Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

zaspamovany prohlizec, pomalejsi notaS

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
ToReTo
Návštěvník
Návštěvník
Příspěvky: 92
Registrován: 27 led 2008 12:58

zaspamovany prohlizec, pomalejsi notaS

#1 Příspěvek od ToReTo »

Ahoj

notas je v posledni dobe strasne spomaleny a ve vsech prohlizecich(google chrome, IE) se objevuje strasna spousta reklam .. kazde kliknuti i mimo reklamu me presmerovava na nejakou dalsi spam stranku..

Prikladam log z RSIT dekuji ya pomoc .. :)

Logfile of random's system information tool 1.10 (written by random/random)
Run by Lenka at 2016-04-16 17:12:53
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 296 GB (62%) free of 477 GB
Total RAM: 4010 MB (28% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:13:00, on 16.4.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18283)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files\trend micro\Lenka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8118
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O3 - Toolbar: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [MagicPlusHelper] "C:\Program Files (x86)\MagicPlus\MagicPlus_helper.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1563457531-2381664381-2045138735-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1563457531-2381664381-2045138735-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Privoxy (PrivoxyService) (PrivoxyService) - The Privoxy team - www.privoxy.org - C:\Program Files (x86)\Techsmart Computer\privoxy.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless ZeroConfig Service (ZcfgSvc7) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\ZCfgSvc7.exe

--
End of file - 8738 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files\Intel\WiFi\bin\ZCfgSvc7.exe"
C:\Windows\system32\WLANExt.exe 24869312
\??\C:\Windows\system32\conhost.exe "-1440926009-2038462809-13217585281713953375113078641-581361356-1030739226-1359896620
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel PROSet/Wireless
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\system32\GWX\GWX.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files\Microsoft Office\Office14\WINWORD.EXE"
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Program Files (x86)\Techsmart Computer\privoxy.exe" --service
"C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
"C:\Program Files\Internet Explorer\IEXPLORE.EXE"
"C:\Program Files\Microsoft Office\Office14\powerpnt.exe"
taskeng.exe {F592128A-9FB1-4063-BD57-81FF65E354C8}

C:\Windows\system32\sppsvc.exe
"C:\Users\Lenka\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player PPAPI Notifier.job - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_21_0_0_213_pepper.exe -check pepperplugin
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{95B7759C-8C7F-4BF1-B163-73684A933233}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IntelPROSet"=C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [2010-12-23 1934608]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2015-06-01 183216]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2015-06-01 411056]
"Persistence"=C:\Windows\system32\igfxpers.exe [2015-06-01 453552]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 108144]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2015-05-21 4471536]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2016-03-01 50670720]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"MagicPlusHelper"=C:\Program Files (x86)\MagicPlus\MagicPlus_helper.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2015-06-01 451584]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"msacm.ac3filter"=ac3filter64.acm

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-04-13 19:07:25 ----A---- C:\Windows\SYSWOW64\samlib.dll
2016-04-13 19:07:25 ----A---- C:\Windows\system32\samsrv.dll
2016-04-13 19:07:25 ----A---- C:\Windows\system32\samlib.dll
2016-04-13 19:07:10 ----A---- C:\Windows\system32\mtxoci.dll
2016-04-13 19:07:08 ----A---- C:\Windows\SYSWOW64\mtxoci.dll
2016-04-13 19:07:08 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2016-04-13 19:07:01 ----A---- C:\Windows\system32\rpcss.dll
2016-04-13 19:07:00 ----A---- C:\Windows\system32\msxml3.dll
2016-04-13 19:06:59 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2016-04-13 19:06:59 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2016-04-13 19:06:59 ----A---- C:\Windows\system32\msxml3r.dll
2016-04-13 19:06:53 ----A---- C:\Windows\SYSWOW64\ole32.dll
2016-04-13 19:06:53 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-04-13 19:06:53 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-04-13 19:06:53 ----A---- C:\Windows\system32\ole32.dll
2016-04-13 19:06:53 ----A---- C:\Windows\system32\lsasrv.dll
2016-04-13 19:06:52 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-04-13 19:06:52 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-04-13 19:06:52 ----A---- C:\Windows\system32\ntdll.dll
2016-04-13 19:06:51 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-04-13 19:06:51 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-04-13 19:06:51 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-04-13 19:06:51 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-04-13 19:06:51 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-04-13 19:06:51 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-04-13 19:06:51 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-04-13 19:06:51 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\wow64win.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\wow64.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\winsrv.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\wdigest.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\TSpkg.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\sspicli.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\srcore.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\smss.exe
2016-04-13 19:06:51 ----A---- C:\Windows\system32\schannel.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\rpchttp.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\rpcrt4.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\ncrypt.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\msv1_0.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\KernelBase.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\kernel32.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\kerberos.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-04-13 19:06:51 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-04-13 19:06:51 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-04-13 19:06:51 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-04-13 19:06:51 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-04-13 19:06:51 ----A---- C:\Windows\system32\conhost.exe
2016-04-13 19:06:51 ----A---- C:\Windows\system32\certcli.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\advapi32.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\wow64cpu.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\sspisrv.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\srclient.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\secur32.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\rstrui.exe
2016-04-13 19:06:50 ----A---- C:\Windows\system32\ntvdm64.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\lsass.exe
2016-04-13 19:06:50 ----A---- C:\Windows\system32\drivers\appid.sys
2016-04-13 19:06:50 ----A---- C:\Windows\system32\csrsrv.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\cryptbase.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\credssp.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\appidsvc.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-04-13 19:06:50 ----A---- C:\Windows\system32\appidapi.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-04-13 19:06:49 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-04-13 19:06:49 ----A---- C:\Windows\SYSWOW64\user.exe
2016-04-13 19:06:49 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-04-13 19:06:49 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-04-13 19:06:49 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-04-13 19:06:49 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-04-13 19:06:49 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-04-13 19:06:49 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-04-13 19:06:49 ----A---- C:\Windows\system32\auditpol.exe
2016-04-13 19:06:49 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-04-13 19:06:49 ----A---- C:\Windows\system32\apisetschema.dll
2016-04-13 19:06:49 ----A---- C:\Windows\system32\adtschema.dll
2016-04-13 19:06:48 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-04-13 19:06:48 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-04-13 19:06:48 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-04-13 19:06:48 ----A---- C:\Windows\system32\msobjs.dll
2016-04-13 19:06:48 ----A---- C:\Windows\system32\msaudite.dll
2016-04-13 19:06:41 ----A---- C:\Windows\system32\drivers\disk.sys
2016-04-13 19:06:40 ----A---- C:\Windows\system32\win32k.sys
2016-04-13 19:06:36 ----A---- C:\Windows\SYSWOW64\tbs.dll
2016-04-13 19:06:36 ----A---- C:\Windows\system32\tbs.dll
2016-04-13 19:06:36 ----A---- C:\Windows\system32\fveapibase.dll
2016-04-13 19:06:36 ----A---- C:\Windows\system32\fveapi.dll
2016-04-13 19:06:32 ----A---- C:\Windows\system32\invagent.dll
2016-04-13 19:06:32 ----A---- C:\Windows\system32\generaltel.dll
2016-04-13 19:06:32 ----A---- C:\Windows\system32\devinv.dll
2016-04-13 19:06:32 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-04-13 19:06:32 ----A---- C:\Windows\system32\appraiser.dll
2016-04-13 19:06:32 ----A---- C:\Windows\system32\aepic.dll
2016-04-13 19:06:32 ----A---- C:\Windows\system32\aeinv.dll
2016-04-13 19:06:32 ----A---- C:\Windows\system32\acmigration.dll
2016-04-13 19:06:25 ----A---- C:\Windows\SYSWOW64\tzres.dll
2016-04-13 19:06:25 ----A---- C:\Windows\system32\tzres.dll
2016-04-13 19:05:46 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-04-13 19:05:46 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-04-13 19:05:46 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-04-13 19:05:46 ----A---- C:\Windows\system32\iernonce.dll
2016-04-13 19:05:46 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-04-13 19:05:46 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-04-13 19:05:45 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-04-13 19:05:45 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-04-13 19:05:44 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-04-13 19:05:44 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-04-13 19:05:44 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-04-13 19:05:44 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-04-13 19:05:44 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-04-13 19:05:44 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-04-13 19:05:44 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-04-13 19:05:44 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-04-13 19:05:44 ----A---- C:\Windows\system32\inseng.dll
2016-04-13 19:05:44 ----A---- C:\Windows\system32\ie4uinit.exe
2016-04-13 19:05:43 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-04-13 19:05:40 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-04-13 19:05:40 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-04-13 19:05:40 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-04-13 19:05:40 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-04-13 19:05:40 ----A---- C:\Windows\system32\urlmon.dll
2016-04-13 19:05:40 ----A---- C:\Windows\system32\occache.dll
2016-04-13 19:05:40 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-04-13 19:05:40 ----A---- C:\Windows\system32\iedkcs32.dll
2016-04-13 19:05:39 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-04-13 19:05:39 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-04-13 19:05:39 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-04-13 19:05:39 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-04-13 19:05:38 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-04-13 19:05:38 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-04-13 19:05:38 ----A---- C:\Windows\system32\msfeeds.dll
2016-04-13 19:05:38 ----A---- C:\Windows\system32\dxtrans.dll
2016-04-13 19:05:37 ----A---- C:\Windows\system32\iesetup.dll
2016-04-13 19:05:36 ----A---- C:\Windows\system32\ieapfltr.dll
2016-04-13 19:05:35 ----A---- C:\Windows\system32\iertutil.dll
2016-04-13 19:05:34 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-04-13 19:05:34 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-04-13 19:05:34 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-04-13 19:05:34 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-04-13 19:05:34 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-04-13 19:05:34 ----A---- C:\Windows\system32\vbscript.dll
2016-04-13 19:05:33 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-04-13 19:05:33 ----A---- C:\Windows\system32\jsproxy.dll
2016-04-13 19:05:32 ----A---- C:\Windows\system32\ieui.dll
2016-04-13 19:05:32 ----A---- C:\Windows\system32\dxtmsft.dll
2016-04-13 19:05:31 ----A---- C:\Windows\system32\ieframe.dll
2016-04-13 19:05:30 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-04-13 19:05:30 ----A---- C:\Windows\system32\mshtmled.dll
2016-04-13 19:05:29 ----A---- C:\Windows\system32\webcheck.dll
2016-04-13 19:05:29 ----A---- C:\Windows\system32\jscript.dll
2016-04-13 19:05:29 ----A---- C:\Windows\system32\ieUnatt.exe
2016-04-13 19:05:28 ----A---- C:\Windows\system32\jscript9diag.dll
2016-04-13 19:05:28 ----A---- C:\Windows\system32\jscript9.dll
2016-04-13 19:05:27 ----A---- C:\Windows\system32\wininet.dll
2016-04-13 19:05:26 ----A---- C:\Windows\system32\msrating.dll
2016-04-13 19:05:26 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-04-13 19:05:25 ----A---- C:\Windows\system32\mshtml.dll
2016-04-09 13:37:03 ----D---- C:\Program Files (x86)\Techsmart Computer

======List of files/folders modified in the last 1 month======

2016-04-16 17:12:59 ----D---- C:\Windows\Temp
2016-04-16 17:12:57 ----D---- C:\Program Files\trend micro
2016-04-16 17:02:31 ----D---- C:\Users\Lenka\AppData\Roaming\Skype
2016-04-16 15:27:26 ----D---- C:\Windows\system32\Tasks
2016-04-16 15:22:55 ----D---- C:\Windows\System32
2016-04-16 15:22:55 ----D---- C:\Windows\inf
2016-04-16 15:22:55 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-04-16 15:20:10 ----D---- C:\Windows\system32\config
2016-04-14 12:28:15 ----HD---- C:\Windows\system32\WLANProfiles
2016-04-14 10:50:22 ----D---- C:\Windows\Microsoft.NET
2016-04-14 10:26:30 ----RSD---- C:\Windows\assembly
2016-04-13 22:53:50 ----SHD---- C:\Windows\Installer
2016-04-13 22:53:50 ----D---- C:\ProgramData\Skype
2016-04-13 22:53:49 ----SHD---- C:\Config.Msi
2016-04-13 22:53:40 ----RD---- C:\Program Files (x86)\Skype
2016-04-13 22:53:40 ----D---- C:\Program Files (x86)\Common Files
2016-04-13 22:51:25 ----D---- C:\Windows\winsxs
2016-04-13 22:48:20 ----D---- C:\Windows\SysWOW64
2016-04-13 22:48:15 ----D---- C:\Windows\SYSWOW64\en-US
2016-04-13 22:48:14 ----D---- C:\Windows\system32\en-US
2016-04-13 22:48:14 ----D---- C:\Windows\system32\drivers
2016-04-13 22:48:12 ----D---- C:\Windows\AppPatch
2016-04-13 22:48:11 ----D---- C:\Windows\system32\Boot
2016-04-13 22:48:09 ----D---- C:\Windows\SYSWOW64\wbem
2016-04-13 22:48:09 ----D---- C:\Windows\system32\wbem
2016-04-13 22:48:09 ----D---- C:\Windows\system32\drivers\en-US
2016-04-13 22:48:08 ----D---- C:\Windows\system32\appraiser
2016-04-13 22:48:08 ----D---- C:\Windows\Logs
2016-04-13 22:47:57 ----D---- C:\Program Files\Internet Explorer
2016-04-13 22:47:51 ----D---- C:\Program Files (x86)\Internet Explorer
2016-04-13 22:47:48 ----D---- C:\Windows\system32\DriverStore
2016-04-13 19:16:37 ----D---- C:\ProgramData\Microsoft Help
2016-04-13 19:14:33 ----D---- C:\Windows\system32\catroot2
2016-04-13 19:13:12 ----SHD---- C:\System Volume Information
2016-04-13 17:52:20 ----D---- C:\Windows\Prefetch
2016-04-11 16:28:46 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2016-04-09 13:37:03 ----RD---- C:\Program Files (x86)
2016-04-08 11:44:38 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-04-08 11:34:34 ----D---- C:\KMPlayer
2016-04-06 10:18:38 ----N---- C:\Windows\system32\MpSigStub.exe
2016-03-29 21:04:22 ----D---- C:\Windows\rescache
2016-03-29 16:36:00 ----SD---- C:\Windows\SYSWOW64\GWX
2016-03-29 16:36:00 ----SD---- C:\Windows\system32\GWX

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2013-12-26 32544]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\system32\DRIVERS\dtlitescsibus.sys [2015-06-16 30264]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2015-06-01 5384176]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys [2010-12-21 8505856]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 cpuz134;cpuz134; \??\C:\Users\Lenka\AppData\Local\Temp\cpuz134\cpuz134_x64.sys []
S3 leusbser;Lenovo Inc. USB Device for Serial Communication; C:\Windows\system32\DRIVERS\leusbser.sys [2013-08-01 238080]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2016-02-28 192216]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-14 82128]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2010-12-23 1515792]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-10-29 920864]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-12-26 1364256]
R2 PrivoxyService;Privoxy (PrivoxyService); C:\Program Files (x86)\Techsmart Computer\privoxy.exe [2016-04-16 371200]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2010-12-23 845584]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-09-11 5702416]
R2 ZcfgSvc7;Intel(R) PROSet/Wireless ZeroConfig Service; C:\Program Files\Intel\WiFi\bin\ZCfgSvc7.exe [2010-12-23 992256]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [2015-05-21 1272560]
R3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-11-05 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2015-11-05 125112]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-28 154440]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2016-01-29 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-08 269504]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2015-06-01 290224]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-28 154440]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-03-31 114688]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 50942144]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-08-11 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-11-05 51376]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119413
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: zaspamovany prohlizec, pomalejsi notaS

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

ToReTo
Návštěvník
Návštěvník
Příspěvky: 92
Registrován: 27 led 2008 12:58

Re: zaspamovany prohlizec, pomalejsi notaS

#3 Příspěvek od ToReTo »

# AdwCleaner v5.111 - Logfile created 16/04/2016 at 17:25:56
# Updated 14/04/2016 by Xplode
# Database : 2016-04-15.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (X64)
# Username : Lenka - LENKA-PC
# Running from : C:\Users\Lenka\Desktop\adwcleaner_5.111.exe
# Option : Clean
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : PrivoxyService

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\Techsmart Computer
[-] Folder Deleted : C:\Users\Lenka\AppData\Roaming\Mozilla\Firefox\Profiles\abogu0a2.default\extensions\firefox@helper2

***** [ Files ] *****


***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : Techsmart Computer Worker

***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\s
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\myradioaccess.dl.myway.com
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\myway.com
[-] Key Deleted : HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine
[-] Key Deleted : HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd
[-] Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.NativeApi
[-] Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.NativeApi.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
[-] Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
[-] Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
[-] Key Deleted : HKLM\SOFTWARE\SecureWeb
[-] Key Deleted : HKLM\SOFTWARE\SecureWebChannel
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\akamaihd.net
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cloudfront.net
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\d16fk4ms6rqz1v.cloudfront.net
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\eshopcomp.com
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\foxi69.tlscdn.com
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\hdapp1008-a.akamaihd.net
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\pstatic.eshopcomp.com
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\tlscdn.com

***** [ Web browsers ] *****


*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [2801 bytes] - [16/04/2016 17:25:56]
C:\AdwCleaner\AdwCleaner[S1].txt - [2865 bytes] - [16/04/2016 17:23:20]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [2947 bytes] ##########

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119413
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: zaspamovany prohlizec, pomalejsi notaS

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

ToReTo
Návštěvník
Návštěvník
Příspěvky: 92
Registrován: 27 led 2008 12:58

Re: zaspamovany prohlizec, pomalejsi notaS

#5 Příspěvek od ToReTo »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Lenka at 2016-04-17 12:50:16
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 296 GB (62%) free of 477 GB
Total RAM: 4010 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:50:20, on 17.4.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18283)
Boot mode: Normal

Running processes:
C:\Program Files\trend micro\Lenka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [MagicPlusHelper] "C:\Program Files (x86)\MagicPlus\MagicPlus_helper.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1563457531-2381664381-2045138735-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1563457531-2381664381-2045138735-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless ZeroConfig Service (ZcfgSvc7) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\ZCfgSvc7.exe

--
End of file - 8363 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\WLANExt.exe 38475696
\??\C:\Windows\system32\conhost.exe "531400961501077410-11090306582130460670842750261105092151581751013-833184100
"C:\Program Files\Intel\WiFi\bin\ZCfgSvc7.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel PROSet/Wireless
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\system32\GWX\GWX.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\Windows\System32\svchost.exe -k secsvcs
taskeng.exe {D1253985-B912-450B-8323-87CDAD1EE211}
C:\Windows\servicing\TrustedInstaller.exe

"C:\Users\Lenka\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player PPAPI Notifier.job - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_21_0_0_213_pepper.exe -check pepperplugin
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IntelPROSet"=C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [2010-12-23 1934608]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2015-06-01 183216]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2015-06-01 411056]
"Persistence"=C:\Windows\system32\igfxpers.exe [2015-06-01 453552]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 108144]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2015-05-21 4471536]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2016-03-01 50670720]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"MagicPlusHelper"=C:\Program Files (x86)\MagicPlus\MagicPlus_helper.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2015-06-01 451584]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"msacm.ac3filter"=ac3filter64.acm

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-04-16 17:55:17 ----A---- C:\Windows\ntbtlog.txt
2016-04-16 17:22:48 ----D---- C:\AdwCleaner
2016-04-13 19:07:25 ----A---- C:\Windows\SYSWOW64\samlib.dll
2016-04-13 19:07:25 ----A---- C:\Windows\system32\samsrv.dll
2016-04-13 19:07:25 ----A---- C:\Windows\system32\samlib.dll
2016-04-13 19:07:10 ----A---- C:\Windows\system32\mtxoci.dll
2016-04-13 19:07:08 ----A---- C:\Windows\SYSWOW64\mtxoci.dll
2016-04-13 19:07:08 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2016-04-13 19:07:01 ----A---- C:\Windows\system32\rpcss.dll
2016-04-13 19:07:00 ----A---- C:\Windows\system32\msxml3.dll
2016-04-13 19:06:59 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2016-04-13 19:06:59 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2016-04-13 19:06:59 ----A---- C:\Windows\system32\msxml3r.dll
2016-04-13 19:06:53 ----A---- C:\Windows\SYSWOW64\ole32.dll
2016-04-13 19:06:53 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-04-13 19:06:53 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-04-13 19:06:53 ----A---- C:\Windows\system32\ole32.dll
2016-04-13 19:06:53 ----A---- C:\Windows\system32\lsasrv.dll
2016-04-13 19:06:52 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-04-13 19:06:52 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-04-13 19:06:52 ----A---- C:\Windows\system32\ntdll.dll
2016-04-13 19:06:51 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-04-13 19:06:51 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-04-13 19:06:51 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-04-13 19:06:51 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-04-13 19:06:51 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-04-13 19:06:51 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-04-13 19:06:51 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-04-13 19:06:51 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\wow64win.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\wow64.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\winsrv.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\wdigest.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\TSpkg.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\sspicli.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\srcore.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\smss.exe
2016-04-13 19:06:51 ----A---- C:\Windows\system32\schannel.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\rpchttp.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\rpcrt4.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\ncrypt.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\msv1_0.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\KernelBase.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\kernel32.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\kerberos.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-04-13 19:06:51 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-04-13 19:06:51 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-04-13 19:06:51 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-04-13 19:06:51 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-04-13 19:06:51 ----A---- C:\Windows\system32\conhost.exe
2016-04-13 19:06:51 ----A---- C:\Windows\system32\certcli.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\advapi32.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\wow64cpu.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\sspisrv.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\srclient.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\secur32.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\rstrui.exe
2016-04-13 19:06:50 ----A---- C:\Windows\system32\ntvdm64.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\lsass.exe
2016-04-13 19:06:50 ----A---- C:\Windows\system32\drivers\appid.sys
2016-04-13 19:06:50 ----A---- C:\Windows\system32\csrsrv.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\cryptbase.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\credssp.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\appidsvc.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-04-13 19:06:50 ----A---- C:\Windows\system32\appidapi.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-04-13 19:06:49 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-04-13 19:06:49 ----A---- C:\Windows\SYSWOW64\user.exe
2016-04-13 19:06:49 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-04-13 19:06:49 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-04-13 19:06:49 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-04-13 19:06:49 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-04-13 19:06:49 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-04-13 19:06:49 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-04-13 19:06:49 ----A---- C:\Windows\system32\auditpol.exe
2016-04-13 19:06:49 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-04-13 19:06:49 ----A---- C:\Windows\system32\apisetschema.dll
2016-04-13 19:06:49 ----A---- C:\Windows\system32\adtschema.dll
2016-04-13 19:06:48 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-04-13 19:06:48 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-04-13 19:06:48 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-04-13 19:06:48 ----A---- C:\Windows\system32\msobjs.dll
2016-04-13 19:06:48 ----A---- C:\Windows\system32\msaudite.dll
2016-04-13 19:06:41 ----A---- C:\Windows\system32\drivers\disk.sys
2016-04-13 19:06:40 ----A---- C:\Windows\system32\win32k.sys
2016-04-13 19:06:36 ----A---- C:\Windows\SYSWOW64\tbs.dll
2016-04-13 19:06:36 ----A---- C:\Windows\system32\tbs.dll
2016-04-13 19:06:36 ----A---- C:\Windows\system32\fveapibase.dll
2016-04-13 19:06:36 ----A---- C:\Windows\system32\fveapi.dll
2016-04-13 19:06:32 ----A---- C:\Windows\system32\invagent.dll
2016-04-13 19:06:32 ----A---- C:\Windows\system32\generaltel.dll
2016-04-13 19:06:32 ----A---- C:\Windows\system32\devinv.dll
2016-04-13 19:06:32 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-04-13 19:06:32 ----A---- C:\Windows\system32\appraiser.dll
2016-04-13 19:06:32 ----A---- C:\Windows\system32\aepic.dll
2016-04-13 19:06:32 ----A---- C:\Windows\system32\aeinv.dll
2016-04-13 19:06:32 ----A---- C:\Windows\system32\acmigration.dll
2016-04-13 19:06:25 ----A---- C:\Windows\SYSWOW64\tzres.dll
2016-04-13 19:06:25 ----A---- C:\Windows\system32\tzres.dll
2016-04-13 19:05:46 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-04-13 19:05:46 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-04-13 19:05:46 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-04-13 19:05:46 ----A---- C:\Windows\system32\iernonce.dll
2016-04-13 19:05:46 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-04-13 19:05:46 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-04-13 19:05:45 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-04-13 19:05:45 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-04-13 19:05:44 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-04-13 19:05:44 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-04-13 19:05:44 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-04-13 19:05:44 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-04-13 19:05:44 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-04-13 19:05:44 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-04-13 19:05:44 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-04-13 19:05:44 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-04-13 19:05:44 ----A---- C:\Windows\system32\inseng.dll
2016-04-13 19:05:44 ----A---- C:\Windows\system32\ie4uinit.exe
2016-04-13 19:05:43 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-04-13 19:05:40 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-04-13 19:05:40 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-04-13 19:05:40 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-04-13 19:05:40 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-04-13 19:05:40 ----A---- C:\Windows\system32\urlmon.dll
2016-04-13 19:05:40 ----A---- C:\Windows\system32\occache.dll
2016-04-13 19:05:40 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-04-13 19:05:40 ----A---- C:\Windows\system32\iedkcs32.dll
2016-04-13 19:05:39 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-04-13 19:05:39 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-04-13 19:05:39 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-04-13 19:05:39 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-04-13 19:05:38 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-04-13 19:05:38 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-04-13 19:05:38 ----A---- C:\Windows\system32\msfeeds.dll
2016-04-13 19:05:38 ----A---- C:\Windows\system32\dxtrans.dll
2016-04-13 19:05:37 ----A---- C:\Windows\system32\iesetup.dll
2016-04-13 19:05:36 ----A---- C:\Windows\system32\ieapfltr.dll
2016-04-13 19:05:35 ----A---- C:\Windows\system32\iertutil.dll
2016-04-13 19:05:34 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-04-13 19:05:34 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-04-13 19:05:34 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-04-13 19:05:34 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-04-13 19:05:34 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-04-13 19:05:34 ----A---- C:\Windows\system32\vbscript.dll
2016-04-13 19:05:33 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-04-13 19:05:33 ----A---- C:\Windows\system32\jsproxy.dll
2016-04-13 19:05:32 ----A---- C:\Windows\system32\ieui.dll
2016-04-13 19:05:32 ----A---- C:\Windows\system32\dxtmsft.dll
2016-04-13 19:05:31 ----A---- C:\Windows\system32\ieframe.dll
2016-04-13 19:05:30 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-04-13 19:05:30 ----A---- C:\Windows\system32\mshtmled.dll
2016-04-13 19:05:29 ----A---- C:\Windows\system32\webcheck.dll
2016-04-13 19:05:29 ----A---- C:\Windows\system32\jscript.dll
2016-04-13 19:05:29 ----A---- C:\Windows\system32\ieUnatt.exe
2016-04-13 19:05:28 ----A---- C:\Windows\system32\jscript9diag.dll
2016-04-13 19:05:28 ----A---- C:\Windows\system32\jscript9.dll
2016-04-13 19:05:27 ----A---- C:\Windows\system32\wininet.dll
2016-04-13 19:05:26 ----A---- C:\Windows\system32\msrating.dll
2016-04-13 19:05:26 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-04-13 19:05:25 ----A---- C:\Windows\system32\mshtml.dll

======List of files/folders modified in the last 1 month======

2016-04-17 12:50:19 ----D---- C:\Program Files\trend micro
2016-04-17 12:50:18 ----D---- C:\Windows\Temp
2016-04-17 12:47:52 ----D---- C:\Users\Lenka\AppData\Roaming\Skype
2016-04-17 12:32:34 ----D---- C:\Windows\system32\config
2016-04-16 23:51:25 ----HD---- C:\Windows\system32\WLANProfiles
2016-04-16 18:05:40 ----D---- C:\Windows\System32
2016-04-16 18:05:40 ----D---- C:\Windows\inf
2016-04-16 18:05:40 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-04-16 17:55:17 ----D---- C:\Windows
2016-04-16 17:31:37 ----D---- C:\Windows\system32\NDF
2016-04-16 17:25:59 ----D---- C:\Windows\system32\Tasks
2016-04-16 17:25:57 ----RD---- C:\Program Files (x86)
2016-04-14 10:50:22 ----D---- C:\Windows\Microsoft.NET
2016-04-14 10:26:30 ----RSD---- C:\Windows\assembly
2016-04-13 22:53:50 ----SHD---- C:\Windows\Installer
2016-04-13 22:53:50 ----D---- C:\ProgramData\Skype
2016-04-13 22:53:49 ----SHD---- C:\Config.Msi
2016-04-13 22:53:40 ----RD---- C:\Program Files (x86)\Skype
2016-04-13 22:53:40 ----D---- C:\Program Files (x86)\Common Files
2016-04-13 22:51:25 ----D---- C:\Windows\winsxs
2016-04-13 22:48:20 ----D---- C:\Windows\SysWOW64
2016-04-13 22:48:15 ----D---- C:\Windows\SYSWOW64\en-US
2016-04-13 22:48:14 ----D---- C:\Windows\system32\en-US
2016-04-13 22:48:14 ----D---- C:\Windows\system32\drivers
2016-04-13 22:48:12 ----D---- C:\Windows\AppPatch
2016-04-13 22:48:11 ----D---- C:\Windows\system32\Boot
2016-04-13 22:48:09 ----D---- C:\Windows\SYSWOW64\wbem
2016-04-13 22:48:09 ----D---- C:\Windows\system32\wbem
2016-04-13 22:48:09 ----D---- C:\Windows\system32\drivers\en-US
2016-04-13 22:48:08 ----D---- C:\Windows\system32\appraiser
2016-04-13 22:48:08 ----D---- C:\Windows\Logs
2016-04-13 22:47:57 ----D---- C:\Program Files\Internet Explorer
2016-04-13 22:47:51 ----D---- C:\Program Files (x86)\Internet Explorer
2016-04-13 22:47:48 ----D---- C:\Windows\system32\DriverStore
2016-04-13 19:16:37 ----D---- C:\ProgramData\Microsoft Help
2016-04-13 19:14:33 ----D---- C:\Windows\system32\catroot2
2016-04-13 19:13:12 ----SHD---- C:\System Volume Information
2016-04-13 17:52:20 ----D---- C:\Windows\Prefetch
2016-04-11 16:28:46 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2016-04-08 11:44:38 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-04-08 11:34:34 ----D---- C:\KMPlayer
2016-04-06 10:18:38 ----N---- C:\Windows\system32\MpSigStub.exe
2016-03-29 21:04:22 ----D---- C:\Windows\rescache
2016-03-29 16:36:00 ----SD---- C:\Windows\SYSWOW64\GWX
2016-03-29 16:36:00 ----SD---- C:\Windows\system32\GWX

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2013-12-26 32544]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\system32\DRIVERS\dtlitescsibus.sys [2015-06-16 30264]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2015-06-01 5384176]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys [2010-12-21 8505856]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 cpuz134;cpuz134; \??\C:\Users\Lenka\AppData\Local\Temp\cpuz134\cpuz134_x64.sys []
S3 leusbser;Lenovo Inc. USB Device for Serial Communication; C:\Windows\system32\DRIVERS\leusbser.sys [2013-08-01 238080]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2016-02-28 192216]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-14 82128]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2010-12-23 1515792]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-10-29 920864]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-12-26 1364256]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2010-12-23 845584]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-09-11 5702416]
R2 ZcfgSvc7;Intel(R) PROSet/Wireless ZeroConfig Service; C:\Program Files\Intel\WiFi\bin\ZCfgSvc7.exe [2010-12-23 992256]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [2015-05-21 1272560]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-11-05 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2015-11-05 125112]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-28 154440]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2016-01-29 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-08 269504]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2015-06-01 290224]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-28 154440]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-03-31 114688]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 50942144]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-08-11 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-11-05 51376]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119413
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: zaspamovany prohlizec, pomalejsi notaS

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

ToReTo
Návštěvník
Návštěvník
Příspěvky: 92
Registrován: 27 led 2008 12:58

Re: zaspamovany prohlizec, pomalejsi notaS

#7 Příspěvek od ToReTo »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Lenka at 2016-04-17 13:26:29
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 299 GB (63%) free of 477 GB
Total RAM: 4010 MB (68% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:26:34, on 17.4.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18283)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files\trend micro\Lenka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [MagicPlusHelper] "C:\Program Files (x86)\MagicPlus\MagicPlus_helper.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1563457531-2381664381-2045138735-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1563457531-2381664381-2045138735-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless ZeroConfig Service (ZcfgSvc7) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\ZCfgSvc7.exe

--
End of file - 8409 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\Intel\WiFi\bin\ZCfgSvc7.exe"
C:\Windows\system32\WLANExt.exe 26139440
\??\C:\Windows\system32\conhost.exe "419097208-3215331688210275063317376462136317259-849239030-474057896-1945238603
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"taskhost.exe"
taskeng.exe {A5344BB0-C5B9-4A1F-A618-A072832174B0}
"C:\Windows\system32\Dwm.exe"
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\Windows\Explorer.EXE
taskeng.exe {1E52E1F7-425A-4E5B-B965-12295655024A}
"C:\Windows\system32\GWX\GWX.exe"
C:\Windows\system32\sppsvc.exe
taskeng.exe {31CA7F40-0945-4A5F-AE6C-82A6484B25B1}
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel PROSet/Wireless
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 524 528 536 65536 532
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Users\Lenka\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player PPAPI Notifier.job - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_21_0_0_213_pepper.exe -check pepperplugin
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IntelPROSet"=C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [2010-12-23 1934608]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2015-06-01 183216]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2015-06-01 411056]
"Persistence"=C:\Windows\system32\igfxpers.exe [2015-06-01 453552]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 108144]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2015-05-21 4471536]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2016-03-01 50670720]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"MagicPlusHelper"=C:\Program Files (x86)\MagicPlus\MagicPlus_helper.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2015-06-01 451584]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"msacm.ac3filter"=ac3filter64.acm

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-04-17 13:19:55 ----D---- C:\_OTM
2016-04-16 17:55:17 ----A---- C:\Windows\ntbtlog.txt
2016-04-16 17:22:48 ----D---- C:\AdwCleaner
2016-04-13 19:07:25 ----A---- C:\Windows\SYSWOW64\samlib.dll
2016-04-13 19:07:25 ----A---- C:\Windows\system32\samsrv.dll
2016-04-13 19:07:25 ----A---- C:\Windows\system32\samlib.dll
2016-04-13 19:07:10 ----A---- C:\Windows\system32\mtxoci.dll
2016-04-13 19:07:08 ----A---- C:\Windows\SYSWOW64\mtxoci.dll
2016-04-13 19:07:08 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2016-04-13 19:07:01 ----A---- C:\Windows\system32\rpcss.dll
2016-04-13 19:07:00 ----A---- C:\Windows\system32\msxml3.dll
2016-04-13 19:06:59 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2016-04-13 19:06:59 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2016-04-13 19:06:59 ----A---- C:\Windows\system32\msxml3r.dll
2016-04-13 19:06:53 ----A---- C:\Windows\SYSWOW64\ole32.dll
2016-04-13 19:06:53 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-04-13 19:06:53 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-04-13 19:06:53 ----A---- C:\Windows\system32\ole32.dll
2016-04-13 19:06:53 ----A---- C:\Windows\system32\lsasrv.dll
2016-04-13 19:06:52 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-04-13 19:06:52 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-04-13 19:06:52 ----A---- C:\Windows\system32\ntdll.dll
2016-04-13 19:06:51 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-04-13 19:06:51 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-04-13 19:06:51 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-04-13 19:06:51 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-04-13 19:06:51 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-04-13 19:06:51 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-04-13 19:06:51 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-04-13 19:06:51 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\wow64win.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\wow64.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\winsrv.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\wdigest.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\TSpkg.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\sspicli.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\srcore.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\smss.exe
2016-04-13 19:06:51 ----A---- C:\Windows\system32\schannel.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\rpchttp.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\rpcrt4.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\ncrypt.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\msv1_0.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\KernelBase.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\kernel32.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\kerberos.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-04-13 19:06:51 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-04-13 19:06:51 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-04-13 19:06:51 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-04-13 19:06:51 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-04-13 19:06:51 ----A---- C:\Windows\system32\conhost.exe
2016-04-13 19:06:51 ----A---- C:\Windows\system32\certcli.dll
2016-04-13 19:06:51 ----A---- C:\Windows\system32\advapi32.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-04-13 19:06:50 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\wow64cpu.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\sspisrv.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\srclient.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\secur32.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\rstrui.exe
2016-04-13 19:06:50 ----A---- C:\Windows\system32\ntvdm64.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\lsass.exe
2016-04-13 19:06:50 ----A---- C:\Windows\system32\drivers\appid.sys
2016-04-13 19:06:50 ----A---- C:\Windows\system32\csrsrv.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\cryptbase.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\credssp.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\appidsvc.dll
2016-04-13 19:06:50 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-04-13 19:06:50 ----A---- C:\Windows\system32\appidapi.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-04-13 19:06:49 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-04-13 19:06:49 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-04-13 19:06:49 ----A---- C:\Windows\SYSWOW64\user.exe
2016-04-13 19:06:49 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-04-13 19:06:49 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-04-13 19:06:49 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-04-13 19:06:49 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-04-13 19:06:49 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-04-13 19:06:49 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-04-13 19:06:49 ----A---- C:\Windows\system32\auditpol.exe
2016-04-13 19:06:49 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-04-13 19:06:49 ----A---- C:\Windows\system32\apisetschema.dll
2016-04-13 19:06:49 ----A---- C:\Windows\system32\adtschema.dll
2016-04-13 19:06:48 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-04-13 19:06:48 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-04-13 19:06:48 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-04-13 19:06:48 ----A---- C:\Windows\system32\msobjs.dll
2016-04-13 19:06:48 ----A---- C:\Windows\system32\msaudite.dll
2016-04-13 19:06:41 ----A---- C:\Windows\system32\drivers\disk.sys
2016-04-13 19:06:40 ----A---- C:\Windows\system32\win32k.sys
2016-04-13 19:06:36 ----A---- C:\Windows\SYSWOW64\tbs.dll
2016-04-13 19:06:36 ----A---- C:\Windows\system32\tbs.dll
2016-04-13 19:06:36 ----A---- C:\Windows\system32\fveapibase.dll
2016-04-13 19:06:36 ----A---- C:\Windows\system32\fveapi.dll
2016-04-13 19:06:32 ----A---- C:\Windows\system32\invagent.dll
2016-04-13 19:06:32 ----A---- C:\Windows\system32\generaltel.dll
2016-04-13 19:06:32 ----A---- C:\Windows\system32\devinv.dll
2016-04-13 19:06:32 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-04-13 19:06:32 ----A---- C:\Windows\system32\appraiser.dll
2016-04-13 19:06:32 ----A---- C:\Windows\system32\aepic.dll
2016-04-13 19:06:32 ----A---- C:\Windows\system32\aeinv.dll
2016-04-13 19:06:32 ----A---- C:\Windows\system32\acmigration.dll
2016-04-13 19:06:25 ----A---- C:\Windows\SYSWOW64\tzres.dll
2016-04-13 19:06:25 ----A---- C:\Windows\system32\tzres.dll
2016-04-13 19:05:46 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-04-13 19:05:46 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-04-13 19:05:46 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-04-13 19:05:46 ----A---- C:\Windows\system32\iernonce.dll
2016-04-13 19:05:46 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-04-13 19:05:46 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-04-13 19:05:45 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-04-13 19:05:45 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-04-13 19:05:44 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-04-13 19:05:44 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-04-13 19:05:44 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-04-13 19:05:44 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-04-13 19:05:44 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-04-13 19:05:44 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-04-13 19:05:44 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-04-13 19:05:44 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-04-13 19:05:44 ----A---- C:\Windows\system32\inseng.dll
2016-04-13 19:05:44 ----A---- C:\Windows\system32\ie4uinit.exe
2016-04-13 19:05:43 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-04-13 19:05:40 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-04-13 19:05:40 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-04-13 19:05:40 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-04-13 19:05:40 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-04-13 19:05:40 ----A---- C:\Windows\system32\urlmon.dll
2016-04-13 19:05:40 ----A---- C:\Windows\system32\occache.dll
2016-04-13 19:05:40 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-04-13 19:05:40 ----A---- C:\Windows\system32\iedkcs32.dll
2016-04-13 19:05:39 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-04-13 19:05:39 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-04-13 19:05:39 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-04-13 19:05:39 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-04-13 19:05:38 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-04-13 19:05:38 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-04-13 19:05:38 ----A---- C:\Windows\system32\msfeeds.dll
2016-04-13 19:05:38 ----A---- C:\Windows\system32\dxtrans.dll
2016-04-13 19:05:37 ----A---- C:\Windows\system32\iesetup.dll
2016-04-13 19:05:36 ----A---- C:\Windows\system32\ieapfltr.dll
2016-04-13 19:05:35 ----A---- C:\Windows\system32\iertutil.dll
2016-04-13 19:05:34 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-04-13 19:05:34 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-04-13 19:05:34 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-04-13 19:05:34 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-04-13 19:05:34 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-04-13 19:05:34 ----A---- C:\Windows\system32\vbscript.dll
2016-04-13 19:05:33 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-04-13 19:05:33 ----A---- C:\Windows\system32\jsproxy.dll
2016-04-13 19:05:32 ----A---- C:\Windows\system32\ieui.dll
2016-04-13 19:05:32 ----A---- C:\Windows\system32\dxtmsft.dll
2016-04-13 19:05:31 ----A---- C:\Windows\system32\ieframe.dll
2016-04-13 19:05:30 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-04-13 19:05:30 ----A---- C:\Windows\system32\mshtmled.dll
2016-04-13 19:05:29 ----A---- C:\Windows\system32\webcheck.dll
2016-04-13 19:05:29 ----A---- C:\Windows\system32\jscript.dll
2016-04-13 19:05:29 ----A---- C:\Windows\system32\ieUnatt.exe
2016-04-13 19:05:28 ----A---- C:\Windows\system32\jscript9diag.dll
2016-04-13 19:05:28 ----A---- C:\Windows\system32\jscript9.dll
2016-04-13 19:05:27 ----A---- C:\Windows\system32\wininet.dll
2016-04-13 19:05:26 ----A---- C:\Windows\system32\msrating.dll
2016-04-13 19:05:26 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-04-13 19:05:25 ----A---- C:\Windows\system32\mshtml.dll

======List of files/folders modified in the last 1 month======

2016-04-17 13:26:31 ----D---- C:\Program Files\trend micro
2016-04-17 13:26:07 ----D---- C:\Users\Lenka\AppData\Roaming\Skype
2016-04-17 13:24:01 ----HD---- C:\Windows\system32\WLANProfiles
2016-04-17 13:22:12 ----D---- C:\Windows\Temp
2016-04-17 13:19:55 ----D---- C:\Windows\Tasks
2016-04-17 12:32:34 ----D---- C:\Windows\system32\config
2016-04-16 18:05:40 ----D---- C:\Windows\System32
2016-04-16 18:05:40 ----D---- C:\Windows\inf
2016-04-16 18:05:40 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-04-16 17:55:17 ----D---- C:\Windows
2016-04-16 17:31:37 ----D---- C:\Windows\system32\NDF
2016-04-16 17:25:59 ----D---- C:\Windows\system32\Tasks
2016-04-16 17:25:57 ----RD---- C:\Program Files (x86)
2016-04-14 10:50:22 ----D---- C:\Windows\Microsoft.NET
2016-04-14 10:26:30 ----RSD---- C:\Windows\assembly
2016-04-13 22:53:50 ----SHD---- C:\Windows\Installer
2016-04-13 22:53:50 ----D---- C:\ProgramData\Skype
2016-04-13 22:53:49 ----SHD---- C:\Config.Msi
2016-04-13 22:53:40 ----RD---- C:\Program Files (x86)\Skype
2016-04-13 22:53:40 ----D---- C:\Program Files (x86)\Common Files
2016-04-13 22:51:25 ----D---- C:\Windows\winsxs
2016-04-13 22:48:20 ----D---- C:\Windows\SysWOW64
2016-04-13 22:48:15 ----D---- C:\Windows\SYSWOW64\en-US
2016-04-13 22:48:14 ----D---- C:\Windows\system32\en-US
2016-04-13 22:48:14 ----D---- C:\Windows\system32\drivers
2016-04-13 22:48:12 ----D---- C:\Windows\AppPatch
2016-04-13 22:48:11 ----D---- C:\Windows\system32\Boot
2016-04-13 22:48:09 ----D---- C:\Windows\SYSWOW64\wbem
2016-04-13 22:48:09 ----D---- C:\Windows\system32\wbem
2016-04-13 22:48:09 ----D---- C:\Windows\system32\drivers\en-US
2016-04-13 22:48:08 ----D---- C:\Windows\system32\appraiser
2016-04-13 22:48:08 ----D---- C:\Windows\Logs
2016-04-13 22:47:57 ----D---- C:\Program Files\Internet Explorer
2016-04-13 22:47:51 ----D---- C:\Program Files (x86)\Internet Explorer
2016-04-13 22:47:48 ----D---- C:\Windows\system32\DriverStore
2016-04-13 19:16:37 ----D---- C:\ProgramData\Microsoft Help
2016-04-13 19:14:33 ----D---- C:\Windows\system32\catroot2
2016-04-13 19:13:12 ----SHD---- C:\System Volume Information
2016-04-13 17:52:20 ----D---- C:\Windows\Prefetch
2016-04-11 16:28:46 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2016-04-08 11:44:38 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-04-08 11:34:34 ----D---- C:\KMPlayer
2016-04-06 10:18:38 ----N---- C:\Windows\system32\MpSigStub.exe
2016-03-29 21:04:22 ----D---- C:\Windows\rescache
2016-03-29 16:36:00 ----SD---- C:\Windows\SYSWOW64\GWX
2016-03-29 16:36:00 ----SD---- C:\Windows\system32\GWX

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2013-12-26 32544]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\system32\DRIVERS\dtlitescsibus.sys [2015-06-16 30264]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2015-06-01 5384176]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys [2010-12-21 8505856]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 cpuz134;cpuz134; \??\C:\Users\Lenka\AppData\Local\Temp\cpuz134\cpuz134_x64.sys []
S3 leusbser;Lenovo Inc. USB Device for Serial Communication; C:\Windows\system32\DRIVERS\leusbser.sys [2013-08-01 238080]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2016-02-28 192216]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-14 82128]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2010-12-23 1515792]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-10-29 920864]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-12-26 1364256]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2010-12-23 845584]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-09-11 5702416]
R2 ZcfgSvc7;Intel(R) PROSet/Wireless ZeroConfig Service; C:\Program Files\Intel\WiFi\bin\ZCfgSvc7.exe [2010-12-23 992256]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [2015-05-21 1272560]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-11-05 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2015-11-05 125112]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-28 154440]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2016-01-29 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-08 269504]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2015-06-01 290224]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-28 154440]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-03-31 114688]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 50942144]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-08-11 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-11-05 51376]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119413
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: zaspamovany prohlizec, pomalejsi notaS

#8 Příspěvek od Rudy »

Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Odpovědět