nechtěné reklamy ve webovém prohlížeči

Zpráva

smiesek · #1 Příspěvek od **smiesek** » 29 pro 2015 05:21

Prosím o kotrolu logu. Při prohlížení internetových stránek nepravidelně naskočí další stránka s reklamou. Občas také když se klikne na odkaz třeba na seznamu s článkem, který byste si chtěli přečíst podrobněji.

PC jsem zkoušela projet CCleanerem, Adwcleaner a nyní mi to nabídlo stažení Reimage program, který zaznamenal, že se tam nachází v PC jeden škodlivý soubor. K tomu aby mohl být odstraněn mě to však odkazuje na placenou verzi programu.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Pavel at 2015-12-28 13:47:42
Microsoft Windows 8.1
System drive C: has 417 GB (93%) free of 450 GB
Total RAM: 4014 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:47:50, on 28. 12. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Users\Pavel\AppData\Local\Microsoft\BingSvc\BingSvc.exe
C:\Windows\jmesoft\hotkey.exe
C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe
C:\windows\SysWOW64\UMonit64.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Pavel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://houmpage.com/?src=hp&ssid=145113 ... edad5bced3
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://unstopp.me/wpad.dat?04e9ae14ded5 ... 77a3212308
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O4 - HKLM\..\Run: [jmekey] C:\windows\jmesoft\hotkey.exe
O4 - HKLM\..\Run: [jmesoft] C:\Windows\jmesoft\ServiceLoader.exe
O4 - HKLM\..\Run: [LVT] C:\Program Files\Lenovo\LVT\LJYZ.exe 1
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [Lenovo App Shop] "C:\Program Files (x86)\Lenovo\LenovoAppShop\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [BingSvc] C:\Users\Pavel\AppData\Local\Microsoft\BingSvc\BingSvc.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~2\mcafee\msc\mcsniepl.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: McAfee Home Network (HomeNetSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: JME Keyboard Driver (JME Keyboard) - Unknown owner - C:\Windows\jmesoft\Service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Lenovo System Agent Service - LENOVO INCORPORATED. - C:\Program Files\Lenovo\iMController\SystemAgentService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee AP Service (McAPExe) - McAfee, Inc. - C:\Program Files\McAfee\MSC\McAPExe.exe
O23 - Service: McAfee Activation Service (McAWFwk) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe
O23 - Service: McAfee Boot Delay Start Service (mcbootdelaystartsvc) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee CSP Service (mccspsvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\CSP\1.8.190.0\McCSPServiceHost.exe
O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\mcafee\VirusScan\mcods.exe
O23 - Service: McAfee Platform Services (mcpltsvc) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
O23 - Service: McAfee Service Controller (mfemms) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - Unknown owner - C:\windows\system32\mfevtps.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NitroPDFDriverCreatorReadSpool8 (NitroDriverReadSpool8) - Nitro PDF Software - C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe
O23 - Service: Nalpeiron Licensing Service (nlsX86cc) - Nalpeiron Ltd. - C:\windows\SysWOW64\NLSSRV32.EXE
O23 - Service: Reimage Real Time Protector (ReimageRealTimeProtector) - Reimage® - C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe
O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: TDataSvr - TData.com - C:\Program Files (x86)\TDataDld\TData.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11228 bytes

======Listing Processes======

wininit.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\WINDOWS\SysWOW64\svchost.exe -k hpdevmgmt
dashost.exe {f4982363-e9c8-46fd-a051a30907e1f3fe}
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
C:\Windows\jmesoft\Service.exe
"C:\Program Files\Lenovo\iMController\SystemAgentService.exe"
"C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe"
"C:\windows\system32\mfevtps.exe"
"C:\windows\system32\mfevtps.exe" -mms
"C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe" -mms
"C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe"
C:\windows\SysWOW64\NLSSRV32.EXE
"C:\Program Files\CyberLink\Shared files\RichVideo64.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TDataDld\TData.exe"
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe" /McCoreSvc
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Common Files\McAfee\CSP\1.8.190.0\McCSPServiceHost.exe"
"C:\Program Files\McAfee\MSC\McAPExe.exe"
"C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe"
"C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"

C:\WINDOWS\System32\WinLogon.exe -SpecialSession
-hiberboot
"C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe" /platui -Embedding
C:\WINDOWS\Explorer.EXE
igfxEM.exe
igfxHK.exe
igfxTray.exe
taskhostex.exe
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Users\Pavel\AppData\Local\Microsoft\BingSvc\BingSvc.exe"
"C:\Windows\jmesoft\hotkey.exe"
"C:\Windows\jmesoft\JME_LOAD.exe"
"C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe"
"C:\WINDOWS\system32\GWX\GWX.exe"
C:\windows\SysWOW64\UMonit64.exe
"C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe"
"C:\Program Files\Reimage\Reimage Protector\ReiSystem.exe"

"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe8_ Global\UsGthrCtrlFltPipeMssGthrPipe8 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 572 576 584 65536 580
"C:\Users\Pavel\Desktop\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\h9yeyze3.default-1451217626179

prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.235 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@mcafee.com/MSC,version=10]
"Description"=McAfee Total Protection MIME Plugin
"Path"=c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nitropdf.com/NitroPDF]
"Description"=NitroPDF Web Browser Plugin
"Path"=C:\Program Files (x86)\Nitro\Pro 8\npnitromozilla.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.235 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/MSC,version=10]
"Description"=McAfee Total Protection MIME Plugin
"Path"=c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12 2134656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12 1725056]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-03-18 13427784]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BingSvc"=C:\Users\Pavel\AppData\Local\Microsoft\BingSvc\BingSvc.exe [2015-11-12 144008]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-12-17 50378880]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"jmekey"=C:\windows\jmesoft\hotkey.exe [2013-07-24 118784]
"jmesoft"=C:\Windows\jmesoft\ServiceLoader.exe [2011-08-17 28672]
"LVT"=C:\Program Files\Lenovo\LVT\LJYZ.exe [2011-11-24 886112]
"RemoteControl10"=C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [2013-03-09 95192]
"CLMLServer"=C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [2009-12-05 103720]
"UpdateP2GoShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2011-12-07 214312]
"Lenovo App Shop"=C:\Program Files (x86)\Lenovo\LenovoAppShop\bin\ismagent.exe [2013-07-18 156000]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2013-05-30 96056]
""= []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
igfxdev.dll []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McNaiAnn]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfeaack]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfeaack.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfeavfk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfeavfk.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefire]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfemms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfencbdc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfencbdc.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfetdi2k]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfetdi2k.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfevtp]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-12-28 13:47:42 ----D---- C:\rsit
2015-12-28 13:47:42 ----D---- C:\Program Files\trend micro
2015-12-28 13:14:32 ----D---- C:\ProgramData\Reimage Protector
2015-12-28 13:14:27 ----D---- C:\Program Files\Reimage
2015-12-28 13:13:55 ----A---- C:\WINDOWS\Reimage.ini
2015-12-27 09:40:07 ----D---- C:\ProgramData\HP Product Assistant
2015-12-26 13:13:41 ----D---- C:\ProgramData\WEBREG
2015-12-26 13:03:25 ----N---- C:\WINDOWS\hpomdl28.dat
2015-12-26 13:03:25 ----A---- C:\WINDOWS\hpoins28.dat
2015-12-26 13:03:13 ----A---- C:\WINDOWS\system32\hppldcoi.dll
2015-12-26 13:03:13 ----A---- C:\WINDOWS\system32\hpowiax7.dll
2015-12-26 13:03:13 ----A---- C:\WINDOWS\system32\hpovst15.dll
2015-12-26 13:03:13 ----A---- C:\WINDOWS\system32\hpotscl6.dll
2015-12-26 12:49:51 ----D---- C:\Program Files (x86)\TDataDld
2015-12-26 10:42:40 ----D---- C:\Users\Pavel\AppData\Roaming\HP
2015-12-26 10:36:24 ----D---- C:\Program Files (x86)\Microsoft
2015-12-26 10:35:58 ----D---- C:\Users\Pavel\AppData\Roaming\HpUpdate
2015-12-26 10:33:38 ----D---- C:\Program Files (x86)\HP
2015-12-26 10:33:37 ----HD---- C:\Config.Msi
2015-12-26 10:33:06 ----N---- C:\WINDOWS\hpomdl19.dat
2015-12-26 10:33:06 ----A---- C:\WINDOWS\hpoins19.dat
2015-12-26 10:22:31 ----D---- C:\Users\Pavel\AppData\Roaming\Nitro PDF
2015-12-26 10:07:06 ----D---- C:\ProgramData\Hewlett-Packard
2015-12-26 09:59:13 ----D---- C:\ProgramData\HP
2015-12-24 09:22:14 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-12-09 08:58:37 ----A---- C:\WINDOWS\system32\drivers\rmcast.sys
2015-12-09 08:58:03 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-12-09 08:58:03 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-12-09 08:58:03 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-12-09 08:58:03 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-12-09 08:58:03 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2015-12-09 08:58:03 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2015-12-09 08:58:03 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-12-09 08:58:02 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-12-09 08:58:02 ----A---- C:\WINDOWS\system32\jscript.dll
2015-12-09 08:58:02 ----A---- C:\WINDOWS\system32\inetcomm.dll
2015-12-09 08:58:02 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2015-12-09 08:58:01 ----A---- C:\WINDOWS\system32\wininet.dll
2015-12-09 08:58:01 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-12-09 08:58:00 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-12-09 08:58:00 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-12-09 08:57:59 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-12-09 08:57:58 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-12-09 08:57:58 ----A---- C:\WINDOWS\system32\msfeeds.dll
2015-12-09 08:57:56 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-12-09 08:57:55 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-12-09 08:57:55 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2015-12-09 08:57:55 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-12-09 08:57:54 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2015-12-09 08:57:54 ----A---- C:\WINDOWS\system32\ieui.dll
2015-12-09 08:57:54 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2015-12-09 08:57:53 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2015-12-09 08:57:53 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2015-12-09 08:57:53 ----A---- C:\WINDOWS\system32\mshtmled.dll
2015-12-09 08:57:53 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2015-12-09 08:57:52 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2015-12-09 08:57:52 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2015-12-09 08:57:52 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2015-12-09 08:57:52 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2015-12-09 08:57:52 ----A---- C:\WINDOWS\system32\webcheck.dll
2015-12-09 08:57:52 ----A---- C:\WINDOWS\system32\iepeers.dll
2015-12-09 08:57:52 ----A---- C:\WINDOWS\system32\dxtrans.dll
2015-12-09 08:57:52 ----A---- C:\WINDOWS\system32\actxprxy.dll
2015-12-09 08:57:16 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2015-12-09 08:57:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2015-12-09 08:57:14 ----A---- C:\WINDOWS\SYSWOW64\KBDAZST.DLL
2015-12-09 08:57:14 ----A---- C:\WINDOWS\SYSWOW64\KBDAZEL.DLL
2015-12-09 08:57:14 ----A---- C:\WINDOWS\SYSWOW64\KBDAZE.DLL
2015-12-09 08:57:14 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2015-12-09 08:57:14 ----A---- C:\WINDOWS\system32\KBDAZST.DLL
2015-12-09 08:57:14 ----A---- C:\WINDOWS\system32\KBDAZEL.DLL
2015-12-09 08:57:14 ----A---- C:\WINDOWS\system32\KBDAZE.DLL
2015-12-09 08:57:13 ----A---- C:\WINDOWS\SYSWOW64\kbdgeoqw.dll
2015-12-09 08:57:13 ----A---- C:\WINDOWS\SYSWOW64\GlobCollationHost.dll
2015-12-09 08:57:13 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2015-12-09 08:57:13 ----A---- C:\WINDOWS\system32\win32k.sys
2015-12-09 08:57:13 ----A---- C:\WINDOWS\system32\user32.dll
2015-12-09 08:57:13 ----A---- C:\WINDOWS\system32\kbdgeoqw.dll
2015-12-09 08:57:13 ----A---- C:\WINDOWS\system32\GlobCollationHost.dll
2015-12-09 08:57:13 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2015-12-09 08:57:13 ----A---- C:\WINDOWS\system32\FntCache.dll
2015-12-09 08:57:13 ----A---- C:\WINDOWS\system32\DWrite.dll
2015-12-09 08:57:12 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2015-12-09 08:57:12 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2015-12-09 08:57:12 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2015-12-09 08:57:12 ----A---- C:\WINDOWS\system32\msctf.dll
2015-12-09 08:57:11 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2015-12-09 08:57:11 ----A---- C:\WINDOWS\system32\winresume.exe
2015-12-09 08:57:11 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-12-09 08:57:11 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-12-09 08:57:11 ----A---- C:\WINDOWS\system32\comsvcs.dll
2015-12-09 08:57:10 ----A---- C:\WINDOWS\SYSWOW64\ntvdm64.dll
2015-12-09 08:57:10 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2015-12-09 08:57:10 ----A---- C:\WINDOWS\SYSWOW64\catsrvut.dll
2015-12-09 08:57:10 ----A---- C:\WINDOWS\system32\winload.exe
2015-12-09 08:57:10 ----A---- C:\WINDOWS\system32\ntvdm64.dll
2015-12-09 08:57:10 ----A---- C:\WINDOWS\system32\catsrvut.dll
2015-12-09 08:57:04 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2015-12-09 08:57:04 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2015-12-09 08:57:04 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2015-12-09 08:57:04 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2015-12-09 08:57:04 ----A---- C:\WINDOWS\system32\wuwebv.dll
2015-12-09 08:57:04 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2015-12-09 08:57:04 ----A---- C:\WINDOWS\system32\wups2.dll
2015-12-09 08:57:04 ----A---- C:\WINDOWS\system32\wudriver.dll
2015-12-09 08:57:04 ----A---- C:\WINDOWS\system32\wucltux.dll
2015-12-09 08:57:04 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-12-09 08:57:04 ----A---- C:\WINDOWS\system32\wuauclt.exe
2015-12-09 08:57:04 ----A---- C:\WINDOWS\system32\wuapp.exe
2015-12-09 08:57:04 ----A---- C:\WINDOWS\system32\wuapi.dll
2015-12-09 08:57:01 ----A---- C:\WINDOWS\SYSWOW64\PCPKsp.dll
2015-12-09 08:57:01 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-12-09 08:57:01 ----A---- C:\WINDOWS\system32\PCPKsp.dll
2015-12-09 08:57:01 ----A---- C:\WINDOWS\system32\drivers\usbport.sys
2015-12-09 08:57:01 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-12-09 08:57:01 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2015-12-09 08:57:01 ----A---- C:\WINDOWS\system32\drivers\usbehci.sys
2015-12-09 08:57:01 ----A---- C:\WINDOWS\system32\authui.dll
2015-12-09 08:57:00 ----A---- C:\WINDOWS\system32\drivers\usbuhci.sys
2015-12-09 08:57:00 ----A---- C:\WINDOWS\system32\drivers\usbohci.sys
2015-12-09 08:57:00 ----A---- C:\WINDOWS\system32\drivers\usbd.sys
2015-12-09 08:56:56 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-12-09 08:56:56 ----A---- C:\WINDOWS\system32\wininit.exe

======List of files/folders modified in the last 1 month======

2015-12-28 13:47:43 ----D---- C:\WINDOWS\Temp
2015-12-28 13:47:42 ----RD---- C:\Program Files
2015-12-28 13:42:33 ----D---- C:\WINDOWS\Prefetch
2015-12-28 13:15:46 ----RD---- C:\WINDOWS\System32
2015-12-28 13:14:43 ----D---- C:\WINDOWS\system32\Tasks
2015-12-28 13:14:32 ----HD---- C:\ProgramData
2015-12-28 13:13:55 ----AD---- C:\Windows
2015-12-28 13:00:00 ----D---- C:\WINDOWS\system32\sru
2015-12-28 12:55:59 ----D---- C:\WINDOWS\system32\config
2015-12-28 12:50:48 ----D---- C:\WINDOWS\debug
2015-12-28 12:50:45 ----D---- C:\WINDOWS\Microsoft.NET
2015-12-28 12:50:19 ----D---- C:\WINDOWS\Inf
2015-12-28 07:45:12 ----D---- C:\WINDOWS\SoftwareDistribution
2015-12-28 07:43:25 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2015-12-28 07:42:22 ----D---- C:\WINDOWS\SysWOW64
2015-12-28 07:41:28 ----SD---- C:\ProgramData\Microsoft
2015-12-28 07:09:33 ----RD---- C:\Program Files (x86)
2015-12-28 06:39:21 ----DC---- C:\WINDOWS\Panther
2015-12-28 06:39:21 ----D---- C:\WINDOWS\Minidump
2015-12-27 16:56:40 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-27 12:37:39 ----SHD---- C:\WINDOWS\Installer
2015-12-27 09:43:32 ----A---- C:\WINDOWS\win.ini
2015-12-27 09:43:07 ----D---- C:\WINDOWS\twain_32
2015-12-27 09:40:15 ----RSD---- C:\WINDOWS\Fonts
2015-12-27 09:39:33 ----D---- C:\Program Files (x86)\Common Files
2015-12-26 19:20:58 ----D---- C:\WINDOWS\system32\DriverStore
2015-12-26 14:41:52 ----D---- C:\Users\Pavel\AppData\Roaming\Skype
2015-12-26 13:36:06 ----D---- C:\WINDOWS\system32\catroot2
2015-12-26 13:04:08 ----D---- C:\WINDOWS\system32\catroot
2015-12-26 10:47:56 ----D---- C:\Program Files (x86)\McAfee
2015-12-26 10:47:07 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-26 10:35:03 ----D---- C:\WINDOWS\WinSxS
2015-12-26 10:28:25 ----D---- C:\WINDOWS\Tasks
2015-12-26 10:07:19 ----D---- C:\WINDOWS\system32\drivers
2015-12-25 16:05:01 ----SHD---- C:\System Volume Information
2015-12-24 10:32:49 ----RD---- C:\WINDOWS\assembly
2015-12-19 20:21:04 ----D---- C:\ProgramData\Skype
2015-12-18 09:42:51 ----D---- C:\WINDOWS\CbsTemp
2015-12-18 09:40:45 ----SD---- C:\WINDOWS\SYSWOW64\GWX
2015-12-18 09:40:45 ----SD---- C:\WINDOWS\system32\GWX
2015-12-18 09:14:06 ----D---- C:\Program Files\lenovo
2015-12-14 05:45:46 ----RD---- C:\Program Files (x86)\Skype
2015-12-13 07:38:31 ----D---- C:\WINDOWS\rescache
2015-12-09 10:05:06 ----D---- C:\Program Files\Internet Explorer
2015-12-09 10:05:06 ----D---- C:\Program Files (x86)\Internet Explorer
2015-12-09 09:42:34 ----D---- C:\WINDOWS\AppReadiness
2015-12-09 09:42:33 ----HD---- C:\Program Files\WindowsApps
2015-12-09 09:42:22 ----D---- C:\WINDOWS\SYSWOW64\en-US
2015-12-09 09:42:22 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-12-09 09:42:22 ----D---- C:\WINDOWS\system32\en-US
2015-12-09 09:42:22 ----D---- C:\WINDOWS\system32\cs-CZ
2015-12-09 09:25:55 ----D---- C:\WINDOWS\system32\MRT
2015-12-09 09:23:31 ----A---- C:\WINDOWS\system32\MRT.exe
2015-12-07 18:19:54 ----D---- C:\ProgramData\McAfee
2015-12-07 11:11:41 ----D---- C:\Program Files\Common Files\mcafee
2015-12-07 11:11:28 ----HD---- C:\WINDOWS\ELAMBKUP
2015-12-01 18:19:27 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 mfehidk;McAfee Inc. mfehidk; C:\WINDOWS\system32\drivers\mfehidk.sys [2015-09-23 841944]
R0 mfewfpk;McAfee Inc. mfewfpk; C:\WINDOWS\system32\drivers\mfewfpk.sys [2015-09-23 244544]
R3 cfwids;McAfee Inc. cfwids; C:\WINDOWS\system32\drivers\cfwids.sys [2015-09-23 80760]
R3 GeneStor;@oem3.inf,%GENESTOR.SvcDesc%;Genesys Logic Storage Driver; C:\WINDOWS\system32\DRIVERS\GeneStor.sys [2015-07-09 115704]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-08-27 3797424]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2013-03-19 3361096]
R3 iwdbus;@oem15.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-07-20 38976]
R3 MEIx64;@oem7.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-11-29 62784]
R3 mfeaack;McAfee Inc. mfeaack; C:\WINDOWS\system32\drivers\mfeaack.sys [2015-09-23 415976]
R3 mfeavfk;McAfee Inc. mfeavfk; C:\WINDOWS\system32\drivers\mfeavfk.sys [2015-09-23 351120]
R3 mfefirek;McAfee Inc. mfefirek; C:\WINDOWS\system32\drivers\mfefirek.sys [2015-09-23 497888]
R3 mfencbdc;McAfee Inc. mfencbdc; C:\WINDOWS\system32\DRIVERS\mfencbdc.sys [2015-10-06 537192]
R3 RTL8168;@oem10.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-06-21 816344]
S0 mfeelamk;McAfee Inc. mfeelamk; C:\WINDOWS\system32\drivers\mfeelamk.sys [2015-09-23 82072]
S3 dot4;@oem11.inf,%Dot4_Name%;MS IEEE-1284.4 Driver; C:\WINDOWS\system32\DRIVERS\Dot4.sys [2012-10-19 151968]
S3 Dot4Print;@oem17.inf,%Dot4Print_Name%;Print Class Driver for IEEE-1284.4; C:\WINDOWS\System32\drivers\Dot4Prt.sys [2012-10-19 27040]
S3 dot4usb;@oem11.inf,%DOT4USB_NAME%;Dot4USB Filter; C:\WINDOWS\system32\DRIVERS\dot4usb.sys [2012-10-19 49056]
S3 HipShieldK;McAfee Inc. HipShieldK; C:\WINDOWS\system32\drivers\HipShieldK.sys [2015-05-19 207208]
S3 intaud_WaveExtensible;@oem14.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2015-07-20 50240]
S3 mfencrk;McAfee Inc. mfencrk; C:\WINDOWS\system32\DRIVERS\mfencrk.sys [2015-10-06 109480]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2014-11-21 44544]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2015-10-12 1433216]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2015-10-12 1773696]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\WINDOWS\System32\svchost.exe [2014-11-21 38792]
R2 HomeNetSvc;McAfee Home Network; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2015-11-02 451960]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe [2014-11-21 38792]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-08-27 330136]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-07-27 636952]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-11-29 164736]
R2 JME Keyboard;JME Keyboard Driver; C:\Windows\jmesoft\Service.exe [2011-08-17 32768]
R2 Lenovo System Agent Service;Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [2015-03-06 584632]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-11-29 276864]
R2 McAPExe;McAfee AP Service; C:\Program Files\McAfee\MSC\McAPExe.exe [2015-11-10 863448]
R2 mcbootdelaystartsvc;McAfee Boot Delay Start Service; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2015-11-02 451960]
R2 mccspsvc;McAfee CSP Service; C:\Program Files\Common Files\McAfee\CSP\1.8.190.0\McCSPServiceHost.exe [2015-10-27 1694152]
R2 McMPFSvc;McAfee Personal Firewall Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2015-11-02 451960]
R2 McNaiAnn;McAfee VirusScan Announcer; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2015-11-02 451960]
R2 mcpltsvc;McAfee Platform Services; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2015-11-02 451960]
R2 McProxy;McAfee Proxy Service; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2015-11-02 451960]
R2 mfemms;McAfee Service Controller; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [2015-10-21 378848]
R2 mfevtp;McAfee Validation Trust Protection Service; C:\windows\system32\mfevtps.exe [2015-09-21 256840]
R2 MSK80Service;McAfee Anti-Spam Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2015-11-02 451960]
R2 NitroDriverReadSpool8;NitroPDFDriverCreatorReadSpool8; C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [2013-08-18 230408]
R2 nlsX86cc;Nalpeiron Licensing Service; C:\windows\SysWOW64\NLSSRV32.EXE [2013-08-18 69640]
R2 ReimageRealTimeProtector;Reimage Real Time Protector; C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [2015-08-19 7743472]
R2 RichVideo64;Cyberlink RichVideo64 Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo64.exe [2013-05-14 390632]
R2 TDataSvr;TDataSvr; C:\Program Files (x86)\TDataDld\TData.exe [2015-12-25 228072]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-09-11 5702416]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-11-29 363904]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2014-11-21 38792]
R3 mfefire;McAfee Firewall Core Service; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [2015-09-21 233680]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-18 144200]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2014-11-21 38792]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2014-11-21 38792]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-09 269504]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2014-11-21 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-08-27 291744]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-18 144200]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S3 McAWFwk;McAfee Activation Service; C:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [2013-07-25 334608]
S3 McODS;McAfee Scanner; C:\Program Files\mcafee\VirusScan\mcods.exe [2015-10-20 679120]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-12-24 146888]
S4 McOobeSv2;McAfee OOBE Service2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2015-11-02 451960]

-----------------EOF-----------------

#2 Příspěvek od **Márty84** » 29 pro 2015 10:30

Zdravim

Postupujte podle navodu kolegy

vyosek píše: Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
Ulozte nejlepe na plochu

Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu

Probehne vytvoreni zalohy a nasledne prohledavani

Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Postupujte podle navodu kolegy

vyosek píše: Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize
Kód: Vybrat vše
autoclean;
autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;
Nasledne kliknete na Run Script

PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu (cili Vlastni sken vsech disku) http://forum.viry.cz/viewtopic.php?f=29&t=144868 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

smiesek · #3 Příspěvek od **smiesek** » 29 pro 2015 11:52

Zdravím, vkládám následující:

Junkware Removal Tool

Kód: Vybrat vše

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.1 (11.24.2015)
Operating System: Windows 8.1 x64 
Ran by Pavel (Administrator) on Łt 29. 12. 2015 at 11:10:37,74
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 4 

Failed to delete: C:\Program Files\reimage (Folder) 
Successfully deleted: C:\ProgramData\reimage protector (Folder) 
Successfully deleted: C:\WINDOWS\reimage.ini (File) 
Successfully deleted: C:\WINDOWS\system32\Tasks\ReimageUpdater (Task)



Registry: 3 

Successfully deleted: HKLM\SYSTEM\CurrentControlSet\services\ReimageRealTimeProtector (Registry Key) 
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2EE82683-1720-4AF5-BA47-6695DD9854F9} (Registry Key)
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{cf34d395-9ff1-49a0-98a5-8db1636431b1} (Registry Key)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Łt 29. 12. 2015 at 11:12:59,64
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Zoek.exe

Kód: Vybrat vše

Zoek.exe v5.0.0.1 Updated 27-December-2015
Tool run by Pavel on Łt 29. 12. 2015 at 11:14:37,40.
Microsoft Windows 8.1 6.3.9600  x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Pavel\Desktop\zoek.exe [Scan all users] [Script inserted] 

==== System Restore Info ======================

29. 12. 2015 11:15:27 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp. 
# 
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows. 
# 
# This file contains the mappings of IP addresses to host names. Each 
# entry should be kept on an individual line. The IP address should 
# be placed in the first column followed by the corresponding host name. 
# The IP address and the host name should be separated by at least one 
# space. 
# 
# Additionally, comments (such as these) may be inserted on individual 
# lines or following the machine name denoted by a '#' symbol. 
# 
# For example: 
# 
#      102.54.94.97     rhino.acme.com          # source server 
#       38.25.63.10     x.acme.com              # x client host 
 
127.0.0.1       localhost 

==== Empty Folders Check ======================

C:\Users\Pavel\AppData\Roaming\HpUpdate deleted successfully
C:\Users\Pavel\AppData\Local\Skype deleted successfully
C:\Users\Pavel\AppData\Local\VirtualStore deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\h9yeyze3.default-1451217626179\prefs.js:
user_pref("browser.startup.homepage", "https://www.seznam.cz/");
user_pref("browser.search.suggest.enabled", false);

Added to C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\h9yeyze3.default-1451217626179\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Deleting Files \ Folders ======================

C:\Users\Public\Pokki deleted
C:\Users\Default\AppData\Local\Pokki deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
"C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe" deleted
"C:\Program Files\Reimage\Reimage Protector\ReiSystem.exe" deleted
"C:\Program Files\Reimage" not deleted
"C:\Program Files\Reimage\Reimage Protector" not deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\h9yeyze3.default-1451217626179
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions Registry ======================

[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"MFVersion"="MF40.0.3 (x86 cs)" []

==== Firefox Extensions ======================

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
- Skype Click to Call - %AppDir%\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi

==== Firefox Plugins ======================

Profilepath: C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\h9yeyze3.default-1451217626179
5DF56521E8985BFD8F21A3D97A4D4574	- C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll -	Shockwave Flash


==== Chromium Look ======================

Google Chrome Version: 46.0.2490.86

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[12. 10. 2015 08:31]

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
fcfenmboojpjinhpgggodefccipikbpd - No path found[]

Skype - Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://houmpage.com/?src=hp&ssid=1451130521&a=1008735&uuid=db5ecc66-7dab-42bf-bd4b-3dedad5bced3"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{cf34d395-9ff1-49a0-98a5-8db1636431b1}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{cf34d395-9ff1-49a0-98a5-8db1636431b1}] not found

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://houmpage.com/?src=hp&ssid=1451130521&a=1008735&uuid=db5ecc66-7dab-42bf-bd4b-3dedad5bced3"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKLM and HKCU SearchScopes ======================

HKLM\SearchScopes "DefaultScope"="{2EE82683-1720-4AF5-BA47-6695DD9854F9}"
HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKLM\SearchScopes\{2EE82683-1720-4AF5-BA47-6695DD9854F9} - http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS
HKLM\Wow6432Node\SearchScopes "DefaultScope"="{2EE82683-1720-4AF5-BA47-6695DD9854F9}"
HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKLM\Wow6432Node\SearchScopes\{2EE82683-1720-4AF5-BA47-6695DD9854F9} - http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS
HKCU\SearchScopes "DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms}
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02

==== Reset Google Chrome ======================

C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Pavel\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Pavel\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Pavel\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\Pavel\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

C:\Users\Pavel\AppData\Local\Mozilla\Firefox\Profiles\h9yeyze3.default-1451217626179\cache2 emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=1012 folders=109 223275847 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Pavel\AppData\Local\Temp will be emptied at reboot
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\Pavel\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Program Files\Reimage"  not found
"C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted

==== EOF on Łt 29. 12. 2015 at 11:33:37,02 ======================

MBAM

Kód: Vybrat vše

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 29. 12. 2015
Čas skenování: 11:37
Protokol: anti-malware.txt
Správce: Ano

Verze: 2.2.0.1024
Databáze malwaru: v2015.12.29.03
Databáze rootkitů: v2015.12.26.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 8.1
CPU: x64
Souborový systém: NTFS
Uživatel: Pavel

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 335596
Uplynulý čas: 9 min, 3 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 1
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\TData.exe, 2260, , [9d3a2e7c3b50023445152b9cf20fea16]

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 4
PUP.Optional.Elex, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TDataSvr, , [9d3a2e7c3b50023445152b9cf20fea16], 
PUP.Optional.Yontoo, HKU\S-1-5-21-2115745985-1522436371-906485800-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{BFA55139-82AF-4663-A19B-E135DAC8D043}, , [a53235751378c670a2a742fdd82a3cc4], 
PUP.Optional.Yontoo, HKU\S-1-5-21-2115745985-1522436371-906485800-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{BFA55139-82AF-4663-A19B-E135DAC8D043}, , [a53235751378c670a2a742fdd82a3cc4], 
PUP.Optional.Elex, HKLM\SOFTWARE\WOW6432NODE\TDATA, , [4e89c4e63c4ffa3c185ce63116eed62a], 

Hodnoty registru: 3
PUP.Optional.Elex, HKLM\SOFTWARE\WOW6432NODE\TDATA|dir, C:\Program Files (x86)\TDataDld, , [4e89c4e63c4ffa3c185ce63116eed62a]
PUP.Optional.Elex, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TDATASVR|ImagePath, C:\Program Files (x86)\TDataDld\TData.exe, , [dff81b8f513aca6c93e2c84fe222867a]
Hijack.AutoConfigURL.ShrtCln, HKU\S-1-5-21-2115745985-1522436371-906485800-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|AutoConfigUrl, http://unstopp.me/wpad.dat?04e9ae14ded5518f5419d977b332b77a3212308, , [07d097130d7ef145328a0c0745bf52ae]

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 2
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin, , [9d3ac8e29bf0e15503708790a361eb15], 

Soubory: 51
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\TData.exe, , [9d3a2e7c3b50023445152b9cf20fea16], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\Raydld.exe, , [6c6b426829623ef88c19cfe62bd6aa56], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\TData.ini, , [b4239d0d95f6e74f2337a72050b138c8], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\MCfig.ini, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\msvcp110.dll, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\msvcr110.dll, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\uninstall.exe, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\main.xml, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\About.xml, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\about_banner.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\animate_history.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\animate_portal.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\animate_recent.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\big_button_down.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\bk_shadow.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\bottom_toolbar_bk.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\brower_back.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\brower_refresh.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\btn.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\btn_browser_dir.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\ck_box.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\ck_check.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\close.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\create.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\delete.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\drag_flag.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\exclamation.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\list_header_bk.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\logo_16.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\logo_small.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\Menu.xml, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\MenuItem.xml, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\menu_bk.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\menu_bk_seperator.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\MessageBox.xml, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\min.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\open_position.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\pause.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\progress_bk.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\progress_fore.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\scrollbar.bmp, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\Start.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\sysmenu.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\TaskListItem.xml, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\TaskListItemHistory.xml, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\TaskNew.xml, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\task_completed.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\task_failed.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\task_pause.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\toolbar_separator.png, , [9d3ac8e29bf0e15503708790a361eb15], 
PUP.Optional.Elex, C:\Program Files (x86)\TDataDld\skin\WebPortal.xml, , [9d3ac8e29bf0e15503708790a361eb15], 

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Poprosím současně o doporučení, zdali je nyní na PC nainstalovaný nějaký antivirový program?

Děkuju za spolupráci.

#4 Příspěvek od **Márty84** » 29 pro 2015 12:28

Nedavejte prosim logy do Code, spatne se to cte.

Vsechny nalezy MBAM nechte odstranit. Po odstraneni a restartu pc test s MBAM zopakujte (ale tentokrat opravdu se spravnym nastavenim - tohle byl jen Sken hrozeb, ten nekontroluje cely pocitac, ja chtel Vlastni sken), at vime, jestli se to nevraci. Napiste vysledek testu a podle nej zvolim dalsi postup.

smiesek píše:zdali je nyní na PC nainstalovaný nějaký antivirový program?

Podle logu tam bezi McAfee. To je ale placeny antivir. V novych strojich obvykle byva jeho zkusebni verze, ktera po 30-90 dnech prestane chranit. Pokud o nem ani nevite, doporucuji ho odinstalovat a nahodit nejaky free antivir (Avast, Avira).

smiesek · #5 Příspěvek od **smiesek** » 29 pro 2015 13:28

zasílám MBAM
Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 29. 12. 2015
Čas skenování: 12:38
Protokol: anti-malware_vlastni.txt
Správce: Ano

Verze: 2.2.0.1024
Databáze malwaru: v2015.12.29.03
Databáze rootkitů: v2015.12.26.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 8.1
CPU: x64
Souborový systém: NTFS
Uživatel: Pavel

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 506507
Uplynulý čas: 49 min, 2 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 0
(Nenalezeny žádné škodlivé položky)

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)

(end)

přesto mi přijde, že problém stále přetrvává

platnosti zkušební verze McAfee uplynula, mám to tedy chápat tak, že v současnosti tedy není už žádný antivir v PC a proto je zasekaný PC?

#6 Příspěvek od **Márty84** » 29 pro 2015 18:32

smiesek píše:přesto mi přijde, že problém stále přetrvává

Dela to ve vsech prohlizecich?

smiesek píše:platnosti zkušební verze McAfee uplynula, mám to tedy chápat tak, že v současnosti tedy není už žádný antivir v PC a proto je zasekaný PC?

PC se da lehce zasekat i s funkcnim antivirem

Ale pokud uz zkusebni verze vyprsela, pc je nechraneny, nebo se mozna aspon spustil Defender, ale ten je stejne spis tak na ozdobu

Dejte novy log z RSIT

a k tomu

Dejte logy podle tohoto navodu http://forum.viry.cz/viewtopic.php?f=13&t=133100 - vypnete na chvili antivir, je mozne, ze to bude blokovat jako skodnou, ale pouzivame to porad, jedna se o falesny poplach

smiesek · #7 Příspěvek od **smiesek** » 29 pro 2015 19:11

zatím se mi nedaří stáhnout další komponenty pro logy, je tedy možné nyní bezpečně odinstalovat McAfee, který mi brání ke stažení dalších komponentů? Nainstalovala bych místo něj Avast a následně se pokusila opětovně komponenty stáhnout a vložit logy.

jinak log z RSIT je následující:

Logfile of random's system information tool 1.10 (written by random/random)
Run by Pavel at 2015-12-29 18:43:10
Microsoft Windows 8.1
System drive C: has 419 GB (93%) free of 450 GB
Total RAM: 4014 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:43:15, on 29. 12. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Pavel\AppData\Local\Microsoft\BingSvc\BingSvc.exe
C:\Windows\jmesoft\hotkey.exe
C:\Program Files\lenovo\LVT\LJYZ.exe
C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
C:\windows\SysWOW64\UMonit64.exe
C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Pavel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://houmpage.com/?src=hp&ssid=145113 ... edad5bced3
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O4 - HKLM\..\Run: [jmekey] C:\windows\jmesoft\hotkey.exe
O4 - HKLM\..\Run: [jmesoft] C:\Windows\jmesoft\ServiceLoader.exe
O4 - HKLM\..\Run: [LVT] C:\Program Files\Lenovo\LVT\LJYZ.exe 1
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [Lenovo App Shop] "C:\Program Files (x86)\Lenovo\LenovoAppShop\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [BingSvc] C:\Users\Pavel\AppData\Local\Microsoft\BingSvc\BingSvc.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~2\mcafee\msc\mcsniepl.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: McAfee Home Network (HomeNetSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: JME Keyboard Driver (JME Keyboard) - Unknown owner - C:\Windows\jmesoft\Service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Lenovo System Agent Service - LENOVO INCORPORATED. - C:\Program Files\Lenovo\iMController\SystemAgentService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMService - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: McAfee AP Service (McAPExe) - McAfee, Inc. - C:\Program Files\McAfee\MSC\McAPExe.exe
O23 - Service: McAfee Activation Service (McAWFwk) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe
O23 - Service: McAfee Boot Delay Start Service (mcbootdelaystartsvc) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee CSP Service (mccspsvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\CSP\1.8.190.0\McCSPServiceHost.exe
O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\mcafee\VirusScan\mcods.exe
O23 - Service: McAfee Platform Services (mcpltsvc) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
O23 - Service: McAfee Service Controller (mfemms) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - Unknown owner - C:\windows\system32\mfevtps.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NitroPDFDriverCreatorReadSpool8 (NitroDriverReadSpool8) - Nitro PDF Software - C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe
O23 - Service: Nalpeiron Licensing Service (nlsX86cc) - Nalpeiron Ltd. - C:\windows\SysWOW64\NLSSRV32.EXE
O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11101 bytes

======Listing Processes======

wininit.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
C:\WINDOWS\System32\svchost.exe -k utcsvc
dashost.exe {816fe848-627e-41fc-8dd15addb995a132}
C:\WINDOWS\SysWOW64\svchost.exe -k hpdevmgmt
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
C:\Windows\jmesoft\Service.exe
"C:\Program Files\Lenovo\iMController\SystemAgentService.exe"
"C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe"
"C:\windows\system32\mfevtps.exe"
"C:\windows\system32\mfevtps.exe" -mms
"C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe" -mms
"C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe"
C:\windows\SysWOW64\NLSSRV32.EXE
"C:\Program Files\CyberLink\Shared files\RichVideo64.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe" /McCoreSvc
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Common Files\McAfee\CSP\1.8.190.0\McCSPServiceHost.exe"
"C:\Program Files\McAfee\MSC\McAPExe.exe"
"C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe"
"C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
taskeng.exe {381B9B5D-1F43-4182-8DAA-1AE4CAC2525D}

C:\WINDOWS\System32\WinLogon.exe -SpecialSession
-hiberboot
C:\WINDOWS\Explorer.EXE
taskhostex.exe
"C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe" /platui -Embedding
igfxEM.exe
igfxHK.exe
igfxTray.exe
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe13_ Global\UsGthrCtrlFltPipeMssGthrPipe13 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 576 580 588 65536 584
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3348.0.106977169\154574843" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,23,51 --gpu-vendor-id=0x8086 --gpu-device-id=0x0152 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.4276 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Users\Pavel\AppData\Local\Microsoft\BingSvc\BingSvc.exe"
"C:\Windows\jmesoft\hotkey.exe"
"C:\Program Files\lenovo\LVT\LJYZ.exe" 1
"C:\Windows\jmesoft\JME_LOAD.exe"
"C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
C:\windows\SysWOW64\UMonit64.exe
"C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe"
"C:\WINDOWS\system32\GWX\GWX.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/28DaySingleProfile/*DomRel-Enable/enable/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterExe/SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/WebRTC-PeerConnectionDTLS1.2/Control/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3348.2.1757126366\708499957" --font-cache-shared-handle=3536 /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/*AutomaticTabDiscarding/Default/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/28DaySingleProfile/*DomRel-Enable/enable/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Disabled/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Enabled/SafeBrowsingUnverifiedDownloads/DisableByParameterExe/SafeBrowsingUpdateFrequency/Default/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/WebRTC-PeerConnectionDTLS1.2/Control/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3348.5.562031487\1189084351" --font-cache-shared-handle=3736 /prefetch:673131151

"C:\Users\Pavel\Desktop\Nová složka\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\h9yeyze3.default-1451217626179

prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.267 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@mcafee.com/MSC,version=10]
"Description"=McAfee Total Protection MIME Plugin
"Path"=c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nitropdf.com/NitroPDF]
"Description"=NitroPDF Web Browser Plugin
"Path"=C:\Program Files (x86)\Nitro\Pro 8\npnitromozilla.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.267 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/MSC,version=10]
"Description"=McAfee Total Protection MIME Plugin
"Path"=c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12 2134656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12 1725056]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-03-18 13427784]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BingSvc"=C:\Users\Pavel\AppData\Local\Microsoft\BingSvc\BingSvc.exe [2015-11-12 144008]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"jmekey"=C:\windows\jmesoft\hotkey.exe [2013-07-24 118784]
"jmesoft"=C:\Windows\jmesoft\ServiceLoader.exe [2011-08-17 28672]
"LVT"=C:\Program Files\Lenovo\LVT\LJYZ.exe [2011-11-24 886112]
"RemoteControl10"=C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [2013-03-09 95192]
"CLMLServer"=C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [2009-12-05 103720]
"UpdateP2GoShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2011-12-07 214312]
"Lenovo App Shop"=C:\Program Files (x86)\Lenovo\LenovoAppShop\bin\ismagent.exe [2013-07-18 156000]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2013-05-30 96056]
""= []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
igfxdev.dll []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McNaiAnn]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfeaack]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfeaack.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfeavfk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfeavfk.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefire]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfemms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfencbdc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfencbdc.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfetdi2k]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfetdi2k.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfevtp]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-12-29 11:37:09 ----A---- C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
2015-12-29 11:36:46 ----D---- C:\ProgramData\Malwarebytes
2015-12-29 11:36:46 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-12-29 11:36:46 ----A---- C:\WINDOWS\system32\drivers\mwac.sys
2015-12-29 11:36:46 ----A---- C:\WINDOWS\system32\drivers\mbamchameleon.sys
2015-12-29 11:36:46 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2015-12-29 11:33:38 ----SHD---- C:\$RECYCLE.BIN
2015-12-29 11:31:44 ----A---- C:\WINDOWS\zoek-delete.exe
2015-12-29 11:31:43 ----D---- C:\WINDOWS\Temp
2015-12-29 11:14:29 ----D---- C:\zoek_backup
2015-12-29 06:42:32 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-12-28 13:47:42 ----D---- C:\rsit
2015-12-28 13:47:42 ----D---- C:\Program Files\trend micro
2015-12-27 09:40:07 ----D---- C:\ProgramData\HP Product Assistant
2015-12-26 13:13:41 ----D---- C:\ProgramData\WEBREG
2015-12-26 13:03:25 ----N---- C:\WINDOWS\hpomdl28.dat
2015-12-26 13:03:25 ----A---- C:\WINDOWS\hpoins28.dat
2015-12-26 13:03:13 ----A---- C:\WINDOWS\system32\hppldcoi.dll
2015-12-26 13:03:13 ----A---- C:\WINDOWS\system32\hpowiax7.dll
2015-12-26 13:03:13 ----A---- C:\WINDOWS\system32\hpovst15.dll
2015-12-26 13:03:13 ----A---- C:\WINDOWS\system32\hpotscl6.dll
2015-12-26 10:42:40 ----D---- C:\Users\Pavel\AppData\Roaming\HP
2015-12-26 10:36:24 ----D---- C:\Program Files (x86)\Microsoft
2015-12-26 10:33:38 ----D---- C:\Program Files (x86)\HP
2015-12-26 10:33:37 ----HD---- C:\Config.Msi
2015-12-26 10:33:06 ----N---- C:\WINDOWS\hpomdl19.dat
2015-12-26 10:33:06 ----A---- C:\WINDOWS\hpoins19.dat
2015-12-26 10:22:31 ----D---- C:\Users\Pavel\AppData\Roaming\Nitro PDF
2015-12-26 10:07:06 ----D---- C:\ProgramData\Hewlett-Packard
2015-12-26 09:59:13 ----D---- C:\ProgramData\HP
2015-12-09 08:58:37 ----A---- C:\WINDOWS\system32\drivers\rmcast.sys
2015-12-09 08:58:03 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-12-09 08:58:03 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-12-09 08:58:03 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-12-09 08:58:03 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-12-09 08:58:03 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2015-12-09 08:58:03 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2015-12-09 08:58:03 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-12-09 08:58:02 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-12-09 08:58:02 ----A---- C:\WINDOWS\system32\jscript.dll
2015-12-09 08:58:02 ----A---- C:\WINDOWS\system32\inetcomm.dll
2015-12-09 08:58:02 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2015-12-09 08:58:01 ----A---- C:\WINDOWS\system32\wininet.dll
2015-12-09 08:58:01 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-12-09 08:58:00 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-12-09 08:58:00 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-12-09 08:57:59 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-12-09 08:57:58 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-12-09 08:57:58 ----A---- C:\WINDOWS\system32\msfeeds.dll
2015-12-09 08:57:56 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-12-09 08:57:55 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-12-09 08:57:55 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2015-12-09 08:57:55 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-12-09 08:57:54 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2015-12-09 08:57:54 ----A---- C:\WINDOWS\system32\ieui.dll
2015-12-09 08:57:54 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2015-12-09 08:57:53 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2015-12-09 08:57:53 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2015-12-09 08:57:53 ----A---- C:\WINDOWS\system32\mshtmled.dll
2015-12-09 08:57:53 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2015-12-09 08:57:52 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2015-12-09 08:57:52 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2015-12-09 08:57:52 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2015-12-09 08:57:52 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2015-12-09 08:57:52 ----A---- C:\WINDOWS\system32\webcheck.dll
2015-12-09 08:57:52 ----A---- C:\WINDOWS\system32\iepeers.dll
2015-12-09 08:57:52 ----A---- C:\WINDOWS\system32\dxtrans.dll
2015-12-09 08:57:52 ----A---- C:\WINDOWS\system32\actxprxy.dll
2015-12-09 08:57:16 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2015-12-09 08:57:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2015-12-09 08:57:14 ----A---- C:\WINDOWS\SYSWOW64\KBDAZST.DLL
2015-12-09 08:57:14 ----A---- C:\WINDOWS\SYSWOW64\KBDAZEL.DLL
2015-12-09 08:57:14 ----A---- C:\WINDOWS\SYSWOW64\KBDAZE.DLL
2015-12-09 08:57:14 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2015-12-09 08:57:14 ----A---- C:\WINDOWS\system32\KBDAZST.DLL
2015-12-09 08:57:14 ----A---- C:\WINDOWS\system32\KBDAZEL.DLL
2015-12-09 08:57:14 ----A---- C:\WINDOWS\system32\KBDAZE.DLL
2015-12-09 08:57:13 ----A---- C:\WINDOWS\SYSWOW64\kbdgeoqw.dll
2015-12-09 08:57:13 ----A---- C:\WINDOWS\SYSWOW64\GlobCollationHost.dll
2015-12-09 08:57:13 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2015-12-09 08:57:13 ----A---- C:\WINDOWS\system32\win32k.sys
2015-12-09 08:57:13 ----A---- C:\WINDOWS\system32\user32.dll
2015-12-09 08:57:13 ----A---- C:\WINDOWS\system32\kbdgeoqw.dll
2015-12-09 08:57:13 ----A---- C:\WINDOWS\system32\GlobCollationHost.dll
2015-12-09 08:57:13 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2015-12-09 08:57:13 ----A---- C:\WINDOWS\system32\FntCache.dll
2015-12-09 08:57:13 ----A---- C:\WINDOWS\system32\DWrite.dll
2015-12-09 08:57:12 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2015-12-09 08:57:12 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2015-12-09 08:57:12 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2015-12-09 08:57:12 ----A---- C:\WINDOWS\system32\msctf.dll
2015-12-09 08:57:11 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2015-12-09 08:57:11 ----A---- C:\WINDOWS\system32\winresume.exe
2015-12-09 08:57:11 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-12-09 08:57:11 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-12-09 08:57:11 ----A---- C:\WINDOWS\system32\comsvcs.dll
2015-12-09 08:57:10 ----A---- C:\WINDOWS\SYSWOW64\ntvdm64.dll
2015-12-09 08:57:10 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2015-12-09 08:57:10 ----A---- C:\WINDOWS\SYSWOW64\catsrvut.dll
2015-12-09 08:57:10 ----A---- C:\WINDOWS\system32\winload.exe
2015-12-09 08:57:10 ----A---- C:\WINDOWS\system32\ntvdm64.dll
2015-12-09 08:57:10 ----A---- C:\WINDOWS\system32\catsrvut.dll
2015-12-09 08:57:04 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2015-12-09 08:57:04 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2015-12-09 08:57:04 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2015-12-09 08:57:04 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2015-12-09 08:57:04 ----A---- C:\WINDOWS\system32\wuwebv.dll
2015-12-09 08:57:04 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2015-12-09 08:57:04 ----A---- C:\WINDOWS\system32\wups2.dll
2015-12-09 08:57:04 ----A---- C:\WINDOWS\system32\wudriver.dll
2015-12-09 08:57:04 ----A---- C:\WINDOWS\system32\wucltux.dll
2015-12-09 08:57:04 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-12-09 08:57:04 ----A---- C:\WINDOWS\system32\wuauclt.exe
2015-12-09 08:57:04 ----A---- C:\WINDOWS\system32\wuapp.exe
2015-12-09 08:57:04 ----A---- C:\WINDOWS\system32\wuapi.dll
2015-12-09 08:57:01 ----AC---- C:\WINDOWS\system32\drivers\usbport.sys
2015-12-09 08:57:01 ----AC---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-12-09 08:57:01 ----AC---- C:\WINDOWS\system32\drivers\usbhub.sys
2015-12-09 08:57:01 ----AC---- C:\WINDOWS\system32\drivers\usbehci.sys
2015-12-09 08:57:01 ----A---- C:\WINDOWS\SYSWOW64\PCPKsp.dll
2015-12-09 08:57:01 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-12-09 08:57:01 ----A---- C:\WINDOWS\system32\PCPKsp.dll
2015-12-09 08:57:01 ----A---- C:\WINDOWS\system32\authui.dll
2015-12-09 08:57:00 ----AC---- C:\WINDOWS\system32\drivers\usbuhci.sys
2015-12-09 08:57:00 ----AC---- C:\WINDOWS\system32\drivers\usbohci.sys
2015-12-09 08:57:00 ----AC---- C:\WINDOWS\system32\drivers\usbd.sys
2015-12-09 08:56:56 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-12-09 08:56:56 ----A---- C:\WINDOWS\system32\wininit.exe

======List of files/folders modified in the last 1 month======

2015-12-29 18:42:03 ----D---- C:\WINDOWS\Prefetch
2015-12-29 18:18:17 ----RD---- C:\WINDOWS\System32
2015-12-29 18:18:17 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-29 18:18:16 ----D---- C:\WINDOWS\Inf
2015-12-29 18:02:00 ----D---- C:\WINDOWS\system32\sru
2015-12-29 16:21:10 ----D---- C:\WINDOWS\SysWOW64
2015-12-29 16:09:14 ----D---- C:\WINDOWS\system32\Tasks
2015-12-29 14:48:10 ----D---- C:\WINDOWS\system32\config
2015-12-29 14:11:48 ----D---- C:\WINDOWS\Microsoft.NET
2015-12-29 12:39:11 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2015-12-29 12:36:25 ----SHD---- C:\WINDOWS\Installer
2015-12-29 12:36:25 ----RD---- C:\Program Files (x86)
2015-12-29 12:36:25 ----D---- C:\WINDOWS\system32\drivers
2015-12-29 12:24:06 ----D---- C:\WINDOWS\system32\DriverStore
2015-12-29 12:11:06 ----D---- C:\WINDOWS\WinSxS
2015-12-29 11:36:46 ----HD---- C:\ProgramData
2015-12-29 11:32:49 ----AD---- C:\Windows
2015-12-29 11:32:48 ----RD---- C:\Program Files
2015-12-29 11:32:48 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-29 11:16:39 ----D---- C:\WINDOWS\system32\drivers\etc
2015-12-29 11:10:56 ----SHD---- C:\System Volume Information
2015-12-28 18:20:05 ----D---- C:\Users\Pavel\AppData\Roaming\Skype
2015-12-28 12:50:48 ----D---- C:\WINDOWS\debug
2015-12-28 07:45:12 ----D---- C:\WINDOWS\SoftwareDistribution
2015-12-28 07:41:28 ----SD---- C:\ProgramData\Microsoft
2015-12-28 06:39:21 ----DC---- C:\WINDOWS\Panther
2015-12-28 06:39:21 ----D---- C:\WINDOWS\Minidump
2015-12-27 09:43:32 ----A---- C:\WINDOWS\win.ini
2015-12-27 09:43:07 ----D---- C:\WINDOWS\twain_32
2015-12-27 09:40:15 ----RSD---- C:\WINDOWS\Fonts
2015-12-27 09:39:33 ----D---- C:\Program Files (x86)\Common Files
2015-12-26 13:36:06 ----D---- C:\WINDOWS\system32\catroot2
2015-12-26 13:04:08 ----D---- C:\WINDOWS\system32\catroot
2015-12-26 10:47:56 ----D---- C:\Program Files (x86)\McAfee
2015-12-26 10:28:25 ----D---- C:\WINDOWS\Tasks
2015-12-24 10:32:49 ----RD---- C:\WINDOWS\assembly
2015-12-19 20:21:04 ----D---- C:\ProgramData\Skype
2015-12-18 09:42:51 ----D---- C:\WINDOWS\CbsTemp
2015-12-18 09:40:45 ----SD---- C:\WINDOWS\SYSWOW64\GWX
2015-12-18 09:40:45 ----SD---- C:\WINDOWS\system32\GWX
2015-12-18 09:14:06 ----D---- C:\Program Files\lenovo
2015-12-14 05:45:46 ----RD---- C:\Program Files (x86)\Skype
2015-12-13 07:38:31 ----D---- C:\WINDOWS\rescache
2015-12-09 10:05:06 ----D---- C:\Program Files\Internet Explorer
2015-12-09 10:05:06 ----D---- C:\Program Files (x86)\Internet Explorer
2015-12-09 09:42:34 ----D---- C:\WINDOWS\AppReadiness
2015-12-09 09:42:33 ----HD---- C:\Program Files\WindowsApps
2015-12-09 09:42:22 ----D---- C:\WINDOWS\SYSWOW64\en-US
2015-12-09 09:42:22 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-12-09 09:42:22 ----D---- C:\WINDOWS\system32\en-US
2015-12-09 09:42:22 ----D---- C:\WINDOWS\system32\cs-CZ
2015-12-09 09:25:55 ----D---- C:\WINDOWS\system32\MRT
2015-12-09 09:23:31 ----A---- C:\WINDOWS\system32\MRT.exe
2015-12-07 18:19:54 ----D---- C:\ProgramData\McAfee
2015-12-07 11:11:41 ----D---- C:\Program Files\Common Files\mcafee
2015-12-07 11:11:28 ----HD---- C:\WINDOWS\ELAMBKUP
2015-12-01 18:19:27 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 mfehidk;McAfee Inc. mfehidk; C:\WINDOWS\system32\drivers\mfehidk.sys [2015-09-23 841944]
R0 mfewfpk;McAfee Inc. mfewfpk; C:\WINDOWS\system32\drivers\mfewfpk.sys [2015-09-23 244544]
R3 cfwids;McAfee Inc. cfwids; C:\WINDOWS\system32\drivers\cfwids.sys [2015-09-23 80760]
R3 GeneStor;@oem3.inf,%GENESTOR.SvcDesc%;Genesys Logic Storage Driver; C:\WINDOWS\system32\DRIVERS\GeneStor.sys [2015-07-09 115704]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-08-27 3797424]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2013-03-19 3361096]
R3 iwdbus;@oem15.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-07-20 38976]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys [2015-10-05 25816]
R3 MEIx64;@oem7.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-11-29 62784]
R3 mfeaack;McAfee Inc. mfeaack; C:\WINDOWS\system32\drivers\mfeaack.sys [2015-09-23 415976]
R3 mfeavfk;McAfee Inc. mfeavfk; C:\WINDOWS\system32\drivers\mfeavfk.sys [2015-09-23 351120]
R3 mfefirek;McAfee Inc. mfefirek; C:\WINDOWS\system32\drivers\mfefirek.sys [2015-09-23 497888]
R3 mfencbdc;McAfee Inc. mfencbdc; C:\WINDOWS\system32\DRIVERS\mfencbdc.sys [2015-10-06 537192]
R3 RTL8168;@oem10.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-06-21 816344]
S0 mfeelamk;McAfee Inc. mfeelamk; C:\WINDOWS\system32\drivers\mfeelamk.sys [2015-09-23 82072]
S3 dot4;@oem11.inf,%Dot4_Name%;MS IEEE-1284.4 Driver; C:\WINDOWS\system32\DRIVERS\Dot4.sys [2012-10-19 151968]
S3 Dot4Print;@oem17.inf,%Dot4Print_Name%;Print Class Driver for IEEE-1284.4; C:\WINDOWS\System32\drivers\Dot4Prt.sys [2012-10-19 27040]
S3 dot4usb;@oem11.inf,%DOT4USB_NAME%;Dot4USB Filter; C:\WINDOWS\system32\DRIVERS\dot4usb.sys [2012-10-19 49056]
S3 HipShieldK;McAfee Inc. HipShieldK; C:\WINDOWS\system32\drivers\HipShieldK.sys [2015-05-19 207208]
S3 intaud_WaveExtensible;@oem14.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2015-07-20 50240]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\WINDOWS\system32\drivers\mwac.sys [2015-10-05 64216]
S3 mfencrk;McAfee Inc. mfencrk; C:\WINDOWS\system32\DRIVERS\mfencrk.sys [2015-10-06 109480]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2014-11-21 44544]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2015-10-12 1433216]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2015-10-12 1773696]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\WINDOWS\System32\svchost.exe [2014-11-21 38792]
R2 HomeNetSvc;McAfee Home Network; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2015-11-02 451960]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe [2014-11-21 38792]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-08-27 330136]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-07-27 636952]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-11-29 164736]
R2 JME Keyboard;JME Keyboard Driver; C:\Windows\jmesoft\Service.exe [2011-08-17 32768]
R2 Lenovo System Agent Service;Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [2015-03-06 584632]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-11-29 276864]
R2 McAPExe;McAfee AP Service; C:\Program Files\McAfee\MSC\McAPExe.exe [2015-11-10 863448]
R2 mcbootdelaystartsvc;McAfee Boot Delay Start Service; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2015-11-02 451960]
R2 mccspsvc;McAfee CSP Service; C:\Program Files\Common Files\McAfee\CSP\1.8.190.0\McCSPServiceHost.exe [2015-10-27 1694152]
R2 McMPFSvc;McAfee Personal Firewall Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2015-11-02 451960]
R2 McNaiAnn;McAfee VirusScan Announcer; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2015-11-02 451960]
R2 mcpltsvc;McAfee Platform Services; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2015-11-02 451960]
R2 McProxy;McAfee Proxy Service; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2015-11-02 451960]
R2 mfemms;McAfee Service Controller; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [2015-10-21 378848]
R2 mfevtp;McAfee Validation Trust Protection Service; C:\windows\system32\mfevtps.exe [2015-09-21 256840]
R2 MSK80Service;McAfee Anti-Spam Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2015-11-02 451960]
R2 NitroDriverReadSpool8;NitroPDFDriverCreatorReadSpool8; C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [2013-08-18 230408]
R2 nlsX86cc;Nalpeiron Licensing Service; C:\windows\SysWOW64\NLSSRV32.EXE [2013-08-18 69640]
R2 RichVideo64;Cyberlink RichVideo64 Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo64.exe [2013-05-14 390632]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-09-11 5702416]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-11-29 363904]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2014-11-21 38792]
R3 mfefire;McAfee Firewall Core Service; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [2015-09-21 233680]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-18 144200]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-10-05 1135416]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2014-11-21 38792]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2014-11-21 38792]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-29 269504]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2014-11-21 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-08-27 291744]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-18 144200]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S3 McAWFwk;McAfee Activation Service; C:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [2013-07-25 334608]
S3 McODS;McAfee Scanner; C:\Program Files\mcafee\VirusScan\mcods.exe [2015-10-20 679120]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-12-29 146888]
S4 McOobeSv2;McAfee OOBE Service2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2015-11-02 451960]

-----------------EOF-----------------

#8 Příspěvek od **Márty84** » 29 pro 2015 19:28

McAfee odinstalujte, pak vytvorte logy a az pak nainstalujte Avast

Kdyby nesel Launcher stahnout ani tak, dejte logy aspon ze samotneho FRST.

Zitra dopoledne, az prijdu z ranni casti sichty, sepisu skript. Ted uz jdu spat, protoze vstavam v 1:40. Zatim se mejte

smiesek · #9 Příspěvek od **smiesek** » 30 pro 2015 05:05

McAfee jsem odinstalovala a vypnula windows bránu, avšak stále mi to hlásí, že stažení FRSTLauncheru nějaký program blokuje přestože jsem vše v PC už vypnula a nevím, co dalšího to může blokovat. Podařilo se spustit aspoň Farbar Recovery Scan Tool. Log viz níže. A do přílohy dávám soubor Addition.txt.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:29-12-2015
Ran by Pavel (administrator) on IDEA-PC (30-12-2015 04:58:01)
Running from C:\Users\Pavel\Desktop
Loaded Profiles: Pavel (Available Profiles: Pavel)
Platform: Windows 8.1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
() C:\Windows\jmesoft\Service.exe
(LENOVO INCORPORATED.) C:\Program Files\lenovo\iMController\SystemAgentService.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
() C:\Windows\SysWOW64\UMonit64.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(© 2015 Microsoft Corporation) C:\Users\Pavel\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Lenovo) C:\Windows\jmesoft\hotkey.exe
() C:\Windows\jmesoft\JME_LOAD.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13427784 2013-03-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [jmekey] => C:\windows\jmesoft\hotkey.exe
HKLM-x32\...\Run: [jmesoft] => C:\Windows\jmesoft\ServiceLoader.exe
HKLM-x32\...\Run: [LVT] => C:\Program Files\Lenovo\LVT\LJYZ.exe [886112 2011-11-24] (Lenovo)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [95192 2013-03-09] (CyberLink Corp.)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-12-05] (CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.)
HKLM-x32\...\Run: [Lenovo App Shop] => C:\Program Files (x86)\Lenovo\LenovoAppShop\bin\ismagent.exe [156000 2013-07-18] (Intel Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-2115745985-1522436371-906485800-1001\...\Run: [BingSvc] => C:\Users\Pavel\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-12] (© 2015 Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-12-29]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 194.228.41.65
Tcpip\..\Interfaces\{EEA30DFD-F515-4CD4-89DA-FC2AFD20EBA0}: [DhcpNameServer] 192.168.0.1 194.228.41.65

Internet Explorer:
==================
HKU\S-1-5-21-2115745985-1522436371-906485800-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://houmpage.com/?src=hp&ssid=1451130521&a=1008735&uuid=db5ecc66-7dab-42bf-bd4b-3dedad5bced3
HKU\S-1-5-21-2115745985-1522436371-906485800-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com
HKU\S-1-5-21-2115745985-1522436371-906485800-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
HKU\S-1-5-21-2115745985-1522436371-906485800-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com
SearchScopes: HKU\S-1-5-21-2115745985-1522436371-906485800-1001 -> DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2115745985-1522436371-906485800-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\h9yeyze3.default-1451217626179
FF NewTab: about:newtab
FF Homepage: hxxps://www.seznam.cz/
FF Session Restore: -> is enabled.
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [2015-12-29] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [2015-12-29] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-11-29] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-11-29] (Intel Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 8\npnitromozilla.dll [2013-08-18] (Nitro PDF)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-05] (Google Inc.)
FF Plugin HKU\S-1-5-21-2115745985-1522436371-906485800-1001: intel.com/AppUp -> C:\Program Files (x86)\Lenovo\LenovoAppShop\bin\npAppUp.dll [2013-07-18] (Intel)
FF Plugin HKU\S-1-5-21-2115745985-1522436371-906485800-1001: intel.com/AppUpx64 -> C:\Program Files (x86)\Lenovo\LenovoAppShop\bin\npAppUp_x64.dll [2013-07-18] (Intel)
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-10-08]

Chrome:
=======
CHR HomePage: Default -> msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=en-us
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM__DF&PC ... earchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR Profile: C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-29]
CHR Extension: (Dokumenty Google) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-29]
CHR Extension: (Disk Google) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-29]
CHR Extension: (YouTube) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-29]
CHR Extension: (Vyhledávání Google) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-29]
CHR Extension: (Tabulky Google) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-29]
CHR Extension: (Dokumenty Google offline) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-29]
CHR Extension: (Skype) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-12-29]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-29]
CHR Extension: (Gmail) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-29]
CHR HKU\S-1-5-21-2115745985-1522436371-906485800-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-10-12]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-08-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [164736 2012-11-29] (Intel Corporation)
R2 JME Keyboard; C:\Windows\jmesoft\Service.exe [32768 2011-08-17] () [File not signed]
R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584632 2015-03-06] (LENOVO INCORPORATED.)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 NitroDriverReadSpool8; C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [230408 2013-08-18] (Nitro PDF Software)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2013-05-14] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-09-20] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-09-20] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R3 GeneStor; C:\Windows\system32\DRIVERS\GeneStor.sys [115704 2015-07-09] (GenesysLogic)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [82072 2015-09-23] (McAfee, Inc.)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [71680 2013-08-22] (Microsoft Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44560 2015-09-20] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [270168 2015-09-20] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-09-20] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-30 04:58 - 2015-12-30 04:58 - 00014192 _____ C:\Users\Pavel\Desktop\FRST.txt
2015-12-30 04:57 - 2015-12-30 04:58 - 00000000 ____D C:\FRST
2015-12-29 18:47 - 2015-12-29 18:47 - 02370560 _____ (Farbar) C:\Users\Pavel\Desktop\FRST64.exe
2015-12-29 18:43 - 2015-12-29 18:43 - 00046569 _____ C:\Users\Pavel\Desktop\rsit_log.txt
2015-12-29 14:49 - 2015-12-29 14:49 - 00000000 ____D C:\Users\Pavel\Desktop\Nová složka
2015-12-29 11:37 - 2015-12-29 12:38 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-12-29 11:36 - 2015-12-29 12:37 - 00001119 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-12-29 11:36 - 2015-12-29 11:36 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-12-29 11:36 - 2015-12-29 11:36 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-12-29 11:36 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-12-29 11:36 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-12-29 11:36 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2015-12-29 11:33 - 2015-12-29 11:33 - 00000000 ____D C:\Users\Pavel\AppData\Local\VirtualStore
2015-12-29 11:31 - 2015-12-29 11:14 - 00024064 _____ C:\WINDOWS\zoek-delete.exe
2015-12-29 11:14 - 2015-12-29 11:32 - 00000000 ____D C:\zoek_backup
2015-12-29 06:42 - 2015-12-29 11:32 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-12-28 13:47 - 2015-12-29 18:43 - 00000000 ____D C:\Program Files\trend micro
2015-12-28 13:47 - 2015-12-28 13:47 - 00000000 ____D C:\rsit
2015-12-27 09:40 - 2015-12-29 12:37 - 00001388 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Centrum řešení HP.lnk
2015-12-27 09:40 - 2015-12-29 12:37 - 00001376 _____ C:\Users\Public\Desktop\Centrum řešení HP.lnk
2015-12-27 09:40 - 2015-12-27 09:40 - 00000000 ____D C:\ProgramData\HP Product Assistant
2015-12-27 09:39 - 2015-12-27 12:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-12-26 13:38 - 2015-12-26 14:02 - 00202596 ____N C:\WINDOWS\hpoins28.dat.temp
2015-12-26 13:27 - 2012-09-26 16:48 - 00000584 ____N C:\WINDOWS\hpomdl28.dat.temp
2015-12-26 13:15 - 2015-12-26 13:15 - 00000000 ____D C:\Users\Pavel\AppData\Local\HP
2015-12-26 13:13 - 2015-12-26 13:13 - 00000000 ____D C:\ProgramData\WEBREG
2015-12-26 13:03 - 2015-12-27 09:43 - 00202596 _____ C:\WINDOWS\hpoins28.dat
2015-12-26 13:03 - 2012-09-26 16:48 - 00000584 ____N C:\WINDOWS\hpomdl28.dat
2015-12-26 13:03 - 2009-07-08 11:51 - 00938496 _____ (Hewlett-Packard) C:\WINDOWS\system32\hpowiax7.dll
2015-12-26 13:03 - 2009-07-08 11:51 - 00740864 _____ (Hewlett-Packard Co.) C:\WINDOWS\system32\hpotscl6.dll
2015-12-26 13:03 - 2009-07-08 11:51 - 00551424 _____ (Hewlett-Packard) C:\WINDOWS\system32\hppldcoi.dll
2015-12-26 13:03 - 2009-07-08 11:51 - 00505344 _____ (Hewlett-Packard Co.) C:\WINDOWS\system32\hpovst15.dll
2015-12-26 10:51 - 2015-12-26 11:01 - 00218007 ____N C:\WINDOWS\hpoins19.dat.temp
2015-12-26 10:42 - 2015-12-26 13:13 - 00000000 ____D C:\Users\Pavel\AppData\Roaming\HP
2015-12-26 10:39 - 2012-10-14 13:03 - 00015561 ____N C:\WINDOWS\hpomdl19.dat.temp
2015-12-26 10:33 - 2015-12-27 12:37 - 00000000 ____D C:\Program Files (x86)\HP
2015-12-26 10:33 - 2015-12-26 13:50 - 00218007 _____ C:\WINDOWS\hpoins19.dat
2015-12-26 10:33 - 2012-10-14 13:03 - 00015561 ____N C:\WINDOWS\hpomdl19.dat
2015-12-26 10:28 - 2015-12-26 14:39 - 00021504 ___SH C:\Users\Pavel\Downloads\Thumbs.db
2015-12-26 10:22 - 2015-12-26 10:22 - 00000000 ____D C:\Users\Pavel\AppData\Roaming\Nitro PDF
2015-12-26 10:07 - 2015-12-26 10:07 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2015-12-26 09:59 - 2015-12-27 09:40 - 00000000 ____D C:\ProgramData\HP
2015-12-14 05:45 - 2015-12-14 05:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-09 08:58 - 2015-11-11 17:21 - 25837568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-12-09 08:58 - 2015-11-10 01:13 - 00496640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-12-09 08:58 - 2015-11-10 01:08 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-12-09 08:58 - 2015-11-10 01:02 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-12-09 08:58 - 2015-11-10 00:46 - 04514816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-12-09 08:58 - 2015-11-10 00:41 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-12-09 08:58 - 2015-11-10 00:17 - 02011136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-12-09 08:58 - 2015-11-10 00:12 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-12-09 08:58 - 2015-11-08 23:15 - 02887168 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-12-09 08:58 - 2015-11-08 23:15 - 00571392 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-12-09 08:58 - 2015-11-08 23:04 - 05923840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-12-09 08:58 - 2015-11-08 23:01 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-12-09 08:58 - 2015-11-08 22:25 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-12-09 08:58 - 2015-11-08 21:53 - 02487808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-12-09 08:58 - 2015-11-08 21:30 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-12-09 08:58 - 2015-11-05 09:59 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
2015-12-09 08:57 - 2015-11-22 07:59 - 07455064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-12-09 08:57 - 2015-11-22 07:59 - 01735000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-12-09 08:57 - 2015-11-22 07:59 - 01659568 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2015-12-09 08:57 - 2015-11-22 07:59 - 01519592 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2015-12-09 08:57 - 2015-11-22 07:59 - 01487008 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2015-12-09 08:57 - 2015-11-22 07:59 - 01355848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2015-12-09 08:57 - 2015-11-22 07:58 - 01499920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-12-09 08:57 - 2015-11-21 19:32 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll
2015-12-09 08:57 - 2015-11-21 18:50 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
2015-12-09 08:57 - 2015-11-21 17:59 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2015-12-09 08:57 - 2015-11-21 17:49 - 01344000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2015-12-09 08:57 - 2015-11-21 17:47 - 00522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2015-12-09 08:57 - 2015-11-21 17:40 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll
2015-12-09 08:57 - 2015-11-20 23:47 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-12-09 08:57 - 2015-11-20 19:18 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-12-09 08:57 - 2015-11-20 17:58 - 03706880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-12-09 08:57 - 2015-11-20 17:47 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-12-09 08:57 - 2015-11-20 17:46 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-12-09 08:57 - 2015-11-20 17:44 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-12-09 08:57 - 2015-11-20 17:44 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-12-09 08:57 - 2015-11-20 17:43 - 00897024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-12-09 08:57 - 2015-11-20 17:42 - 02243584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-12-09 08:57 - 2015-11-20 17:30 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-12-09 08:57 - 2015-11-20 17:29 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-12-09 08:57 - 2015-11-20 17:28 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-12-09 08:57 - 2015-11-20 17:27 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-12-09 08:57 - 2015-11-11 17:00 - 12856832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-12-09 08:57 - 2015-11-11 16:44 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-12-09 08:57 - 2015-11-11 16:44 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-12-09 08:57 - 2015-11-11 16:41 - 20366848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-12-09 08:57 - 2015-11-11 16:12 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-12-09 08:57 - 2015-11-10 01:11 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-12-09 08:57 - 2015-11-10 01:04 - 00476160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2015-12-09 08:57 - 2015-11-10 00:37 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-12-09 08:57 - 2015-11-10 00:36 - 02050560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-12-09 08:57 - 2015-11-10 00:36 - 00687104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-12-09 08:57 - 2015-11-10 00:36 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-12-09 08:57 - 2015-11-10 00:25 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-12-09 08:57 - 2015-11-10 00:14 - 01311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-12-09 08:57 - 2015-11-09 01:41 - 01540728 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2015-12-09 08:57 - 2015-11-08 23:30 - 04176384 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-12-09 08:57 - 2015-11-08 23:02 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-12-09 08:57 - 2015-11-08 22:32 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-12-09 08:57 - 2015-11-08 22:32 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-12-09 08:57 - 2015-11-08 22:23 - 01994752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2015-12-09 08:57 - 2015-11-08 22:18 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-12-09 08:57 - 2015-11-08 22:16 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-12-09 08:57 - 2015-11-08 22:15 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-12-09 08:57 - 2015-11-08 22:15 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-12-09 08:57 - 2015-11-08 22:14 - 14456832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-12-09 08:57 - 2015-11-08 22:13 - 02123264 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-12-09 08:57 - 2015-11-08 22:13 - 01383936 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2015-12-09 08:57 - 2015-11-08 22:01 - 01753600 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2015-12-09 08:57 - 2015-11-08 21:53 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-12-09 08:57 - 2015-11-08 21:52 - 01559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2015-12-09 08:57 - 2015-11-08 21:48 - 01376256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2015-12-09 08:57 - 2015-11-08 21:42 - 01490944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2015-12-09 08:57 - 2015-11-08 21:41 - 01546752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-12-09 08:57 - 2015-10-28 16:49 - 02775552 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-12-09 08:57 - 2015-10-28 16:29 - 02462720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-12-09 08:57 - 2015-10-22 18:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdgeoqw.dll
2015-12-09 08:57 - 2015-10-22 18:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZST.DLL
2015-12-09 08:57 - 2015-10-22 18:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZEL.DLL
2015-12-09 08:57 - 2015-10-22 18:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZE.DLL
2015-12-09 08:57 - 2015-10-22 17:59 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdgeoqw.dll
2015-12-09 08:57 - 2015-10-22 17:59 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZST.DLL
2015-12-09 08:57 - 2015-10-22 17:59 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZEL.DLL
2015-12-09 08:57 - 2015-10-22 17:59 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZE.DLL
2015-12-09 08:57 - 2015-10-22 17:21 - 01200128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2015-12-09 08:57 - 2015-10-22 17:21 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll
2015-12-09 08:57 - 2015-10-22 16:58 - 00868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2015-12-09 08:57 - 2015-10-22 16:58 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GlobCollationHost.dll
2015-12-09 08:57 - 2015-10-22 15:08 - 00513456 _____ C:\WINDOWS\SysWOW64\locale.nls
2015-12-09 08:57 - 2015-10-22 15:08 - 00513456 _____ C:\WINDOWS\system32\locale.nls
2015-12-09 08:57 - 2015-10-11 07:34 - 00468824 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-12-09 08:57 - 2015-10-11 07:34 - 00462168 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2015-12-09 08:57 - 2015-10-11 07:34 - 00443224 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2015-12-09 08:57 - 2015-10-11 07:34 - 00092504 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2015-12-09 08:57 - 2015-10-11 07:34 - 00027992 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2015-12-09 08:57 - 2015-10-10 19:41 - 00037376 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2015-12-09 08:57 - 2015-10-10 19:41 - 00030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbohci.sys
2015-12-09 08:57 - 2015-10-10 18:20 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2015-12-09 08:57 - 2015-10-08 17:11 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2015-12-09 08:57 - 2015-10-08 16:50 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2015-12-09 08:57 - 2015-10-03 20:41 - 01385280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-12-09 08:57 - 2015-10-03 20:41 - 01124384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-12-09 08:56 - 2015-10-05 19:28 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2015-12-09 08:56 - 2015-10-05 19:25 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2015-12-01 11:55 - 2015-12-01 11:55 - 00234586 _____ C:\Users\Pavel\Downloads\19571432.PDF

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-30 04:57 - 2013-08-22 14:36 - 00000000 ____D C:\Windows
2015-12-30 04:55 - 2015-09-18 23:18 - 00000972 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-30 04:55 - 2015-09-18 18:51 - 00000000 __SHD C:\Users\Pavel\IntelGraphicsProfiles
2015-12-30 04:55 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-12-30 04:54 - 2012-07-26 08:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-12-30 04:47 - 2015-09-18 23:27 - 00003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2115745985-1522436371-906485800-1001
2015-12-30 04:42 - 2013-12-10 20:08 - 00000000 ____D C:\ProgramData\McAfee
2015-12-30 04:40 - 2015-09-22 15:44 - 00000000 ____D C:\WINDOWS\System32\Tasks\McAfee
2015-12-30 04:40 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\Inf
2015-12-30 04:40 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2015-12-30 04:40 - 2012-07-26 09:12 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2015-12-30 04:39 - 2012-07-26 06:37 - 00000000 ____D C:\Users\Default.migrated
2015-12-29 18:30 - 2015-09-18 23:18 - 00000976 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-29 18:21 - 2015-09-19 07:18 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-12-29 18:18 - 2014-11-21 05:53 - 01745984 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-29 18:18 - 2014-11-21 05:10 - 00738682 _____ C:\WINDOWS\system32\perfh005.dat
2015-12-29 18:18 - 2014-11-21 05:10 - 00151404 _____ C:\WINDOWS\system32\perfc005.dat
2015-12-29 18:01 - 2015-10-03 17:58 - 00003966 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{032451F9-8FEC-49C7-AC99-344B09B0493D}
2015-12-29 16:21 - 2015-09-19 07:18 - 00003802 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-12-29 12:37 - 2015-10-03 07:43 - 00001133 _____ C:\Users\Pavel\Desktop\DllSuite.lnk
2015-12-29 12:37 - 2015-09-20 08:14 - 00001433 _____ C:\Users\Pavel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-12-29 12:37 - 2015-09-20 05:59 - 00001511 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-12-29 12:37 - 2015-09-20 05:56 - 00000469 _____ C:\Users\Pavel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-12-29 12:37 - 2015-09-20 05:56 - 00000467 _____ C:\Users\Pavel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-12-29 12:37 - 2015-09-19 07:11 - 00001042 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-12-29 12:37 - 2015-09-19 07:11 - 00001036 _____ C:\Users\Public\Desktop\TeamViewer 10.lnk
2015-12-29 12:37 - 2015-09-18 23:23 - 00001158 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-12-29 12:37 - 2015-09-18 23:23 - 00001152 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-12-29 12:37 - 2015-09-18 23:20 - 00002208 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-29 12:37 - 2013-12-10 20:16 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nitro Pro 8.lnk
2015-12-29 12:37 - 2013-12-10 20:12 - 00002180 _____ C:\Users\Public\Desktop\Lenovo Rescue System.lnk
2015-12-29 12:37 - 2013-12-10 20:12 - 00002009 _____ C:\Users\Public\Desktop\Lenovo Power2Go.lnk
2015-12-29 12:37 - 2013-12-10 20:11 - 00002182 _____ C:\Users\Public\Desktop\Lenovo PowerDVD 10.lnk
2015-12-29 12:37 - 2013-12-10 20:08 - 00001969 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office.lnk
2015-12-29 11:32 - 2015-09-18 23:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-28 18:20 - 2015-09-19 08:05 - 00000000 ____D C:\Users\Pavel\AppData\Roaming\Skype
2015-12-28 07:41 - 2013-08-22 15:44 - 00346712 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-28 06:39 - 2015-10-07 11:37 - 00000000 ____D C:\WINDOWS\Minidump
2015-12-28 06:39 - 2015-09-20 06:45 - 00000000 ___DC C:\WINDOWS\Panther
2015-12-27 09:43 - 2012-07-26 06:26 - 00000159 _____ C:\WINDOWS\win.ini
2015-12-26 11:04 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-12-26 09:48 - 2014-11-21 13:21 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-12-26 09:48 - 2014-11-21 13:21 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-12-19 20:21 - 2015-09-19 08:05 - 00000000 ____D C:\ProgramData\Skype
2015-12-18 09:40 - 2015-09-20 06:28 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX
2015-12-18 09:40 - 2015-09-20 06:28 - 00000000 ___SD C:\WINDOWS\system32\GWX
2015-12-18 09:14 - 2013-12-10 20:03 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2015-12-18 09:14 - 2013-12-10 20:03 - 00000000 ____D C:\Program Files\lenovo
2015-12-14 05:45 - 2015-09-19 08:05 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-12-13 07:38 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2015-12-09 09:42 - 2013-08-22 16:36 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-09 09:42 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-12-09 09:25 - 2015-09-18 15:25 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-12-09 09:23 - 2015-09-18 15:24 - 140158008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-12-05 06:25 - 2015-09-18 23:18 - 00003948 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-05 06:25 - 2015-09-18 23:18 - 00003712 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-11-30 13:14 - 2015-09-20 05:56 - 00000000 ____D C:\Users\Pavel

==================== Files in the root of some directories =======

2015-09-18 23:14 - 2015-09-18 23:15 - 0000193 _____ () C:\Users\Pavel\AppData\Local\RegisteredPackageInformation.xml
2015-12-26 09:59 - 2015-12-27 12:37 - 0031916 _____ () C:\ProgramData\hpzinstall.log

Some files in TEMP:
====================
C:\Users\Pavel\AppData\Local\Temp\McCSPInstall.dll
C:\Users\Pavel\AppData\Local\Temp\mccspuninstall.exe

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-12-24 10:31

==================== End of FRST.txt ============================

#10 Příspěvek od **Márty84** » 30 pro 2015 09:59

Napiste mi velikost adresare plochy (C:\Users\Pavel\Plocha)

Otevrete si poznamkovy blok a zkopirujte do nej tento skript

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-2115745985-1522436371-906485800-1001\...\Run: [BingSvc] => C:\Users\Pavel\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-12] (© 2015 Microsoft Corporation)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-10-08]

CHR HomePage: Default -> msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=en-us
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM ... PARAM__&q={searchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-10-12]

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [82072 2015-09-23] (McAfee, Inc.)
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-18 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-18 144200]

2015-12-29 11:31 - 2015-12-29 11:14 - 00024064 _____ C:\WINDOWS\zoek-delete.exe
2015-12-29 11:14 - 2015-12-29 11:32 - 00000000 ____D C:\zoek_backup
2015-12-30 04:42 - 2013-12-10 20:08 - 00000000 ____D C:\ProgramData\McAfee
2015-12-30 04:40 - 2015-09-22 15:44 - 00000000 ____D C:\WINDOWS\System32\Tasks\McAfee

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Hosts:
EmptyTemp:
Reboot:
End

Vlevo nahore kliknete na napis Soubor
Kliknete na napis Ulozit jako...
Napiste spravne ten cerveny nazev fixlist a ulozte na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Spustte FRST jako spravce, kliknete na napis Fix a program vykona prikazy.
Po restartu pc by se mel objevit novy log - s nazvem fixlog, ten mi sem zase zkopirujte.

smiesek · #11 Příspěvek od **smiesek** » 30 pro 2015 10:27

Velikost adresáře Plocha je následující:

Velikost: 85,7MB
Velikost na disku: 85,8MB

Nový log z fixlog je následující:
Fix result of Farbar Recovery Scan Tool (x64) Version:29-12-2015
Ran by Pavel (2015-12-30 10:17:53) Run:1
Running from C:\Users\Pavel\Desktop
Loaded Profiles: Pavel (Available Profiles: Pavel)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-2115745985-1522436371-906485800-1001\...\Run: [BingSvc] => C:\Users\Pavel\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-12] (© 2015 Microsoft Corporation)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-10-08]

CHR HomePage: Default -> msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=en-us
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM ... PARAM__&q={searchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-10-12]

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [82072 2015-09-23] (McAfee, Inc.)
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-18 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-18 144200]

2015-12-29 11:31 - 2015-12-29 11:14 - 00024064 _____ C:\WINDOWS\zoek-delete.exe
2015-12-29 11:14 - 2015-12-29 11:32 - 00000000 ____D C:\zoek_backup
2015-12-30 04:42 - 2013-12-10 20:08 - 00000000 ____D C:\ProgramData\McAfee
2015-12-30 04:40 - 2015-09-22 15:44 - 00000000 ____D C:\WINDOWS\System32\Tasks\McAfee

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\HP Software Update => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully
HKU\S-1-5-21-2115745985-1522436371-906485800-1001\Software\Microsoft\Windows\CurrentVersion\Run\\BingSvc => value removed successfully
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
"HKCR\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
"HKCR\Wow6432Node\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
"HKCR\PROTOCOLS\Handler\skypec2c" => key removed successfully
"HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => key removed successfully
HKCR\Wow6432Node\PROTOCOLS\Handler\skypec2c => key not found.
"HKCR\Wow6432Node\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => key removed successfully
C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi => moved successfully
Chrome HomePage => removed successfully
Chrome DefaultSearchURL => removed successfully
Chrome DefaultSearchKeyword => removed successfully
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl" => key removed successfully
C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx => moved successfully
c2cautoupdatesvc => service removed successfully
c2cpnrsvc => service removed successfully
mfeelamk => service removed successfully
gupdate => service removed successfully
SkypeUpdate => service removed successfully
gupdatem => service removed successfully
C:\WINDOWS\zoek-delete.exe => moved successfully
C:\zoek_backup => moved successfully
C:\ProgramData\McAfee => moved successfully
C:\WINDOWS\System32\Tasks\McAfee => moved successfully
C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
EmptyTemp: => 431 MB temporary data Removed.

The system needed a reboot.

==== End of Fixlog 10:18:25 ====

Děkuju za další rady a Váš čas.

#12 Příspěvek od **Márty84** » 30 pro 2015 11:05

Nastala nejaka zmena?

Nenapsala jste odpoved na mou otazku, zda se reklamy objevuji ve vsech prohlizecich, nebo jen v nekterem.

Pokud jste to jeste neudelala, nainstalujte ten antivir.

Vsechny tyto programy - vcetne pripadne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce)

vyosek píše: DelFix https://toolslib.net/downloads/finish/2/
Stahnete a spustte

Ponechte zatrzitkou pouze u volby Remove disinfection tools

Kliknete na Run

Stahnete Ccleaner http://www.filehippo.com/download_ccleaner a spustte.
Pri instalaci pozor na toolbar (ci jine doplnky), jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete.
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!
(Pokud je v pc vice uzivatelskych uctu, pouzijte program i v nich)

Defragmentujte disk(y) (SSD Disky ne!)
Stahnete program Defraggler https://www.piriform.com/defraggler/download/standard
Pri instalaci opet pozor na toolbar a dalsi nesmysly.
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci.

Pak napiste, jak to s pc vypada.

smiesek · #13 Příspěvek od **smiesek** » 30 pro 2015 11:24

Reklamy se zobrazují v prohlížečích jako je Chrome a Firefox - hned v úvodu jsem to zkoušela vyřešit nastavením do základního režimu všech prohlížečů - tedy čisté bez pluginů apod.

V současnosti co brouzdají rodiče na Firefoxu se jim to zdá lepší, ale já co píšu zde na foru přes Chrome, tak sem tam se ještě reklama ráno objevila.

Antivirový program jsem nainstalovala Avast.

Vkládám log z DelFix:
# DelFix v1.011 - Logfile created 30/12/2015 at 11:13:10
# Updated 18/08/2015 by Xplode
# Username : Pavel - IDEA-PC
# Operating System : Windows 8.1 (64 bits)

~ Removing disinfection tools ...

Deleted : C:\RSIT
Deleted : C:\FRST
Deleted : C:\Users\Pavel\Desktop\Fixlog.txt
Deleted : C:\Users\Pavel\Desktop\FRST64.exe
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis

########## - EOF - ##########

Pomocí CCleaneru jsem PC pročistila.

#14 Příspěvek od **Márty84** » 31 pro 2015 10:08

Jelikoz logy nic neukazuji, budou se muset prohlizece preinstalovat.

Odinstalujte mozillu (zalozky muzete zazalohujte pomoci mozbackup http://www.stahuj.centrum.cz/utility_a_ ... mozbackup/ ). Musite to odinstalovat komplet, vcetne nastaveni a profilu a smazte jeji pripadne zbytky. Pak ji znovu nainstalujte. Ze zalohy pak vratte jen ty zalozky, pokud je pouzivate.

Odinstalujte chrome, vcetne nastaveni a profilu a smazte jeho pripadne zbytky. Pak jej znovu nainstalujte.
Pokud nechcete prijit o zalozky, muzete si je zazalohovat pomoci ChromeBackup http://www.stahuj.centrum.cz/internet_a ... me-backup/

Dejte vedet, jestli nastala nejaka zmena.

smiesek · #15 Příspěvek od **smiesek** » 31 pro 2015 10:17

prohlížeče přeinstaluju a nechám rodiče kontrolovat situaci. Já už více nic neudělám zítra odjíždím. Tímto bych i ráda poděkovala za vzdálenou podporu, pomoc a Váš čas.

VIRY.CZ

nechtěné reklamy ve webovém prohlížeči

nechtěné reklamy ve webovém prohlížeči

Re: nechtěné reklamy ve webovém prohlížeči

Re: nechtěné reklamy ve webovém prohlížeči

Re: nechtěné reklamy ve webovém prohlížeči

Re: nechtěné reklamy ve webovém prohlížeči

Re: nechtěné reklamy ve webovém prohlížeči

Re: nechtěné reklamy ve webovém prohlížeči

Re: nechtěné reklamy ve webovém prohlížeči

Re: nechtěné reklamy ve webovém prohlížeči

Re: nechtěné reklamy ve webovém prohlížeči

Re: nechtěné reklamy ve webovém prohlížeči

Re: nechtěné reklamy ve webovém prohlížeči

Re: nechtěné reklamy ve webovém prohlížeči

Re: nechtěné reklamy ve webovém prohlížeči

Re: nechtěné reklamy ve webovém prohlížeči