Prosím o kontrolu logu

[Peelie]

Chcel som stiahnuť pdf verziu jedného časopisu,ale namiesto toho mi niečo vyťažilo CPU a doteraz neviem,čo sa nainštalovalo.Mám ale pocit, že to môže byť spyware,alebo virus.


Názov programu - Q magazine - February 2016


Logfile of random's system information tool 1.10 (written by random/random)
Run by Martin at 2016-01-13 11:44:48
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 28 GB (26%) free of 110 GB
Total RAM: 8154 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:44:50, on 13. 1. 2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Users\Martin\Desktop\Q Magazine February 2016_10924_i121539174_il345.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\Martin\AppData\Local\Temp\djam1XUe\setup.exe
C:\Users\Martin\AppData\Local\Temp\befcggbdec.exe
C:\Program Files (x86)\C544AC00-1452681602-11E1-9478-5404A62F58BE\vnsf9811.tmp
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\Martin\AppData\Local\Temp\81452681534\1QVdFL1BTSQ==53.exe
C:\Program Files (x86)\ppt\ppt.exe
C:\Program Files (x86)\ppt\Bind.exe
C:\Program Files\trend micro\Martin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [apphide] C:\Program Files (x86)\ppt\ppt.exe
O4 - HKLM\..\Run: [pcmgr] C:\Program Files (x86)\ppt\Uninst.exe
O4 - HKLM\..\RunOnce: [Update] C:\Users\Martin\AppData\Roaming\VOPackage\VOPackage.exe /runonce
O4 - HKCU\..\Run: [apphide] C:\Program Files (x86)\ppt\ppt.exe
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&oslať do programu OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://*.hola.org
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: amdidx - Unknown owner - C:\Program Files\amdidx\amdidx.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Type Proof (rowugoqo) - Unknown owner - C:\Users\Martin\AppData\Local\C544AC00-1452685253-11E1-9478-5404A62F58BE\snsa5CA2.tmp
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Print Spooler (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Strongplus (updaadproduco) - Unknown owner - C:\Users\Martin\AppData\Local\statstrip.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: Print Job Launch (vyligofezbt) - Unknown owner - C:\Program.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Free Space Decimal Point (wucotusy) - Unknown owner - C:\Program.exe (file missing)
O23 - Service: Replicate Exit (zutuzuni) - Unknown owner - C:\Program.exe (file missing)

--
End of file - 5999 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
taskeng.exe {AF8528D4-0F14-40F8-A79F-56C52962E74E}
"C:\Users\Martin\Desktop\Q Magazine February 2016_10924_i121539174_il345.exe"
"C:\Windows\System32\rundll32.exe" "C:\Users\Martin\AppData\Local\Temp\temp7z_0\islDo3.dll",InstallDoworkW "-ptid=amt" "-time=3" "-ver=6.6.6.3" "-sr=Windows Defender" "-pid=1772" "C:\Users\Martin\AppData\Local\Temp\amt_mysites123.exe" -silence -ptid=amt
"C:\Users\Martin\AppData\Local\Temp\djam1XUe\setup.exe"
C:\Users\Martin\AppData\Local\Temp\befcggbdec.exe 0!0!4!0!9!5!4!9!9!1!6 L1BFRDQsNCwtNRovU1FCR0RANCcfKU5FUFdGTUdAOzwrIC9ASUpPRTs0MC04OS4gJj5FOzQvGi9QTk87UD9LVkg+PTEvMycrHCZKRExWRU5fTE1INF9zbnA6Ky9qbXIlO0RNSy1QT0coPUdHLUNORksgJj5IQDpKQ0Q9HC87LDkkKB8pRDI5LSgbKzsqPCcxICtEKzgpKBcuPjU9KTEXKkxJRkNPQ1RbUElEUjg6WDcgL0xSRj9ROkteP1VMPT0XKkxJRkNPQ1RbTjhIQTRqZG51cBwvPFNBVkxRRj0gK0VPQFs6RENGSU5BPRcqREZKU1lCUktXSkBONCgfKVRIPU5CVEtMVlRMTD0cL01IOSkXLj5TMTkgJk1RRUtIR0VfU0VDPktEPEhHQUdBVUlHORcmSE1fUlFOS0RJPDRzbHVlHC9JQFBMSU1DTkdbVUpATlY7QFNTPS4gJkNFOzxXNzEgK0lKWkBQRUBHSUNbRUU+TlBHUz9EPWJhY25hFyZDSVdOSE84P1tARzwrNzgqNCcpMi4lMysgL0xBSTxIQzxLWUlOT1Q4R0g0a3FvZSArVEBIQTQoMy8yNjQxLC01FyZDSVdOSE84P1tLQEw/PTErMSoqLicoNSQxMDYzLzUwMCFARw==
"C:\Program Files (x86)\C544AC00-1452681602-11E1-9478-5404A62F58BE\vnsf9811.tmp" /qualify
C:\Windows\system32\msiexec.exe /V
C:\Windows\system32\rundll32.exe "C:\Users\Martin\AppData\Local\Ball Video\{29311489-14F6-4BCD-C99A-D437A87722D0}\BallVideo.dll",#1
C:\Windows\system32\rundll32.exe "C:\Users\Martin\AppData\Local\Ball Video\{29311489-14F6-4BCD-C99A-D437A87722D0}\BallVideo.dll",#1
C:\Windows\system32\rundll32.exe "C:\Users\Martin\AppData\Local\Ball Video\{29311489-14F6-4BCD-C99A-D437A87722D0}\wvri.dll",#1
C:\Windows\system32\rundll32.exe "C:\Users\Martin\AppData\Local\Ball Video\{29311489-14F6-4BCD-C99A-D437A87722D0}\wvri.dll",#1
"C:\Program Files (x86)\C544AC00-1452681602-11E1-9478-5404A62F58BE\knsuA434.tmpfs"
"C:\Program Files (x86)\C544AC00-1452681602-11E1-9478-5404A62F58BE\jnspBBDF.tmp"
"C:\Program Files (x86)\C544AC00-1452681602-11E1-9478-5404A62F58BE\hnskD2EA.tmp"
C:\Users\Martin\AppData\Local\C544AC00-1452685253-11E1-9478-5404A62F58BE\snsa5CA2.tmp
C:\Users\Martin\AppData\Local\statstrip.exe peoductoow updaadproduco
"C:\Program Files\amdidx\amdidx.exe" /s iid=9653419 did=Missing sid= ref= id=5ac347dcb07d97f3849320e725d593ab4ecb5ec3991b2ee9bb52a2b13f03aadb
C:\Users\Martin\AppData\Local\Temp\81452681534\1QVdFL1BTSQ==53.exe -pub_id=311 -adv_id=236
"taskhost.exe"
C:\Users\Martin\AppData\Local\Temp\avg1007.exe -adv_id=236 -domain=oYYJHEYxijc.com -dotnet=4 -event=2 -file=installer -ip=52.1.45.42:80 -pub_id=311 -s=1
"C:\Program Files (x86)\ppt\ppt.exe"
"C:\Program Files (x86)\ppt\Bind.exe" -u=http://www.czzsyzxl.com/pptmv.txt -n=ppt.exe

"C:\Users\Martin\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\PPTAssistantNotifyTask_Martin.job - C:\Users\Martin\AppData\Local\PPTAssist\notify.exe -from=task
C:\Windows\tasks\PPTAssistantUpdateTask_Martin.job - C:\Users\Martin\AppData\Local\PPTAssist\assistupdate.exe -from=task -productVer=1.0.0.0744 -productID=PG01-WPS-2052-156-X-Personal -UserGUID={8C206437-19DA-47C3-9B1F-5FA347C9E5E7} -DistSrc=80.1211
C:\Windows\tasks\Wise Care 365.job - D:\PROGRAMY\Wise Care 365 12\WiseTray.exe -StartTray
C:\Windows\tasks\Wise Turbo Checker.job - D:\PROGRAMY\Wise Care 365 12\WiseTurbo.exe

======Registry dump======

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"apphide"=C:\Program Files (x86)\ppt\ppt.exe [2015-12-31 126976]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper]
C:\Users\Martin\AppData\Roaming\Spotify\SpotifyWebHelper.exe []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [2015-07-28 767176]
"apphide"=C:\Program Files (x86)\ppt\ppt.exe [2015-12-31 126976]
"pcmgr"=C:\Program Files (x86)\ppt\Uninst.exe [2015-12-28 1571296]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"Update"=C:\Users\Martin\AppData\Roaming\VOPackage\VOPackage.exe [2016-01-13 771833]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2016-01-13 11:44:48 ----D---- C:\rsit
2016-01-13 11:44:48 ----D---- C:\Program Files\trend micro
2016-01-13 11:41:57 ----D---- C:\Users\Martin\AppData\Roaming\pptassist
2016-01-13 11:41:57 ----D---- C:\ProgramData\kingsoft
2016-01-13 11:41:44 ----D---- C:\Program Files (x86)\ppt
2016-01-13 11:41:30 ----D---- C:\Program Files\amdidx
2016-01-13 11:40:02 ----D---- C:\Users\Martin\AppData\Roaming\VOPackage
2016-01-13 11:40:02 ----D---- C:\Program Files (x86)\C544AC00-1452681602-11E1-9478-5404A62F58BE
2016-01-13 11:38:32 ----D---- C:\Users\Martin\AppData\Roaming\mysites123
2016-01-04 17:50:06 ----D---- C:\Program Files (x86)\GUM86E2.tmp
2015-12-17 15:52:28 ----D---- C:\Program Files (x86)\GameSpy Arcade

======List of files/folders modified in the last 1 month======

2016-01-13 11:44:49 ----D---- C:\Windows\Temp
2016-01-13 11:44:48 ----RD---- C:\Program Files
2016-01-13 11:41:59 ----D---- C:\Windows\Tasks
2016-01-13 11:41:59 ----D---- C:\Windows\system32\Tasks
2016-01-13 11:41:57 ----D---- C:\ProgramData
2016-01-13 11:41:44 ----RD---- C:\Program Files (x86)
2016-01-13 11:40:09 ----SHD---- C:\Windows\Installer
2016-01-13 11:40:09 ----D---- C:\Config.Msi
2016-01-13 11:31:06 ----D---- C:\Windows\System32
2016-01-13 11:31:06 ----D---- C:\Windows\inf
2016-01-13 11:31:06 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-01-10 16:10:55 ----D---- C:\Windows\system32\config
2016-01-10 15:18:58 ----SHD---- C:\System Volume Information
2016-01-06 12:21:14 ----D---- C:\Program Files (x86)\Google
2016-01-04 17:52:47 ----D---- C:\Windows\system32\catroot2
2016-01-04 17:52:45 ----D---- C:\Windows
2016-01-04 17:41:14 ----D---- C:\Users\Martin\AppData\Roaming\Spotify
2015-12-29 15:53:28 ----D---- C:\Windows\SysWOW64
2015-12-29 15:52:26 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-12-17 19:32:14 ----D---- C:\Program Files (x86)\Opera
2015-12-17 17:00:51 ----D---- C:\Windows\system32\NDF

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2012-04-22 213888]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2012-12-29 28664]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2012-04-22 60416]
R2 AODDriver4.3;AODDriver4.3; \??\C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [2014-02-11 59616]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2015-07-29 21622784]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2015-07-29 665088]
R3 athur;Wireless Network Adapter Service; C:\Windows\system32\DRIVERS\athurx.sys [2010-01-05 1847296]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2015-07-15 96256]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-10-03 33240]
R3 tap0901;TAP-Win32 Adapter V9; C:\Windows\system32\DRIVERS\tap0901.sys [2013-08-03 31232]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2012-04-22 18432]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2012-04-22 95232]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 WiseHDInfo;WiseHDInfo; \??\C:\Windows\WiseHDInfo64.dll [2015-09-02 14800]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-10-28 82128]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2015-07-29 246784]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [2015-07-28 344064]
R2 amdidx;amdidx; C:\Program Files\amdidx\amdidx.exe [2016-01-13 383488]
R2 rowugoqo;Type Proof; C:\Users\Martin\AppData\Local\C544AC00-1452685253-11E1-9478-5404A62F58BE\snsa5CA2.tmp [2016-01-13 225792]
R2 updaadproduco;Strongplus; C:\Users\Martin\AppData\Local\statstrip.exe [2016-01-13 28160]
R2 vyligofezbt;Print Job Launch; C:\Program Files (x86)\C544AC00-1452681602-11E1-9478-5404A62F58BE\knsuA434.tmpfs [2016-01-13 189440]
R2 wucotusy;Free Space Decimal Point; C:\Program Files (x86)\C544AC00-1452681602-11E1-9478-5404A62F58BE\hnskD2EA.tmp [2016-01-13 416256]
R2 zutuzuni;Replicate Exit; C:\Program Files (x86)\C544AC00-1452681602-11E1-9478-5404A62F58BE\jnspBBDF.tmp [2016-01-13 307712]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2012-07-08 104912]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-07-08 123856]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-04 269000]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-02-08 569024]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2012-07-08 51648]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-08 139696]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-08 139696]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-08 139696]

-----------------EOF-----------------

[JaRon]

ahoj,
a kde je nejaky antivir vloz log PO vycisteni s AV

[Peelie]

Sorry,kamarát mi povedal,že Windows aj tak o pol roka preinštalujem a antivir mi len zaťažuje PC. Teraz vidím,že je to kravina.

# AdwCleaner v5.029 - Logfile created 13/01/2016 at 12:35:29
# Updated 11/01/2016 by Xplode
# Database : 2016-01-12.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Martin - MARTIN-PC
# Running from : C:\Users\Martin\Downloads\adwcleaner_5.029.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : WindowsMangerProtect
[-] Service Deleted : SSFK
[-] Service Deleted : amdidx
[-] Service Deleted : rowugoqo
[-] Service Deleted : vyligofezbt
[-] Service Deleted : wucotusy
[-] Service Deleted : zutuzuni

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files\amdidx
[-] Folder Deleted : C:\Program Files (x86)\RCP
[-] Folder Deleted : C:\Program Files (x86)\SFK
[-] Folder Deleted : C:\Program Files (x86)\C544AC00-1452681602-11E1-9478-5404A62F58BE
[-] Folder Deleted : C:\Program Files (x86)\gmsd_ra_005010205
[-] Folder Deleted : C:\ProgramData\tencent
[-] Folder Deleted : C:\ProgramData\Tmp0x0x
[-] Folder Deleted : C:\Users\Martin\AppData\Local\27468
[-] Folder Deleted : C:\Users\Martin\AppData\Local\C544AC00-1452685253-11E1-9478-5404A62F58BE
[-] Folder Deleted : C:\Users\Martin\AppData\Roaming\Systweak
[-] Folder Deleted : C:\Users\Martin\AppData\Roaming\VOPackage
[-] Folder Deleted : C:\Users\Martin\AppData\Roaming\tencent
[-] Folder Deleted : C:\Users\Martin\AppData\Roaming\yoursearching
[-] Folder Deleted : C:\Users\Martin\AppData\Roaming\mysites123
[-] Folder Deleted : C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage

***** [ Files ] *****

[-] File Deleted : C:\Windows\SysNative\roboot64.exe

***** [ DLLs ] *****


***** [ Shortcuts ] *****

[-] Shortcut Disinfected : C:\Users\Public\Desktop\Opera.lnk
[-] Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
[-] Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\THQ\MotoGP URT 3\MotoGP URT 3.lnk
[-] Shortcut Disinfected : C:\Users\Martin\Desktop\MotoGP URT 3.lnk
[-] Shortcut Disinfected : C:\Users\Martin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera.lnk

***** [ Scheduled tasks ] *****

[-] Task Deleted : AmiUpdXp
[-] Task Deleted : amiupdaterExd
[-] Task Deleted : amiupdaterExi

***** [ Registry ] *****

[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [apphide]
[-] Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [apphide]
[-] Key Deleted : HKLM\SOFTWARE\CLASSES\dream.capture.1
[-] Key Deleted : HKLM\SOFTWARE\CLASSES\dream.capture
[-] Key Deleted : HKCU\SOFTWARE\SYSTWEAK\ssd
[-] Key Deleted : HKLM\SOFTWARE\SYSTWEAK\ssd
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [gmsd_ra_005010205]
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{117270FA-48AC-45BB-9171-B63D1B42A910}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EAC7DE5C-9520-435D-91AA-4A02E4773CEA}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B0660298-91AA-421F-BF0D-BFF6BB8BF3AE}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EAC7DE5C-9520-435D-91AA-4A02E4773CEA}
[-] Key Deleted : HKCU\Software\TutoTag
[-] Key Deleted : HKCU\Software\DAILYPCCLEAN
[-] Key Deleted : HKCU\Software\OB
[-] Key Deleted : HKCU\Software\Reg\Clean
[-] Key Deleted : HKCU\Software\Microsoft\Tinstalls
[-] Key Deleted : HKLM\SOFTWARE\Tutorials
[-] Key Deleted : HKLM\SOFTWARE\downchecker
[-] Key Deleted : HKLM\SOFTWARE\Reg\Clean
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdater
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SU
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\yoursearching uninstall
[-] Key Deleted : [x64] HKLM\SOFTWARE\downchecker
[-] Data Restored : HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command []
[-] Data Restored : HKLM\SOFTWARE\Clients\StartMenuInternet\OperaStable\shell\open\command []

***** [ Web browsers ] *****


*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C6].txt - [4561 bytes] ##########

[JaRon]

no tak tymto si zmazal iba nejaky balast
vycisti PC s AVPTool a uvidis aku mudrost Ti kamarat poradil
potom nainstaluj antivir

[Peelie]

Našlo toho dosť.Vyčistilo. Antivir nainštalujem.

Veľká vďaka za pomoc.

[JaRon]

Rado sa stalo