil.dll
2015-11-11 09:48:52 ----A---- C:\Windows\SysWOW64\iernonce.dll
2015-11-11 09:48:52 ----A---- C:\Windows\SysWOW64\ieapfltr.dll
2015-11-11 09:48:51 ----A---- C:\Windows\SysWOW64\ieui.dll
2015-11-11 09:48:51 ----A---- C:\Windows\SysWOW64\ieframe.dll
2015-11-11 09:48:51 ----A---- C:\Windows\SysWOW64\dxtmsft.dll
2015-11-11 09:48:50 ----A---- C:\Windows\SysWOW64\wininet.dll
2015-11-11 09:48:50 ----A---- C:\Windows\SysWOW64\webcheck.dll
2015-11-11 09:48:50 ----A---- C:\Windows\SysWOW64\msrating.dll
2015-11-11 09:48:50 ----A---- C:\Windows\SysWOW64\mshtmlmedia.dll
2015-11-11 09:48:50 ----A---- C:\Windows\SysWOW64\jscript9.dll
2015-11-11 09:48:50 ----A---- C:\Windows\SysWOW64\ieUnatt.exe
2015-11-11 09:48:06 ----A---- C:\Windows\SysWOW64\schannel.dll
2015-11-11 09:48:06 ----A---- C:\Windows\SysWOW64\ntoskrnl.exe
2015-11-11 09:48:06 ----A---- C:\Windows\SysWOW64\ntkrnlpa.exe
2015-11-11 09:48:06 ----A---- C:\Windows\SysWOW64\ntdll.dll
2015-11-11 09:48:06 ----A---- C:\Windows\SysWOW64\ncrypt.dll
2015-11-11 09:48:06 ----A---- C:\Windows\SysWOW64\kerberos.dll
2015-11-11 09:48:06 ----A---- C:\Windows\SysWOW64\bcryptprimitives.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SysWOW64\wow32.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SysWOW64\wdigest.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SysWOW64\user.exe
2015-11-11 09:48:05 ----A---- C:\Windows\SysWOW64\TSpkg.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SysWOW64\sspicli.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SysWOW64\srclient.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SysWOW64\setup16.exe
2015-11-11 09:48:05 ----A---- C:\Windows\SysWOW64\secur32.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SysWOW64\rpcrt4.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SysWOW64\ntvdm64.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SysWOW64\msv1_0.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SysWOW64\msobjs.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SysWOW64\msaudite.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SysWOW64\KernelBase.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SysWOW64\kernel32.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SysWOW64\instnm.exe
2015-11-11 09:48:05 ----A---- C:\Windows\SysWOW64\cryptbase.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SysWOW64\credssp.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SysWOW64\auditpol.exe
2015-11-11 09:48:05 ----A---- C:\Windows\SysWOW64\apisetschema.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SysWOW64\adtschema.dll
2015-11-11 09:47:58 ----A---- C:\Windows\SysWOW64\shimeng.dll
2015-11-11 09:47:58 ----A---- C:\Windows\SysWOW64\sdbinst.exe
2015-11-11 09:47:58 ----A---- C:\Windows\SysWOW64\apphelp.dll
2015-11-11 09:47:53 ----A---- C:\Windows\SysWOW64\InkEd.dll
2015-11-08 22:47:19 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-11-05 22:13:57 ----D---- C:\ProgramData\Kingsoft
2015-11-05 22:13:41 ----D---- C:\Program Files (x86)\Kingsoft
2015-11-05 22:13:39 ----D---- C:\Users\TATIANA\AppData\Roaming\Kingsoft
2015-10-29 10:09:55 ----D---- C:\Users\TATIANA\AppData\Roaming\.technic
2015-10-21 15:11:16 ----D---- C:\Program Files (x86)\FreeGamePick
======List of files/folders modified in the last 1 month======
2015-11-20 21:04:32 ----D---- C:\Windows\Temp
2015-11-20 21:04:31 ----RD---- C:\Program Files (x86)
2015-11-20 20:56:41 ----D---- C:\Windows\System32
2015-11-20 20:56:41 ----D---- C:\Windows\inf
2015-11-20 20:56:41 ----D---- C:\Windows
2015-11-20 20:23:44 ----D---- C:\Users\TATIANA\AppData\Roaming\Skype
2015-11-20 16:32:26 ----D---- C:\Users\TATIANA\AppData\Roaming\IMVU
2015-11-20 13:16:51 ----SHD---- C:\System Volume Information
2015-11-20 13:12:12 ----D---- C:\ProgramData\NVIDIA
2015-11-20 00:33:13 ----D---- C:\Windows\rescache
2015-11-19 14:05:57 ----D---- C:\Windows\SoftwareDistribution
2015-11-18 23:26:22 ----D---- C:\Users\TATIANA\AppData\Roaming\Mine_imator
2015-11-18 23:20:46 ----D---- C:\Windows\debug
2015-11-18 21:22:24 ----D---- C:\Users\TATIANA\AppData\Roaming\.minecraft
2015-11-18 14:18:11 ----D---- C:\Windows\Microsoft.NET
2015-11-18 11:51:34 ----D---- C:\Windows\winsxs
2015-11-18 10:42:20 ----D---- C:\Windows\SysWOW64\en-US
2015-11-18 10:42:20 ----D---- C:\Windows\SysWOW64\cs-CZ
2015-11-18 10:42:20 ----D---- C:\Windows\SysWOW64
2015-11-18 10:42:20 ----D---- C:\Program Files (x86)\Internet Explorer
2015-11-18 10:42:19 ----D---- C:\Windows\AppPatch
2015-11-18 10:39:08 ----SHD---- C:\Windows\Installer
2015-11-18 05:43:00 ----A---- C:\Windows\SysWOW64\PerfStringBackup.INI
2015-11-17 13:52:48 ----RSD---- C:\Windows\assembly
2015-11-17 12:48:57 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-11-13 22:41:50 ----D---- C:\Users\TATIANA\AppData\Roaming\vlc
2015-11-11 15:15:51 ----D---- C:\Program Files (x86)\Common Files
2015-11-11 15:15:45 ----HD---- C:\ProgramData
2015-11-10 22:53:40 ----A---- C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-11-09 20:08:47 ----D---- C:\Users\TATIANA\AppData\Roaming\uTorrent
2015-11-07 19:35:06 ----D---- C:\ProgramData\Skype
2015-11-05 22:14:33 ----D---- C:\Windows\Tasks
2015-11-05 22:14:33 ----D---- C:\Windows\ShellNew
2015-11-03 14:17:37 ----D---- C:\PaintToolSAI
2015-10-31 03:26:08 ----D---- C:\ProgramData\Origin
2015-10-30 14:31:20 ----D---- C:\Program Files (x86)\Origin
2015-10-21 15:05:14 ----D---- C:\Program Files (x86)\Opera
2015-10-21 15:05:01 ----RD---- C:\Program Files
2015-10-21 15:04:33 ----D---- C:\Program Files (x86)\Inkscape
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 asstor64;asstor64; C:\Windows\system32\DRIVERS\asstor64.sys []
R0 aswRvrt;avast! Revert; C:\Windows\SysWOW64\drivers\aswRvrt.sys []
R0 aswVmm;avast! VM Monitor; C:\Windows\SysWOW64\drivers\aswVmm.sys []
R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys []
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys []
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys []
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys []
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys []
R1 BfLwf;Qualcomm Atheros Bandwidth Control; C:\Windows\system32\DRIVERS\bflwfx64.sys []
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys []
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys []
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys []
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys []
R2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2015-05-17 273824]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys []
R3 ikbevent;Intel Upper keyboard Class Filter Driver; C:\Windows\system32\DRIVERS\ikbevent.sys []
R3 imsevent;Intel Upper Mouse Class Filter Driver; C:\Windows\system32\DRIVERS\imsevent.sys []
R3 INETMON;INETMON; \??\C:\Windows\System32\Drivers\INETMON.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
R3 ISCT;Intel(R) Smart Connect Technology Device Driver; C:\Windows\system32\DRIVERS\ISCTD.sys []
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys []
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys []
R3 Ke2200;NDIS Miniport Driver for the Killer e2200 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\e22w7x64.sys []
R3 MBfilt;MBfilt; C:\Windows\system32\drivers\MBfilt64.sys []
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys []
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys []
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-03-28 19600]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys []
R3 SNP2STD;USB2.0 PC Camera (SNP2STD); C:\Windows\system32\DRIVERS\snp2sxp.sys [2007-07-23 12178944]
S1 PCLEPCI;PCLEPCI; \??\C:\Windows\system32\drivers\pclepci.sys [2002-03-19 14165]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys []
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys []
S3 MSICDSetup;MSICDSetup; \??\F:\CDriver64.sys []
S3 NTIOLib_1_0_C;NTIOLib_1_0_C; \??\F:\NTIOLib_X64.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys []
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys []
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys []
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys []
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys []
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys []
S3 XSplit_Dummy;XSplit Stream Audio Renderer; C:\Windows\system32\drivers\xspltspk.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-05-17 343336]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2015-10-12 1433216]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2015-10-12 1773696]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-03-28 1152144]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2015-11-12 2546184]
R2 ISCTAgent;Intel(R) Smart Connect Technology Agent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [2014-06-18 209712]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2014-02-19 154584]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [2015-11-12 417552]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2014-02-19 398296]
R2 MSI_SuperCharger;MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [2014-03-17 162800]
R2 MSI_Trigger_Service;MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [2013-09-26 30240]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-03-28 1878672]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-03-28 22995600]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe []
R2 Qualcomm Atheros Killer Service V2;Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [2014-01-22 344576]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-12-13 410768]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2015-05-17 4034896]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-03 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-10 269000]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2014-03-31 1512640]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-03 144200]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe /V []
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2014-01-31 887232]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-11-08 147624]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-10-30 2099208]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe []
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
-----------------EOF-----------------
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Problem z oteviranim stranek, av hlasi rootkit
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Problem z oteviranim stranek, av hlasi rootkit
Vim ze nic nevim.
Re: Problem z oteviranim stranek, av hlasi rootkit
Zdravim 
Kde presne?
Mate 64bit system, tak dejte log z RSITx64 http://images.malwareremoval.com/random/RSITx64.exe
KOKOS1 píše:2. Avast hlasi občas Rootkit
Kde presne? Mate 64bit system, tak dejte log z RSITx64 http://images.malwareremoval.com/random/RSITx64.exePokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: Problem z oteviranim stranek, av hlasi rootkit
aj ja Vas zdravim
jeden nalezen v C:/programData/medlight
druhy c:/programfiles (x86)/Common Files/Plusfax soubor uninstal.exe
log
Logfile of random's system information tool 1.10 (written by random/random)
Run by TATIANA at 2015-11-21 09:17:50
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 18 GB (12%) free of 153 GB
Total RAM: 8141 MB (79% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:17:51, on 21.11.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18098)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
C:\Windows\vsnp2std.exe
C:\Program Files (x86)\Clownfish\Clownfish.exe
C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Users\TATIANA\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe
C:\Windows\FixCamera.exe
C:\Windows\tsnp2std.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Windows\SysWOW64\DllHost.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\trend micro\TATIANA.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.globasearch.com/?serie=3209& ... 13ngNw3moh
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.globasearch.com/?serie=3209& ... 13ngNw3moh
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Sound Blaster Cinema] "C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\Windows\UpdReg.EXE
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [Super Charger] C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\Windows\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [FixCamera] C:\Windows\FixCamera.exe
O4 - HKLM\..\Run: [tsnp2std] C:\Windows\tsnp2std.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [Google Update] "C:\Users\TATIANA\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_AB79C1644CC2B2FACE22D2FCC846A90B] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKCU\..\Run: [Clownfish] "C:\Program Files (x86)\Clownfish\Clownfish.exe"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [GSplay.exe] C:\Users\TATIANA\Desktop\GSplay%20(2)\GSplay.exe
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\TATIANA\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\TATIANA\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: IMVU.lnk = TATIANA\AppData\Roaming\IMVUClient\IMVUQualityAgent.exe
O4 - Global Startup: Killer Network Manager.lnk = ?
O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O13 - DefaultPrefix: http://yamdex.net/?searchid=1&l10n=ru&f ... 05c5&text=
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\ProgramData\Medlight\VolTam.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Smart Connect Technology Agent (ISCTAgent) - Unknown owner - C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MSI_SuperCharger - MSI - C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
O23 - Service: MSI_Trigger_Service - MICRO-STAR INTERNATIONAL CO., LTD. - C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Qualcomm Atheros Killer Service V2 - Qualcomm Atheros - C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 14786 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Windows\System32\rundll32.exe" C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64
"C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe"
"C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe"
"C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe"
"C:\Windows\vsnp2std.exe"
"C:\Program Files (x86)\Clownfish\Clownfish.exe"
"C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe" -minimize
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe" /r
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
szndesktop.exe default start
"C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe"
"C:\Windows\FixCamera.exe"
"C:\Windows\tsnp2std.exe"
"C:\Users\TATIANA\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe "1033355051-2798575191747354000-2034351751-243072195-92387567019981008561233089477
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
"C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
WLIDSvcM.exe 3276
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{3F6B5E16-092A-41ED-930B-0B4125D91D4E}
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe"
ngservice.exe pipeserver
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Windows\system32\GWX\GWX.exe"
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\svchost.exe -k swprv
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe64_ Global\UsGthrCtrlFltPipeMssGthrPipe64 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" 60dafdee-618b-490e-9c6b-36cac532c8d2 1
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "-2142902645287610802-4253961881944803583-3738628312144124595-2072428527-727996861
\??\C:\Windows\system32\conhost.exe "-2091910723-551824111-1514027556-1815081441-1116000057-14443269562129678609-1669708635
C:\Windows\system32\vssvc.exe
"C:\PROGRA~1\INTERN~1\iexplore.exe" "http://gotut.ru/?from=im3sng"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:7552 CREDAT:267521 /prefetch:2
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" --type=renderer --no-sandbox --enable-deferred-image-decoding --lang=en-US --lang=en-US --log-file="C:\Users\TATIANA\AppData\Roaming\AVAST Software\Avast\log\avastium.log" --log-severity=error --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36 Avastium (10.2.2218)" --proxy-auto-detect --disable-gpu --disable-software-rasterizer --no-sandbox --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="3076.2.1685944480\1202797505" /prefetch:673131151
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-1489076616-2120609490-2393241685-100066_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-1489076616-2120609490-2393241685-100066 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\TATIANA\Desktop\RSITx64.exe"
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1489076616-2120609490-2393241685-1000Core.job - C:\Users\TATIANA\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1489076616-2120609490-2393241685-1000UA.job - C:\Users\TATIANA\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\WpsNotifyTask_TATIANA.job - C:\Program Files (x86)\Kingsoft\Kingsoft Office\wtoolex\wpsnotify.exe -from=task
C:\Windows\tasks\WpsUpdateTask_TATIANA.job - C:\Program Files (x86)\Kingsoft\Kingsoft Office\wtoolex\wpsupdate.exe -from=task
=========Mozilla firefox=========
ProfilePath - C:\Users\TATIANA\AppData\Roaming\Mozilla\Firefox\Profiles\jjjubvi4.default-1433603431791
prefs.js - "browser.startup.homepage" - "http://www.globasearch.com/?serie=3209& ... 13ngNw3moh"
prefs.js - "keyword.URL" - "https://www.google.com/search?trackid=sp-006"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw_1220162.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@alawar.com/npapi]
"Description"=
"Path"=C:\Windows\npapi.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.1.6\\npsitesafety.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.60.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.60.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
C:\Users\TATIANA\AppData\Roaming\Mozilla\Firefox\Profiles\jjjubvi4.default-1433603431791\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}
C:\Users\TATIANA\AppData\Roaming\Mozilla\Firefox\Profiles\jjjubvi4.default-1433603431791\searchplugins\
avg-secure-search.xml
findit.xml
google-avast.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-05-17 662672]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12 2134656]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-29 460384]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-05-17 565304]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12 1725056]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-29 172640]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2014-03-04 7543000]
"MBCfg64"=C:\Windows\system32\MBCfg64.dll [2013-08-29 40576]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-03-28 2673296]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-03-28 1570672]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
"ISCT Tray"=C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe [2014-06-18 5860656]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 1832760]
"snp2std"=C:\Windows\vsnp2std.exe [2007-05-10 344064]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\TATIANA\AppData\Local\Google\Update\GoogleUpdate.exe [2015-03-11 107848]
"msnmsgr"=C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [2014-03-31 4272840]
"GoogleChromeAutoLaunch_AB79C1644CC2B2FACE22D2FCC846A90B"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-11-07 811848]
"Clownfish"=C:\Program Files (x86)\Clownfish\Clownfish.exe [2012-09-27 1122040]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-09-16 8461224]
"GSplay.exe"=C:\Users\TATIANA\Desktop\GSplay%20(2)\GSplay.exe []
"cz.seznam.software.autoupdate"=C:\Users\TATIANA\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\TATIANA\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2015-05-26 103080]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Sound Blaster Cinema"=C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe [2013-08-16 711680]
"UpdReg"=C:\Windows\UpdReg.EXE [2000-05-11 90112]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2014-02-21 292848]
"Super Charger"=C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [2014-04-08 1047536]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"PinnacleDriverCheck"=C:\Windows\system32\PSDrvCheck.exe -CheckReg []
"FixCamera"=C:\Windows\FixCamera.exe [2007-07-11 20480]
"tsnp2std"=C:\Windows\tsnp2std.exe [2007-05-12 270336]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-05-17 5515496]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-08-04 597552]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2015-11-12 5565448]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Killer Network Manager.lnk - C:\Windows\Installer\{7364C716-1212-4EAE-B0C9-A31D1E797BF8}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe
C:\Users\TATIANA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
IMVU.lnk - C:\Users\TATIANA\AppData\Roaming\IMVUClient\IMVUQualityAgent.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\ProgramData\Medlight\Zoomdom.dll"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2015-11-21 09:17:50 ----D---- C:\Program Files\trend micro
2015-11-20 21:04:31 ----D---- C:\rsit
2015-11-20 21:04:31 ----D---- C:\Program Files (x86)\trend micro
2015-11-18 05:12:37 ----SHD---- C:\Config.Msi
2015-11-17 15:26:07 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2015-11-14 16:50:00 ----D---- C:\Users\TATIANA\AppData\Roaming\Windows Live Writer
2015-11-12 11:37:15 ----A---- C:\Windows\system32\win32k.sys
2015-11-11 15:15:45 ----D---- C:\ProgramData\Medlights
2015-11-11 15:15:45 ----D---- C:\ProgramData\ApplicationHosting
2015-11-11 15:15:38 ----D---- C:\ProgramData\Medlight
2015-11-11 15:14:43 ----D---- C:\Program Files (x86)\Seznam.cz
2015-11-11 15:14:29 ----D---- C:\Users\TATIANA\AppData\Roaming\Seznam.cz
2015-11-11 09:48:58 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-11-11 09:48:58 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-11-11 09:48:58 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-11-11 09:48:58 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-11-11 09:48:58 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-11-11 09:48:58 ----A---- C:\Windows\system32\wuwebv.dll
2015-11-11 09:48:58 ----A---- C:\Windows\system32\wups2.dll
2015-11-11 09:48:58 ----A---- C:\Windows\system32\wups.dll
2015-11-11 09:48:58 ----A---- C:\Windows\system32\wudriver.dll
2015-11-11 09:48:58 ----A---- C:\Windows\system32\wucltux.dll
2015-11-11 09:48:58 ----A---- C:\Windows\system32\wuaueng.dll
2015-11-11 09:48:58 ----A---- C:\Windows\system32\wuauclt.exe
2015-11-11 09:48:58 ----A---- C:\Windows\system32\wuapp.exe
2015-11-11 09:48:58 ----A---- C:\Windows\system32\wuapi.dll
2015-11-11 09:48:58 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-11-11 09:48:58 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-11-11 09:48:54 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-11-11 09:48:54 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-11-11 09:48:54 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-11-11 09:48:54 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-11-11 09:48:54 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-11-11 09:48:53 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-11-11 09:48:53 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-11-11 09:48:53 ----A---- C:\Windows\SYSWOW64\occache.dll
2015-11-11 09:48:53 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-11-11 09:48:53 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-11-11 09:48:53 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-11-11 09:48:53 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-11-11 09:48:53 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-11-11 09:48:53 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-11-11 09:48:53 ----A---- C:\Windows\system32\iernonce.dll
2015-11-11 09:48:53 ----A---- C:\Windows\system32\ie4uinit.exe
2015-11-11 09:48:52 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-11-11 09:48:52 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-11-11 09:48:52 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-11-11 09:48:52 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-11-11 09:48:52 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-11-11 09:48:52 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-11-11 09:48:52 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-11-11 09:48:52 ----A---- C:\Windows\system32\urlmon.dll
2015-11-11 09:48:52 ----A---- C:\Windows\system32\occache.dll
2015-11-11 09:48:52 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-11-11 09:48:52 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-11-11 09:48:52 ----A---- C:\Windows\system32\iedkcs32.dll
2015-11-11 09:48:51 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-11-11 09:48:51 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-11-11 09:48:51 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-11-11 09:48:51 ----A---- C:\Windows\system32\msfeeds.dll
2015-11-11 09:48:51 ----A---- C:\Windows\system32\iesetup.dll
2015-11-11 09:48:51 ----A---- C:\Windows\system32\ieapfltr.dll
2015-11-11 09:48:51 ----A---- C:\Windows\system32\dxtrans.dll
2015-11-11 09:48:50 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-11-11 09:48:50 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2015-11-11 09:48:50 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-11-11 09:48:50 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-11-11 09:48:50 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-11-11 09:48:50 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-11-11 09:48:50 ----A---- C:\Windows\system32\vbscript.dll
2015-11-11 09:48:50 ----A---- C:\Windows\system32\jsproxy.dll
2015-11-11 09:48:50 ----A---- C:\Windows\system32\iertutil.dll
2015-11-11 09:48:49 ----A---- C:\Windows\system32\webcheck.dll
2015-11-11 09:48:49 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-11-11 09:48:49 ----A---- C:\Windows\system32\mshtmled.dll
2015-11-11 09:48:49 ----A---- C:\Windows\system32\ieUnatt.exe
2015-11-11 09:48:49 ----A---- C:\Windows\system32\ieui.dll
2015-11-11 09:48:49 ----A---- C:\Windows\system32\ieframe.dll
2015-11-11 09:48:49 ----A---- C:\Windows\system32\dxtmsft.dll
2015-11-11 09:48:48 ----A---- C:\Windows\system32\wininet.dll
2015-11-11 09:48:48 ----A---- C:\Windows\system32\msrating.dll
2015-11-11 09:48:48 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-11-11 09:48:48 ----A---- C:\Windows\system32\jscript9diag.dll
2015-11-11 09:48:48 ----A---- C:\Windows\system32\jscript9.dll
2015-11-11 09:48:48 ----A---- C:\Windows\system32\jscript.dll
2015-11-11 09:48:47 ----A---- C:\Windows\system32\mshtml.dll
2015-11-11 09:48:07 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-11-11 09:48:06 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-11-11 09:48:06 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-11-11 09:48:06 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-11-11 09:48:06 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-11-11 09:48:06 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-11-11 09:48:06 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-11-11 09:48:06 ----A---- C:\Windows\SYSWOW64\bcryptprimitives.dll
2015-11-11 09:48:06 ----A---- C:\Windows\system32\wow64.dll
2015-11-11 09:48:06 ----A---- C:\Windows\system32\winsrv.dll
2015-11-11 09:48:06 ----A---- C:\Windows\system32\srcore.dll
2015-11-11 09:48:06 ----A---- C:\Windows\system32\schannel.dll
2015-11-11 09:48:06 ----A---- C:\Windows\system32\rstrui.exe
2015-11-11 09:48:06 ----A---- C:\Windows\system32\rpcrt4.dll
2015-11-11 09:48:06 ----A---- C:\Windows\system32\ntdll.dll
2015-11-11 09:48:06 ----A---- C:\Windows\system32\ncrypt.dll
2015-11-11 09:48:06 ----A---- C:\Windows\system32\lsasrv.dll
2015-11-11 09:48:06 ----A---- C:\Windows\system32\KernelBase.dll
2015-11-11 09:48:06 ----A---- C:\Windows\system32\kernel32.dll
2015-11-11 09:48:06 ----A---- C:\Windows\system32\kerberos.dll
2015-11-11 09:48:06 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-11-11 09:48:06 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-11-11 09:48:06 ----A---- C:\Windows\system32\drivers\cng.sys
2015-11-11 09:48:06 ----A---- C:\Windows\system32\conhost.exe
2015-11-11 09:48:06 ----A---- C:\Windows\system32\bcryptprimitives.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\user.exe
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\wow64win.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\wow64cpu.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\wdigest.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\TSpkg.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\sspisrv.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\sspicli.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\srclient.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\smss.exe
2015-11-11 09:48:05 ----A---- C:\Windows\system32\secur32.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\ntvdm64.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\msv1_0.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\msobjs.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\msaudite.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\lsass.exe
2015-11-11 09:48:05 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-11-11 09:48:05 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-11-11 09:48:05 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-11-11 09:48:05 ----A---- C:\Windows\system32\csrsrv.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\cryptbase.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\credssp.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\auditpol.exe
2015-11-11 09:48:05 ----A---- C:\Windows\system32\apisetschema.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\adtschema.dll
2015-11-11 09:47:59 ----A---- C:\Windows\system32\drivers\tdx.sys
2015-11-11 09:47:59 ----A---- C:\Windows\system32\drivers\afd.sys
2015-11-11 09:47:58 ----A---- C:\Windows\SYSWOW64\shimeng.dll
2015-11-11 09:47:58 ----A---- C:\Windows\SYSWOW64\sdbinst.exe
2015-11-11 09:47:58 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2015-11-11 09:47:58 ----A---- C:\Windows\system32\shimeng.dll
2015-11-11 09:47:58 ----A---- C:\Windows\system32\sdbinst.exe
2015-11-11 09:47:58 ----A---- C:\Windows\system32\apphelp.dll
2015-11-11 09:47:58 ----A---- C:\Windows\system32\aelupsvc.dll
2015-11-11 09:47:54 ----A---- C:\Windows\system32\drivers\ndis.sys
2015-11-11 09:47:53 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2015-11-11 09:47:53 ----A---- C:\Windows\system32\jnwmon.dll
2015-11-11 09:47:53 ----A---- C:\Windows\system32\InkEd.dll
2015-11-08 22:47:19 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-11-05 22:13:57 ----D---- C:\ProgramData\Kingsoft
2015-11-05 22:13:41 ----D---- C:\Program Files (x86)\Kingsoft
2015-11-05 22:13:39 ----D---- C:\Users\TATIANA\AppData\Roaming\Kingsoft
2015-10-29 10:09:55 ----D---- C:\Users\TATIANA\AppData\Roaming\.technic
======List of files/folders modified in the last 1 month======
2015-11-21 09:17:50 ----RD---- C:\Program Files
2015-11-21 09:17:50 ----D---- C:\Windows\Temp
2015-11-21 09:00:55 ----D---- C:\Users\TATIANA\AppData\Roaming\IMVU
2015-11-21 09:00:20 ----D---- C:\Users\TATIANA\AppData\Roaming\Skype
2015-11-21 00:42:53 ----D---- C:\Windows\inf
2015-11-20 21:04:31 ----RD---- C:\Program Files (x86)
2015-11-20 20:56:51 ----D---- C:\Windows\system32\LogFiles
2015-11-20 20:56:41 ----D---- C:\Windows\System32
2015-11-20 20:56:41 ----D---- C:\Windows
2015-11-20 13:18:14 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-11-20 13:16:51 ----SHD---- C:\System Volume Information
2015-11-20 13:15:28 ----D---- C:\Windows\system32\config
2015-11-20 13:12:12 ----D---- C:\ProgramData\NVIDIA
2015-11-20 00:33:13 ----D---- C:\Windows\rescache
2015-11-19 14:05:57 ----D---- C:\Windows\SoftwareDistribution
2015-11-18 23:26:22 ----D---- C:\Users\TATIANA\AppData\Roaming\Mine_imator
2015-11-18 23:20:46 ----D---- C:\Windows\debug
2015-11-18 23:20:25 ----D---- C:\Program Files\CCleaner
2015-11-18 21:22:24 ----D---- C:\Users\TATIANA\AppData\Roaming\.minecraft
2015-11-18 14:18:11 ----D---- C:\Windows\Microsoft.NET
2015-11-18 11:51:34 ----D---- C:\Windows\winsxs
2015-11-18 10:42:20 ----D---- C:\Windows\SYSWOW64\en-US
2015-11-18 10:42:20 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-11-18 10:42:20 ----D---- C:\Windows\SysWOW64
2015-11-18 10:42:20 ----D---- C:\Windows\system32\en-US
2015-11-18 10:42:20 ----D---- C:\Windows\system32\cs-CZ
2015-11-18 10:42:20 ----D---- C:\Program Files\Internet Explorer
2015-11-18 10:42:20 ----D---- C:\Program Files (x86)\Internet Explorer
2015-11-18 10:42:19 ----D---- C:\Windows\system32\migration
2015-11-18 10:42:19 ----D---- C:\Windows\system32\drivers
2015-11-18 10:42:19 ----D---- C:\Windows\AppPatch
2015-11-18 10:40:14 ----D---- C:\Windows\system32\MRT
2015-11-18 10:40:11 ----A---- C:\Windows\system32\MRT.exe
2015-11-18 10:39:08 ----SHD---- C:\Windows\Installer
2015-11-18 05:43:00 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2015-11-17 13:52:48 ----RSD---- C:\Windows\assembly
2015-11-17 12:48:57 ----D---- C:\Windows\system32\Tasks
2015-11-17 12:48:57 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-11-13 22:41:50 ----D---- C:\Users\TATIANA\AppData\Roaming\vlc
2015-11-12 03:54:30 ----D---- C:\Program Files\Windows Journal
2015-11-11 15:15:51 ----D---- C:\Program Files (x86)\Common Files
2015-11-11 15:15:45 ----HD---- C:\ProgramData
2015-11-11 09:47:42 ----D---- C:\Windows\system32\catroot2
2015-11-10 22:53:40 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-11-09 20:08:47 ----D---- C:\Users\TATIANA\AppData\Roaming\uTorrent
2015-11-07 19:35:09 ----D---- C:\ProgramData\Skype
2015-11-05 22:14:33 ----D---- C:\Windows\Tasks
2015-11-05 22:14:33 ----D---- C:\Windows\ShellNew
2015-11-03 14:17:37 ----D---- C:\PaintToolSAI
2015-10-31 03:26:08 ----D---- C:\ProgramData\Origin
2015-10-30 14:31:20 ----D---- C:\Program Files (x86)\Origin
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 asstor64;asstor64; C:\Windows\system32\DRIVERS\asstor64.sys [2014-01-27 84816]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-05-17 65736]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-05-17 272248]
R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2014-02-21 20464]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-05-17 93528]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-05-17 1047320]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-06-26 442264]
R1 BfLwf;Qualcomm Atheros Bandwidth Control; C:\Windows\system32\DRIVERS\bflwfx64.sys [2013-11-08 80080]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-05-17 29168]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-05-17 89944]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-05-17 137288]
R2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2015-05-17 273824]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
R3 ikbevent;Intel Upper keyboard Class Filter Driver; C:\Windows\system32\DRIVERS\ikbevent.sys [2014-05-27 22216]
R3 imsevent;Intel Upper Mouse Class Filter Driver; C:\Windows\system32\DRIVERS\imsevent.sys [2014-05-27 22728]
R3 INETMON;INETMON; \??\C:\Windows\System32\Drivers\INETMON.sys [2014-05-27 25800]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-03-04 3882456]
R3 ISCT;Intel(R) Smart Connect Technology Device Driver; C:\Windows\system32\DRIVERS\ISCTD.sys [2014-02-03 44744]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2014-02-21 370672]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2014-02-21 791024]
R3 Ke2200;NDIS Miniport Driver for the Killer e2200 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\e22w7x64.sys [2013-03-20 154320]
R3 MBfilt;MBfilt; C:\Windows\system32\drivers\MBfilt64.sys [2009-11-18 32344]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2014-02-19 116736]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2014-10-09 195728]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-03-28 19600]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-11-22 38032]
R3 SNP2STD;USB2.0 PC Camera (SNP2STD); C:\Windows\system32\DRIVERS\snp2sxp.sys [2007-07-23 12482048]
S1 PCLEPCI;PCLEPCI; \??\C:\Windows\system32\drivers\pclepci.sys []
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2014-03-31 58056]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys []
S3 MSICDSetup;MSICDSetup; \??\F:\CDriver64.sys []
S3 NTIOLib_1_0_C;NTIOLib_1_0_C; \??\F:\NTIOLib_X64.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S3 XSplit_Dummy;XSplit Stream Audio Renderer; C:\Windows\system32\drivers\xspltspk.sys [2014-07-02 26200]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-05-17 343336]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2015-10-12 1433216]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2015-10-12 1773696]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-03-28 1152144]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2015-11-12 2546184]
R2 ISCTAgent;Intel(R) Smart Connect Technology Agent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [2014-06-18 209712]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2014-02-19 154584]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [2015-11-12 417552]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2014-02-19 398296]
R2 MSI_SuperCharger;MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [2014-03-17 162800]
R2 MSI_Trigger_Service;MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [2013-09-26 30240]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-03-28 1878672]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-03-28 22995600]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-12-13 935240]
R2 Qualcomm Atheros Killer Service V2;Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [2014-01-22 344576]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-12-13 410768]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2015-05-17 4034896]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-03 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-10 269000]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2014-03-31 1512640]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-03 144200]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-10-31 114688]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2014-01-31 887232]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-11-08 147624]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-10-30 2099208]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-01-10 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
-----------------EOF-----------------
jeden nalezen v C:/programData/medlight
druhy c:/programfiles (x86)/Common Files/Plusfax soubor uninstal.exe
log
Logfile of random's system information tool 1.10 (written by random/random)
Run by TATIANA at 2015-11-21 09:17:50
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 18 GB (12%) free of 153 GB
Total RAM: 8141 MB (79% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:17:51, on 21.11.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18098)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
C:\Windows\vsnp2std.exe
C:\Program Files (x86)\Clownfish\Clownfish.exe
C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Users\TATIANA\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe
C:\Windows\FixCamera.exe
C:\Windows\tsnp2std.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Windows\SysWOW64\DllHost.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\trend micro\TATIANA.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.globasearch.com/?serie=3209& ... 13ngNw3moh
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.globasearch.com/?serie=3209& ... 13ngNw3moh
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Sound Blaster Cinema] "C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\Windows\UpdReg.EXE
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [Super Charger] C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\Windows\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [FixCamera] C:\Windows\FixCamera.exe
O4 - HKLM\..\Run: [tsnp2std] C:\Windows\tsnp2std.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [Google Update] "C:\Users\TATIANA\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_AB79C1644CC2B2FACE22D2FCC846A90B] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKCU\..\Run: [Clownfish] "C:\Program Files (x86)\Clownfish\Clownfish.exe"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [GSplay.exe] C:\Users\TATIANA\Desktop\GSplay%20(2)\GSplay.exe
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\TATIANA\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\TATIANA\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: IMVU.lnk = TATIANA\AppData\Roaming\IMVUClient\IMVUQualityAgent.exe
O4 - Global Startup: Killer Network Manager.lnk = ?
O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O13 - DefaultPrefix: http://yamdex.net/?searchid=1&l10n=ru&f ... 05c5&text=
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\ProgramData\Medlight\VolTam.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Smart Connect Technology Agent (ISCTAgent) - Unknown owner - C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MSI_SuperCharger - MSI - C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
O23 - Service: MSI_Trigger_Service - MICRO-STAR INTERNATIONAL CO., LTD. - C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Qualcomm Atheros Killer Service V2 - Qualcomm Atheros - C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 14786 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Windows\System32\rundll32.exe" C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64
"C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe"
"C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe"
"C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe"
"C:\Windows\vsnp2std.exe"
"C:\Program Files (x86)\Clownfish\Clownfish.exe"
"C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe" -minimize
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe" /r
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
szndesktop.exe default start
"C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe"
"C:\Windows\FixCamera.exe"
"C:\Windows\tsnp2std.exe"
"C:\Users\TATIANA\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe "1033355051-2798575191747354000-2034351751-243072195-92387567019981008561233089477
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
"C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
WLIDSvcM.exe 3276
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{3F6B5E16-092A-41ED-930B-0B4125D91D4E}
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe"
ngservice.exe pipeserver
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Windows\system32\GWX\GWX.exe"
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\svchost.exe -k swprv
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe64_ Global\UsGthrCtrlFltPipeMssGthrPipe64 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" 60dafdee-618b-490e-9c6b-36cac532c8d2 1
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "-2142902645287610802-4253961881944803583-3738628312144124595-2072428527-727996861
\??\C:\Windows\system32\conhost.exe "-2091910723-551824111-1514027556-1815081441-1116000057-14443269562129678609-1669708635
C:\Windows\system32\vssvc.exe
"C:\PROGRA~1\INTERN~1\iexplore.exe" "http://gotut.ru/?from=im3sng"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:7552 CREDAT:267521 /prefetch:2
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" --type=renderer --no-sandbox --enable-deferred-image-decoding --lang=en-US --lang=en-US --log-file="C:\Users\TATIANA\AppData\Roaming\AVAST Software\Avast\log\avastium.log" --log-severity=error --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36 Avastium (10.2.2218)" --proxy-auto-detect --disable-gpu --disable-software-rasterizer --no-sandbox --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="3076.2.1685944480\1202797505" /prefetch:673131151
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-1489076616-2120609490-2393241685-100066_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-1489076616-2120609490-2393241685-100066 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\TATIANA\Desktop\RSITx64.exe"
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1489076616-2120609490-2393241685-1000Core.job - C:\Users\TATIANA\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1489076616-2120609490-2393241685-1000UA.job - C:\Users\TATIANA\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\WpsNotifyTask_TATIANA.job - C:\Program Files (x86)\Kingsoft\Kingsoft Office\wtoolex\wpsnotify.exe -from=task
C:\Windows\tasks\WpsUpdateTask_TATIANA.job - C:\Program Files (x86)\Kingsoft\Kingsoft Office\wtoolex\wpsupdate.exe -from=task
=========Mozilla firefox=========
ProfilePath - C:\Users\TATIANA\AppData\Roaming\Mozilla\Firefox\Profiles\jjjubvi4.default-1433603431791
prefs.js - "browser.startup.homepage" - "http://www.globasearch.com/?serie=3209& ... 13ngNw3moh"
prefs.js - "keyword.URL" - "https://www.google.com/search?trackid=sp-006"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw_1220162.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@alawar.com/npapi]
"Description"=
"Path"=C:\Windows\npapi.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.1.6\\npsitesafety.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.60.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.60.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
C:\Users\TATIANA\AppData\Roaming\Mozilla\Firefox\Profiles\jjjubvi4.default-1433603431791\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}
C:\Users\TATIANA\AppData\Roaming\Mozilla\Firefox\Profiles\jjjubvi4.default-1433603431791\searchplugins\
avg-secure-search.xml
findit.xml
google-avast.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-05-17 662672]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12 2134656]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-29 460384]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-05-17 565304]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12 1725056]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-29 172640]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2014-03-04 7543000]
"MBCfg64"=C:\Windows\system32\MBCfg64.dll [2013-08-29 40576]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-03-28 2673296]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-03-28 1570672]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
"ISCT Tray"=C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe [2014-06-18 5860656]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 1832760]
"snp2std"=C:\Windows\vsnp2std.exe [2007-05-10 344064]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\TATIANA\AppData\Local\Google\Update\GoogleUpdate.exe [2015-03-11 107848]
"msnmsgr"=C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [2014-03-31 4272840]
"GoogleChromeAutoLaunch_AB79C1644CC2B2FACE22D2FCC846A90B"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-11-07 811848]
"Clownfish"=C:\Program Files (x86)\Clownfish\Clownfish.exe [2012-09-27 1122040]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-09-16 8461224]
"GSplay.exe"=C:\Users\TATIANA\Desktop\GSplay%20(2)\GSplay.exe []
"cz.seznam.software.autoupdate"=C:\Users\TATIANA\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\TATIANA\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2015-05-26 103080]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Sound Blaster Cinema"=C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe [2013-08-16 711680]
"UpdReg"=C:\Windows\UpdReg.EXE [2000-05-11 90112]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2014-02-21 292848]
"Super Charger"=C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [2014-04-08 1047536]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"PinnacleDriverCheck"=C:\Windows\system32\PSDrvCheck.exe -CheckReg []
"FixCamera"=C:\Windows\FixCamera.exe [2007-07-11 20480]
"tsnp2std"=C:\Windows\tsnp2std.exe [2007-05-12 270336]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-05-17 5515496]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-08-04 597552]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2015-11-12 5565448]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Killer Network Manager.lnk - C:\Windows\Installer\{7364C716-1212-4EAE-B0C9-A31D1E797BF8}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe
C:\Users\TATIANA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
IMVU.lnk - C:\Users\TATIANA\AppData\Roaming\IMVUClient\IMVUQualityAgent.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\ProgramData\Medlight\Zoomdom.dll"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2015-11-21 09:17:50 ----D---- C:\Program Files\trend micro
2015-11-20 21:04:31 ----D---- C:\rsit
2015-11-20 21:04:31 ----D---- C:\Program Files (x86)\trend micro
2015-11-18 05:12:37 ----SHD---- C:\Config.Msi
2015-11-17 15:26:07 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2015-11-14 16:50:00 ----D---- C:\Users\TATIANA\AppData\Roaming\Windows Live Writer
2015-11-12 11:37:15 ----A---- C:\Windows\system32\win32k.sys
2015-11-11 15:15:45 ----D---- C:\ProgramData\Medlights
2015-11-11 15:15:45 ----D---- C:\ProgramData\ApplicationHosting
2015-11-11 15:15:38 ----D---- C:\ProgramData\Medlight
2015-11-11 15:14:43 ----D---- C:\Program Files (x86)\Seznam.cz
2015-11-11 15:14:29 ----D---- C:\Users\TATIANA\AppData\Roaming\Seznam.cz
2015-11-11 09:48:58 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-11-11 09:48:58 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-11-11 09:48:58 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-11-11 09:48:58 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-11-11 09:48:58 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-11-11 09:48:58 ----A---- C:\Windows\system32\wuwebv.dll
2015-11-11 09:48:58 ----A---- C:\Windows\system32\wups2.dll
2015-11-11 09:48:58 ----A---- C:\Windows\system32\wups.dll
2015-11-11 09:48:58 ----A---- C:\Windows\system32\wudriver.dll
2015-11-11 09:48:58 ----A---- C:\Windows\system32\wucltux.dll
2015-11-11 09:48:58 ----A---- C:\Windows\system32\wuaueng.dll
2015-11-11 09:48:58 ----A---- C:\Windows\system32\wuauclt.exe
2015-11-11 09:48:58 ----A---- C:\Windows\system32\wuapp.exe
2015-11-11 09:48:58 ----A---- C:\Windows\system32\wuapi.dll
2015-11-11 09:48:58 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-11-11 09:48:58 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-11-11 09:48:54 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-11-11 09:48:54 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-11-11 09:48:54 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-11-11 09:48:54 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-11-11 09:48:54 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-11-11 09:48:53 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-11-11 09:48:53 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-11-11 09:48:53 ----A---- C:\Windows\SYSWOW64\occache.dll
2015-11-11 09:48:53 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-11-11 09:48:53 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-11-11 09:48:53 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-11-11 09:48:53 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-11-11 09:48:53 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-11-11 09:48:53 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-11-11 09:48:53 ----A---- C:\Windows\system32\iernonce.dll
2015-11-11 09:48:53 ----A---- C:\Windows\system32\ie4uinit.exe
2015-11-11 09:48:52 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-11-11 09:48:52 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-11-11 09:48:52 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-11-11 09:48:52 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-11-11 09:48:52 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-11-11 09:48:52 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-11-11 09:48:52 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-11-11 09:48:52 ----A---- C:\Windows\system32\urlmon.dll
2015-11-11 09:48:52 ----A---- C:\Windows\system32\occache.dll
2015-11-11 09:48:52 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-11-11 09:48:52 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-11-11 09:48:52 ----A---- C:\Windows\system32\iedkcs32.dll
2015-11-11 09:48:51 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-11-11 09:48:51 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-11-11 09:48:51 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-11-11 09:48:51 ----A---- C:\Windows\system32\msfeeds.dll
2015-11-11 09:48:51 ----A---- C:\Windows\system32\iesetup.dll
2015-11-11 09:48:51 ----A---- C:\Windows\system32\ieapfltr.dll
2015-11-11 09:48:51 ----A---- C:\Windows\system32\dxtrans.dll
2015-11-11 09:48:50 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-11-11 09:48:50 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2015-11-11 09:48:50 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-11-11 09:48:50 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-11-11 09:48:50 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-11-11 09:48:50 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-11-11 09:48:50 ----A---- C:\Windows\system32\vbscript.dll
2015-11-11 09:48:50 ----A---- C:\Windows\system32\jsproxy.dll
2015-11-11 09:48:50 ----A---- C:\Windows\system32\iertutil.dll
2015-11-11 09:48:49 ----A---- C:\Windows\system32\webcheck.dll
2015-11-11 09:48:49 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-11-11 09:48:49 ----A---- C:\Windows\system32\mshtmled.dll
2015-11-11 09:48:49 ----A---- C:\Windows\system32\ieUnatt.exe
2015-11-11 09:48:49 ----A---- C:\Windows\system32\ieui.dll
2015-11-11 09:48:49 ----A---- C:\Windows\system32\ieframe.dll
2015-11-11 09:48:49 ----A---- C:\Windows\system32\dxtmsft.dll
2015-11-11 09:48:48 ----A---- C:\Windows\system32\wininet.dll
2015-11-11 09:48:48 ----A---- C:\Windows\system32\msrating.dll
2015-11-11 09:48:48 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-11-11 09:48:48 ----A---- C:\Windows\system32\jscript9diag.dll
2015-11-11 09:48:48 ----A---- C:\Windows\system32\jscript9.dll
2015-11-11 09:48:48 ----A---- C:\Windows\system32\jscript.dll
2015-11-11 09:48:47 ----A---- C:\Windows\system32\mshtml.dll
2015-11-11 09:48:07 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-11-11 09:48:06 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-11-11 09:48:06 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-11-11 09:48:06 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-11-11 09:48:06 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-11-11 09:48:06 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-11-11 09:48:06 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-11-11 09:48:06 ----A---- C:\Windows\SYSWOW64\bcryptprimitives.dll
2015-11-11 09:48:06 ----A---- C:\Windows\system32\wow64.dll
2015-11-11 09:48:06 ----A---- C:\Windows\system32\winsrv.dll
2015-11-11 09:48:06 ----A---- C:\Windows\system32\srcore.dll
2015-11-11 09:48:06 ----A---- C:\Windows\system32\schannel.dll
2015-11-11 09:48:06 ----A---- C:\Windows\system32\rstrui.exe
2015-11-11 09:48:06 ----A---- C:\Windows\system32\rpcrt4.dll
2015-11-11 09:48:06 ----A---- C:\Windows\system32\ntdll.dll
2015-11-11 09:48:06 ----A---- C:\Windows\system32\ncrypt.dll
2015-11-11 09:48:06 ----A---- C:\Windows\system32\lsasrv.dll
2015-11-11 09:48:06 ----A---- C:\Windows\system32\KernelBase.dll
2015-11-11 09:48:06 ----A---- C:\Windows\system32\kernel32.dll
2015-11-11 09:48:06 ----A---- C:\Windows\system32\kerberos.dll
2015-11-11 09:48:06 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-11-11 09:48:06 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-11-11 09:48:06 ----A---- C:\Windows\system32\drivers\cng.sys
2015-11-11 09:48:06 ----A---- C:\Windows\system32\conhost.exe
2015-11-11 09:48:06 ----A---- C:\Windows\system32\bcryptprimitives.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-11-11 09:48:05 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\user.exe
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-11-11 09:48:05 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\wow64win.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\wow64cpu.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\wdigest.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\TSpkg.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\sspisrv.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\sspicli.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\srclient.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\smss.exe
2015-11-11 09:48:05 ----A---- C:\Windows\system32\secur32.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\ntvdm64.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\msv1_0.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\msobjs.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\msaudite.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\lsass.exe
2015-11-11 09:48:05 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-11-11 09:48:05 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-11-11 09:48:05 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-11-11 09:48:05 ----A---- C:\Windows\system32\csrsrv.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\cryptbase.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\credssp.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\auditpol.exe
2015-11-11 09:48:05 ----A---- C:\Windows\system32\apisetschema.dll
2015-11-11 09:48:05 ----A---- C:\Windows\system32\adtschema.dll
2015-11-11 09:47:59 ----A---- C:\Windows\system32\drivers\tdx.sys
2015-11-11 09:47:59 ----A---- C:\Windows\system32\drivers\afd.sys
2015-11-11 09:47:58 ----A---- C:\Windows\SYSWOW64\shimeng.dll
2015-11-11 09:47:58 ----A---- C:\Windows\SYSWOW64\sdbinst.exe
2015-11-11 09:47:58 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2015-11-11 09:47:58 ----A---- C:\Windows\system32\shimeng.dll
2015-11-11 09:47:58 ----A---- C:\Windows\system32\sdbinst.exe
2015-11-11 09:47:58 ----A---- C:\Windows\system32\apphelp.dll
2015-11-11 09:47:58 ----A---- C:\Windows\system32\aelupsvc.dll
2015-11-11 09:47:54 ----A---- C:\Windows\system32\drivers\ndis.sys
2015-11-11 09:47:53 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2015-11-11 09:47:53 ----A---- C:\Windows\system32\jnwmon.dll
2015-11-11 09:47:53 ----A---- C:\Windows\system32\InkEd.dll
2015-11-08 22:47:19 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-11-05 22:13:57 ----D---- C:\ProgramData\Kingsoft
2015-11-05 22:13:41 ----D---- C:\Program Files (x86)\Kingsoft
2015-11-05 22:13:39 ----D---- C:\Users\TATIANA\AppData\Roaming\Kingsoft
2015-10-29 10:09:55 ----D---- C:\Users\TATIANA\AppData\Roaming\.technic
======List of files/folders modified in the last 1 month======
2015-11-21 09:17:50 ----RD---- C:\Program Files
2015-11-21 09:17:50 ----D---- C:\Windows\Temp
2015-11-21 09:00:55 ----D---- C:\Users\TATIANA\AppData\Roaming\IMVU
2015-11-21 09:00:20 ----D---- C:\Users\TATIANA\AppData\Roaming\Skype
2015-11-21 00:42:53 ----D---- C:\Windows\inf
2015-11-20 21:04:31 ----RD---- C:\Program Files (x86)
2015-11-20 20:56:51 ----D---- C:\Windows\system32\LogFiles
2015-11-20 20:56:41 ----D---- C:\Windows\System32
2015-11-20 20:56:41 ----D---- C:\Windows
2015-11-20 13:18:14 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-11-20 13:16:51 ----SHD---- C:\System Volume Information
2015-11-20 13:15:28 ----D---- C:\Windows\system32\config
2015-11-20 13:12:12 ----D---- C:\ProgramData\NVIDIA
2015-11-20 00:33:13 ----D---- C:\Windows\rescache
2015-11-19 14:05:57 ----D---- C:\Windows\SoftwareDistribution
2015-11-18 23:26:22 ----D---- C:\Users\TATIANA\AppData\Roaming\Mine_imator
2015-11-18 23:20:46 ----D---- C:\Windows\debug
2015-11-18 23:20:25 ----D---- C:\Program Files\CCleaner
2015-11-18 21:22:24 ----D---- C:\Users\TATIANA\AppData\Roaming\.minecraft
2015-11-18 14:18:11 ----D---- C:\Windows\Microsoft.NET
2015-11-18 11:51:34 ----D---- C:\Windows\winsxs
2015-11-18 10:42:20 ----D---- C:\Windows\SYSWOW64\en-US
2015-11-18 10:42:20 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-11-18 10:42:20 ----D---- C:\Windows\SysWOW64
2015-11-18 10:42:20 ----D---- C:\Windows\system32\en-US
2015-11-18 10:42:20 ----D---- C:\Windows\system32\cs-CZ
2015-11-18 10:42:20 ----D---- C:\Program Files\Internet Explorer
2015-11-18 10:42:20 ----D---- C:\Program Files (x86)\Internet Explorer
2015-11-18 10:42:19 ----D---- C:\Windows\system32\migration
2015-11-18 10:42:19 ----D---- C:\Windows\system32\drivers
2015-11-18 10:42:19 ----D---- C:\Windows\AppPatch
2015-11-18 10:40:14 ----D---- C:\Windows\system32\MRT
2015-11-18 10:40:11 ----A---- C:\Windows\system32\MRT.exe
2015-11-18 10:39:08 ----SHD---- C:\Windows\Installer
2015-11-18 05:43:00 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2015-11-17 13:52:48 ----RSD---- C:\Windows\assembly
2015-11-17 12:48:57 ----D---- C:\Windows\system32\Tasks
2015-11-17 12:48:57 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-11-13 22:41:50 ----D---- C:\Users\TATIANA\AppData\Roaming\vlc
2015-11-12 03:54:30 ----D---- C:\Program Files\Windows Journal
2015-11-11 15:15:51 ----D---- C:\Program Files (x86)\Common Files
2015-11-11 15:15:45 ----HD---- C:\ProgramData
2015-11-11 09:47:42 ----D---- C:\Windows\system32\catroot2
2015-11-10 22:53:40 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-11-09 20:08:47 ----D---- C:\Users\TATIANA\AppData\Roaming\uTorrent
2015-11-07 19:35:09 ----D---- C:\ProgramData\Skype
2015-11-05 22:14:33 ----D---- C:\Windows\Tasks
2015-11-05 22:14:33 ----D---- C:\Windows\ShellNew
2015-11-03 14:17:37 ----D---- C:\PaintToolSAI
2015-10-31 03:26:08 ----D---- C:\ProgramData\Origin
2015-10-30 14:31:20 ----D---- C:\Program Files (x86)\Origin
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 asstor64;asstor64; C:\Windows\system32\DRIVERS\asstor64.sys [2014-01-27 84816]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-05-17 65736]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-05-17 272248]
R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2014-02-21 20464]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-05-17 93528]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-05-17 1047320]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-06-26 442264]
R1 BfLwf;Qualcomm Atheros Bandwidth Control; C:\Windows\system32\DRIVERS\bflwfx64.sys [2013-11-08 80080]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-05-17 29168]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-05-17 89944]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-05-17 137288]
R2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2015-05-17 273824]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
R3 ikbevent;Intel Upper keyboard Class Filter Driver; C:\Windows\system32\DRIVERS\ikbevent.sys [2014-05-27 22216]
R3 imsevent;Intel Upper Mouse Class Filter Driver; C:\Windows\system32\DRIVERS\imsevent.sys [2014-05-27 22728]
R3 INETMON;INETMON; \??\C:\Windows\System32\Drivers\INETMON.sys [2014-05-27 25800]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-03-04 3882456]
R3 ISCT;Intel(R) Smart Connect Technology Device Driver; C:\Windows\system32\DRIVERS\ISCTD.sys [2014-02-03 44744]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2014-02-21 370672]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2014-02-21 791024]
R3 Ke2200;NDIS Miniport Driver for the Killer e2200 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\e22w7x64.sys [2013-03-20 154320]
R3 MBfilt;MBfilt; C:\Windows\system32\drivers\MBfilt64.sys [2009-11-18 32344]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2014-02-19 116736]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2014-10-09 195728]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-03-28 19600]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-11-22 38032]
R3 SNP2STD;USB2.0 PC Camera (SNP2STD); C:\Windows\system32\DRIVERS\snp2sxp.sys [2007-07-23 12482048]
S1 PCLEPCI;PCLEPCI; \??\C:\Windows\system32\drivers\pclepci.sys []
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2014-03-31 58056]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys []
S3 MSICDSetup;MSICDSetup; \??\F:\CDriver64.sys []
S3 NTIOLib_1_0_C;NTIOLib_1_0_C; \??\F:\NTIOLib_X64.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S3 XSplit_Dummy;XSplit Stream Audio Renderer; C:\Windows\system32\drivers\xspltspk.sys [2014-07-02 26200]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-05-17 343336]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2015-10-12 1433216]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2015-10-12 1773696]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-03-28 1152144]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2015-11-12 2546184]
R2 ISCTAgent;Intel(R) Smart Connect Technology Agent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [2014-06-18 209712]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2014-02-19 154584]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [2015-11-12 417552]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2014-02-19 398296]
R2 MSI_SuperCharger;MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [2014-03-17 162800]
R2 MSI_Trigger_Service;MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [2013-09-26 30240]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-03-28 1878672]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-03-28 22995600]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-12-13 935240]
R2 Qualcomm Atheros Killer Service V2;Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [2014-01-22 344576]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-12-13 410768]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2015-05-17 4034896]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-03 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-10 269000]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2014-03-31 1512640]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-03 144200]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-10-31 114688]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2014-01-31 887232]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-11-08 147624]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-10-30 2099208]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-01-10 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
-----------------EOF-----------------
Vim ze nic nevim.
Re: Problem z oteviranim stranek, av hlasi rootkit
Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner[C?].txt ). Ten mi sem zkopirujte.
Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu (cili Vlastni sken vsech disku) http://forum.viry.cz/viewtopic.php?f=29&t=144868 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekcePokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: Problem z oteviranim stranek, av hlasi rootkit
# AdwCleaner v5.021 - Logfile created 21/11/2015 at 11:01:57
# Updated 14/11/2015 by Xplode
# Database : 2015-11-19.4 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : TATIANA - TATIANA-PC
# Running from : C:\Users\TATIANA\Desktop\adwcleaner_5.021.exe
# Option : Cleaning
# Support : http://toolslib.net/forum
***** [ Services ] *****
***** [ Folders ] *****
[-] Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search
[-] Folder Deleted : C:\ProgramData\AVG Secure Search
[-] Folder Deleted : C:\ProgramData\AVG Security Toolbar
[-] Folder Deleted : C:\ProgramData\Media Get LLC
[-] Folder Deleted : C:\ProgramData\ApplicationHosting
[-] Folder Deleted : C:\ProgramData\Medlight
[-] Folder Deleted : C:\Users\TATIANA\AppData\Local\Media Get LLC
[-] Folder Deleted : C:\Users\TATIANA\AppData\Local\MediaGet2
[-] Folder Deleted : C:\Users\TATIANA\AppData\Roaming\Media Get LLC
[-] Folder Deleted : C:\Users\TATIANA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaGet2
[-] Folder Deleted : C:\Users\TATIANA\AppData\Roaming\Mozilla\Firefox\Profiles\jjjubvi4.default-1433603431791\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
***** [ Files ] *****
[-] File Deleted : C:\iехplоrе.bаt.exe
[-] File Deleted : C:\Users\TATIANA\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_gotut.ru_0.localstorage
[-] File Deleted : C:\Users\TATIANA\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_gotut.ru_0.localstorage-journal
[-] File Deleted : C:\Users\TATIANA\AppData\Local\Temp\task.vbs
[-] File Deleted : C:\Users\TATIANA\AppData\Roaming\Mozilla\Firefox\Profiles\jjjubvi4.default-1433603431791\searchplugins\avg-secure-search.xml
[-] File Deleted : C:\Users\TATIANA\AppData\Roaming\Mozilla\Firefox\Profiles\jjjubvi4.default-1433603431791\searchplugins\findit.xml
[-] File Deleted : C:\Windows\SysWOW64\findit.xml
***** [ DLLs ] *****
***** [ Shortcuts ] *****
[-] Shortcut Disinfected : C:\Users\Public\Desktop\Google, lol.lnk
[-] Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Gооglе Сhrоmе.lnk
[-] Shortcut Disinfected : C:\Users\TATIANA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnеt Ехplоrеr.lnk
[-] Shortcut Disinfected : C:\Users\TATIANA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Intеrnеt Ехplоrеr (Nо Аdd-оns).lnk
[-] Shortcut Disinfected : C:\Users\TATIANA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Gооglе Сhrоmе.lnk
[-] Shortcut Disinfected : C:\Users\TATIANA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Lаunсh Intеrnеt Ехplоrеr Вrоwsеr.lnk
[-] Shortcut Disinfected : C:\Users\TATIANA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gооglе Сhrоmе.lnk
[-] Shortcut Disinfected : C:\Users\TATIANA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Intеrnеt Ехplоrеr.lnk
***** [ Scheduled tasks ] *****
[-] Task Deleted : snf
[-] Task Deleted : PaintTool SAI
***** [ Registry ] *****
[-] Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
[-] Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
[-] Key Deleted : HKLM\SOFTWARE\Classes\pc-mechanic
[-] Key Deleted : HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\IELNKSRCH
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\avgsh
[-] Key Deleted : HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\Stpro.exe
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CA3A5461-96B5-46DD-9341-5350D3C94615}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Key Deleted : HKCU\Software\Media Get LLC
[-] Key Deleted : HKCU\Software\MediaGet
[-] Key Deleted : HKCU\Software\Avg Secure Update
[-] Key Deleted : HKCU\Software\WEBAPP
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MediaGet
[-] Key Deleted : HKU\.DEFAULT\Software\Avg Secure Update
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3C}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch}
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\ielnksrch
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{ielnksrch}
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix []
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\gotut.ru
***** [ Web browsers ] *****
[-] [C:\Users\TATIANA\AppData\Roaming\Mozilla\Firefox\Profiles\jjjubvi4.default-1433603431791\prefs.js] [Preference] Deleted : user_pref("browser.newtab.url", "hxxp://www.globasearch.com/?serie=3209&b=2&ins ... moh&newtab");
[-] [C:\Users\TATIANA\AppData\Roaming\Mozilla\Firefox\Profiles\jjjubvi4.default-1433603431791\prefs.js] [Preference] Deleted : user_pref("browser.startup.homepage", "hxxp://www.globasearch.com/?serie=3209&b=2&ins ... 13ngNw3moh");
[-] [C:\Users\TATIANA\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : >
*************************
:: "Tracing" keys removed
:: Winsock settings cleared
########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [7496 bytes] ##########
# Updated 14/11/2015 by Xplode
# Database : 2015-11-19.4 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : TATIANA - TATIANA-PC
# Running from : C:\Users\TATIANA\Desktop\adwcleaner_5.021.exe
# Option : Cleaning
# Support : http://toolslib.net/forum
***** [ Services ] *****
***** [ Folders ] *****
[-] Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search
[-] Folder Deleted : C:\ProgramData\AVG Secure Search
[-] Folder Deleted : C:\ProgramData\AVG Security Toolbar
[-] Folder Deleted : C:\ProgramData\Media Get LLC
[-] Folder Deleted : C:\ProgramData\ApplicationHosting
[-] Folder Deleted : C:\ProgramData\Medlight
[-] Folder Deleted : C:\Users\TATIANA\AppData\Local\Media Get LLC
[-] Folder Deleted : C:\Users\TATIANA\AppData\Local\MediaGet2
[-] Folder Deleted : C:\Users\TATIANA\AppData\Roaming\Media Get LLC
[-] Folder Deleted : C:\Users\TATIANA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaGet2
[-] Folder Deleted : C:\Users\TATIANA\AppData\Roaming\Mozilla\Firefox\Profiles\jjjubvi4.default-1433603431791\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
***** [ Files ] *****
[-] File Deleted : C:\iехplоrе.bаt.exe
[-] File Deleted : C:\Users\TATIANA\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_gotut.ru_0.localstorage
[-] File Deleted : C:\Users\TATIANA\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_gotut.ru_0.localstorage-journal
[-] File Deleted : C:\Users\TATIANA\AppData\Local\Temp\task.vbs
[-] File Deleted : C:\Users\TATIANA\AppData\Roaming\Mozilla\Firefox\Profiles\jjjubvi4.default-1433603431791\searchplugins\avg-secure-search.xml
[-] File Deleted : C:\Users\TATIANA\AppData\Roaming\Mozilla\Firefox\Profiles\jjjubvi4.default-1433603431791\searchplugins\findit.xml
[-] File Deleted : C:\Windows\SysWOW64\findit.xml
***** [ DLLs ] *****
***** [ Shortcuts ] *****
[-] Shortcut Disinfected : C:\Users\Public\Desktop\Google, lol.lnk
[-] Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Gооglе Сhrоmе.lnk
[-] Shortcut Disinfected : C:\Users\TATIANA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnеt Ехplоrеr.lnk
[-] Shortcut Disinfected : C:\Users\TATIANA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Intеrnеt Ехplоrеr (Nо Аdd-оns).lnk
[-] Shortcut Disinfected : C:\Users\TATIANA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Gооglе Сhrоmе.lnk
[-] Shortcut Disinfected : C:\Users\TATIANA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Lаunсh Intеrnеt Ехplоrеr Вrоwsеr.lnk
[-] Shortcut Disinfected : C:\Users\TATIANA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gооglе Сhrоmе.lnk
[-] Shortcut Disinfected : C:\Users\TATIANA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Intеrnеt Ехplоrеr.lnk
***** [ Scheduled tasks ] *****
[-] Task Deleted : snf
[-] Task Deleted : PaintTool SAI
***** [ Registry ] *****
[-] Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
[-] Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
[-] Key Deleted : HKLM\SOFTWARE\Classes\pc-mechanic
[-] Key Deleted : HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\IELNKSRCH
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\avgsh
[-] Key Deleted : HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\Stpro.exe
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CA3A5461-96B5-46DD-9341-5350D3C94615}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Key Deleted : HKCU\Software\Media Get LLC
[-] Key Deleted : HKCU\Software\MediaGet
[-] Key Deleted : HKCU\Software\Avg Secure Update
[-] Key Deleted : HKCU\Software\WEBAPP
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MediaGet
[-] Key Deleted : HKU\.DEFAULT\Software\Avg Secure Update
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3C}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch}
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\ielnksrch
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{ielnksrch}
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix []
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\gotut.ru
***** [ Web browsers ] *****
[-] [C:\Users\TATIANA\AppData\Roaming\Mozilla\Firefox\Profiles\jjjubvi4.default-1433603431791\prefs.js] [Preference] Deleted : user_pref("browser.newtab.url", "hxxp://www.globasearch.com/?serie=3209&b=2&ins ... moh&newtab");
[-] [C:\Users\TATIANA\AppData\Roaming\Mozilla\Firefox\Profiles\jjjubvi4.default-1433603431791\prefs.js] [Preference] Deleted : user_pref("browser.startup.homepage", "hxxp://www.globasearch.com/?serie=3209&b=2&ins ... 13ngNw3moh");
[-] [C:\Users\TATIANA\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : >
*************************
:: "Tracing" keys removed
:: Winsock settings cleared
########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [7496 bytes] ##########
Naposledy upravil(a) KOKOS1 dne 21 lis 2015 12:14, celkem upraveno 2 x.
Vim ze nic nevim.
Re: Problem z oteviranim stranek, av hlasi rootkit
Tak jeste ten MBAM a podle vysledku se zaridime dale
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: Problem z oteviranim stranek, av hlasi rootkit
Malwarebytes Anti-Malware
www.malwarebytes.org
Datum skenování: 21.11.2015
Čas skenování: 11:20
Protokol: Nový textový dokument.txt
Správce: Ano
Verze: 2.2.0.1024
Databáze malwaru: v2015.11.21.02
Databáze rootkitů: v2015.11.14.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto
OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: TATIANA
Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 588043
Uplynulý čas: 50 min, 22 sek
Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto
Procesy: 0
(Nenalezeny žádné škodlivé položky)
Moduly: 0
(Nenalezeny žádné škodlivé položky)
Klíče registru: 2
PUP.Optional.Linkury.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{BFEAFBCA-F3CA-4EB5-9483-60F6E872B225}, , [1393d4ac543792a41325159b26dd0000],
PUP.Optional.YahooVNM, HKU\S-1-5-21-1489076616-2120609490-2393241685-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C0C3A6C6-03BC-4195-8FCB-AEA091301353}, , [089e750b39520d29e9ce5e4881826e92],
Hodnoty registru: 6
PUP.Optional.Linkury.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}, , [d5d1443c89021323e8f7f36d5ba89b65]
PUP.Optional.Linkury.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{BFEAFBCA-F3CA-4EB5-9483-60F6E872B225}|DisplayName, SnapDo, , [1393d4ac543792a41325159b26dd0000]
PUP.Optional.Linkury, HKU\S-1-5-21-1489076616-2120609490-2393241685-1000\ENVIRONMENT|SNP, http://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D?publisher=APSnapdoAMRev&co=CZ&userid=80279232-aee0-7228-3b0a-4f90329fb4e4&searchtype=sc&installDate=11.11.2015&barcodeid=50027003&channelid=3, , [604684fc0e7d8bab9c2e0084d62d47b9]
PUP.Optional.Linkury, HKU\S-1-5-21-1489076616-2120609490-2393241685-1000\ENVIRONMENT|SNF, C:\ProgramData\Medlights\snp.sc, , [2383dfa1692236007d4c88fcb3501be5]
PUP.Optional.YahooVNM, HKU\S-1-5-21-1489076616-2120609490-2393241685-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C0C3A6C6-03BC-4195-8FCB-AEA091301353}|URL, https://search.yahoo.com/search?fr=vmn& ... earchTerms}, , [089e750b39520d29e9ce5e4881826e92]
PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-1489076616-2120609490-2393241685-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}, , [782e027e4843191df5e7df81e81b27d9]
Data registru: 4
PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-1489076616-2120609490-2393241685-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}),,[5353e59b4744280e3c0df36bf311659b]
PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-1489076616-2120609490-2393241685-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}),,[6e386b15800b55e1e267cf8fce3623dd]
PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-1489076616-2120609490-2393241685-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|SearchAssistant, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}),,[9412c5bbe1aa989ecd7c5b0363a159a7]
PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-1489076616-2120609490-2393241685-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}),,[812589f75239d4629facf56915effd03]
Složky: 1
PUP.Optional.Linkury.ShrtCln, C:\ProgramData\Medlights, , [0b9babd5b1dae4529750f89362a0d12f],
Soubory: 11
PUP.Optional.Amonetize, C:\Users\TATIANA\AppData\Local\Temp\Kitty+Powers+Matchmaker+F__10924_i1739576617_il703628.exe, , [3571156bddae77bf60b85e14da2750b0],
PUP.Optional.Amonetize, C:\Users\TATIANA\AppData\Local\Temp\Kitty+Powers+Matchmaker+F__10924_i1739577859_il703628.exe, , [277fa4dc612a241248d088ea748d2cd4],
PUP.Optional.Surveyor, C:\Users\TATIANA\AppData\Local\Temp\Temp1_Minecraft.zip\Minecraft.exe, , [c8decfb1ccbf16205e7d59228c75b848],
PUP.Optional.Amonetize, C:\Users\TATIANA\Downloads\Kitty+Powers+Matchmaker+F.ace, , [cbdbfd83880304326d762f764fb233cd],
PUP.Optional.Surveyor, C:\Users\TATIANA\Downloads\Minecraft.zip, , [0c9a89f7d6b521154b90304bf20fe020],
PUP.Optional.MultiPlug.BHO, C:\AdwCleaner\Quarantine\C\Program Files (x86)\bestadblocker\PSbKuMuA5Llvh3.x64.dll.vir, , [a006542c731889ad6dd0e83b1fe22ad6],
PUP.Optional.MultiPlug.BHO, C:\AdwCleaner\Quarantine\C\Program Files (x86)\PriceMinus\lUsyk7gg7wt6hQ.x64.dll.vir, , [c3e3f38d19729b9b4eef8f9478893dc3],
Trojan.Agent.W, C:\Windows\Setup\SCRIPTS\Windows7Loader.exe, , [f3b37f01f39849edc52856b243c114ec],
PUP.Optional.Linkury.ShrtCln, C:\ProgramData\Medlights\ff.HP, , [0b9babd5b1dae4529750f89362a0d12f],
PUP.Optional.Linkury.ShrtCln, C:\ProgramData\Medlights\ff.NT, , [0b9babd5b1dae4529750f89362a0d12f],
PUP.Optional.Linkury.ShrtCln, C:\ProgramData\Medlights\snp.sc, , [0b9babd5b1dae4529750f89362a0d12f],
Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)
(end)
www.malwarebytes.org
Datum skenování: 21.11.2015
Čas skenování: 11:20
Protokol: Nový textový dokument.txt
Správce: Ano
Verze: 2.2.0.1024
Databáze malwaru: v2015.11.21.02
Databáze rootkitů: v2015.11.14.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto
OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: TATIANA
Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 588043
Uplynulý čas: 50 min, 22 sek
Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto
Procesy: 0
(Nenalezeny žádné škodlivé položky)
Moduly: 0
(Nenalezeny žádné škodlivé položky)
Klíče registru: 2
PUP.Optional.Linkury.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{BFEAFBCA-F3CA-4EB5-9483-60F6E872B225}, , [1393d4ac543792a41325159b26dd0000],
PUP.Optional.YahooVNM, HKU\S-1-5-21-1489076616-2120609490-2393241685-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C0C3A6C6-03BC-4195-8FCB-AEA091301353}, , [089e750b39520d29e9ce5e4881826e92],
Hodnoty registru: 6
PUP.Optional.Linkury.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}, , [d5d1443c89021323e8f7f36d5ba89b65]
PUP.Optional.Linkury.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{BFEAFBCA-F3CA-4EB5-9483-60F6E872B225}|DisplayName, SnapDo, , [1393d4ac543792a41325159b26dd0000]
PUP.Optional.Linkury, HKU\S-1-5-21-1489076616-2120609490-2393241685-1000\ENVIRONMENT|SNP, http://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D?publisher=APSnapdoAMRev&co=CZ&userid=80279232-aee0-7228-3b0a-4f90329fb4e4&searchtype=sc&installDate=11.11.2015&barcodeid=50027003&channelid=3, , [604684fc0e7d8bab9c2e0084d62d47b9]
PUP.Optional.Linkury, HKU\S-1-5-21-1489076616-2120609490-2393241685-1000\ENVIRONMENT|SNF, C:\ProgramData\Medlights\snp.sc, , [2383dfa1692236007d4c88fcb3501be5]
PUP.Optional.YahooVNM, HKU\S-1-5-21-1489076616-2120609490-2393241685-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C0C3A6C6-03BC-4195-8FCB-AEA091301353}|URL, https://search.yahoo.com/search?fr=vmn& ... earchTerms}, , [089e750b39520d29e9ce5e4881826e92]
PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-1489076616-2120609490-2393241685-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}, , [782e027e4843191df5e7df81e81b27d9]
Data registru: 4
PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-1489076616-2120609490-2393241685-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}),,[5353e59b4744280e3c0df36bf311659b]
PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-1489076616-2120609490-2393241685-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}),,[6e386b15800b55e1e267cf8fce3623dd]
PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-1489076616-2120609490-2393241685-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|SearchAssistant, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}),,[9412c5bbe1aa989ecd7c5b0363a159a7]
PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-1489076616-2120609490-2393241685-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-TqsziYUdUJRRf9vjDYv6K_04zVpoaXunx6kGKV891VmrC7x3MSgAOJXLeoSQBeDomXc3nbUmJw5gcEqD19aKg7QaWn7jY-9_1_XQPopB5UMLmDzFTHGXmG9MOMvQUQLt7vv2r6GG5mjol1EQ,,&q={searchTerms}),,[812589f75239d4629facf56915effd03]
Složky: 1
PUP.Optional.Linkury.ShrtCln, C:\ProgramData\Medlights, , [0b9babd5b1dae4529750f89362a0d12f],
Soubory: 11
PUP.Optional.Amonetize, C:\Users\TATIANA\AppData\Local\Temp\Kitty+Powers+Matchmaker+F__10924_i1739576617_il703628.exe, , [3571156bddae77bf60b85e14da2750b0],
PUP.Optional.Amonetize, C:\Users\TATIANA\AppData\Local\Temp\Kitty+Powers+Matchmaker+F__10924_i1739577859_il703628.exe, , [277fa4dc612a241248d088ea748d2cd4],
PUP.Optional.Surveyor, C:\Users\TATIANA\AppData\Local\Temp\Temp1_Minecraft.zip\Minecraft.exe, , [c8decfb1ccbf16205e7d59228c75b848],
PUP.Optional.Amonetize, C:\Users\TATIANA\Downloads\Kitty+Powers+Matchmaker+F.ace, , [cbdbfd83880304326d762f764fb233cd],
PUP.Optional.Surveyor, C:\Users\TATIANA\Downloads\Minecraft.zip, , [0c9a89f7d6b521154b90304bf20fe020],
PUP.Optional.MultiPlug.BHO, C:\AdwCleaner\Quarantine\C\Program Files (x86)\bestadblocker\PSbKuMuA5Llvh3.x64.dll.vir, , [a006542c731889ad6dd0e83b1fe22ad6],
PUP.Optional.MultiPlug.BHO, C:\AdwCleaner\Quarantine\C\Program Files (x86)\PriceMinus\lUsyk7gg7wt6hQ.x64.dll.vir, , [c3e3f38d19729b9b4eef8f9478893dc3],
Trojan.Agent.W, C:\Windows\Setup\SCRIPTS\Windows7Loader.exe, , [f3b37f01f39849edc52856b243c114ec],
PUP.Optional.Linkury.ShrtCln, C:\ProgramData\Medlights\ff.HP, , [0b9babd5b1dae4529750f89362a0d12f],
PUP.Optional.Linkury.ShrtCln, C:\ProgramData\Medlights\ff.NT, , [0b9babd5b1dae4529750f89362a0d12f],
PUP.Optional.Linkury.ShrtCln, C:\ProgramData\Medlights\snp.sc, , [0b9babd5b1dae4529750f89362a0d12f],
Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)
(end)
Vim ze nic nevim.
Re: Problem z oteviranim stranek, av hlasi rootkit
Achjo 
Ten system moc legalni nebude, ze? 
Ten system moc legalni nebude, ze? Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: Problem z oteviranim stranek, av hlasi rootkit
Upřimně nevim. Počitač není muj. a jedině co o systemu vim že se kupoval v Autocontu.
Vim ze nic nevim.
Re: Problem z oteviranim stranek, av hlasi rootkit
Je tam bohuzel jasne videt nelegalni aktivator....
A pravidla fora hovori jasne http://forum.viry.cz/viewtopic.php?f=12&t=115512
A pravidla fora hovori jasne http://forum.viry.cz/viewtopic.php?f=12&t=115512
Pomáhat NELZE:
2) Pokud stroj uživatele prokazatelně obsahuje nelegální hostitelský čí ochranný software
(operační systém, antivir, firewall, atd.), je nutné navést uživatele k nápravě, např. skrze neplacený software,
a začít řešit, až v době kdy je PC "v pořádku". V případě že uživatel nechce na pravidla přistoupit,
je nutné jej vyzvat ať fórum opustí, a vrátí se až je splní.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: Problem z oteviranim stranek, av hlasi rootkit
Behuzel neni zac
Mejte se a snad priste s lepsim vysledkem
Mejte se a snad priste s lepsim vysledkem
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Přispějete na provoz fóra?