Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Zlobí internet

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Robotka
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 21 črc 2005 16:20

Zlobí internet

#1 Příspěvek od Robotka »

Prosím o kontrolu. Při prohlížení netu mi nekontrolovaně vyskakují nechtěné nové stránky.Mám podezření že jsem si sem něco natáhl.
Děkuji

log:
Logfile of random's system information tool 1.10 (written by random/random)
Run by Vilem at 2015-12-05 08:04:08
Microsoft Windows 10 Home
System drive C: has 102 GB (53%) free of 191 GB
Total RAM: 3983 MB (57% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:04:26, on 05.12.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal

Running processes:
C:\Users\Vilem\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Vilem.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=12454
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Vilem\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @oem7.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6951 bytes

======Listing Processes======







C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
dashost.exe {3ba4b4a1-1d63-4192-94352b5a52d7a069}
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\WINDOWS\system32\BtwRSupportService.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
C:\WINDOWS\system32\WLANExt.exe 162338333488
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

C:\WINDOWS\System32\WinLogon.exe -SpecialSession
"dwm.exe"
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
igfxEM.exe
igfxTray.exe
igfxHK.exe
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe"
"C:\Users\Vilem\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"fontdrvhost.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX4
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="1880.0.265172288\56144284" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,20,45 --gpu-vendor-id=0x8086 --gpu-device-id=0x0f31 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.4276 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/*AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/7DaySingleProfile/*DomRel-Enable/enable/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*GoogleNow/Enable/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/StandardR5/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="1880.3.188540663\1477258530" --font-cache-shared-handle=4448 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="1880.4.2005168900\1818541655" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe44_ Global\UsGthrCtrlFltPipeMssGthrPipe44 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 208 608 616 8192 612

"C:\Users\Vilem\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-11-29 885152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-11-29 664184]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Vilem\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-11-03 548552]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-11-29 7004376]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iaioi2ce.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-12-05 08:04:08 ----D---- C:\rsit
2015-12-05 08:04:08 ----D---- C:\Program Files\trend micro
2015-12-04 20:33:34 ----D---- C:\Program Files (x86)\Intel
2015-12-04 20:32:30 ----D---- C:\WINDOWS\LastGood
2015-12-04 20:30:53 ----A---- C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll
2015-12-04 20:30:52 ----A---- C:\WINDOWS\SYSWOW64\Intel_OpenCL_ICD32.dll
2015-12-04 20:30:52 ----A---- C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll
2015-12-04 20:30:51 ----A---- C:\WINDOWS\SYSWOW64\IntelOpenCL32.dll
2015-12-04 20:30:51 ----A---- C:\WINDOWS\SYSWOW64\IntelCpHeciSvc.exe
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelWiDiWinNextAgent64.dll
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelWiDiVAD64.exe
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelWiDiUtils64.dll
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelWiDiUMS64.exe
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelWiDiSilenceFilter64.dll
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelWiDiSecureSourceFilter64.dll
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelWiDiMux64.dll
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelWiDiMCUMD64.dll
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelWiDiLogServer64.dll
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelWiDiDDEAgent64.dll
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelWiDiAudioFilter64.dll
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelWiDiAAC64.dll
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelOpenCL64.dll
2015-12-04 20:30:50 ----A---- C:\WINDOWS\SYSWOW64\iglhsip32.dll
2015-12-04 20:30:50 ----A---- C:\WINDOWS\SYSWOW64\iglhcp32.dll
2015-12-04 20:30:50 ----A---- C:\WINDOWS\SYSWOW64\igfxexps32.dll
2015-12-04 20:30:50 ----A---- C:\WINDOWS\system32\iglhsip64.dll
2015-12-04 20:30:50 ----A---- C:\WINDOWS\system32\iglhcp64.dll
2015-12-04 20:30:50 ----A---- C:\WINDOWS\system32\igfxOSP.dll
2015-12-04 20:30:50 ----A---- C:\WINDOWS\system32\igfxLHMLibv2_0.dll
2015-12-04 20:30:50 ----A---- C:\WINDOWS\system32\igfxLHMLib.dll
2015-12-04 20:30:50 ----A---- C:\WINDOWS\system32\igfxext.exe
2015-12-04 20:30:50 ----A---- C:\WINDOWS\system32\igfxCoIn_v4276.dll
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxexps.dll
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxEMLibv2_0.dll
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxEMLib.dll
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxDTCM.dll
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxDILibv2_0.dll
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxDILib.dll
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxDHLibv2_0.dll
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxDHLib.dll
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxCUIServicePS.dll
2015-12-04 20:30:48 ----A---- C:\WINDOWS\SYSWOW64\igfxcmrt32.dll
2015-12-04 20:30:48 ----A---- C:\WINDOWS\SYSWOW64\igfxcmjit32.dll
2015-12-04 20:30:48 ----A---- C:\WINDOWS\SYSWOW64\igfx11cmrt32.dll
2015-12-04 20:30:48 ----A---- C:\WINDOWS\system32\igfxcmrt64.dll
2015-12-04 20:30:48 ----A---- C:\WINDOWS\system32\igfxcmjit64.dll
2015-12-04 20:30:48 ----A---- C:\WINDOWS\system32\igfx11cmrt64.dll
2015-12-04 20:30:47 ----A---- C:\WINDOWS\system32\igdumdim64.dll
2015-12-04 20:30:46 ----A---- C:\WINDOWS\SYSWOW64\igdumdim32.dll
2015-12-04 20:30:46 ----A---- C:\WINDOWS\SYSWOW64\igdrcl32.dll
2015-12-04 20:30:46 ----A---- C:\WINDOWS\SYSWOW64\igdmd32.dll
2015-12-04 20:30:46 ----A---- C:\WINDOWS\system32\igdrcl64.dll
2015-12-04 20:30:46 ----A---- C:\WINDOWS\system32\igdmd64.dll
2015-12-04 20:30:46 ----A---- C:\WINDOWS\system32\igdfcl64.dll
2015-12-04 20:30:44 ----A---- C:\WINDOWS\SYSWOW64\igdfcl32.dll
2015-12-04 20:30:43 ----A---- C:\WINDOWS\SYSWOW64\igdde32.dll
2015-12-04 20:30:43 ----A---- C:\WINDOWS\SYSWOW64\igdbcl32.dll
2015-12-04 20:30:43 ----A---- C:\WINDOWS\SYSWOW64\igdail32.dll
2015-12-04 20:30:43 ----A---- C:\WINDOWS\system32\igdde64.dll
2015-12-04 20:30:43 ----A---- C:\WINDOWS\system32\igdbcl64.dll
2015-12-04 20:30:43 ----A---- C:\WINDOWS\system32\igdail64.dll
2015-12-04 20:30:41 ----A---- C:\WINDOWS\system32\ig7icd64.dll
2015-12-04 20:30:40 ----A---- C:\WINDOWS\SYSWOW64\ig7icd32.dll
2015-12-04 20:30:40 ----A---- C:\WINDOWS\system32\IccLibDll_x64.dll
2015-12-04 20:30:39 ----A---- C:\WINDOWS\system32\Gfxv4_0.exe
2015-12-04 20:30:39 ----A---- C:\WINDOWS\system32\Gfxv2_0.exe
2015-12-04 20:30:39 ----A---- C:\WINDOWS\system32\GfxUIEx.exe
2015-12-04 20:30:39 ----A---- C:\WINDOWS\system32\DPTopologyAppv2_0.exe
2015-12-04 20:30:39 ----A---- C:\WINDOWS\system32\DPTopologyApp.exe
2015-12-04 20:30:39 ----A---- C:\WINDOWS\system32\difx64.exe
2015-12-04 20:30:39 ----A---- C:\WINDOWS\system32\CustomModeAppv2_0.exe
2015-12-04 20:30:37 ----A---- C:\WINDOWS\system32\CustomModeApp.exe
2015-11-29 20:13:18 ----D---- C:\Users\Vilem\AppData\Roaming\Ashampoo
2015-11-29 20:12:53 ----D---- C:\ProgramData\Ashampoo
2015-11-29 20:12:51 ----D---- C:\Program Files (x86)\Ashampoo
2015-11-29 19:12:10 ----A---- C:\WINDOWS\system32\drivers\asw52BB.tmp
2015-11-29 19:12:10 ----A---- C:\WINDOWS\system32\drivers\asw52AB.tmp
2015-11-29 19:12:10 ----A---- C:\WINDOWS\system32\drivers\asw52AA.tmp
2015-11-29 19:12:10 ----A---- C:\WINDOWS\system32\drivers\asw5299.tmp
2015-11-29 19:12:10 ----A---- C:\WINDOWS\system32\drivers\asw525A.tmp
2015-11-29 19:12:10 ----A---- C:\WINDOWS\system32\drivers\asw5249.tmp
2015-11-29 19:12:10 ----A---- C:\WINDOWS\system32\drivers\asw5248.tmp
2015-11-29 19:12:10 ----A---- C:\WINDOWS\system32\drivers\asw5237.tmp
2015-11-29 19:12:09 ----A---- C:\WINDOWS\system32\aswBoot.exe
2015-11-29 19:10:48 ----D---- C:\Users\Vilem\AppData\Roaming\AVAST Software
2015-11-29 19:10:22 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2015-11-29 19:10:22 ----A---- C:\WINDOWS\system32\drivers\aswStm.sys
2015-11-29 19:10:22 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2015-11-29 19:10:22 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2015-11-29 19:10:22 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2015-11-29 19:10:22 ----A---- C:\WINDOWS\system32\drivers\aswRdr2.sys
2015-11-29 19:10:22 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2015-11-29 19:10:22 ----A---- C:\WINDOWS\system32\drivers\aswHwid.sys
2015-11-29 19:10:11 ----A---- C:\WINDOWS\avastSS.scr
2015-11-29 19:09:01 ----D---- C:\Program Files\AVAST Software
2015-11-28 23:48:45 ----D---- C:\Users\Vilem\AppData\Roaming\Mozilla
2015-11-28 23:48:29 ----D---- C:\ProgramData\Mozilla
2015-11-28 23:48:23 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-11-28 23:19:53 ----D---- C:\ProgramData\boost_interprocess
2015-11-28 23:18:33 ----D---- C:\Users\Vilem\AppData\Roaming\SimpleFiles
2015-11-28 23:18:29 ----D---- C:\Program Files (x86)\SimpleFiles
2015-11-28 23:18:18 ----D---- C:\ProgramData\8WMiniPro8
2015-11-28 23:18:18 ----A---- C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-11-28 23:18:12 ----D---- C:\Users\Vilem\AppData\Roaming\oursurfing
2015-11-28 23:18:08 ----D---- C:\ProgramData\4f596ec3-77fb-4fc3-82cb-691c42c71d77
2015-11-28 23:18:07 ----D---- C:\Program Files (x86)\Discover Treasure
2015-11-28 22:25:07 ----D---- C:\Program Files (x86)\Seznam.cz
2015-11-28 22:24:41 ----D---- C:\Users\Vilem\AppData\Roaming\Seznam.cz
2015-11-28 22:24:31 ----D---- C:\ProgramData\Elaborate Bytes
2015-11-28 21:17:31 ----D---- C:\Users\Vilem\AppData\Roaming\Vso
2015-11-28 20:29:46 ----D---- C:\Program Files (x86)\Elaborate Bytes
2015-11-28 20:24:43 ----D---- C:\Program Files (x86)\7-Zip
2015-11-10 20:09:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2015-11-10 20:09:27 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2015-11-10 20:09:27 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2015-11-10 20:09:26 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2015-11-10 20:09:26 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-11-10 20:09:25 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-11-10 20:09:24 ----A---- C:\WINDOWS\system32\esent.dll
2015-11-10 20:09:24 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2015-11-10 20:09:24 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-11-10 20:09:23 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-11-10 20:09:22 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-11-10 20:09:20 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-11-10 20:09:19 ----A---- C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
2015-11-10 20:09:18 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2015-11-10 20:09:18 ----A---- C:\WINDOWS\system32\dlnashext.dll
2015-11-10 20:09:18 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-11-10 20:09:14 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-11-10 20:09:14 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-11-10 20:09:14 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-11-10 20:09:13 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-11-10 20:09:13 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2015-11-10 20:09:13 ----A---- C:\WINDOWS\system32\appraiser.dll
2015-11-10 20:09:12 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-11-10 20:09:11 ----A---- C:\WINDOWS\system32\drivers\tdx.sys
2015-11-10 20:09:11 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2015-11-10 20:09:10 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2015-11-10 20:09:10 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-11-10 20:09:09 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-11-10 20:09:08 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-11-10 20:09:08 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-11-10 20:09:07 ----A---- C:\WINDOWS\SYSWOW64\esent.dll
2015-11-10 20:09:07 ----A---- C:\WINDOWS\system32\internetmail.dll
2015-11-10 20:09:07 ----A---- C:\WINDOWS\system32\dssvc.dll
2015-11-10 20:09:06 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-11-10 20:09:06 ----A---- C:\WINDOWS\system32\usermgr.dll
2015-11-10 20:09:05 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-11-10 20:09:05 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-11-10 20:09:05 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-11-10 20:09:05 ----A---- C:\WINDOWS\system32\browserbroker.dll
2015-11-10 20:09:04 ----A---- C:\WINDOWS\system32\Windows.Devices.Usb.dll
2015-11-10 20:09:04 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-11-10 20:09:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Usb.dll
2015-11-10 20:09:03 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2015-11-10 20:09:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2015-11-10 20:09:02 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-11-10 20:09:02 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-11-10 20:09:01 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2015-11-10 20:09:01 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2015-11-10 20:09:01 ----A---- C:\WINDOWS\system32\jscript.dll
2015-11-10 20:09:00 ----A---- C:\WINDOWS\system32\kerberos.dll
2015-11-10 20:08:59 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-11-10 20:08:59 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-11-10 20:08:58 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe

======List of files/folders modified in the last 1 month======

2015-12-05 08:04:08 ----RD---- C:\Program Files
2015-12-05 07:57:02 ----D---- C:\ProgramData\ASUS Smart Gesture
2015-12-05 07:56:58 ----D---- C:\WINDOWS\Temp
2015-12-05 07:56:49 ----D---- C:\WINDOWS\system32\sru
2015-12-05 07:56:48 ----D---- C:\WINDOWS\System32
2015-12-05 07:56:47 ----A---- C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2015-12-04 20:50:33 ----D---- C:\WINDOWS\system32\config
2015-12-04 20:39:46 ----D---- C:\WINDOWS\Microsoft.NET
2015-12-04 20:39:08 ----D---- C:\WINDOWS\prefetch
2015-12-04 20:33:44 ----D---- C:\WINDOWS\system32\drivers
2015-12-04 20:33:43 ----D---- C:\WINDOWS\system32\DriverStore
2015-12-04 20:33:43 ----D---- C:\WINDOWS\INF
2015-12-04 20:33:42 ----D---- C:\WINDOWS\system32\CatRoot
2015-12-04 20:33:34 ----RD---- C:\Program Files (x86)
2015-12-04 20:33:08 ----D---- C:\WINDOWS\syswow64
2015-12-04 20:32:30 ----D---- C:\Windows
2015-12-04 20:30:52 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.DLL
2015-12-04 20:30:52 ----A---- C:\WINDOWS\system32\OpenCL.DLL
2015-12-04 20:30:50 ----A---- C:\WINDOWS\system32\igfxTray.exe
2015-12-04 20:30:50 ----A---- C:\WINDOWS\system32\igfxLHM.dll
2015-12-04 20:30:50 ----A---- C:\WINDOWS\system32\igfxHK.exe
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxEM.exe
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxDI.dll
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxDH.dll
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxCUIService.exe
2015-12-04 20:30:48 ----A---- C:\WINDOWS\system32\igdusc64.dll
2015-12-04 20:30:47 ----A---- C:\WINDOWS\SYSWOW64\igdusc32.dll
2015-12-04 20:30:43 ----A---- C:\WINDOWS\system32\igd10iumd64.dll
2015-12-04 20:30:42 ----A---- C:\WINDOWS\SYSWOW64\igd10iumd32.dll
2015-12-04 20:30:18 ----SHD---- C:\System Volume Information
2015-12-04 20:13:03 ----D---- C:\WINDOWS\AppReadiness
2015-12-03 20:56:35 ----HD---- C:\Program Files\WindowsApps
2015-12-02 21:45:45 ----D---- C:\Program Files (x86)\TeamViewer
2015-11-29 22:15:55 ----D---- C:\Users\Vilem\AppData\Roaming\Kodi
2015-11-29 20:12:53 ----HD---- C:\ProgramData
2015-11-29 19:12:23 ----D---- C:\WINDOWS\system32\Tasks
2015-11-29 19:10:06 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-11-29 19:08:34 ----D---- C:\ProgramData\AVAST Software
2015-11-29 01:00:24 ----D---- C:\WINDOWS\Logs
2015-11-29 00:58:21 ----D---- C:\WINDOWS\system32\migration
2015-11-29 00:58:21 ----D---- C:\Program Files\Internet Explorer
2015-11-29 00:58:20 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2015-11-29 00:58:19 ----D---- C:\WINDOWS\WinSxS
2015-11-29 00:58:19 ----D---- C:\WINDOWS\Tasks
2015-11-29 00:58:18 ----SHD---- C:\WINDOWS\Installer
2015-11-29 00:58:18 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-11-29 00:58:18 ----D---- C:\WINDOWS\system32\catroot2
2015-11-29 00:55:03 ----D---- C:\WINDOWS\system32\wbem
2015-11-29 00:49:56 ----D---- C:\WINDOWS\registration
2015-11-29 00:48:16 ----D---- C:\Program Files (x86)\Google
2015-11-29 00:48:11 ----HD---- C:\$SysReset
2015-11-14 21:20:10 ----D---- C:\WINDOWS\rescache
2015-11-13 19:47:19 ----RSD---- C:\WINDOWS\assembly
2015-11-13 18:07:19 ----D---- C:\WINDOWS\system32\MRT
2015-11-12 21:52:50 ----A---- C:\WINDOWS\system32\MRT.exe
2015-11-12 15:58:02 ----D---- C:\WINDOWS\CbsTemp
2015-11-12 15:46:49 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-11-12 15:46:48 ----D---- C:\WINDOWS\system32\cs-CZ
2015-11-12 15:46:48 ----D---- C:\WINDOWS\system32\appraiser
2015-11-12 15:46:46 ----D---- C:\WINDOWS\AppPatch
2015-11-12 15:14:32 ----D---- C:\MCL

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-11-29 273784]
R0 MBI;@oem33.inf,%MBI.SVCDESC%;Intel(R) Sideband Fabric Device Service; C:\WINDOWS\System32\drivers\MBI.sys [2013-10-28 29464]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2015-11-29 93528]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-11-29 1059656]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-11-29 449992]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-11-29 28656]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-11-29 97648]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2015-11-29 154256]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 ATP;@oem25.inf,%PS2.DeviceDesc%;ASUS Input Device; C:\WINDOWS\System32\drivers\AsusTP.sys [2015-08-10 100776]
R3 bcbtums;@oem7.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2015-08-10 170712]
R3 BCM43XX;@oem16.inf,%BCM43XX_Service_DispName%;Ovladač síťového adaptéru Broadcom 802.11; C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys [2014-12-21 7546544]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-07-10 105984]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2015-07-10 237568]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 128512]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2015-07-10 84992]
R3 glavcam;@oem29.inf,%glavcam.DeviceDesc%;Lenovo EasyCamera; C:\WINDOWS\system32\DRIVERS\glavcam.sys [2015-08-10 3475456]
R3 GPIO;@oem36.inf,%GPIO.SVCDESC%;Intel SoC GPIO Controller Driver; C:\WINDOWS\System32\drivers\iaiogpioe.sys [2013-11-11 31232]
R3 HIDSwitch;@oem22.inf,%ASSW.DisplayName%;ASUS Wireless Radio Control; C:\WINDOWS\System32\drivers\AsHIDSwitch64.sys [2013-10-08 20280]
R3 iaioi2c;@oem20.inf,%Driver_Service.Desc%;I2C Controller Service; C:\WINDOWS\System32\drivers\iaioi2ce.sys [2013-11-11 67584]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-12-04 3797424]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-06-13 4466392]
R3 IntcDAud;@oem9.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-08-21 463112]
R3 iwdbus;@oem12.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-07-20 38976]
R3 kbfiltr;@oem10.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\WINDOWS\System32\drivers\kbfiltr.sys [2012-08-06 17280]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-07-10 167936]
R3 RSBASTOR;@oem21.inf,%Rts5208%;Realtek PCIE CardReader Driver - BA; C:\WINDOWS\system32\DRIVERS\RtsBaStor.sys [2015-08-10 321792]
R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-07-10 587264]
R3 TXEIx64;@oem17.inf,%TEE_SvcDesc%;Intel(R) Trusted Execution Engine Interface ; C:\WINDOWS\System32\drivers\TXEIx64.sys [2014-01-15 88592]
S0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-11-29 65224]
S0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2014-06-26 670056]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-09-17 929280]
S3 btwampfl;@oem7.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2015-08-10 166104]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-09-17 36352]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 intaud_WaveExtensible;@oem11.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2015-07-20 50240]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-08-16 934752]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-08-16 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2015-07-10 57696]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2015-07-10 28512]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2015-07-10 27488]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2015-07-10 46080]
S3 usbser;@usbser.inf,%UsbSerial.DriverDesc%;Sériový ovladač USB od společnosti Microsoft; C:\WINDOWS\System32\drivers\usbser.sys [2015-08-16 67072]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-10-28 82128]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-11-29 174416]
R2 BcmBtRSupport;@oem7.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2015-08-10 2252504]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-12-04 330136]
R2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-09-11 5702416]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 UserManager;@%systemroot%\system32\usermgr.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 UnistoreSvc_Session1;Úložiště uživatelských dat_Session1; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 UserDataSvc_Session1;Přístup k uživatelským datům_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-12-04 291744]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-24 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc_Session7;Hostitel synchronizace_Session7; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-24 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session7;Data kontaktů_Session7; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-08-16 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session7;Úložiště uživatelských dat_Session7; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-14001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc_Session7;Přístup k uživatelským datům_Session7; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UsoSvc;@%systemroot%\system32\usocore.dll,-102; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zlobí internet

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Robotka
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 21 črc 2005 16:20

Re: Zlobí internet

#3 Příspěvek od Robotka »

Omlouvám se za zpoždění. byl jsem mimo.
Tady je log.

# AdwCleaner v5.023 - Logfile created 05/12/2015 at 21:18:39
# Updated 30/11/2015 by Xplode
# Database : 2015-12-03.1 [Server]
# Operating system : Windows 10 Home (x64)
# Username : Vilem - DEDA
# Running from : C:\Users\Vilem\Desktop\adwcleaner_5.023.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\SimpleFiles
[-] Folder Deleted : C:\Program Files (x86)\Discover Treasure
[-] Folder Deleted : C:\Program Files (x86)\Common Files\4f596ec3-77fb-4fc3-82cb-691c42c71d77
[-] Folder Deleted : C:\ProgramData\8WMiniPro8
[-] Folder Deleted : C:\ProgramData\4f596ec3-77fb-4fc3-82cb-691c42c71d77
[-] Folder Deleted : C:\Users\Vilem\AppData\Roaming\SimpleFiles
[-] Folder Deleted : C:\Users\Vilem\AppData\Roaming\oursurfing

***** [ Files ] *****

[-] File Deleted : C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
[-] File Deleted : C:\Users\Vilem\AppData\Local\Chromium\User Data\Default\Local Storage\hxxp_search.internetquickaccess.com_0.localstorage
[-] File Deleted : C:\Users\Vilem\AppData\Local\Chromium\User Data\Default\Local Storage\hxxp_search.internetquickaccess.com_0.localstorage-journal

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\Conduit
[-] Key Deleted : HKLM\SOFTWARE\Conduit

***** [ Web browsers ] *****


*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1571 bytes] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zlobí internet

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Robotka
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 21 črc 2005 16:20

Re: Zlobí internet

#5 Příspěvek od Robotka »

Tady je

Logfile of random's system information tool 1.10 (written by random/random)
Run by Vilem at 2015-12-05 22:01:28
Microsoft Windows 10 Home
System drive C: has 102 GB (53%) free of 191 GB
Total RAM: 3983 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:01:30, on 05.12.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Vilem\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Vilem.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=12454
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Vilem\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @oem7.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7310 bytes

======Listing Processes======







winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
dashost.exe {07383d2c-af5a-4a18-91cec38ee6bc38fe}
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\system32\WLANExt.exe 270789079440
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\WINDOWS\system32\BtwRSupportService.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"

sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\TeamViewer\TeamViewer.exe"
C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\TeamViewer\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
"C:\Program Files (x86)\TeamViewer\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX4
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
igfxEM.exe
igfxHK.exe
igfxTray.exe
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Users\Vilem\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3852.0.2119177035\1150528230" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,23,51 --gpu-vendor-id=0x8086 --gpu-device-id=0x0f31 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.4276 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"fontdrvhost.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/*AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/7DaySingleProfile/*DomRel-Enable/enable/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/StandardR5/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Enabled/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/WebRTC-PeerConnectionDTLS1.2/Default/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3852.3.435887462\549811775" --font-cache-shared-handle=1096 /prefetch:673131151
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/*AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/7DaySingleProfile/*DomRel-Enable/enable/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/StandardR5/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Enabled/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/WebRTC-PeerConnectionDTLS1.2/Default/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3852.6.327852280\1857877041" --font-cache-shared-handle=2468 /prefetch:673131151
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/*AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/7DaySingleProfile/*DomRel-Enable/enable/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/StandardR5/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Enabled/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/WebRTC-PeerConnectionDTLS1.2/Default/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3852.27.131786540\14247905" --font-cache-shared-handle=5696 /prefetch:673131151

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/*AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/7DaySingleProfile/*DomRel-Enable/enable/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/StandardR5/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Enabled/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/WebRTC-PeerConnectionDTLS1.2/Default/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3852.28.652754521\1012876341" --font-cache-shared-handle=5036 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi-broker --channel="3852.29.1583949770\1282359160" --lang=cs --device-scale-factor=1 /prefetch:845217598
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/*AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/7DaySingleProfile/*DomRel-Enable/enable/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/StandardR5/*PasswordGeneration/Disabled/*PasswordLinkInSettings/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Enabled/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/WebRTC-PeerConnectionDTLS1.2/Default/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3852.30.1101131842\1941789590" --font-cache-shared-handle=2236 /prefetch:673131151
"C:\Users\Vilem\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-11-29 885152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-11-29 664184]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Vilem\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-11-03 548552]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-11-29 7004376]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iaioi2ce.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-12-05 12:36:04 ----D---- C:\AdwCleaner
2015-12-05 08:04:08 ----D---- C:\rsit
2015-12-05 08:04:08 ----D---- C:\Program Files\trend micro
2015-12-04 20:33:34 ----D---- C:\Program Files (x86)\Intel
2015-12-04 20:32:30 ----D---- C:\WINDOWS\LastGood.Tmp
2015-12-04 20:30:53 ----A---- C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll
2015-12-04 20:30:52 ----A---- C:\WINDOWS\SYSWOW64\Intel_OpenCL_ICD32.dll
2015-12-04 20:30:52 ----A---- C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll
2015-12-04 20:30:51 ----A---- C:\WINDOWS\SYSWOW64\IntelOpenCL32.dll
2015-12-04 20:30:51 ----A---- C:\WINDOWS\SYSWOW64\IntelCpHeciSvc.exe
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelWiDiWinNextAgent64.dll
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelWiDiVAD64.exe
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelWiDiUtils64.dll
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelWiDiUMS64.exe
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelWiDiSilenceFilter64.dll
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelWiDiSecureSourceFilter64.dll
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelWiDiMux64.dll
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelWiDiMCUMD64.dll
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelWiDiLogServer64.dll
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelWiDiDDEAgent64.dll
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelWiDiAudioFilter64.dll
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelWiDiAAC64.dll
2015-12-04 20:30:51 ----A---- C:\WINDOWS\system32\IntelOpenCL64.dll
2015-12-04 20:30:50 ----A---- C:\WINDOWS\SYSWOW64\iglhsip32.dll
2015-12-04 20:30:50 ----A---- C:\WINDOWS\SYSWOW64\iglhcp32.dll
2015-12-04 20:30:50 ----A---- C:\WINDOWS\SYSWOW64\igfxexps32.dll
2015-12-04 20:30:50 ----A---- C:\WINDOWS\system32\iglhsip64.dll
2015-12-04 20:30:50 ----A---- C:\WINDOWS\system32\iglhcp64.dll
2015-12-04 20:30:50 ----A---- C:\WINDOWS\system32\igfxOSP.dll
2015-12-04 20:30:50 ----A---- C:\WINDOWS\system32\igfxLHMLibv2_0.dll
2015-12-04 20:30:50 ----A---- C:\WINDOWS\system32\igfxLHMLib.dll
2015-12-04 20:30:50 ----A---- C:\WINDOWS\system32\igfxext.exe
2015-12-04 20:30:50 ----A---- C:\WINDOWS\system32\igfxCoIn_v4276.dll
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxexps.dll
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxEMLibv2_0.dll
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxEMLib.dll
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxDTCM.dll
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxDILibv2_0.dll
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxDILib.dll
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxDHLibv2_0.dll
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxDHLib.dll
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxCUIServicePS.dll
2015-12-04 20:30:48 ----A---- C:\WINDOWS\SYSWOW64\igfxcmrt32.dll
2015-12-04 20:30:48 ----A---- C:\WINDOWS\SYSWOW64\igfxcmjit32.dll
2015-12-04 20:30:48 ----A---- C:\WINDOWS\SYSWOW64\igfx11cmrt32.dll
2015-12-04 20:30:48 ----A---- C:\WINDOWS\system32\igfxcmrt64.dll
2015-12-04 20:30:48 ----A---- C:\WINDOWS\system32\igfxcmjit64.dll
2015-12-04 20:30:48 ----A---- C:\WINDOWS\system32\igfx11cmrt64.dll
2015-12-04 20:30:47 ----A---- C:\WINDOWS\system32\igdumdim64.dll
2015-12-04 20:30:46 ----A---- C:\WINDOWS\SYSWOW64\igdumdim32.dll
2015-12-04 20:30:46 ----A---- C:\WINDOWS\SYSWOW64\igdrcl32.dll
2015-12-04 20:30:46 ----A---- C:\WINDOWS\SYSWOW64\igdmd32.dll
2015-12-04 20:30:46 ----A---- C:\WINDOWS\system32\igdrcl64.dll
2015-12-04 20:30:46 ----A---- C:\WINDOWS\system32\igdmd64.dll
2015-12-04 20:30:46 ----A---- C:\WINDOWS\system32\igdfcl64.dll
2015-12-04 20:30:44 ----A---- C:\WINDOWS\SYSWOW64\igdfcl32.dll
2015-12-04 20:30:43 ----A---- C:\WINDOWS\SYSWOW64\igdde32.dll
2015-12-04 20:30:43 ----A---- C:\WINDOWS\SYSWOW64\igdbcl32.dll
2015-12-04 20:30:43 ----A---- C:\WINDOWS\SYSWOW64\igdail32.dll
2015-12-04 20:30:43 ----A---- C:\WINDOWS\system32\igdde64.dll
2015-12-04 20:30:43 ----A---- C:\WINDOWS\system32\igdbcl64.dll
2015-12-04 20:30:43 ----A---- C:\WINDOWS\system32\igdail64.dll
2015-12-04 20:30:41 ----A---- C:\WINDOWS\system32\ig7icd64.dll
2015-12-04 20:30:40 ----A---- C:\WINDOWS\SYSWOW64\ig7icd32.dll
2015-12-04 20:30:40 ----A---- C:\WINDOWS\system32\IccLibDll_x64.dll
2015-12-04 20:30:39 ----A---- C:\WINDOWS\system32\Gfxv4_0.exe
2015-12-04 20:30:39 ----A---- C:\WINDOWS\system32\Gfxv2_0.exe
2015-12-04 20:30:39 ----A---- C:\WINDOWS\system32\GfxUIEx.exe
2015-12-04 20:30:39 ----A---- C:\WINDOWS\system32\DPTopologyAppv2_0.exe
2015-12-04 20:30:39 ----A---- C:\WINDOWS\system32\DPTopologyApp.exe
2015-12-04 20:30:39 ----A---- C:\WINDOWS\system32\difx64.exe
2015-12-04 20:30:39 ----A---- C:\WINDOWS\system32\CustomModeAppv2_0.exe
2015-12-04 20:30:37 ----A---- C:\WINDOWS\system32\CustomModeApp.exe
2015-11-29 20:13:18 ----D---- C:\Users\Vilem\AppData\Roaming\Ashampoo
2015-11-29 20:12:53 ----D---- C:\ProgramData\Ashampoo
2015-11-29 20:12:51 ----D---- C:\Program Files (x86)\Ashampoo
2015-11-29 19:12:09 ----A---- C:\WINDOWS\system32\aswBoot.exe
2015-11-29 19:10:48 ----D---- C:\Users\Vilem\AppData\Roaming\AVAST Software
2015-11-29 19:10:22 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2015-11-29 19:10:22 ----A---- C:\WINDOWS\system32\drivers\aswStm.sys
2015-11-29 19:10:22 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2015-11-29 19:10:22 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2015-11-29 19:10:22 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2015-11-29 19:10:22 ----A---- C:\WINDOWS\system32\drivers\aswRdr2.sys
2015-11-29 19:10:22 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2015-11-29 19:10:22 ----A---- C:\WINDOWS\system32\drivers\aswHwid.sys
2015-11-29 19:10:11 ----A---- C:\WINDOWS\avastSS.scr
2015-11-29 19:09:01 ----D---- C:\Program Files\AVAST Software
2015-11-28 23:48:45 ----D---- C:\Users\Vilem\AppData\Roaming\Mozilla
2015-11-28 23:48:29 ----D---- C:\ProgramData\Mozilla
2015-11-28 23:48:23 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-11-28 23:19:53 ----D---- C:\ProgramData\boost_interprocess
2015-11-28 22:25:07 ----D---- C:\Program Files (x86)\Seznam.cz
2015-11-28 22:24:41 ----D---- C:\Users\Vilem\AppData\Roaming\Seznam.cz
2015-11-28 22:24:31 ----D---- C:\ProgramData\Elaborate Bytes
2015-11-28 21:17:31 ----D---- C:\Users\Vilem\AppData\Roaming\Vso
2015-11-28 20:29:46 ----D---- C:\Program Files (x86)\Elaborate Bytes
2015-11-28 20:24:43 ----D---- C:\Program Files (x86)\7-Zip
2015-11-10 20:09:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2015-11-10 20:09:27 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2015-11-10 20:09:27 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2015-11-10 20:09:26 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2015-11-10 20:09:26 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-11-10 20:09:25 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-11-10 20:09:24 ----A---- C:\WINDOWS\system32\esent.dll
2015-11-10 20:09:24 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2015-11-10 20:09:24 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-11-10 20:09:23 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-11-10 20:09:22 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-11-10 20:09:20 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2015-11-10 20:09:19 ----A---- C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
2015-11-10 20:09:18 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2015-11-10 20:09:18 ----A---- C:\WINDOWS\system32\dlnashext.dll
2015-11-10 20:09:18 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-11-10 20:09:14 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-11-10 20:09:14 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-11-10 20:09:14 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-11-10 20:09:13 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-11-10 20:09:13 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2015-11-10 20:09:13 ----A---- C:\WINDOWS\system32\appraiser.dll
2015-11-10 20:09:12 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-11-10 20:09:11 ----A---- C:\WINDOWS\system32\drivers\tdx.sys
2015-11-10 20:09:11 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2015-11-10 20:09:10 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2015-11-10 20:09:10 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-11-10 20:09:09 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-11-10 20:09:08 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2015-11-10 20:09:08 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-11-10 20:09:07 ----A---- C:\WINDOWS\SYSWOW64\esent.dll
2015-11-10 20:09:07 ----A---- C:\WINDOWS\system32\internetmail.dll
2015-11-10 20:09:07 ----A---- C:\WINDOWS\system32\dssvc.dll
2015-11-10 20:09:06 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-11-10 20:09:06 ----A---- C:\WINDOWS\system32\usermgr.dll
2015-11-10 20:09:05 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2015-11-10 20:09:05 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-11-10 20:09:05 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-11-10 20:09:05 ----A---- C:\WINDOWS\system32\browserbroker.dll
2015-11-10 20:09:04 ----A---- C:\WINDOWS\system32\Windows.Devices.Usb.dll
2015-11-10 20:09:04 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-11-10 20:09:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Usb.dll
2015-11-10 20:09:03 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2015-11-10 20:09:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2015-11-10 20:09:02 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-11-10 20:09:02 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-11-10 20:09:01 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2015-11-10 20:09:01 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2015-11-10 20:09:01 ----A---- C:\WINDOWS\system32\jscript.dll
2015-11-10 20:09:00 ----A---- C:\WINDOWS\system32\kerberos.dll
2015-11-10 20:08:59 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-11-10 20:08:59 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-11-10 20:08:58 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe

======List of files/folders modified in the last 1 month======

2015-12-05 21:59:29 ----D---- C:\WINDOWS\prefetch
2015-12-05 21:29:23 ----D---- C:\WINDOWS\Temp
2015-12-05 21:28:53 ----HD---- C:\Program Files\WindowsApps
2015-12-05 21:27:08 ----D---- C:\WINDOWS\System32
2015-12-05 21:27:08 ----D---- C:\WINDOWS\INF
2015-12-05 21:27:08 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-05 21:24:29 ----D---- C:\WINDOWS\AppReadiness
2015-12-05 21:24:17 ----D---- C:\ProgramData\ASUS Smart Gesture
2015-12-05 21:19:57 ----D---- C:\WINDOWS\syswow64
2015-12-05 21:19:57 ----D---- C:\WINDOWS\system32\drivers
2015-12-05 21:19:40 ----D---- C:\Windows
2015-12-05 21:19:14 ----D---- C:\WINDOWS\system32\CatRoot
2015-12-05 21:19:12 ----D---- C:\WINDOWS\system32\sru
2015-12-05 21:18:42 ----HD---- C:\ProgramData
2015-12-05 21:18:41 ----RD---- C:\Program Files (x86)
2015-12-05 21:18:41 ----D---- C:\Program Files (x86)\Common Files
2015-12-05 11:39:02 ----SHD---- C:\WINDOWS\Installer
2015-12-05 11:34:09 ----D---- C:\WINDOWS\Tasks
2015-12-05 08:04:08 ----RD---- C:\Program Files
2015-12-05 07:56:47 ----A---- C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2015-12-04 20:50:33 ----D---- C:\WINDOWS\system32\config
2015-12-04 20:39:46 ----D---- C:\WINDOWS\Microsoft.NET
2015-12-04 20:33:43 ----D---- C:\WINDOWS\system32\DriverStore
2015-12-04 20:30:52 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.DLL
2015-12-04 20:30:52 ----A---- C:\WINDOWS\system32\OpenCL.DLL
2015-12-04 20:30:50 ----A---- C:\WINDOWS\system32\igfxTray.exe
2015-12-04 20:30:50 ----A---- C:\WINDOWS\system32\igfxLHM.dll
2015-12-04 20:30:50 ----A---- C:\WINDOWS\system32\igfxHK.exe
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxEM.exe
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxDI.dll
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxDH.dll
2015-12-04 20:30:49 ----A---- C:\WINDOWS\system32\igfxCUIService.exe
2015-12-04 20:30:48 ----A---- C:\WINDOWS\system32\igdusc64.dll
2015-12-04 20:30:47 ----A---- C:\WINDOWS\SYSWOW64\igdusc32.dll
2015-12-04 20:30:43 ----A---- C:\WINDOWS\system32\igd10iumd64.dll
2015-12-04 20:30:42 ----A---- C:\WINDOWS\SYSWOW64\igd10iumd32.dll
2015-12-04 20:30:18 ----SHD---- C:\System Volume Information
2015-12-02 21:45:45 ----D---- C:\Program Files (x86)\TeamViewer
2015-11-29 22:15:55 ----D---- C:\Users\Vilem\AppData\Roaming\Kodi
2015-11-29 19:12:23 ----D---- C:\WINDOWS\system32\Tasks
2015-11-29 19:08:34 ----D---- C:\ProgramData\AVAST Software
2015-11-29 01:00:24 ----D---- C:\WINDOWS\Logs
2015-11-29 00:58:21 ----D---- C:\WINDOWS\system32\migration
2015-11-29 00:58:21 ----D---- C:\Program Files\Internet Explorer
2015-11-29 00:58:20 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2015-11-29 00:58:19 ----D---- C:\WINDOWS\WinSxS
2015-11-29 00:58:18 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-11-29 00:58:18 ----D---- C:\WINDOWS\system32\catroot2
2015-11-29 00:58:04 ----HD---- C:\$SysReset
2015-11-29 00:55:03 ----D---- C:\WINDOWS\system32\wbem
2015-11-29 00:49:56 ----D---- C:\WINDOWS\registration
2015-11-29 00:48:16 ----D---- C:\Program Files (x86)\Google
2015-11-14 21:20:10 ----D---- C:\WINDOWS\rescache
2015-11-13 19:47:19 ----RSD---- C:\WINDOWS\assembly
2015-11-13 18:07:19 ----D---- C:\WINDOWS\system32\MRT
2015-11-12 21:52:50 ----A---- C:\WINDOWS\system32\MRT.exe
2015-11-12 15:58:02 ----D---- C:\WINDOWS\CbsTemp
2015-11-12 15:46:49 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-11-12 15:46:48 ----D---- C:\WINDOWS\system32\cs-CZ
2015-11-12 15:46:48 ----D---- C:\WINDOWS\system32\appraiser
2015-11-12 15:46:46 ----D---- C:\WINDOWS\AppPatch
2015-11-12 15:14:32 ----D---- C:\MCL

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-11-29 65224]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-11-29 273784]
R0 MBI;@oem33.inf,%MBI.SVCDESC%;Intel(R) Sideband Fabric Device Service; C:\WINDOWS\System32\drivers\MBI.sys [2013-10-28 29464]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2015-11-29 93528]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-11-29 1059656]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-11-29 449992]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-11-29 28656]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-11-29 97648]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2015-11-29 154256]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 ATP;@oem25.inf,%PS2.DeviceDesc%;ASUS Input Device; C:\WINDOWS\System32\drivers\AsusTP.sys [2015-08-10 100776]
R3 bcbtums;@oem7.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2015-08-10 170712]
R3 BCM43XX;@oem16.inf,%BCM43XX_Service_DispName%;Ovladač síťového adaptéru Broadcom 802.11; C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys [2014-12-21 7546544]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-07-10 105984]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2015-07-10 237568]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 128512]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2015-07-10 84992]
R3 glavcam;@oem29.inf,%glavcam.DeviceDesc%;Lenovo EasyCamera; C:\WINDOWS\system32\DRIVERS\glavcam.sys [2015-08-10 3475456]
R3 GPIO;@oem36.inf,%GPIO.SVCDESC%;Intel SoC GPIO Controller Driver; C:\WINDOWS\System32\drivers\iaiogpioe.sys [2013-11-11 31232]
R3 HIDSwitch;@oem22.inf,%ASSW.DisplayName%;ASUS Wireless Radio Control; C:\WINDOWS\System32\drivers\AsHIDSwitch64.sys [2013-10-08 20280]
R3 iaioi2c;@oem20.inf,%Driver_Service.Desc%;I2C Controller Service; C:\WINDOWS\System32\drivers\iaioi2ce.sys [2013-11-11 67584]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-12-04 3797424]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-06-13 4466392]
R3 IntcDAud;@oem9.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-08-21 463112]
R3 iwdbus;@oem12.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-07-20 38976]
R3 kbfiltr;@oem10.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\WINDOWS\System32\drivers\kbfiltr.sys [2012-08-06 17280]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-07-10 167936]
R3 RSBASTOR;@oem21.inf,%Rts5208%;Realtek PCIE CardReader Driver - BA; C:\WINDOWS\system32\DRIVERS\RtsBaStor.sys [2015-08-10 321792]
R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-07-10 587264]
R3 TXEIx64;@oem17.inf,%TEE_SvcDesc%;Intel(R) Trusted Execution Engine Interface ; C:\WINDOWS\System32\drivers\TXEIx64.sys [2014-01-15 88592]
S0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2014-06-26 670056]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-09-17 929280]
S3 btwampfl;@oem7.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2015-08-10 166104]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-09-17 36352]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 intaud_WaveExtensible;@oem11.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2015-07-20 50240]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-08-16 934752]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-08-16 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2015-07-10 57696]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2015-07-10 28512]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2015-07-10 27488]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2015-07-10 46080]
S3 usbser;@usbser.inf,%UsbSerial.DriverDesc%;Sériový ovladač USB od společnosti Microsoft; C:\WINDOWS\System32\drivers\usbser.sys [2015-08-16 67072]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-10-28 82128]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-11-29 174416]
R2 BcmBtRSupport;@oem7.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2015-08-10 2252504]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-12-04 330136]
R2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-09-11 5702416]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 UserManager;@%systemroot%\system32\usermgr.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-12-04 291744]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 UnistoreSvc_Session1;Úložiště uživatelských dat_Session1; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 UserDataSvc_Session1;Přístup k uživatelským datům_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-24 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc_Session7;Hostitel synchronizace_Session7; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-24 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 PimIndexMaintenanceSvc_Session7;Data kontaktů_Session7; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-08-16 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UnistoreSvc_Session7;Úložiště uživatelských dat_Session7; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-14001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UserDataSvc_Session7;Přístup k uživatelským datům_Session7; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 UsoSvc;@%systemroot%\system32\usocore.dll,-102; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zlobí internet

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\LastGood.Tmp
C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm skenu restartujte PC. Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Robotka
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 21 črc 2005 16:20

Re: Zlobí internet

#7 Příspěvek od Robotka »

Tady log.

All processes killed
========== FILES ==========
File/Folder C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job not found.
File/Folder C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job not found.
File/Folder C:\WINDOWS\LastGood.Tmp not found.
File/Folder C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

User: Vilem
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 128 bytes
->FireFox cache emptied: 2310744 bytes
->Google Chrome cache emptied: 390007889 bytes
->Flash cache emptied: 1591 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 17030923 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 390,00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Public

User: Vilem
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 12052015_224551

Files moved on Reboot...
File C:\Users\Vilem\AppData\Local\Microsoft\Windows\INetCache\counters.dat not found!
File move failed. C:\WINDOWS\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zlobí internet

#8 Příspěvek od Rudy »

Vypnul jste před skenem antivir?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Robotka
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 21 črc 2005 16:20

Re: Zlobí internet

#9 Příspěvek od Robotka »

Vypnul, ale raději jeto tu ještě jednou

tady je log

All processes killed
========== FILES ==========
File/Folder C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job not found.
File/Folder C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job not found.
File/Folder C:\WINDOWS\LastGood.Tmp not found.
File/Folder C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

User: Vilem
->Temp folder emptied: 293458 bytes
->Temporary Internet Files folder emptied: 128 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 12018991 bytes
->Flash cache emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1654 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 12,00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Public

User: Vilem
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 12062015_122018

Files moved on Reboot...
C:\Users\Vilem\AppData\Local\Microsoft\Windows\INetCache\counters.dat moved successfully.
File move failed. C:\WINDOWS\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\MpCmdRun.log scheduled to be moved on reboot.

Registry entries deleted on Reboot...
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zlobí internet

#10 Příspěvek od Rudy »

OK, je to stejné. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Robotka
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 21 črc 2005 16:20

Re: Zlobí internet

#11 Příspěvek od Robotka »

Vyzkouším a dám vědět. Zatím moc díky.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zlobí internet

#12 Příspěvek od Rudy »

OK. Zatím není zač! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Robotka
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 21 črc 2005 16:20

Re: Zlobí internet

#13 Příspěvek od Robotka »

Tak vypadá že je to ok.
Yatím moc dík.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zlobí internet

#14 Příspěvek od Rudy »

Rádo se stalo! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“