VIRY.CZ

Nejde stáhnout

Stáhněte odtud: http://www.stahuj.centrum.cz/utility_a_ ... oval-tool/ .

Zde vkládám log JRT:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 10 Pro x64
Ran by Pavel (Administrator) on 12.11.2017 at 20:24:37,94
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 4

Successfully deleted: C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig (Folder)
Successfully deleted: C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak (Folder)
Successfully deleted: C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bgjpfhpjcgdppjbgnpnjllokbmcdllig (Folder)
Successfully deleted: C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\olfeabkoenfaoljndfecamgilllcpiak (Folder)



Registry: 3

Successfully deleted: HKCU\Software\Google\Chrome\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig (Registry Key)
Successfully deleted: HKCU\Software\Google\Chrome\Extensions\olfeabkoenfaoljndfecamgilllcpiak (Registry Key)
Successfully deleted: HKLM\SYSTEM\CurrentControlSet\services\PCSUUCDRV (Registry Key)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 12.11.2017 at 20:25:47,70
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

OK. Změnilo se něco?

Ne, bohužel nic.

Pak se jedná o tento problém: https://forum.viry.cz/viewtopic.php?f=1 ... 7#p1493483 .

Chápu to dobře?.... Doma mám PC, tablet a notebook. Router jsem měl donedávna zaheslovaný jen uživ. jménem a heslem: admin/admin. Už to mám změněné, ale mohlo to způsobit vniknutí viru? Zdá se mi, že notebook a tablet vykazují stejné problémy v prohlížeči. Je tedy potřeba takto odvirovat i notebook a tablet, aby to bylo v pořádku? Děkuji

Pomůže tohle?:

-Odpojte router od internetu.
-Resetujte router do továrního nastavení.
-Připojte se k routeru přes ethernetový kabel (LAN).
Přihlaste se přes tovární login a heslo, které okamžitě změňte na něco složitějšího.

Možná ano, ale jisté to není. Spíše to samo odezní. Byzkoušet můžete.

Dobrý den,

tak jsem resetoval router, aktualizoval ho na nejnovější firmware, nastavil hesla. Ale žádná změna, na stolním PC občas nějaká ta reklama. Doporučujete tedy čekat?
Prosím ještě o kontrolu logu na notebooku:

Logfile of random's system information tool 1.10 (written by random/random)
Run by aa at 2017-11-17 11:33:59
Microsoft Windows 10 Home
System drive C: has 127 GB (56%) free of 228 GB
Total RAM: 1789 MB (25% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:34:20, on 17.11.2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\taskhostw.exe
C:\WINDOWS\system32\sihost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Windows\System32\RuntimeBroker.exe
c:\windows\system32\inetsrv\w3wp.exe
C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\HP\Digital Imaging\Fax\Fax Driver 0.6 Base\hppfaxprintersrv.exe
C:\Program Files\HP\HP Software Update\hpwuschd2.exe
C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
C:\Users\aa\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\HP\HPLJUT\HPLJUTSCH.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\SearchFilterHost.exe
C:\Users\aa\Desktop\RSIT.exe
C:\Program Files\trend micro\aa.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvLaunch.exe" /gui
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [ToolboxFX] "C:\Program Files\HP\ToolboxFX\bin\HPTLBXFX.exe" /enum:on /alerts:on /notifications:on /fl:on /fr:on /appData:on /tmcp:on
O4 - HKLM\..\Run: [HP LaserJet Professional CM1410 Series Fax] C:\Program Files\HP\Digital Imaging\Fax\Fax Driver 0.6 Base\hppfaxprintersrv.exe "HP LaserJet Professional CM1410 Series Fax"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\aa\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'DefaultAppPool')
O4 - Startup: Lingea Update Center.lnk = C:\Program Files\Common Files\Lingea Shared\luc.exe
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk = C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files\Microsoft Office\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @oem3.inf,%AEADISRV.SvcDesc%;Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\WINDOWS\system32\AEADISRV.EXE
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: AMD External Events Utility - AMD - C:\WINDOWS\system32\atiesrxx.exe
O23 - Service: aswbIDSAgent - AVAST Software - C:\Program Files\AVAST Software\Avast\aswidsagent.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: HP LaserJet Service - HP - C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: @oem4.inf,%hpservice_desc%;HP Service (hpsrv) - Hewlett-Packard Company - C:\WINDOWS\system32\Hpservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

--
End of file - 7988 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2009-05-18 1314816]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-06-04 1791272]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2009-11-11 287800]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvLaunch.exe [2017-11-13 253344]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]
"ToolboxFX"=C:\Program Files\HP\ToolboxFX\bin\HPTLBXFX.exe [2010-10-25 58936]
"HP LaserJet Professional CM1410 Series Fax"=C:\Program Files\HP\Digital Imaging\Fax\Fax Driver 0.6 Base\hppfaxprintersrv.exe [2010-08-24 2459192]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2010-06-09 49208]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"TomTomHOME.exe"=C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [2014-06-05 248176]
"OneDrive"=C:\Users\aa\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2017-11-11 1685704]

C:\Users\aa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Lingea Update Center.lnk - C:\Program Files\Common Files\Lingea Shared\luc.exe
Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk - C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iaioi2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.cvid"=iccvid.dll
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.LAGS"=lagarith.dll
"VIDC.X264"=x264vfw.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.FFDS"=ff_vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.l3codecp"=l3codecp.acm

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2017-11-17 11:34:00 ----D---- C:\Program Files\trend micro
2017-11-17 11:33:59 ----D---- C:\rsit
2017-11-14 18:22:15 ----HD---- C:\$WINDOWS.~BT
2017-11-13 16:58:25 ----A---- C:\WINDOWS\system32\drivers\aswArPot.sys
2017-11-13 16:57:16 ----A---- C:\WINDOWS\system32\aswBoot.exe
2017-11-13 16:55:40 ----D---- C:\ProgramData\SWCUTemp
2017-10-31 13:32:53 ----AC---- C:\WINDOWS\system32\MRT-KB890830.exe
2017-10-31 13:08:38 ----A---- C:\WINDOWS\system32\webio.dll
2017-10-31 13:08:00 ----A---- C:\WINDOWS\system32\RuntimeBroker.exe
2017-10-31 13:07:53 ----A---- C:\WINDOWS\system32\msjint40.dll
2017-10-31 13:07:53 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2017-10-31 13:07:49 ----A---- C:\WINDOWS\system32\t2embed.dll
2017-10-31 13:07:24 ----A---- C:\WINDOWS\system32\mcbuilder.exe
2017-10-31 13:07:20 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2017-10-31 13:07:15 ----A---- C:\WINDOWS\system32\rpchttp.dll
2017-10-31 13:07:14 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2017-10-31 13:07:07 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2017-10-31 13:06:57 ----A---- C:\WINDOWS\system32\wuuhext.dll
2017-10-31 13:06:57 ----A---- C:\WINDOWS\system32\drivers\BasicRender.sys
2017-10-31 13:06:50 ----A---- C:\WINDOWS\system32\winsrv.dll
2017-10-31 13:06:46 ----A---- C:\WINDOWS\system32\TpmTasks.dll
2017-10-31 13:06:46 ----A---- C:\WINDOWS\system32\ngcpopkeysrv.dll
2017-10-31 13:06:46 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2017-10-31 13:06:11 ----A---- C:\WINDOWS\system32\msv1_0.dll
2017-10-31 13:05:44 ----A---- C:\WINDOWS\system32\shell32.dll
2017-10-31 13:05:34 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2017-10-31 13:05:28 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2017-10-31 13:05:27 ----A---- C:\WINDOWS\system32\lsass.exe
2017-10-31 13:05:26 ----A---- C:\WINDOWS\system32\dnsapi.dll
2017-10-31 13:05:25 ----A---- C:\WINDOWS\system32\sspisrv.dll
2017-10-31 13:05:25 ----A---- C:\WINDOWS\system32\sspicli.dll
2017-10-31 13:05:25 ----A---- C:\WINDOWS\system32\drivers\ksecdd.sys
2017-10-31 13:05:24 ----A---- C:\WINDOWS\system32\win32kfull.sys
2017-10-31 13:05:24 ----A---- C:\WINDOWS\system32\win32kbase.sys
2017-10-31 13:05:22 ----A---- C:\WINDOWS\system32\wuaueng.dll
2017-10-31 13:05:17 ----A---- C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-10-31 13:05:17 ----A---- C:\WINDOWS\system32\PCPTpm12.dll
2017-10-31 13:04:54 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2017-10-31 13:04:52 ----A---- C:\WINDOWS\system32\usermgr.dll
2017-10-31 13:04:52 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2017-10-31 13:04:52 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-10-31 13:04:52 ----A---- C:\WINDOWS\system32\MusNotification.exe
2017-10-31 13:04:52 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2017-10-31 13:04:50 ----A---- C:\WINDOWS\system32\tpmvsc.dll
2017-10-31 13:04:50 ----A---- C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2017-10-31 13:04:50 ----A---- C:\WINDOWS\system32\NgcCtnrSvc.dll
2017-10-31 13:04:50 ----A---- C:\WINDOWS\system32\dsreg.dll
2017-10-31 13:04:49 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2017-10-31 13:04:49 ----A---- C:\WINDOWS\system32\NgcCtnr.dll
2017-10-31 13:04:49 ----A---- C:\WINDOWS\system32\ngccredprov.dll
2017-10-31 13:04:49 ----A---- C:\WINDOWS\system32\cryptngc.dll
2017-10-31 13:04:48 ----A---- C:\WINDOWS\system32\mswstr10.dll
2017-10-31 13:04:31 ----A---- C:\WINDOWS\system32\lsasrv.dll
2017-10-31 13:04:30 ----A---- C:\WINDOWS\system32\regsvc.dll
2017-10-31 13:04:30 ----A---- C:\WINDOWS\system32\advapi32.dll
2017-10-31 13:04:27 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2017-10-31 13:04:26 ----A---- C:\WINDOWS\system32\StorSvc.dll
2017-10-31 13:04:26 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2017-10-31 13:04:26 ----A---- C:\WINDOWS\system32\FirewallAPI.dll
2017-10-31 13:04:25 ----A---- C:\WINDOWS\system32\rpcss.dll
2017-10-31 13:04:22 ----A---- C:\WINDOWS\system32\msctf.dll
2017-10-31 13:04:17 ----A---- C:\WINDOWS\system32\wininet.dll
2017-10-31 13:04:15 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2017-10-31 13:04:14 ----A---- C:\WINDOWS\system32\KernelBase.dll
2017-10-31 13:04:14 ----A---- C:\WINDOWS\system32\iertutil.dll
2017-10-31 13:04:09 ----A---- C:\WINDOWS\system32\drivers\nwifi.sys
2017-10-31 13:04:03 ----A---- C:\WINDOWS\system32\dsregcmd.exe
2017-10-31 13:03:46 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-10-31 13:03:31 ----A---- C:\WINDOWS\system32\wlansec.dll
2017-10-31 13:03:19 ----A---- C:\WINDOWS\system32\jscript.dll
2017-10-31 13:03:17 ----A---- C:\WINDOWS\system32\gdi32.dll
2017-10-31 13:03:14 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2017-10-31 13:03:12 ----A---- C:\WINDOWS\system32\msexcl40.dll
2017-10-31 13:03:11 ----A---- C:\WINDOWS\system32\tquery.dll
2017-10-31 13:03:09 ----A---- C:\WINDOWS\system32\ucrtbase.dll
2017-10-31 13:02:56 ----A---- C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-10-31 13:02:56 ----A---- C:\WINDOWS\system32\combase.dll
2017-10-31 13:02:33 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2017-10-31 13:02:20 ----A---- C:\WINDOWS\system32\sppobjs.dll
2017-10-31 13:02:19 ----A---- C:\WINDOWS\system32\user32.dll
2017-10-31 13:02:19 ----A---- C:\WINDOWS\system32\sppwinob.dll
2017-10-31 13:02:12 ----A---- C:\WINDOWS\system32\urlmon.dll
2017-10-31 13:02:11 ----A---- C:\WINDOWS\system32\mfplat.dll
2017-10-31 13:01:58 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-10-31 13:01:57 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2017-10-31 13:01:50 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2017-10-31 13:01:47 ----A---- C:\WINDOWS\system32\dbgeng.dll
2017-10-31 13:01:37 ----A---- C:\WINDOWS\system32\windows.storage.dll
2017-10-31 13:01:34 ----A---- C:\WINDOWS\system32\jscript9.dll
2017-10-31 13:01:32 ----A---- C:\WINDOWS\system32\Chakra.dll
2017-10-31 13:01:30 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2017-10-31 13:01:14 ----A---- C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2017-10-31 13:01:14 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2017-10-31 13:01:13 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-10-31 13:01:12 ----A---- C:\WINDOWS\system32\twinui.dll
2017-10-31 13:01:05 ----A---- C:\WINDOWS\system32\edgehtml.dll
2017-10-31 13:01:03 ----A---- C:\WINDOWS\system32\mshtml.dll
2017-10-31 13:01:01 ----A---- C:\WINDOWS\system32\ieframe.dll

======List of files/folders modified in the last 1 month======

2017-11-17 11:34:02 ----D---- C:\WINDOWS\Prefetch
2017-11-17 11:34:00 ----RD---- C:\Program Files
2017-11-17 11:33:50 ----D---- C:\WINDOWS\Temp
2017-11-17 11:31:14 ----D---- C:\WINDOWS\WinSxS
2017-11-17 11:31:12 ----D---- C:\WINDOWS\CbsTemp
2017-11-17 11:28:24 ----HD---- C:\Program Files\WindowsApps
2017-11-17 11:27:59 ----D---- C:\WINDOWS\AppReadiness
2017-11-17 11:26:30 ----D---- C:\WINDOWS\INF
2017-11-17 11:25:23 ----D---- C:\WINDOWS\system32\config
2017-11-17 11:21:29 ----D---- C:\WINDOWS\system32\drivers
2017-11-17 11:18:44 ----D---- C:\WINDOWS\system32\sru
2017-11-14 18:25:52 ----SHD---- C:\WINDOWS\Installer
2017-11-14 18:25:52 ----D---- C:\ProgramData\Skype
2017-11-14 18:23:58 ----DC---- C:\WINDOWS\Panther
2017-11-14 18:16:50 ----D---- C:\WINDOWS\System32
2017-11-14 18:16:42 ----D---- C:\WINDOWS\system32\Macromed
2017-11-14 18:12:37 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2017-11-14 18:12:04 ----D---- C:\WINDOWS\system32\Tasks
2017-11-13 17:00:24 ----D---- C:\Windows
2017-11-13 16:55:40 ----HD---- C:\ProgramData
2017-11-11 13:57:02 ----D---- C:\ProgramData\SoftwareDistribution
2017-11-11 13:46:57 ----D---- C:\WINDOWS\system32\DriverStore
2017-11-11 11:51:39 ----D---- C:\WINDOWS\rescache
2017-11-11 11:09:00 ----D---- C:\WINDOWS\Microsoft.NET
2017-11-11 10:44:16 ----D---- C:\WINDOWS\system32\catroot2
2017-11-11 10:15:56 ----D---- C:\ProgramData\Microsoft Help
2017-11-11 10:10:02 ----AD---- C:\Program Files\rempl
2017-10-31 14:07:26 ----D---- C:\WINDOWS\system32\en-US
2017-10-31 14:07:26 ----D---- C:\WINDOWS\system32\cs-CZ
2017-10-31 14:04:23 ----RD---- C:\Fotky
2017-10-31 13:37:52 ----D---- C:\WINDOWS\system32\MRT
2017-10-31 13:32:48 ----AC---- C:\WINDOWS\system32\MRT.exe
2017-10-31 13:11:56 ----D---- C:\Mamka
2017-10-31 13:00:27 ----A---- C:\WINDOWS\win.ini
2017-10-31 12:58:36 ----AD---- C:\Program Files\Common Files\microsoft shared
2017-10-31 12:34:24 ----D---- C:\WINDOWS\Minidump
2017-10-24 22:06:43 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2017-10-22 12:27:33 ----A---- C:\WINDOWS\SMSS-PFRO395f.tmp
2017-10-22 12:26:50 ----D---- C:\ProgramData\AVAST Software

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswbidsh;aswbidsh; C:\WINDOWS\system32\drivers\aswbidshx.sys [2017-11-13 157408]
R0 aswblog;aswblog; C:\WINDOWS\system32\drivers\aswblogx.sys [2017-11-13 276728]
R0 aswbuniv;aswbuniv; C:\WINDOWS\system32\drivers\aswbunivx.sys [2017-11-13 50376]
R0 aswRvrt;aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [2017-11-13 70864]
R0 aswVmm;aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [2017-11-13 298360]
R0 hpdskflt;@oem4.inf,%service_desc%;HP Filter; C:\WINDOWS\system32\DRIVERS\hpdskflt.sys [2011-05-13 25656]
R1 aswArPot;aswArPot; C:\WINDOWS\system32\drivers\aswArPot.sys [2017-11-13 157176]
R1 aswbidsdriver;aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdriverx.sys [2017-11-13 255616]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2017-09-23 39784]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2017-11-13 99560]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2017-11-13 783136]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2017-11-13 388768]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2016-06-17 76288]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 7680]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2017-11-13 124952]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2017-11-13 150848]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 36864]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-10-30 62464]
R3 Accelerometer;@oem4.inf,%accelerometer_desc%;HP Mobile Data Protection Sensor; C:\WINDOWS\system32\DRIVERS\Accelerometer.sys [2011-05-13 35896]
R3 ADIHdAudAddService;@oem3.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2009-05-18 381440]
R3 AgereSoftModem;@oem10.inf,%ServiceName%;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2010-01-26 1163328]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2015-01-13 10070016]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2015-01-13 290304]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2016-08-03 93184]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2017-07-07 103424]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\System32\drivers\BTHUSB.sys [2016-08-03 61952]
R3 HBtnKey;@oem5.inf,%CPQBTTN.SvcDesc%;HP Hotkey Device; C:\WINDOWS\system32\DRIVERS\cpqbttn.sys [2010-02-25 15544]
R3 HpqKbFiltr;@oem2.inf,%HpqKbFiltr.SvcDesc%;HpqKbFilter Driver; C:\WINDOWS\System32\drivers\HpqKbFiltr.sys [2009-04-29 15872]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2016-06-17 130560]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2016-08-03 140288]
R3 StillCam;@sti.inf,%StillCam.SvcDesc%;Ovladač digitálního fotoaparátu pro sériový port; C:\WINDOWS\system32\DRIVERS\serscan.sys [2015-10-30 9216]
R3 SynTP;@oem11.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2010-06-04 1303728]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 88928]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 83288]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-10-30 51040]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-10-30 51552]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-10-30 27992]
S3 aswHwid;aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [2017-11-13 42848]
S3 BCM43XX;@netbc63.inf,%BCM43XX_Service_DispName%;Broadcom 802.11 Network Adapter Driver; C:\WINDOWS\System32\drivers\bcmwl63l.sys [2015-10-30 4715008]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 8192]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\System32\drivers\BTHport.sys [2016-08-03 744448]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 26624]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2016-04-27 96768]
S3 dg_ssudbus;@oem9.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2016-09-05 109184]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2017-09-05 17408]
S3 GPIO;@iaiogpio.inf,%GPIO.SVCDESC%;Intel SoC GPIO Controller Driver; C:\WINDOWS\System32\drivers\iaiogpio.sys [2015-10-30 22016]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 38240]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 66048]
S3 iaioi2c;@iaioi2c.inf,%Driver_Service.Desc%;Intel(R) Atom(TM) Processor I2C Controller Service; C:\WINDOWS\System32\drivers\iaioi2c.sys [2015-10-30 61936]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 23040]
S3 ssudmdm;@oem17.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2016-09-05 147072]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2016-06-17 46080]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-10-30 33792]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-10-30 32768]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-09-27 83984]
R2 AEADIFilters;@oem3.inf,%AEADISRV.SvcDesc%;Andrea ADI Filters Service; C:\WINDOWS\system32\AEADISRV.EXE [2008-07-15 90112]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2009-12-03 26112]
R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2015-01-13 217088]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2017-11-13 281416]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R2 hpsrv;@oem4.inf,%hpservice_desc%;HP Service; C:\WINDOWS\system32\Hpservice.exe [2011-05-13 26168]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2016-06-17 25088]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
R2 OneSyncSvc_671feb;Hostitel synchronizace_671feb; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [2014-06-05 93040]
R3 aswbIDSAgent;aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [2017-11-13 5904136]
R3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2010-01-12 227896]
R3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2009-04-30 229944]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
R3 PimIndexMaintenanceSvc_671feb;Data kontaktů_671feb; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2016-03-13 154440]
S2 HP LaserJet Service;HP LaserJet Service; C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe [2010-10-25 145920]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2015-10-30 37256]
S2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S2 OneSyncSvc_1f7916c;Hostitel synchronizace_1f7916c; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S2 OneSyncSvc_2c499e1;Hostitel synchronizace_2c499e1; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S2 OneSyncSvc_32821;Hostitel synchronizace_32821; C:\Windows\system32\svchost.exe [2015-10-30 37256]
S2 OneSyncSvc_f739f3;Hostitel synchronizace_f739f3; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2015-10-30 37256]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2017-07-18 317408]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-11-14 272384]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 26112]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2016-03-13 154440]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 MessagingService_1f7916c;Služba zasílání zpráv_1f7916c; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 MessagingService_2c499e1;Služba zasílání zpráv_2c499e1; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 MessagingService_671feb;Služba zasílání zpráv_671feb; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 MessagingService_f739f3;Služba zasílání zpráv_f739f3; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2016-02-13 146888]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2017-09-12 159960]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 PimIndexMaintenanceSvc_1f7916c;Data kontaktů_1f7916c; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 PimIndexMaintenanceSvc_2c499e1;Data kontaktů_2c499e1; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 PimIndexMaintenanceSvc_f739f3;Data kontaktů_f739f3; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2017-03-04 900096]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2015-10-30 256512]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2015-10-30 45752]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]

-----------------EOF-----------------

V kterém prohlížeči se toto děje?

Google Chrome

Zkusíme ho přeinstalovat. Chrome zazálohujte pomocí ChromeBackup: http://www.stahuj.centrum.cz/internet_a ... me-backup/ . Pak Chrome kompletně přeinstalujte vč. jeho profilu (podadresáře Chrome v c:\users\aa\appdata\local, c:\users\aa\appdata\roaming, c:\users\aa\data aplikací, c:\users\aa\local settings a v c:\program data musí být smazány). Potom uděláte novou, čistou instalaci Chrome a zpět ze zálohy nakopírujte pouze záložky a hesla.

Dobrý den, jsem z toho venku na notebooku jsem Chrome přeinstaloval a je to v pořádku. Na stolním PC jsem si stáhl Malwarebytes, ten mi našel havěť - adware, riskware, pup, trojan.dnschanger, atd... Dal jsem je do karantény a najednou prohlížeč ok, bez reklam a přesměrování, ukazuje se tlačítko Captcha a vše ok. Ale chci se zeptat, jestli můžu tyto soubory z karantény odstranit, a jestli mám odinstalovat celý Malwarebytes. Mám již avast a říká se, že není dobré mít více antivirů v PC. Díky za informace a za pomoc při odvirování.

Karanténu smazat samozřejmě můžete a MBAM odinstalujte. MBAM (v shareware verzi je jen skener, který nemá rezidentní štít, proto se nemůže tlouci s rezdentním antivirem). Nemáte zač!