Prosím o kontrolu logu, využití cpu 100%

[djrene]

Logfile of random's system information tool 1.10 (written by random/random)
Run by User at 2016-09-15 11:45:50
Microsoft® Windows Vista™ Business Service Pack 2
System drive C: has 12 GB (17%) free of 73 GB
Total RAM: 1791 MB (11% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:46:22, on 15.9.2016
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16811)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\TeamViewer\TeamViewer.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\Taskmgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\User\Desktop\RSIT.exe
C:\Program Files\trend micro\User.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://cs.intl.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://cs.intl.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - (no file)
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: Start Remote Administrator server.lnk = C:\Windows\System32\r_server.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O16 - DPF: {361E6B79-4A69-4376-B0F2-3D1EBEE9D7E2} (RtspVaPgCtrl Class) - http://193.85.210.249/RtspVaPgDec.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://81.200.53.163:7000/activex/AMC.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B21F97F4-3C3D-43C8-AB3E-336CC85C1399}: NameServer = 10.0.0.11
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer\TeamViewer_Service.exe
O23 - Service: uvnc_service - UltraVNC - C:\Program Files\UltraVNC\WinVNC.exe

--
End of file - 4774 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\jj6fe4no.default

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 23.0.0.162 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_23_0_0_162.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\jj6fe4no.default\extensions\
7go@7go.com

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-02-15 4390912]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FreeCall]
C:\Program Files\FreeCall.com\FreeCall\FreeCall.exe -nosplash -minimized []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe
Start Remote Administrator server.lnk - C:\Windows\System32\r_server.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"VIDC.I420"=MSH263.DRV
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"msacm.voxacm160"=vct3216.acm
"msacm.scg726"=scg726.acm
"msacm.alf2cd"=alf2cd.acm
"msacm.ac3acm"=AC3ACM.acm
"vidc.dvsd"=mcdvd_32.dll
"vidc.xvid"=xvidvfw.dll
"vidc.DIVX"=DivX.dll
"vidc.mpg4"=mpg4c32.dll
"vidc.mp42"=mpg4c32.dll
"vidc.mp43"=mpg4c32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-09-15 11:45:51 ----D---- C:\Program Files\trend micro
2016-09-15 11:45:50 ----D---- C:\rsit
2016-08-18 03:00:58 ----A---- C:\Windows\system32\tzres.dll
2016-08-17 03:05:42 ----A---- C:\Windows\system32\win32k.sys
2016-08-16 03:36:04 ----A---- C:\Windows\system32\mshta.exe
2016-08-16 03:36:03 ----A---- C:\Windows\system32\vbscript.dll
2016-08-16 03:36:02 ----A---- C:\Windows\system32\urlmon.dll
2016-08-16 03:36:02 ----A---- C:\Windows\system32\msfeedssync.exe
2016-08-16 03:36:02 ----A---- C:\Windows\system32\msfeedsbs.dll
2016-08-16 03:36:02 ----A---- C:\Windows\system32\msfeeds.dll
2016-08-16 03:36:00 ----A---- C:\Windows\system32\ieUnatt.exe
2016-08-16 03:35:59 ----A---- C:\Windows\system32\jsproxy.dll
2016-08-16 03:35:59 ----A---- C:\Windows\system32\dxtmsft.dll
2016-08-16 03:35:56 ----A---- C:\Windows\system32\jscript.dll
2016-08-16 03:35:54 ----A---- C:\Windows\system32\url.dll
2016-08-16 03:35:54 ----A---- C:\Windows\system32\iertutil.dll
2016-08-16 03:35:53 ----A---- C:\Windows\system32\wininet.dll
2016-08-16 03:35:53 ----A---- C:\Windows\system32\mshtmled.dll
2016-08-16 03:35:53 ----A---- C:\Windows\system32\jscript9.dll
2016-08-16 03:35:52 ----A---- C:\Windows\system32\ieframe.dll
2016-08-16 03:35:49 ----A---- C:\Windows\system32\ieui.dll
2016-08-16 03:35:49 ----A---- C:\Windows\system32\dxtrans.dll
2016-08-16 03:35:46 ----A---- C:\Windows\system32\mshtml.dll

======List of files/folders modified in the last 1 month======

2016-09-15 11:45:51 ----RD---- C:\Program Files
2016-09-15 11:45:28 ----D---- C:\Windows\Temp
2016-09-15 11:39:47 ----D---- C:\Windows\Prefetch
2016-09-15 11:38:14 ----D---- C:\Windows\SoftwareDistribution
2016-09-15 11:37:52 ----D---- C:\Windows\inf
2016-09-15 11:37:52 ----D---- C:\Windows\Debug
2016-09-15 11:37:52 ----D---- C:\Windows
2016-09-15 11:31:31 ----D---- C:\Program Files\Spybot - Search & Destroy 2
2016-09-15 11:28:36 ----A---- C:\Windows\wininit.ini
2016-09-15 11:28:35 ----SD---- C:\ProgramData\Microsoft
2016-09-15 11:28:35 ----D---- C:\Windows\System32
2016-09-15 11:28:35 ----D---- C:\ProgramData\Spybot - Search & Destroy
2016-09-15 11:28:29 ----D---- C:\Windows\Tasks
2016-09-15 11:06:40 ----D---- C:\Windows\system32\Tasks
2016-09-14 04:14:43 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2016-09-14 04:14:31 ----D---- C:\Windows\system32\Macromed
2016-09-12 14:34:28 ----SHD---- C:\System Volume Information
2016-09-12 14:08:23 ----D---- C:\Windows\rescache
2016-09-12 13:52:40 ----D---- C:\Windows\system32\catroot2
2016-09-02 04:42:58 ----D---- C:\Program Files\TeamViewer
2016-09-01 11:29:02 ----D---- C:\Program Files\NetBet Poker
2016-08-18 03:02:47 ----D---- C:\Windows\winsxs
2016-08-18 03:02:47 ----D---- C:\Windows\system32\cs-CZ
2016-08-18 03:02:20 ----D---- C:\Windows\system32\catroot
2016-08-17 03:32:40 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-08-17 03:22:37 ----D---- C:\Windows\system32\migration
2016-08-17 03:22:37 ----D---- C:\Program Files\Internet Explorer

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2016-03-16 71488]
R0 nvstor32;nvstor32; C:\Windows\system32\drivers\nvstor32.sys [2006-12-11 97576]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2016-03-16 206312]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2015-12-19 146024]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2016-03-16 152728]
R1 EpfwLWF;ESET Personal Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2016-03-16 44608]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [2015-12-19 111040]
R2 int15;int15; \??\C:\Windows\system32\drivers\int15.sys [2006-11-27 69632]
R3 CA561;VideoCAM Express V2; C:\Windows\System32\Drivers\SPCA561.SYS [2002-09-30 119798]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-02-14 1740904]
R3 mv2;mv2; C:\Windows\system32\DRIVERS\mv2.sys [2009-04-01 12096]
R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys [2006-01-04 6144]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-06-20 7468128]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2008-01-19 9216]
R3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136]
R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2006-11-09 194560]
S2 netlimiter;netlimiter; \??\C:\Windows\system32\drivers\netlimiter.sys []
S2 osaio;osaio; \??\C:\Windows\system32\drivers\osaio.sys []
S3 avchv;avchv Function Driver; C:\Windows\system32\DRIVERS\avchv.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2008-02-22 47360]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-09-24 81088]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2016-07-14 1983264]
R2 eRecoveryService;eRecovery Service; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [2006-12-28 49152]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-12-14 61440]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-06-20 118784]
R2 TeamViewer;TeamViewer 10; C:\Program Files\TeamViewer\TeamViewer_Service.exe [2015-09-11 5702416]
R2 uvnc_service;uvnc_service; C:\Program Files\UltraVNC\WinVNC.exe [2009-08-16 1589704]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-08 144200]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-09-14 270016]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-08 144200]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2016-07-12 146888]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2014-04-12 772296]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2014-04-12 45744]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------

[Rudy]

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

[djrene]

# AdwCleaner v6.020 - Log soubor vytvořen 20/09/2016 na 08:52:11
# Aktualizováno dne 14/09/2016 z ToolsLib
# Databáze : 2016-09-20.1 [Server]
# Operační systém : Windows Vista (TM) Business Service Pack 2 (X86)
# Uživatelské jméno : User - USER-PC
# Beží od : C:\Users\User\Desktop\adwcleaner_6.020.exe
# Mod: Čištění
# Podpora : https://toolslib.net/forum



***** [ Služby ] *****



***** [ Adresáře ] *****

[-] Adresář smazán:C:\Users\User\AppData\Local\VideoDownloadConverter_4z
[-] Adresář smazán:C:\Program Files\VideoDownloadConverter_4z
[#] Adresář nelze smazat:C:\Users\User\AppData\Local\VideoDownloadConverter_4z
[#] Adresář nelze smazat:C:\Program Files\VideoDownloadConverter_4z
[-] Adresář smazán:C:\Users\User\AppData\Local\iac
[#] Adresář nelze smazat:C:\Users\User\AppData\Local\IAC
[-] Adresář smazán:C:\Users\User\AppData\Roaming\PerformerSoft
[-] Adresář smazán:C:\Users\User\AppData\Roaming\SeeSimilar02
[-] Adresář smazán:C:\ProgramData\IBUpdaterService
[#] Adresář nelze smazat:C:\ProgramData\Application Data\IBUpdaterService
[-] Adresář smazán:C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\jj6fe4no.default\extensions\7go@7go.com
[-] Adresář smazán:C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dgjkhjdcljddbedokogakmmdjgnbeanf
[-] Adresář smazán:C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gjajpkikblccgefaibcafkfbanllpefi


***** [ Soubory ] *****

[-] Soubor smazán:C:\Program Files\Yahoo!\Common\unyt.exe
[-] Soubor smazán:C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dgjkhjdcljddbedokogakmmdjgnbeanf_0.localstorage
[-] Soubor smazán:C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gjajpkikblccgefaibcafkfbanllpefi_0.localstorage


***** [ DLL ] *****



***** [ WMI ] *****



***** [ Zástupce ] *****



***** [ Plánovač úloh ] *****



***** [ Registry ] *****

[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.DynamicBarButton
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.DynamicBarButton.1
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.FeedManager
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.FeedManager.1
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLMenu
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLMenu.1
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLPanel
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLPanel.1
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.MultipleButton
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.MultipleButton.1
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.PseudoTransparentPlugin
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.PseudoTransparentPlugin.1
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.Radio
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.Radio.1
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.RadioSettings
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.RadioSettings.1
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ScriptButton
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ScriptButton.1
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ThirdPartyInstaller
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ThirdPartyInstaller.1
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ToolbarProtector
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ToolbarProtector.1
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.UrlAlertButton
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.UrlAlertButton.1
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.XMLSessionPlugin
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.XMLSessionPlugin.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.DynamicBarButton
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.DynamicBarButton.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.FeedManager
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.FeedManager.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLMenu
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLMenu.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLPanel
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLPanel.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.MultipleButton
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.MultipleButton.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.PseudoTransparentPlugin
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.PseudoTransparentPlugin.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.Radio
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.Radio.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.RadioSettings
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.RadioSettings.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ScriptButton
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ScriptButton.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ThirdPartyInstaller
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ThirdPartyInstaller.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ToolbarProtector
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ToolbarProtector.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.UrlAlertButton
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.UrlAlertButton.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.XMLSessionPlugin
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.XMLSessionPlugin.1
[-] Klíč smazán:HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2d9083ce-8758-4704-ba57-3c891d7452bd}
[-] Klíč smazán:HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3d429207-4689-492d-a0e5-cdc5dfbb5005}
[-] Klíč smazán:HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{66d59105-fe06-43a4-b292-eb0097e9eb74}
[-] Klíč smazán:HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9103c314-c4e2-4463-8934-b19bcb46236d}
[-] Klíč smazán:HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{97cef41c-5055-474a-855a-892d4fe3e596}
[-] Klíč smazán:HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d375ee64-f893-498a-a0e9-0e9829c88c3d}
[#] Klíč smazán po restartování:{2D3826A1-F3E8-45D6-94B5-C26D8EC0073B}
[#] Klíč smazán po restartování:{37923200-6887-4B44-95D4-CAE8F83ECFEE}
[#] Klíč smazán po restartování:{3EE17DD1-E28B-4AED-A3B2-9C29CB2C19D6}
[#] Klíč smazán po restartování:{79332472-47F3-4E32-B07F-CF8DF4C58499}
[#] Klíč smazán po restartování:{886F93AD-3CBB-4424-8442-A7340243540F}
[#] Klíč smazán po restartování:{AA289DBC-59B6-40A5-AC7D-C90DF850289C}
[#] Klíč smazán po restartování:{BC153A3C-0BB7-4EED-83AE-28E6E398F56E}
[#] Klíč smazán po restartování:{CA723163-6FAD-43D4-8B93-0D8C52BD9974}
[#] Klíč smazán po restartování:{F1F328EB-F5A5-432B-A54C-05F3EF5B0BD8}
[#] Klíč smazán po restartování:{FB0E8A09-F08C-44CF-9E15-97ADAC016248}
[#] Klíč smazán po restartování:{FE8DBB09-C3D3-4477-80CB-D38914B94BB8}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{17B10E59-09E1-4C39-A738-6774D7AB7778}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{2D9083CE-8758-4704-BA57-3C891D7452BD}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{34AD1EA7-8B9E-4D8B-B3ED-365D12C8EE73}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{35144E32-8E4C-4152-9B8C-3E2D4B46228E}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{35BBB95B-2CE4-4A9E-BDED-50EFD632AC00}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{3E9469AF-E866-4476-B767-810630F1F6E7}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{46CE5380-6055-4C3A-A7E5-3A02A2335C61}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{4F6ECF71-C575-4BD2-8EF7-548D0EF1AB1D}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{54D99BE4-2FD7-449E-9DB4-76532CEE0B16}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{5684EAE9-72EB-4CA6-83B8-82434B7E955C}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{716E443D-7CAA-44F1-866B-F45D00E712CC}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{72063D77-7590-4DA9-A7F8-F5ECAF3632C4}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{7FC87AC5-FA93-476E-A32C-A941229DED0B}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{7FCD22A8-B70A-4AC7-AAF1-EBCCD2F6612D}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{8B8BB3A7-2ADE-4995-931D-60B430A9B44E}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{8FDA7A57-D1A8-4A62-A643-B85FDC116212}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{93F0AC70-20D8-4AE8-A02F-6812EFFB6B58}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{A266567F-8E5D-480C-BCE2-C360FA669FD5}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{CE4F67F6-4FD4-49DB-9D71-713CCD3D00CD}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{E14CDC24-4BE1-4B65-8452-4BFA0DCEF274}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{ECC69F9E-5456-4EDF-AF66-1A9DED11F9EE}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Prod.cap
[-] Klíč smazán:HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\TypeLib\{2D3826A1-F3E8-45D6-94B5-C26D8EC0073B}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\TypeLib\{F1F328EB-F5A5-432B-A54C-05F3EF5B0BD8}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\TypeLib\{FB0E8A09-F08C-44CF-9E15-97ADAC016248}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\TypeLib\{FE8DBB09-C3D3-4477-80CB-D38914B94BB8}
[-] Klíč smazán:HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{38122A36-83B2-46B8-B39A-EC72A4614A07}
[-] Klíč smazán:HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}
[-] Klíč smazán:HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{38122A36-83B2-46B8-B39A-EC72A4614A07}
[-] Klíč smazán:HKU\S-1-5-21-3562173187-2575733966-3390058566-1000\Software\filescout
[-] Klíč smazán:HKU\S-1-5-21-3562173187-2575733966-3390058566-1000\Software\Yahoo\Companion
[-] Klíč smazán:HKU\S-1-5-21-3562173187-2575733966-3390058566-1000\Software\Yahoo\YFriendsBar
[-] Klíč smazán:HKU\S-1-5-21-3562173187-2575733966-3390058566-1000\Software\YahooPartnerToolbar
[-] Klíč smazán:HKU\S-1-5-21-3562173187-2575733966-3390058566-1000\Software\AppDataLow\Software\adawarebp
[-] Klíč smazán:HKU\S-1-5-21-3562173187-2575733966-3390058566-1000\Software\AppDataLow\Software\Yahoo\Companion
[#] Klíč smazán po restartování:HKCU\Software\filescout
[#] Klíč smazán po restartování:HKCU\Software\Yahoo\Companion
[#] Klíč smazán po restartování:HKCU\Software\Yahoo\YFriendsBar
[#] Klíč smazán po restartování:HKCU\Software\YahooPartnerToolbar
[#] Klíč smazán po restartování:HKCU\Software\AppDataLow\Software\adawarebp
[#] Klíč smazán po restartování:HKCU\Software\AppDataLow\Software\Yahoo\Companion
[-] Klíč smazán:HKLM\SOFTWARE\AppDataLow\SOFTWARE\Yahoo\Companion
[-] Klíč smazán:HKLM\SOFTWARE\Yahoo\Companion
[-] Klíč smazán:HKU\S-1-5-21-3562173187-2575733966-3390058566-1000\Software\Microsoft\Internet Explorer\SearchScopes\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}
[#] Klíč smazán po restartování:HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}
[-] Klíč smazán:HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}
[-] Klíč smazán:HKLM\SOFTWARE\Google\Chrome\Extensions\gjajpkikblccgefaibcafkfbanllpefi


***** [ Prohlížeče ] *****

[-] Firefox nastavení vyčištěno:"extensions.xpiState" - "{\"app-profile\":{\"7go@7go.com\":{\"d\":\"C:\\\\Users\\\\User\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\jj6fe4no.default\\\\extensions\\\\7go@7go.com\",\"e\":false,\"v\":\"1.0.0.0\",\"st\":1377429228559,\"mt\":1377429228559}},\"app-system-addons\":{\"e10srollout@mozilla.org\":{\"d\":\"C:\\\\Users\\\\User\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\jj6fe4no.default\\\\features\\\\{f1e40b6a-dae4-4404-8dae-f5b7a26752d2}\\\\e10srollout@mozilla.org.xpi\",\"e\":true,\"v\":\"1.0\",\"st\":1468991047221},\"firefox@getpocket.com\":{\"d\":\"C:\\\\Users\\\\User\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\jj6fe4no.default\\\\features\\\\{f1e40b6a-dae4-4404-8dae-f5b7a26752d2}\\\\firefox@getpocket.com.xpi\",\"e\":true,\"v\":\"1.0.2\",\"st\":1468991049117},\"loop@mozilla.org\":{\"d\":\"C:\\\\Users\\\\User\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\jj6fe4no.default\\\\features\\\\{f1e40b6a-dae4-4404-8dae-f5b7a26752d2}\\\\loop@mozilla.org.xpi\",\"e\":true,\"v\":\"1.4.2\",\"st\":1468991050092}},\"app-system-defaults\":{\"e10srollout@mozilla.org\":{\"d\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\browser\\\\features\\\\e10srollout@mozilla.org.xpi\",\"e\":false,\"v\":\"1.0\",\"st\":1468301977722},\"firefox@getpocket.com\":{\"d\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\browser\\\\features\\\\firefox@getpocket.com.xpi\",\"e\":false,\"v\":\"1.0.2\",\"st\":1468301977664},\"loop@mozilla.org\":{\"d\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\browser\\\\features\\\\loop@mozilla.org.xpi\",\"e\":false,\"v\":\"1.3.2\",\"st\":1468301977529}},\"app-global\":{\"{972ce4c6-7e08-4474-a285-3208198ce6fd}\":{\"d\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\browser\\\\extensions\\\\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi\",\"e\":true,\"v\":\"47.0.1\",\"st\":1468301977726}},\"winreg-app-global\":{\"{20a82645-c095-46ed-80e3-08825760534b}\":{\"d\":\"C:\\\\Windows\\\\Microsoft.NET\\\\Framework\\\\v3.5\\\\Windows Presentation Foundation\\\\DotNetAssistantExtension\",\"e\":false,\"v\":\"0.0.0\",\"st\":1250091089201,\"mt\":1232707720000}}}"
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazání:dts.search-results.com
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazání:search.sweetim.com
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazání:mystart.incredibar.com
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazání:klit.startnow.com
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazání:ask.com
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazání:www1.delta-search.com
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazání:delta-search.com
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default] [homepage] Smazání:hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=04A60019212B741E&affID=119654&tsp=4985


*************************

:: "Tracing" klíč smazán
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [16895 Bajtů] - [20/09/2016 08:52:11]
C:\AdwCleaner\AdwCleaner[S0].txt - [14008 Bajtů] - [20/09/2016 08:37:41]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [17045 Bajtů] ##########

[Rudy]

Dejte nový log RSIT.

[djrene]

Logfile of random's system information tool 1.10 (written by random/random)
Run by User at 2016-09-21 08:37:15
Microsoft® Windows Vista™ Business Service Pack 2
System drive C: has 12 GB (16%) free of 73 GB
Total RAM: 1791 MB (15% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:37:39, on 21.9.2016
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16819)
Boot mode: Normal

Running processes:
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\TeamViewer\TeamViewer.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Users\User\Desktop\RSIT.exe
C:\Program Files\trend micro\User.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://cs.intl.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://cs.intl.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - (no file)
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: Start Remote Administrator server.lnk = C:\Windows\System32\r_server.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O16 - DPF: {361E6B79-4A69-4376-B0F2-3D1EBEE9D7E2} (RtspVaPgCtrl Class) - http://193.85.210.249/RtspVaPgDec.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://81.200.53.163:7000/activex/AMC.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B21F97F4-3C3D-43C8-AB3E-336CC85C1399}: NameServer = 10.0.0.11
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer\TeamViewer_Service.exe
O23 - Service: uvnc_service - UltraVNC - C:\Program Files\UltraVNC\WinVNC.exe

--
End of file - 4699 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\jj6fe4no.default

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 23.0.0.162 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_23_0_0_162.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.50709.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-02-15 4390912]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FreeCall]
C:\Program Files\FreeCall.com\FreeCall\FreeCall.exe -nosplash -minimized []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe
Start Remote Administrator server.lnk - C:\Windows\System32\r_server.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"VIDC.I420"=MSH263.DRV
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"msacm.voxacm160"=vct3216.acm
"msacm.scg726"=scg726.acm
"msacm.alf2cd"=alf2cd.acm
"msacm.ac3acm"=AC3ACM.acm
"vidc.dvsd"=mcdvd_32.dll
"vidc.xvid"=xvidvfw.dll
"vidc.DIVX"=DivX.dll
"vidc.mpg4"=mpg4c32.dll
"vidc.mp42"=mpg4c32.dll
"vidc.mp43"=mpg4c32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-09-21 08:16:44 ----A---- C:\Windows\system32\oleaut32.dll
2016-09-21 08:15:49 ----A---- C:\Windows\system32\tzres.dll
2016-09-21 04:37:55 ----A---- C:\Windows\system32\msfeedssync.exe
2016-09-21 04:37:54 ----A---- C:\Windows\system32\urlmon.dll
2016-09-21 04:37:54 ----A---- C:\Windows\system32\msfeedsbs.dll
2016-09-21 04:37:52 ----A---- C:\Windows\system32\vbscript.dll
2016-09-21 04:37:52 ----A---- C:\Windows\system32\mshta.exe
2016-09-21 04:37:52 ----A---- C:\Windows\system32\msfeeds.dll
2016-09-21 04:37:52 ----A---- C:\Windows\system32\jsproxy.dll
2016-09-21 04:37:52 ----A---- C:\Windows\system32\dxtrans.dll
2016-09-21 04:37:51 ----A---- C:\Windows\system32\iertutil.dll
2016-09-21 04:37:50 ----A---- C:\Windows\system32\wininet.dll
2016-09-21 04:37:50 ----A---- C:\Windows\system32\url.dll
2016-09-21 04:37:50 ----A---- C:\Windows\system32\jscript.dll
2016-09-21 04:37:50 ----A---- C:\Windows\system32\ieUnatt.exe
2016-09-21 04:37:50 ----A---- C:\Windows\system32\ieui.dll
2016-09-21 04:37:50 ----A---- C:\Windows\system32\dxtmsft.dll
2016-09-21 04:37:49 ----A---- C:\Windows\system32\ieframe.dll
2016-09-21 04:37:45 ----A---- C:\Windows\system32\mshtmled.dll
2016-09-21 04:37:44 ----A---- C:\Windows\system32\jscript9.dll
2016-09-21 04:37:43 ----A---- C:\Windows\system32\mshtml.dll
2016-09-21 03:11:40 ----A---- C:\Windows\system32\ncrypt.dll
2016-09-21 03:11:29 ----A---- C:\Windows\system32\schannel.dll
2016-09-21 03:11:29 ----A---- C:\Windows\system32\bcrypt.dll
2016-09-21 03:10:38 ----A---- C:\Windows\system32\netevent.dll
2016-09-21 03:10:29 ----A---- C:\Windows\system32\drivers\srvnet.sys
2016-09-21 03:10:29 ----A---- C:\Windows\system32\drivers\srv2.sys
2016-09-21 03:10:29 ----A---- C:\Windows\system32\drivers\srv.sys
2016-09-21 03:06:50 ----A---- C:\Windows\system32\user32.dll
2016-09-21 03:06:49 ----A---- C:\Windows\system32\win32k.sys
2016-09-21 03:03:57 ----A---- C:\Windows\system32\csrsrv.dll
2016-09-21 03:03:56 ----A---- C:\Windows\system32\ntkrnlpa.exe
2016-09-21 03:03:55 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-09-20 08:12:24 ----D---- C:\AdwCleaner
2016-09-15 11:45:51 ----D---- C:\Program Files\trend micro
2016-09-15 11:45:50 ----D---- C:\rsit

======List of files/folders modified in the last 1 month======

2016-09-21 08:37:26 ----D---- C:\Windows\Prefetch
2016-09-21 08:20:05 ----D---- C:\Windows\Temp
2016-09-21 08:19:10 ----D---- C:\Windows\system32\cs-CZ
2016-09-21 08:19:10 ----D---- C:\Windows\System32
2016-09-21 08:19:09 ----D---- C:\Windows\system32\migration
2016-09-21 08:19:08 ----D---- C:\Program Files\Internet Explorer
2016-09-21 08:16:52 ----D---- C:\Windows\winsxs
2016-09-21 08:16:50 ----D---- C:\Windows\system32\catroot
2016-09-21 08:14:23 ----SHD---- C:\System Volume Information
2016-09-21 04:58:07 ----D---- C:\Windows\rescache
2016-09-21 04:33:10 ----D---- C:\Program Files\Microsoft Silverlight
2016-09-21 04:30:09 ----D---- C:\Windows\system32\drivers
2016-09-21 03:19:37 ----D---- C:\Windows\system32\MRT
2016-09-21 03:19:35 ----D---- C:\Windows\Debug
2016-09-21 03:17:01 ----AC---- C:\Windows\system32\mrt.exe
2016-09-21 03:12:26 ----D---- C:\Windows\system32\catroot2
2016-09-21 03:10:26 ----SHD---- C:\Windows\Installer
2016-09-21 03:10:25 ----SHD---- C:\Config.Msi
2016-09-21 03:02:59 ----D---- C:\Program Files\Windows Journal
2016-09-20 09:00:41 ----D---- C:\Windows\inf
2016-09-20 08:55:55 ----D---- C:\Windows
2016-09-20 08:48:54 ----HD---- C:\ProgramData
2016-09-20 08:43:17 ----RD---- C:\Program Files
2016-09-15 11:38:14 ----D---- C:\Windows\SoftwareDistribution
2016-09-15 11:31:31 ----D---- C:\Program Files\Spybot - Search & Destroy 2
2016-09-15 11:28:36 ----A---- C:\Windows\wininit.ini
2016-09-15 11:28:35 ----SD---- C:\ProgramData\Microsoft
2016-09-15 11:28:35 ----D---- C:\ProgramData\Spybot - Search & Destroy
2016-09-15 11:28:29 ----D---- C:\Windows\Tasks
2016-09-15 11:06:40 ----D---- C:\Windows\system32\Tasks
2016-09-14 04:14:43 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2016-09-14 04:14:31 ----D---- C:\Windows\system32\Macromed
2016-09-02 04:42:58 ----D---- C:\Program Files\TeamViewer
2016-09-01 11:29:02 ----D---- C:\Program Files\NetBet Poker

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2016-03-16 71488]
R0 nvstor32;nvstor32; C:\Windows\system32\drivers\nvstor32.sys [2006-12-11 97576]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2016-03-16 206312]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2015-12-19 146024]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2016-03-16 152728]
R1 EpfwLWF;ESET Personal Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2016-03-16 44608]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [2015-12-19 111040]
R2 int15;int15; \??\C:\Windows\system32\drivers\int15.sys [2006-11-27 69632]
R3 CA561;VideoCAM Express V2; C:\Windows\System32\Drivers\SPCA561.SYS [2002-09-30 119798]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-02-14 1740904]
R3 mv2;mv2; C:\Windows\system32\DRIVERS\mv2.sys [2009-04-01 12096]
R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys [2006-01-04 6144]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-06-20 7468128]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2008-01-19 9216]
R3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136]
R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2006-11-09 194560]
S2 netlimiter;netlimiter; \??\C:\Windows\system32\drivers\netlimiter.sys []
S2 osaio;osaio; \??\C:\Windows\system32\drivers\osaio.sys []
S3 avchv;avchv Function Driver; C:\Windows\system32\DRIVERS\avchv.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2008-02-22 47360]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-09-24 81088]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2016-07-14 1983264]
R2 eRecoveryService;eRecovery Service; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [2006-12-28 49152]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-12-14 61440]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-06-20 118784]
R2 TeamViewer;TeamViewer 10; C:\Program Files\TeamViewer\TeamViewer_Service.exe [2015-09-11 5702416]
R2 uvnc_service;uvnc_service; C:\Program Files\UltraVNC\WinVNC.exe [2009-08-16 1589704]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-08 144200]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-09-14 270016]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-08 144200]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2016-07-12 146888]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2014-04-12 772296]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2014-04-12 45744]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------

[Rudy]

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

[djrene]

Logfile of random's system information tool 1.10 (written by random/random)
Run by User at 2016-09-22 08:27:00
Microsoft® Windows Vista™ Business Service Pack 2
System drive C: has 14 GB (20%) free of 73 GB
Total RAM: 1791 MB (39% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:27:08, on 22.9.2016
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16819)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\TeamViewer\TeamViewer.exe
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\User\Desktop\RSIT.exe
C:\Program Files\trend micro\User.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://cs.intl.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://cs.intl.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: Start Remote Administrator server.lnk = C:\Windows\System32\r_server.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O16 - DPF: {361E6B79-4A69-4376-B0F2-3D1EBEE9D7E2} (RtspVaPgCtrl Class) - http://193.85.210.249/RtspVaPgDec.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://81.200.53.163:7000/activex/AMC.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B21F97F4-3C3D-43C8-AB3E-336CC85C1399}: NameServer = 10.0.0.11
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer\TeamViewer_Service.exe
O23 - Service: uvnc_service - UltraVNC - C:\Program Files\UltraVNC\WinVNC.exe

--
End of file - 4551 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\jj6fe4no.default

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 23.0.0.162 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_23_0_0_162.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.50709.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-02-15 4390912]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FreeCall]
C:\Program Files\FreeCall.com\FreeCall\FreeCall.exe -nosplash -minimized []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe
Start Remote Administrator server.lnk - C:\Windows\System32\r_server.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"VIDC.I420"=MSH263.DRV
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"msacm.voxacm160"=vct3216.acm
"msacm.scg726"=scg726.acm
"msacm.alf2cd"=alf2cd.acm
"msacm.ac3acm"=AC3ACM.acm
"vidc.dvsd"=mcdvd_32.dll
"vidc.xvid"=xvidvfw.dll
"vidc.DIVX"=DivX.dll
"vidc.mpg4"=mpg4c32.dll
"vidc.mp42"=mpg4c32.dll
"vidc.mp43"=mpg4c32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-09-22 08:17:37 ----D---- C:\_OTM
2016-09-21 08:16:44 ----A---- C:\Windows\system32\oleaut32.dll
2016-09-21 08:15:49 ----A---- C:\Windows\system32\tzres.dll
2016-09-21 04:37:55 ----A---- C:\Windows\system32\msfeedssync.exe
2016-09-21 04:37:54 ----A---- C:\Windows\system32\urlmon.dll
2016-09-21 04:37:54 ----A---- C:\Windows\system32\msfeedsbs.dll
2016-09-21 04:37:52 ----A---- C:\Windows\system32\vbscript.dll
2016-09-21 04:37:52 ----A---- C:\Windows\system32\mshta.exe
2016-09-21 04:37:52 ----A---- C:\Windows\system32\msfeeds.dll
2016-09-21 04:37:52 ----A---- C:\Windows\system32\jsproxy.dll
2016-09-21 04:37:52 ----A---- C:\Windows\system32\dxtrans.dll
2016-09-21 04:37:51 ----A---- C:\Windows\system32\iertutil.dll
2016-09-21 04:37:50 ----A---- C:\Windows\system32\wininet.dll
2016-09-21 04:37:50 ----A---- C:\Windows\system32\url.dll
2016-09-21 04:37:50 ----A---- C:\Windows\system32\jscript.dll
2016-09-21 04:37:50 ----A---- C:\Windows\system32\ieUnatt.exe
2016-09-21 04:37:50 ----A---- C:\Windows\system32\ieui.dll
2016-09-21 04:37:50 ----A---- C:\Windows\system32\dxtmsft.dll
2016-09-21 04:37:49 ----A---- C:\Windows\system32\ieframe.dll
2016-09-21 04:37:45 ----A---- C:\Windows\system32\mshtmled.dll
2016-09-21 04:37:44 ----A---- C:\Windows\system32\jscript9.dll
2016-09-21 04:37:43 ----A---- C:\Windows\system32\mshtml.dll
2016-09-21 03:11:40 ----A---- C:\Windows\system32\ncrypt.dll
2016-09-21 03:11:29 ----A---- C:\Windows\system32\schannel.dll
2016-09-21 03:11:29 ----A---- C:\Windows\system32\bcrypt.dll
2016-09-21 03:10:38 ----A---- C:\Windows\system32\netevent.dll
2016-09-21 03:10:29 ----A---- C:\Windows\system32\drivers\srvnet.sys
2016-09-21 03:10:29 ----A---- C:\Windows\system32\drivers\srv2.sys
2016-09-21 03:10:29 ----A---- C:\Windows\system32\drivers\srv.sys
2016-09-21 03:06:50 ----A---- C:\Windows\system32\user32.dll
2016-09-21 03:06:49 ----A---- C:\Windows\system32\win32k.sys
2016-09-21 03:03:57 ----A---- C:\Windows\system32\csrsrv.dll
2016-09-21 03:03:56 ----A---- C:\Windows\system32\ntkrnlpa.exe
2016-09-21 03:03:55 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-09-20 08:12:24 ----D---- C:\AdwCleaner
2016-09-15 11:45:51 ----D---- C:\Program Files\trend micro
2016-09-15 11:45:50 ----D---- C:\rsit

======List of files/folders modified in the last 1 month======

2016-09-22 08:27:08 ----D---- C:\Windows\Prefetch
2016-09-22 08:19:32 ----D---- C:\Windows\Temp
2016-09-22 08:17:40 ----D---- C:\Windows\Tasks
2016-09-22 00:07:25 ----SHD---- C:\System Volume Information
2016-09-21 08:47:15 ----D---- C:\Windows\rescache
2016-09-21 08:19:10 ----D---- C:\Windows\system32\cs-CZ
2016-09-21 08:19:10 ----D---- C:\Windows\System32
2016-09-21 08:19:09 ----D---- C:\Windows\system32\migration
2016-09-21 08:19:08 ----D---- C:\Program Files\Internet Explorer
2016-09-21 08:16:52 ----D---- C:\Windows\winsxs
2016-09-21 08:16:50 ----D---- C:\Windows\system32\catroot
2016-09-21 04:33:10 ----D---- C:\Program Files\Microsoft Silverlight
2016-09-21 04:30:09 ----D---- C:\Windows\system32\drivers
2016-09-21 04:13:48 ----D---- C:\Windows\system32\MRT
2016-09-21 03:19:35 ----D---- C:\Windows\Debug
2016-09-21 03:17:01 ----AC---- C:\Windows\system32\mrt.exe
2016-09-21 03:12:26 ----D---- C:\Windows\system32\catroot2
2016-09-21 03:10:26 ----SHD---- C:\Windows\Installer
2016-09-21 03:10:25 ----SHD---- C:\Config.Msi
2016-09-21 03:02:59 ----D---- C:\Program Files\Windows Journal
2016-09-20 09:00:41 ----D---- C:\Windows\inf
2016-09-20 08:55:55 ----D---- C:\Windows
2016-09-20 08:48:54 ----HD---- C:\ProgramData
2016-09-20 08:43:17 ----RD---- C:\Program Files
2016-09-15 11:38:14 ----D---- C:\Windows\SoftwareDistribution
2016-09-15 11:31:31 ----D---- C:\Program Files\Spybot - Search & Destroy 2
2016-09-15 11:28:36 ----A---- C:\Windows\wininit.ini
2016-09-15 11:28:35 ----SD---- C:\ProgramData\Microsoft
2016-09-15 11:28:35 ----D---- C:\ProgramData\Spybot - Search & Destroy
2016-09-15 11:06:40 ----D---- C:\Windows\system32\Tasks
2016-09-14 04:14:43 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2016-09-14 04:14:31 ----D---- C:\Windows\system32\Macromed
2016-09-02 04:42:58 ----D---- C:\Program Files\TeamViewer
2016-09-01 11:29:02 ----D---- C:\Program Files\NetBet Poker

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2016-03-16 71488]
R0 nvstor32;nvstor32; C:\Windows\system32\drivers\nvstor32.sys [2006-12-11 97576]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2016-03-16 206312]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2015-12-19 146024]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2016-03-16 152728]
R1 EpfwLWF;ESET Personal Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2016-03-16 44608]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [2015-12-19 111040]
R2 int15;int15; \??\C:\Windows\system32\drivers\int15.sys [2006-11-27 69632]
R3 CA561;VideoCAM Express V2; C:\Windows\System32\Drivers\SPCA561.SYS [2002-09-30 119798]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-02-14 1740904]
R3 mv2;mv2; C:\Windows\system32\DRIVERS\mv2.sys [2009-04-01 12096]
R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys [2006-01-04 6144]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-06-20 7468128]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2008-01-19 9216]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560]
R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2006-11-09 194560]
S2 netlimiter;netlimiter; \??\C:\Windows\system32\drivers\netlimiter.sys []
S2 osaio;osaio; \??\C:\Windows\system32\drivers\osaio.sys []
S3 avchv;avchv Function Driver; C:\Windows\system32\DRIVERS\avchv.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2008-02-22 47360]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-09-24 81088]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2016-07-14 1983264]
R2 eRecoveryService;eRecovery Service; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [2006-12-28 49152]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-12-14 61440]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-06-20 118784]
R2 TeamViewer;TeamViewer 10; C:\Program Files\TeamViewer\TeamViewer_Service.exe [2015-09-11 5702416]
R2 uvnc_service;uvnc_service; C:\Program Files\UltraVNC\WinVNC.exe [2009-08-16 1589704]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-08 144200]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-09-14 270016]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-08 144200]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2016-07-12 146888]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2014-04-12 772296]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2014-04-12 45744]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------

[Rudy]

Smazáno. Nastala nějaká změna?

[djrene]

Při nečinosti na PC jede CPU zhruba na 15 procent při prohlížení netu jede zhruba na 80 procent občas vyskoči na 100, znatelně je počítač ted rychlejší. Děkuji za pomoc

[Rudy]

Když je třeba, může vyskočit i na 100%, zvláště tehdy, máte-li k dispozici pouze 1,7GB RAM. Nemáte zač!