VIRY.CZ

Dobrý večer,poprosil by som Vás o kontrolu logu,lebo mám podozrenie,že som dostal vírus,ale po pre skenovaní nič nenašlo.
Ďakujem

Logfile of random's system information tool 1.09 (written by random/random)
Run by user at 2013-03-17 23:23:35
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 227 GB (24%) free of 935 GB
Total RAM: 8140 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:23:37, on 17. 3. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16470)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Bloody2\Bloody2\Bloody2.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\user.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.pu-results.info/?pid=2 ... g=EN&cc=CZ
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.pu-results.info/?pid=2 ... g=EN&cc=CZ
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = cache.fi.muni.cz:3128
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F3 - REG:win.ini: load=C:\Users\user\LOCALS~1\Temp\msaemurc.cmd
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search-NewTab - {2277EC71-1776-D507-4F2A-F773C3421B74} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: TSBHO Class - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Browse2save - {AA3567A4-E597-04B7-E2D6-6BBF64A88705} - (no file)
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Bloody2] C:\Program Files (x86)\Bloody2\Bloody2\Bloody2.exe Minimum
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Odoslať obrázok do &Zariadenia s rozhraním Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odoslať stránku do &Zariadenia s rozhraním Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra button: Odoslať do rozhrania Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Odoslať do &Zariadenie s rozhraním Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: c:\progra~2\browse~1\sprote~1.dll c:\progra~2\websea~1\sprote~1.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Connectify - Unknown owner - C:\Program Files (x86)\Connectify\ConnectifyService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Auto (HPAuto) - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe
O23 - Service: HP Client Services (HPClientSvc) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
O23 - Service: HP Connection Manager 4 Service (hpCMSrv) - Hewlett-Packard Development Company L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing)
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10129 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 13387 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\Hpservice.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-2099757f-d80b-4b4e-9351-ffd9b0d5771a -SystemEventPortName:HostProcess-9ee6138f-963f-46bf-a465-7f7940cf9fd3 -IoCancelEventPortName:HostProcess-393f965f-b9ab-4cc2-ad97-e21ac4f2df9d -NonStateChangingEventPortName:HostProcess-6d96bae1-729c-40b5-b8ed-11a50b048f6f -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:7fb78826-3189-4b01-a31b-8e4b5c090f9a -DeviceGroupId:
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 18342464
\??\C:\Windows\system32\conhost.exe "6774148702007564932-11176847621660638741-198916757617842825731674809125-714488610
taskeng.exe {0F6C1834-3C68-4889-8B84-28FBCA15E9AA}
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\IDT\WDM\AESTSr64.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\Connectify\ConnectifyService.exe"
"ConnectifyD.exe"
\??\C:\Windows\system32\conhost.exe "-12324770231468281242-12159081613986896131991760215-344187160-1076989607459942052
"C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe"
C:\Windows\system32\HPSIsvc.exe
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe"
"C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2276
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
atieclxx
C:\Windows\system32\wbem\wmiprvse.exe
"taskhost.exe"
C:\ProgramData\BetterSoft\OptimizerPro\OptimizerPro.exe /schedule /profile "c:\programdata\bettersoft\optimizerpro\3036567561.ini"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
taskeng.exe {E0D5436A-F1E8-42CB-9608-BC5E7F29B672}
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\Users\user\Documents\Programy\GPUMeter_2.02\PCMeter\PCMeter\PCMeterV0.3.exe
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Bloody2\Bloody2\Bloody2.exe" Minimum
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
taskeng.exe {08D68E6A-8345-4EE8-BEA2-AB0639C3A881}
"C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="5236.0.2066415613\1452631584" --supports-dual-gpus=false --reduce-gpu-sandbox --disable-image-transport-surface --gpu-vendor-id=0x8086 --gpu-device-id=0x0116 --gpu-driver-vendor="ATI Technologies Inc." --gpu-driver-version=8.830.6.3000 --ignored=" --type=renderer " /prefetch:12
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials=BookmarkPrompt/Control/ForceCompositingMode/thread/InfiniteCache/No/NewTabButton/default/OmniboxHQPReplaceHUPRearrangeNumComponents/Standard/OmniboxSearchSuggestTrialStarted2013Q1/18/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_74/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/default/ --extension-process --renderer-print-preview --enable-threaded-compositing --channel="5236.2.667164707\1664759898" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials=BookmarkPrompt/Control/ForceCompositingMode/thread/InfiniteCache/No/NewTabButton/default/OmniboxHQPReplaceHUPRearrangeNumComponents/Standard/OmniboxSearchSuggestTrialStarted2013Q1/18/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_74/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/default/ --extension-process --renderer-print-preview --enable-threaded-compositing --channel="5236.3.1349240477\535717945" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials=BookmarkPrompt/Control/ForceCompositingMode/thread/InfiniteCache/No/NewTabButton/default/OmniboxHQPReplaceHUPRearrangeNumComponents/Standard/OmniboxSearchSuggestTrialStarted2013Q1/18/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_74/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/default/ --extension-process --renderer-print-preview --enable-threaded-compositing --channel="5236.4.2071277478\1538456652" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials=BookmarkPrompt/Control/ForceCompositingMode/thread/InfiniteCache/No/NewTabButton/default/OmniboxHQPNewScoringMax1400/Standard/OmniboxHQPOnlyCountMatchesAtWordBoundaries/Standard/OmniboxHQPReplaceHUPRearrangeNumComponents/Standard/OmniboxSearchSuggestTrialStarted2013Q1/18/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwndMin10/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_74/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="5236.5.1120065090\354942936" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="5236.6.144185229\1981879686" --lang=sk --ignored=" --type=renderer " /prefetch:13
"C:\Program Files\Microsoft Security Client\MsMpEng.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" /UpdateAndQuickScan /OpenWebPageOnClose
"C:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials=BookmarkPrompt/Control/ForceCompositingMode/thread/InfiniteCache/No/NewTabButton/default/OmniboxHQPNewScoringMax1400/Standard/OmniboxHQPOnlyCountMatchesAtWordBoundaries/Standard/OmniboxHQPReplaceHUPRearrangeNumComponents/Standard/OmniboxSearchSuggestTrialStarted2013Q1/18/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwndMin10/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_74/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="5236.22.182751407\1559835157" /prefetch:3
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\user\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4204391165-3645872910-4001035389-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4204391165-3645872910-4001035389-1000UA.job
C:\Windows\tasks\HPCeeScheduleForuser.job
C:\Windows\tasks\schedule!3036567561.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2012-08-16 6670496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8590886E-EC8C-43C1-A32C-E4C2B0B6395B}]
TrueSuite Website Log On - C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll [2011-02-17 1744200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-09-07 49440]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18 66280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2277EC71-1776-D507-4F2A-F773C3421B74}]
Search-NewTab

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2012-08-16 4171424]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-03-07 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8590886E-EC8C-43C1-A32C-E4C2B0B6395B}]
TrueSuite Website Log On - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll [2011-02-17 1596232]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA3567A4-E597-04B7-E2D6-6BBF64A88705}]
Browse2save

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-03-07 170912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2012-07-09 351136]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-11-08 2847016]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2011-03-11 1128448]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-04-15 168216]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-04-15 392472]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-04-15 416024]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2013-01-27 1281512]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"Bloody2"=C:\Program Files (x86)\Bloody2\Bloody2\Bloody2.exe [2012-12-14 4282880]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2012-12-18 38112]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]
C:\Program Files (x86)\Alcohol Soft\Alcohol 120\axcmd.exe [2009-09-18 205976]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\amd_dc_opt]
C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-01-28 59720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 112512]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Connectify]
C:\Program Files (x86)\Connectify\Connectify.exe [2012-11-09 4013928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-21 116648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPConnectionManager]
C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [2011-06-14 103992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HydraVisionDesktopManager]
C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files (x86)\iTunes\iTunesHelper.exe [2013-02-20 152392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\l]
C:\Users\user\AppData\Local\Temp\l.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent]
C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [2010-03-26 1234216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NUSB3MON]
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-11-17 113288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSpeedUp]
C:\Program Files (x86)\Zrychlenie PC\PCSUNotifier.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Powersuite Monitor]
C:\Program Files (x86)\Uniblue\PowerSuite\powersuite_monitor.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Prime95]
C:\Users\user\Downloads\p95v277.win64\prime95.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files (x86)\QuickTime\QTTask.exe [2010-11-29 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SafeQ Client]
C:\Program Files (x86)\Y Soft\SafeQ Client\Client\SafeQ Client.exe [2012-10-10 259072]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\Steam.exe [2012-11-23 1353080]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTTray.exe [2010-07-29 1132320]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^user^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Obrazovková spinka a spúšťač programu OneNote 2010.lnk]
C:\PROGRA~1\MICROS~2\Office14\ONENOTEM.EXE [2013-01-08 246368]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HP Quick Launch"=C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [2010-11-09 586296]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2011-05-20 284440]
"HPOSD"=C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [2011-01-27 318520]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2013-02-16 642656]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-04-15 385024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2012-08-16 6670496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2012-08-16 4171424]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"EnableShellExecuteHooks"=1
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2013-03-17 23:23:35 ----D---- C:\rsit
2013-03-17 23:01:50 ----D---- C:\Program Files (x86)\Microsoft Security Client
2013-03-17 23:01:47 ----D---- C:\Program Files\Microsoft Security Client
2013-03-17 22:56:30 ----D---- C:\26f5c0863f8faee080a6b32304dc88
2013-03-17 20:42:48 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-03-17 20:42:48 ----A---- C:\Windows\system32\mshtmled.dll
2013-03-17 20:42:47 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-03-17 20:42:47 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-03-17 20:42:47 ----A---- C:\Windows\SYSWOW64\url.dll
2013-03-17 20:42:47 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-03-17 20:42:47 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-03-17 20:42:47 ----A---- C:\Windows\system32\urlmon.dll
2013-03-17 20:42:47 ----A---- C:\Windows\system32\url.dll
2013-03-17 20:42:47 ----A---- C:\Windows\system32\ieUnatt.exe
2013-03-17 20:42:47 ----A---- C:\Windows\system32\ieui.dll
2013-03-17 20:42:46 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-03-17 20:42:46 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-03-17 20:42:46 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-03-17 20:42:46 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-03-17 20:42:46 ----A---- C:\Windows\system32\wininet.dll
2013-03-17 20:42:46 ----A---- C:\Windows\system32\vbscript.dll
2013-03-17 20:42:46 ----A---- C:\Windows\system32\msfeeds.dll
2013-03-17 20:42:46 ----A---- C:\Windows\system32\jsproxy.dll
2013-03-17 20:42:46 ----A---- C:\Windows\system32\jscript9.dll
2013-03-17 20:42:45 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-03-17 20:42:45 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-03-17 20:42:45 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-03-17 20:42:45 ----A---- C:\Windows\system32\jscript.dll
2013-03-17 20:42:45 ----A---- C:\Windows\system32\iertutil.dll
2013-03-17 20:42:43 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-03-17 20:42:43 ----A---- C:\Windows\system32\mshtml.dll
2013-03-17 20:42:43 ----A---- C:\Windows\system32\ieframe.dll
2013-03-14 04:23:36 ----D---- C:\Program Files\Microsoft Silverlight
2013-03-07 23:53:36 ----A---- C:\Windows\SYSWOW64\javaws.exe
2013-03-07 23:53:26 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2013-03-07 23:50:43 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-03-07 23:50:37 ----D---- C:\Windows\system32\Macromed
2013-03-04 23:06:46 ----A---- C:\Windows\NeroDigital.ini
2013-03-01 02:04:44 ----D---- C:\Program Files (x86)\Crysis 3
2013-02-27 03:00:41 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-02-27 03:00:40 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-02-27 03:00:40 ----A---- C:\Windows\system32\UIAnimation.dll
2013-02-27 03:00:40 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-02-27 03:00:39 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-02-27 03:00:39 ----A---- C:\Windows\system32\WMPhoto.dll
2013-02-27 03:00:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-02-27 03:00:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-02-27 03:00:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-02-27 03:00:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-02-27 03:00:38 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-02-27 03:00:38 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-02-27 03:00:38 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-02-27 03:00:38 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-02-27 03:00:38 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-02-27 03:00:38 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-02-27 03:00:38 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-02-27 03:00:38 ----A---- C:\Windows\system32\d3d10warp.dll
2013-02-27 03:00:38 ----A---- C:\Windows\system32\d3d10_1.dll
2013-02-27 03:00:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-02-27 03:00:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-02-27 03:00:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-02-27 03:00:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-02-27 03:00:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-02-27 03:00:37 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-02-27 03:00:37 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-02-27 03:00:37 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-02-27 03:00:37 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-02-27 03:00:37 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-02-27 03:00:37 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-02-27 03:00:37 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-02-27 03:00:37 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-02-27 03:00:37 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-02-27 03:00:37 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-02-27 03:00:37 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-02-27 03:00:37 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-02-27 03:00:37 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-02-27 03:00:37 ----A---- C:\Windows\system32\XpsPrint.dll
2013-02-27 03:00:37 ----A---- C:\Windows\system32\dxgi.dll
2013-02-27 03:00:37 ----A---- C:\Windows\system32\d3d11.dll
2013-02-27 03:00:37 ----A---- C:\Windows\system32\d3d10level9.dll
2013-02-27 03:00:37 ----A---- C:\Windows\system32\d3d10core.dll
2013-02-27 03:00:37 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-02-27 03:00:37 ----A---- C:\Windows\system32\d3d10.dll
2013-02-27 03:00:36 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-02-27 03:00:36 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-02-27 03:00:36 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-02-27 03:00:36 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-02-27 03:00:36 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-02-27 03:00:36 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-02-27 03:00:36 ----A---- C:\Windows\system32\FntCache.dll
2013-02-27 03:00:36 ----A---- C:\Windows\system32\DWrite.dll
2013-02-27 03:00:36 ----A---- C:\Windows\system32\d2d1.dll
2013-02-23 16:55:01 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-02-23 16:55:01 ----D---- C:\Program Files\iTunes
2013-02-23 16:55:01 ----D---- C:\Program Files\iPod
2013-02-23 16:55:01 ----D---- C:\Program Files (x86)\iTunes
2013-02-22 22:12:19 ----D---- C:\Program Files (x86)\SystemRequirementsLab
2013-02-22 12:44:24 ----D---- C:\Users\user\AppData\Roaming\GoforFiles
2013-02-22 12:31:43 ----D---- C:\ProgramData\ATI
2013-02-22 12:31:25 ----D---- C:\Program Files (x86)\AMD APP
2013-02-21 12:11:56 ----D---- C:\ProgramData\SoftSafe
2013-02-21 12:11:03 ----D---- C:\ProgramData\Search-NewTab
2013-02-21 12:11:02 ----D---- C:\Program Files (x86)\WebSearch
2013-02-21 12:10:59 ----D---- C:\ProgramData\BetterSoft
2013-02-21 12:10:52 ----D---- C:\Program Files (x86)\BrowseToSave
2013-02-21 12:10:50 ----D---- C:\ProgramData\Browse2save
2013-02-18 22:25:53 ----AH---- C:\Windows\SYSWOW64\mlfcache.dat
2013-02-18 12:20:56 ----D---- C:\Program Files (x86)\Bloody2

======List of files/folders modified in the last 1 month======

2013-03-17 23:23:37 ----D---- C:\Windows\Prefetch
2013-03-17 23:23:36 ----D---- C:\Program Files\trend micro
2013-03-17 23:13:55 ----D---- C:\Windows\temp
2013-03-17 23:13:03 ----D---- C:\Windows\system32\config
2013-03-17 23:02:11 ----SHD---- C:\Windows\Installer
2013-03-17 23:01:54 ----D---- C:\Config.Msi
2013-03-17 23:01:52 ----D---- C:\Windows\system32\drivers
2013-03-17 23:01:52 ----D---- C:\Windows\system32\catroot
2013-03-17 23:01:50 ----RD---- C:\Program Files (x86)
2013-03-17 23:01:47 ----RD---- C:\Program Files
2013-03-17 23:01:45 ----D---- C:\ProgramData
2013-03-17 23:01:39 ----D---- C:\Windows\system32\DriverStore
2013-03-17 23:01:39 ----D---- C:\Windows\inf
2013-03-17 22:23:06 ----D---- C:\Windows\winsxs
2013-03-17 22:21:43 ----D---- C:\Windows\AppPatch
2013-03-17 22:21:43 ----D---- C:\Program Files (x86)\Internet Explorer
2013-03-17 22:21:42 ----D---- C:\Windows\SYSWOW64\migration
2013-03-17 22:21:42 ----D---- C:\Windows\SysWOW64
2013-03-17 22:21:42 ----D---- C:\Windows\system32\migration
2013-03-17 22:21:42 ----D---- C:\Windows\System32
2013-03-17 22:21:42 ----D---- C:\Program Files\Internet Explorer
2013-03-17 20:44:35 ----D---- C:\Windows\debug
2013-03-17 20:44:31 ----A---- C:\Windows\system32\MRT.exe
2013-03-17 20:44:26 ----D---- C:\ProgramData\Microsoft Help
2013-03-17 20:44:16 ----D---- C:\Program Files (x86)\SQUARE ENIX
2013-03-17 20:43:11 ----D---- C:\Windows\system32\catroot2
2013-03-17 20:41:44 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-03-17 20:40:11 ----SHD---- C:\System Volume Information
2013-03-17 20:20:55 ----D---- C:\Windows\Tasks
2013-03-17 20:20:55 ----D---- C:\Windows\system32\Tasks
2013-03-17 20:20:26 ----A---- C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-03-17 20:07:24 ----D---- C:\Windows\system32\wbem
2013-03-17 20:07:24 ----D---- C:\Windows
2013-03-17 20:06:23 ----D---- C:\Windows\rescache
2013-03-17 20:06:22 ----D---- C:\Windows\AppCompat
2013-03-17 20:06:18 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-03-17 20:06:18 ----D---- C:\Program Files (x86)\The KMPlayer
2013-03-17 20:06:08 ----D---- C:\Program Files (x86)\Google
2013-03-17 20:05:39 ----D---- C:\Windows\registration
2013-03-17 20:05:05 ----D---- C:\Users\user\AppData\Roaming\Skype
2013-03-12 21:46:42 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-03-12 17:35:15 ----D---- C:\Windows\system32\drivers\etc
2013-03-08 03:40:15 ----D---- C:\Windows\Logs
2013-03-08 02:59:19 ----D---- C:\Windows\pss
2013-03-08 02:42:24 ----D---- C:\Windows\SYSWOW64\Adobe
2013-03-08 02:41:07 ----D---- C:\ProgramData\Adobe
2013-03-07 23:53:17 ----A---- C:\Windows\SYSWOW64\javaw.exe
2013-03-07 23:53:17 ----A---- C:\Windows\SYSWOW64\java.exe
2013-03-07 23:53:16 ----A---- C:\Windows\SYSWOW64\npdeployJava1.dll
2013-03-07 23:53:16 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2013-03-07 23:53:14 ----D---- C:\Program Files (x86)\Java
2013-03-07 18:00:20 ----D---- C:\Windows\system32\FxsTmp
2013-03-02 04:17:01 ----D---- C:\Program Files (x86)\Counter Strike Source
2013-03-01 22:13:43 ----A---- C:\Windows\SYSWOW64\log.txt
2013-02-27 03:15:29 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-02-27 03:15:29 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-02-27 03:15:29 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-02-27 03:15:29 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-02-27 03:15:29 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-02-27 03:15:29 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-02-27 03:15:29 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-02-27 03:15:29 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-02-27 03:15:29 ----D---- C:\Windows\SYSWOW64\it-IT
2013-02-27 03:15:29 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-02-27 03:15:29 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-02-27 03:15:29 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-02-27 03:15:29 ----D---- C:\Windows\SYSWOW64\es-ES
2013-02-27 03:15:29 ----D---- C:\Windows\SYSWOW64\el-GR
2013-02-27 03:15:28 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-02-27 03:15:28 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-02-27 03:15:28 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-02-27 03:15:28 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-02-27 03:15:28 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-02-27 03:15:28 ----D---- C:\Windows\SYSWOW64\en-US
2013-02-27 03:15:28 ----D---- C:\Windows\SYSWOW64\de-DE
2013-02-27 03:15:28 ----D---- C:\Windows\SYSWOW64\da-DK
2013-02-27 03:15:28 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-02-27 03:15:28 ----D---- C:\Windows\system32\pt-PT
2013-02-27 03:15:28 ----D---- C:\Windows\system32\pt-BR
2013-02-27 03:15:28 ----D---- C:\Windows\system32\pl-PL
2013-02-27 03:15:28 ----D---- C:\Windows\system32\it-IT
2013-02-27 03:15:27 ----D---- C:\Windows\system32\zh-TW
2013-02-27 03:15:27 ----D---- C:\Windows\system32\zh-HK
2013-02-27 03:15:27 ----D---- C:\Windows\system32\zh-CN
2013-02-27 03:15:27 ----D---- C:\Windows\system32\tr-TR
2013-02-27 03:15:27 ----D---- C:\Windows\system32\sv-SE
2013-02-27 03:15:27 ----D---- C:\Windows\system32\ru-RU
2013-02-27 03:15:27 ----D---- C:\Windows\system32\nl-NL
2013-02-27 03:15:27 ----D---- C:\Windows\system32\nb-NO
2013-02-27 03:15:27 ----D---- C:\Windows\system32\ko-KR
2013-02-27 03:15:27 ----D---- C:\Windows\system32\ja-JP
2013-02-27 03:15:27 ----D---- C:\Windows\system32\hu-HU
2013-02-27 03:15:27 ----D---- C:\Windows\system32\fr-FR
2013-02-27 03:15:27 ----D---- C:\Windows\system32\fi-FI
2013-02-27 03:15:27 ----D---- C:\Windows\system32\es-ES
2013-02-27 03:15:27 ----D---- C:\Windows\system32\en-US
2013-02-27 03:15:27 ----D---- C:\Windows\system32\el-GR
2013-02-27 03:15:27 ----D---- C:\Windows\system32\de-DE
2013-02-27 03:15:27 ----D---- C:\Windows\system32\da-DK
2013-02-27 03:15:27 ----D---- C:\Windows\system32\cs-CZ
2013-02-26 21:43:02 ----D---- C:\Windows\Minidump
2013-02-26 14:19:42 ----D---- C:\Users\user\AppData\Roaming\codeblocks
2013-02-25 17:07:27 ----RSD---- C:\Windows\assembly
2013-02-22 12:31:33 ----D---- C:\ProgramData\AMD
2013-02-22 12:23:57 ----D---- C:\AMD
2013-02-22 04:57:15 ----D---- C:\ProgramData\Electronic Arts
2013-02-21 12:11:56 ----D---- C:\ProgramData\InstallMate
2013-02-18 19:55:32 ----D---- C:\Program Files (x86)\Electronic Arts

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2012-04-25 30488]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-05-20 557848]
R0 iaStorA;iaStorA; C:\Windows\system32\DRIVERS\iaStorA.sys [2012-11-08 647736]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2012-11-08 28216]
R0 iusb3hcs;Ovládač prepínača hostiteľského radiča Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-11-08 19264]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-01-20 230320]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2012-09-18 868848]
R1 cnnctfy2;Connectify LightWeight Filter; C:\Windows\system32\DRIVERS\cnnctfy2.sys [2013-01-11 31344]
R1 MpKslec6d3420;MpKslec6d3420; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{9D13F128-C77E-4E04-BBBF-6045519490AE}\MpKslec6d3420.sys [2013-03-17 35664]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-01-20 130008]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2012-04-25 43800]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-02-16 11612672]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-02-16 576000]
R3 BCM43XX;Broadcom 802.11 - ovládač sieťového adaptéru; C:\Windows\system32\DRIVERS\bcmwl664.sys [2012-11-19 3065408]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys [2010-07-28 31088]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 IntcDAud;Intel(R) Zvuk pre obrazovky; C:\Windows\system32\DRIVERS\IntcDAud.sys [2012-11-08 331264]
R3 intelkmd;intelkmd; C:\Windows\system32\DRIVERS\igdpmd64.sys [2011-04-15 12228128]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2010-12-10 80384]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2010-12-10 181248]
R3 pmkbdfltr;PenMount Keyboard Device Filter Driver; C:\Windows\system32\DRIVERS\pmkbdfltr.sys [2012-11-08 18832]
R3 RSPCIESTOR;Realtek PCIE CardReader Driver; C:\Windows\system32\DRIVERS\RtsPStor.sys [2011-05-30 338536]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-02-17 428136]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2012-11-08 43832]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10329; C:\Windows\system32\DRIVERS\stwrt64.sys [2011-03-11 521728]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2012-11-08 401456]
R4 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys []
R4 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys []
R4 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys []
S3 7ByteIo;7ByteIo; \??\C:\Program Files (x86)\Hot CPU Tester Pro 4 LE\SysInfoX64.sys []
S3 AVerAF35;HP USB DVB-T TV Tuner; C:\Windows\System32\Drivers\HPAF35.sys [2009-10-19 511104]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 btwampfl;Bluetooth AMP USB Filter; C:\Windows\system32\drivers\btwampfl.sys [2010-07-14 344616]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2010-07-20 102952]
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\DRIVERS\btwavdt.sys [2010-07-20 135720]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2010-03-02 39464]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2010-07-20 21544]
S3 busenum;SteelBusSvc; C:\Windows\system32\DRIVERS\SteelBus64.sys [2012-11-12 131072]
S3 CpqDfw;Compaq Dfw; C:\Windows\system32\drivers\CpqDfw.sys []
S3 HPIR;HP TV Tuner Infrared Receiver; C:\Windows\system32\DRIVERS\HPIR.sys [2009-11-16 93184]
S3 mvusbews;USB EWS Device; C:\Windows\System32\Drivers\mvusbews.sys [2012-09-25 20480]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x64.sys [2009-06-10 408960]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-12-13 54784]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S4 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2012-12-21 59440]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-02-16 240640]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-12-21 57008]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2010-07-29 951584]
R2 Connectify;Connectify; C:\Program Files (x86)\Connectify\ConnectifyService.exe [2012-11-09 65536]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2012-09-27 86528]
R2 HPClientSvc;HP Client Services; C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-10-11 346168]
R2 HPSIService;HP SI Service; C:\Windows\system32\HPSIsvc.exe [2010-04-29 127800]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2012-04-25 31000]
R2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2010-11-09 26680]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-05-20 13592]
R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2011-06-28 2413056]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-01-27 22056]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2012-12-06 76888]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10129; C:\Program Files\IDT\WDM\STacSV64.exe [2011-03-11 297984]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2012-08-10 1001376]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-01-27 379360]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-11 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-13 253656]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-11 116648]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]
S3 HPAuto;HP Auto; C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe [2011-02-16 682040]
S3 hpCMSrv;HP Connection Manager 4 Service; C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [2011-06-14 1098296]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2012-09-20 50899608]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-11-23 529744]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-09-13 1255736]
S4 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
S4 FPLService;TrueSuiteService; C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe [2011-02-17 265544]
S4 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S4 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2013-02-20 641352]
S4 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-12-22 325656]
S4 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2010-03-25 490280]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S4 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-02-07 161384]
S4 StarWindServiceAE;StarWind AE Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
S4 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-22 2656280]

-----------------EOF-----------------

Zdravim a pekny den preji

Jsou tam

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Kliknete na Prohledat
Probehne skenovani a pak se objevi log, pripadne bude ulozen na systemovem disku jako AdwCleaner[R?].txt, ten sem vlozte

# AdwCleaner v2.115 - Log vytvorený 18/03/2013 o 08:37:08
# Aktualizované 17/03/2013 Xplode
# Operaený systém : Windows 7 Home Premium Service Pack 1 (64 bits)
# Uživatel : user - GREJTAK_HP
# Spustený systém : Normálny
# Spustené z : C:\Users\user\Desktop\adwcleaner.exe
# Volba [Preh3ada?]

***** [Služby] *****

***** [Súbory / Adresáre] *****

Adresár Nájdené : C:\Program Files (x86)\BrowseToSave
Adresár Nájdené : C:\Program Files (x86)\WebSearch
Adresár Nájdené : C:\ProgramData\Ask
Adresár Nájdené : C:\ProgramData\BetterSoft
Adresár Nájdené : C:\ProgramData\Browse2save
Adresár Nájdené : C:\ProgramData\InstallMate
Adresár Nájdené : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Browse2save
Adresár Nájdené : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search-NewTab
Adresár Nájdené : C:\ProgramData\Premium
Adresár Nájdené : C:\ProgramData\Search-NewTab
Adresár Nájdené : C:\ProgramData\SoftSafe

***** [Registre] *****

Dáta Nájdené : HKLM\..\Windows [AppInit_DLLs] = c:\progra~2\browse~1\sprote~1.dll
Dáta Nájdené : HKLM\..\Windows [AppInit_DLLs] = c:\progra~2\websea~1\sprote~1.dll
K3úe Nájdené : HKCU\Software\APN PIP
K3úe Nájdené : HKCU\Software\AppDataLow\Software\Crossrider
K3úe Nájdené : HKCU\Software\AppDataLow\SProtector
K3úe Nájdené : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2277EC71-1776-D507-4F2A-F773C3421B74}
K3úe Nájdené : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AA3567A4-E597-04B7-E2D6-6BBF64A88705}
K3úe Nájdené : HKCU\Software\PIP
K3úe Nájdené : HKCU\Software\Softonic
K3úe Nájdené : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
K3úe Nájdené : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
K3úe Nájdené : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
K3úe Nájdené : HKLM\Software\PIP
K3úe Nájdené : HKLM\Software\SP Global
K3úe Nájdené : HKLM\Software\SProtector
K3úe Nájdené : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2277EC71-1776-D507-4F2A-F773C3421B74}
K3úe Nájdené : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AA3567A4-E597-04B7-E2D6-6BBF64A88705}
K3úe Nájdené : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
K3úe Nájdené : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
K3úe Nájdené : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
K3úe Nájdené : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
K3úe Nájdené : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2277EC71-1776-D507-4F2A-F773C3421B74}
K3úe Nájdené : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA3567A4-E597-04B7-E2D6-6BBF64A88705}
K3úe Nájdené : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C3F3165C-74D3-6FDB-3274-14FDA8698CFA}
K3úe Nájdené : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
K3úe Nájdené : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
K3úe Nájdené : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
K3úe Nájdené : HKU\S-1-5-21-4204391165-3645872910-4001035389-1000\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}

***** [Internetové prehliadaee] *****

-\\ Internet Explorer v9.0.8112.16470

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://websearch.pu-results.info/?pid=233&r=2013/02/21&hid=4008261511&lg=EN&cc=CZ
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Page] = hxxp://websearch.pu-results.info/?pid=233&r=2013/02/21&hid=4008261511&lg=EN&cc=CZ

-\\ Google Chrome v25.0.1364.172

*************************

AdwCleaner[R1].txt - [3895 octets] - [18/03/2013 08:37:08]

########## EOF - C:\AdwCleaner[R1].txt - [3955 octets] ##########

Spustte znovu AdwCleaner

Pokud pouzivate Win Vista ci W7, kliknete na AdwCleaner pravym a dejte Run As Administrator ci Spustit jako spravce
Kliknete na Smazat
PC provede opravu, restartuje se a da Vam log (C:\AdwCleaner [S1].txt) , jeho obsah vlozte sem

# AdwCleaner v2.115 - Log vytvorený 18/03/2013 o 16:43:46
# Aktualizované 17/03/2013 Xplode
# Operaený systém : Windows 7 Home Premium Service Pack 1 (64 bits)
# Uživatel : user - GREJTAK_HP
# Spustený systém : Normálny
# Spustené z : C:\Users\user\Desktop\adwcleaner.exe
# Volba [Vymaza?]

***** [Služby] *****

***** [Súbory / Adresáre] *****

Adresár Vymazané : C:\Program Files (x86)\BrowseToSave
Adresár Vymazané : C:\Program Files (x86)\WebSearch
Adresár Vymazané : C:\ProgramData\Ask
Adresár Vymazané : C:\ProgramData\Browse2save
Adresár Vymazané : C:\ProgramData\InstallMate
Adresár Vymazané : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Browse2save
Adresár Vymazané : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search-NewTab
Adresár Vymazané : C:\ProgramData\Premium
Adresár Vymazané : C:\ProgramData\Search-NewTab
Adresár Vymazané : C:\ProgramData\SoftSafe
Vymazané pri reštarte : C:\ProgramData\BetterSoft

***** [Registre] *****

Dáta Vymazané : HKLM\..\Windows [AppInit_DLLs] = c:\progra~2\browse~1\sprote~1.dll
Dáta Vymazané : HKLM\..\Windows [AppInit_DLLs] = c:\progra~2\websea~1\sprote~1.dll
K3úe Vymazané : HKCU\Software\APN PIP
K3úe Vymazané : HKCU\Software\AppDataLow\Software\Crossrider
K3úe Vymazané : HKCU\Software\AppDataLow\SProtector
K3úe Vymazané : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2277EC71-1776-D507-4F2A-F773C3421B74}
K3úe Vymazané : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AA3567A4-E597-04B7-E2D6-6BBF64A88705}
K3úe Vymazané : HKCU\Software\PIP
K3úe Vymazané : HKCU\Software\Softonic
K3úe Vymazané : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
K3úe Vymazané : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
K3úe Vymazané : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
K3úe Vymazané : HKLM\Software\PIP
K3úe Vymazané : HKLM\Software\SP Global
K3úe Vymazané : HKLM\Software\SProtector
K3úe Vymazané : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2277EC71-1776-D507-4F2A-F773C3421B74}
K3úe Vymazané : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AA3567A4-E597-04B7-E2D6-6BBF64A88705}
K3úe Vymazané : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
K3úe Vymazané : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
K3úe Vymazané : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
K3úe Vymazané : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
K3úe Vymazané : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2277EC71-1776-D507-4F2A-F773C3421B74}
K3úe Vymazané : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA3567A4-E597-04B7-E2D6-6BBF64A88705}
K3úe Vymazané : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C3F3165C-74D3-6FDB-3274-14FDA8698CFA}
K3úe Vymazané : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
K3úe Vymazané : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
K3úe Vymazané : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

***** [Internetové prehliadaee] *****

-\\ Internet Explorer v9.0.8112.16470

Zamenené : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://websearch.pu-results.info/?pid=233&r=2013/02/21&hid=4008261511&lg=EN&cc=CZ --> hxxp://www.google.com
Zamenené : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Page] = hxxp://websearch.pu-results.info/?pid=233&r=2013/02/21&hid=4008261511&lg=EN&cc=CZ --> hxxp://www.google.com

-\\ Google Chrome v25.0.1364.172

*************************

AdwCleaner[R1].txt - [4016 octets] - [18/03/2013 08:37:08]
AdwCleaner[S1].txt - [3914 octets] - [18/03/2013 16:43:46]

########## EOF - C:\AdwCleaner[S1].txt - [3974 octets] ##########

Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com

Pokud ho havet blokuje, pouzijte jeden z nasledujicich - i ty prejmenovane
Rkill EXE:
http://download.bleepingcomputer.com/grinler/rkill.exe

Rkill iExplore.exe:
http://download.bleepingcomputer.com/gr ... xplore.exe

Rkill uSeRiNiT.exe:
http://download.bleepingcomputer.com/gr ... eRiNiT.exe

Rkill WiNlOgOn.exe:
http://download.bleepingcomputer.com/gr ... NlOgOn.exe
Ulozte nejlepena plochu a ukoncete vsechny aplikace (jinak to udela RKill za Vas)
Spustte tradicne dvojklikem - program probehne do par sekund a ukonci i svou cinnost
RKill ukonci vsechny ne-systemove procesy - tedy i procesy, pod kterymi bezi havet
Na plose vznikne log Rkill.txt ten mi sem vlozte
Ted nerestartujte PC - prisli byste o ucinek RKillu

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK

Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
Pokud mate Win XP spustte pod uctem Spravce\Administratora
Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

RKILL

Rkill 2.4.7 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 03/18/2013 05:46:02 PM in x64 mode.
Windows Version: Windows 7 Home Premium Service Pack 1

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* No malware processes found to kill.

Checking Registry for malware related settings:

* No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* No issues found.

Checking Windows Service Integrity:

* FontCache => %SystemRoot%\system32\svchost.exe -k LocalService [Incorrect ImagePath]

Searching for Missing Digital Signatures:

* No issues found.

Checking HOSTS File:

* HOSTS file entries found:

127.0.0.1 localhost

Program finished at: 03/18/2013 05:46:06 PM
Execution time: 0 hours(s), 0 minute(s), and 3 seconds(s)

Fajn, pokracujte ComboFixem

ComboFix 13-03-17.01 - user . 03. 2013 17:56:51.2.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.421.1051.18.8140.6214 [GMT 1:00]
Running from: c:\users\user\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: Microsoft Security Essentials *Disabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Public\sdelevURL.tmp
.
.
((((((((((((((((((((((((( Files Created from 2013-02-18 to 2013-03-18 )))))))))))))))))))))))))))))))
.
.
2013-03-18 17:04 . 2013-03-18 17:04 -------- d-----w- c:\users\Public\AppData\Local\temp
2013-03-18 17:04 . 2013-03-18 17:04 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-03-18 16:11 . 2013-03-18 16:11 76232 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{9D13F128-C77E-4E04-BBBF-6045519490AE}\offreg.dll
2013-03-17 22:02 . 2013-03-17 22:02 972264 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{41060AA7-4BA2-4028-AB42-0CBDD7FB8D35}\gapaengine.dll
2013-03-17 22:02 . 2013-02-07 15:28 9162192 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{9D13F128-C77E-4E04-BBBF-6045519490AE}\mpengine.dll
2013-03-17 22:01 . 2013-03-17 22:01 -------- d-----w- c:\program files (x86)\Microsoft Security Client
2013-03-17 22:01 . 2013-03-17 22:01 -------- d-----w- c:\program files\Microsoft Security Client
2013-03-17 19:14 . 2013-02-19 03:57 9162192 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{9E5F9D9C-E13A-48A7-9AFB-79F1D5A79552}\mpengine.dll
2013-03-17 03:00 . 2013-03-18 03:07 -------- d-----w- c:\users\user\AppData\Local\dxhr
2013-03-17 02:59 . 2013-03-17 02:59 -------- d-----w- c:\users\user\AppData\Local\28050
2013-03-14 03:23 . 2013-03-17 19:41 -------- d-----w- c:\program files\Microsoft Silverlight
2013-03-07 22:53 . 2013-03-07 22:53 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-03-07 22:50 . 2013-03-13 19:17 73432 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-03-07 22:50 . 2013-03-13 19:17 693976 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-03-07 22:50 . 2013-03-07 22:50 -------- d-----w- c:\windows\system32\Macromed
2013-03-01 01:04 . 2013-03-01 01:04 -------- d-----w- c:\program files (x86)\Crysis 3
2013-02-23 15:55 . 2013-02-23 15:55 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-02-23 15:55 . 2013-02-23 15:55 -------- d-----w- c:\program files\iTunes
2013-02-23 15:55 . 2013-02-23 15:55 -------- d-----w- c:\program files (x86)\iTunes
2013-02-23 15:55 . 2013-02-23 15:55 -------- d-----w- c:\program files\iPod
2013-02-22 21:12 . 2013-02-22 21:16 -------- d-----w- c:\program files (x86)\SystemRequirementsLab
2013-02-22 11:44 . 2013-02-22 11:44 -------- d-----w- c:\users\user\AppData\Roaming\GoforFiles
2013-02-22 11:31 . 2013-02-22 11:31 -------- d-----w- c:\programdata\ATI
2013-02-22 11:31 . 2013-02-22 11:31 -------- d-----w- c:\program files (x86)\AMD APP
2013-02-21 11:10 . 2013-02-21 11:10 -------- d-----w- c:\programdata\BetterSoft
2013-02-18 11:22 . 2012-07-05 09:46 1414144 ----a-w- c:\programdata\Microsoft\Windows\Templates\Bloody\Bloody2\Setup.exe
2013-02-18 11:20 . 2013-02-18 23:50 -------- d-----w- c:\program files (x86)\Bloody2
2013-02-17 18:47 . 2013-02-17 18:47 -------- d-----w- c:\program files (x86)\Common Files\Skype
2013-02-17 18:47 . 2013-02-17 18:47 -------- d-----r- c:\program files (x86)\Skype
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-03-17 19:44 . 2012-09-13 08:08 72013344 ----a-w- c:\windows\system32\MRT.exe
2013-03-07 22:53 . 2012-09-13 08:40 861088 ----a-w- c:\windows\SysWow64\npdeployJava1.dll
2013-03-07 22:53 . 2011-09-07 08:18 782240 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-02-17 19:12 . 2012-09-15 13:37 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2013-02-16 06:36 . 2013-02-16 06:36 78640 ----a-w- c:\windows\system32\atimpc64.dll
2013-02-16 06:36 . 2013-02-16 06:36 78640 ----a-w- c:\windows\system32\amdpcom64.dll
2013-02-16 06:36 . 2013-02-16 06:36 71912 ----a-w- c:\windows\SysWow64\atimpc32.dll
2013-02-16 06:36 . 2013-02-16 06:36 71912 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2013-02-16 06:35 . 2012-07-28 01:13 139904 ----a-w- c:\windows\system32\atiuxp64.dll
2013-02-16 06:35 . 2013-02-16 06:35 118792 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2013-02-16 06:35 . 2013-02-16 06:35 113672 ----a-w- c:\windows\system32\atiu9p64.dll
2013-02-16 06:35 . 2012-11-15 16:55 92512 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2013-02-16 06:35 . 2011-11-25 13:15 1150328 ----a-w- c:\windows\system32\aticfx64.dll
2013-02-16 06:35 . 2012-11-15 17:41 968560 ----a-w- c:\windows\SysWow64\aticfx32.dll
2013-02-16 06:35 . 2011-11-25 13:15 8209496 ----a-w- c:\windows\system32\atidxx64.dll
2013-02-16 06:35 . 2013-02-16 06:35 7192856 ----a-w- c:\windows\SysWow64\atidxx32.dll
2013-02-16 06:34 . 2013-02-16 06:34 4475192 ----a-w- c:\windows\SysWow64\atiumdva.dll
2013-02-16 06:34 . 2012-11-15 18:15 6036160 ----a-w- c:\windows\SysWow64\atiumdag.dll
2013-02-16 06:34 . 2013-02-16 06:34 5035000 ----a-w- c:\windows\system32\atiumd6a.dll
2013-02-16 06:34 . 2013-02-16 06:34 7040928 ----a-w- c:\windows\system32\atiumd64.dll
2013-02-16 06:22 . 2013-02-16 06:22 11612672 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2013-02-16 03:27 . 2013-02-16 03:27 23581184 ----a-w- c:\windows\system32\atio6axx.dll
2013-02-16 03:21 . 2013-02-16 03:21 163840 ----a-w- c:\windows\system32\atiapfxx.exe
2013-02-16 03:18 . 2013-02-16 03:18 51200 ----a-w- c:\windows\system32\aticalrt64.dll
2013-02-16 03:18 . 2013-02-16 03:18 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll
2013-02-16 03:18 . 2013-02-16 03:18 44544 ----a-w- c:\windows\system32\aticalcl64.dll
2013-02-16 03:18 . 2013-02-16 03:18 44032 ----a-w- c:\windows\SysWow64\aticalcl.dll
2013-02-16 03:18 . 2013-02-16 03:18 16082944 ----a-w- c:\windows\system32\aticaldd64.dll
2013-02-16 03:15 . 2013-02-16 03:15 77312 ----a-w- c:\windows\system32\coinst_12.10.17.dll
2013-02-16 03:14 . 2013-02-16 03:14 13703168 ----a-w- c:\windows\SysWow64\aticaldd.dll
2013-02-16 03:08 . 2013-02-16 03:08 19755520 ----a-w- c:\windows\SysWow64\atioglxx.dll
2013-02-16 02:57 . 2013-02-16 02:57 442368 ----a-w- c:\windows\system32\atidemgy.dll
2013-02-16 02:57 . 2013-02-16 02:57 561152 ----a-w- c:\windows\system32\atieclxx.exe
2013-02-16 02:56 . 2013-02-16 02:56 240640 ----a-w- c:\windows\system32\atiesrxx.exe
2013-02-16 02:55 . 2013-02-16 02:55 120320 ----a-w- c:\windows\system32\atitmm64.dll
2013-02-16 02:55 . 2013-02-16 02:55 25600 ----a-w- c:\windows\system32\atimuixx.dll
2013-02-16 02:55 . 2013-02-16 02:55 59392 ----a-w- c:\windows\system32\atiedu64.dll
2013-02-16 02:54 . 2013-02-16 02:54 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll
2013-02-16 02:30 . 2012-11-15 16:58 630272 ----a-w- c:\windows\system32\atiadlxx.dll
2013-02-16 02:30 . 2013-02-16 02:30 425984 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2013-02-16 02:29 . 2013-02-16 02:29 17920 ----a-w- c:\windows\system32\atig6pxx.dll
2013-02-16 02:29 . 2013-02-16 02:29 14848 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2013-02-16 02:29 . 2013-02-16 02:29 14848 ----a-w- c:\windows\system32\atiglpxx.dll
2013-02-16 02:29 . 2013-02-16 02:29 44032 ----a-w- c:\windows\system32\atig6txx.dll
2013-02-16 02:29 . 2013-02-16 02:29 34816 ----a-w- c:\windows\SysWow64\atigktxx.dll
2013-02-16 02:29 . 2013-02-16 02:29 576000 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2013-02-16 02:26 . 2013-02-16 02:26 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2013-02-15 21:35 . 2013-02-15 21:35 222720 ----a-w- c:\windows\system32\clinfo.exe
2013-02-15 21:34 . 2013-02-15 21:34 76288 ----a-w- c:\windows\system32\OpenVideo64.dll
2013-02-15 21:34 . 2013-02-15 21:34 65536 ----a-w- c:\windows\SysWow64\OpenVideo.dll
2013-02-15 21:34 . 2013-02-15 21:34 64000 ----a-w- c:\windows\system32\OVDecode64.dll
2013-02-15 21:34 . 2013-02-15 21:34 56320 ----a-w- c:\windows\SysWow64\OVDecode.dll
2013-02-15 21:34 . 2013-02-15 21:34 29149696 ----a-w- c:\windows\system32\amdocl64.dll
2013-02-15 21:32 . 2013-02-15 21:32 23810048 ----a-w- c:\windows\SysWow64\amdocl.dll
2013-02-15 21:30 . 2013-02-15 21:30 54784 ----a-w- c:\windows\system32\OpenCL.dll
2013-02-15 21:30 . 2013-02-15 21:30 50176 ----a-w- c:\windows\SysWow64\OpenCL.dll
2013-02-15 21:24 . 2013-02-15 21:24 5067264 ----a-w- c:\windows\system32\amdsc64.dll
2013-02-15 21:24 . 2013-02-15 21:24 4083200 ----a-w- c:\windows\SysWow64\amdsc.dll
2013-02-14 10:41 . 2012-12-05 23:40 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2013-02-14 10:41 . 2012-10-06 14:09 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-02-12 19:17 . 2012-10-06 14:09 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2013-02-12 05:45 . 2013-03-17 19:13 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-02-12 05:45 . 2013-03-17 19:13 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-02-12 05:45 . 2013-03-17 19:13 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-02-12 05:45 . 2013-03-17 19:13 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-02-12 04:48 . 2013-03-17 19:13 474112 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-02-12 04:48 . 2013-03-17 19:13 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
2013-01-28 07:20 . 2013-01-28 07:20 8388608 ----a-w- C:\HCT4FC6.tmp
2013-01-28 07:20 . 2013-01-28 07:20 8388608 ----a-w- C:\HCT4FC5.tmp
2013-01-20 14:59 . 2013-01-20 14:59 230320 ----a-w- c:\windows\system32\drivers\MpFilter.sys
2013-01-20 14:59 . 2013-01-20 14:59 130008 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys
2013-01-17 00:28 . 2010-11-21 03:27 273840 ------w- c:\windows\system32\MpSigStub.exe
2013-01-11 18:52 . 2013-01-11 18:52 31344 ----a-w- c:\windows\system32\drivers\cnnctfy2.sys
2013-01-05 05:53 . 2013-02-13 14:43 5553512 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-01-05 05:00 . 2013-02-13 14:43 3967848 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-01-05 05:00 . 2013-02-13 14:43 3913064 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-01-04 05:46 . 2013-02-13 14:43 215040 ----a-w- c:\windows\system32\winsrv.dll
2013-01-04 04:51 . 2013-02-13 14:43 5120 ----a-w- c:\windows\SysWow64\wow32.dll
2013-01-04 04:43 . 2013-02-13 14:43 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2013-01-04 03:26 . 2013-02-13 14:43 3153408 ----a-w- c:\windows\system32\win32k.sys
2013-01-04 02:47 . 2013-02-13 14:43 25600 ----a-w- c:\windows\SysWow64\setup16.exe
2013-01-04 02:47 . 2013-02-13 14:43 7680 ----a-w- c:\windows\SysWow64\instnm.exe
2013-01-04 02:47 . 2013-02-13 14:43 2048 ----a-w- c:\windows\SysWow64\user.exe
2013-01-04 02:47 . 2013-02-13 14:43 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll
2013-01-03 06:00 . 2013-02-13 14:43 1913192 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-01-03 06:00 . 2013-02-13 14:43 288088 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2013-01-01 15:07 . 2012-09-18 16:50 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2013-01-01 15:07 . 2012-09-15 13:36 483952 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2012-12-21 12:09 . 2012-12-21 12:09 59440 ----a-w- c:\windows\system32\drivers\EpfwLWF.sys
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"Bloody2"="c:\program files (x86)\Bloody2\Bloody2\Bloody2.exe" [2012-12-14 4282880]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"HP Quick Launch"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe" [2010-11-09 586296]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-05-20 284440]
"HPOSD"="c:\program files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe" [2011-01-27 318520]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2013-02-16 642656]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"EnableShellExecuteHooks"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 ezSharedSvc;Easybits Services for Windows; [x]
R3 7ByteIo;7ByteIo;c:\program files (x86)\Hot CPU Tester Pro 4 LE\SysInfoX64.sys [x]
R3 AVerAF35;HP USB DVB-T TV Tuner;c:\windows\system32\Drivers\HPAF35.sys [2009-10-19 511104]
R3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys [2010-07-14 344616]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2010-03-02 39464]
R3 busenum;SteelBusSvc;c:\windows\system32\DRIVERS\SteelBus64.sys [2012-11-11 131072]
R3 HPAuto;HP Auto;c:\program files\Hewlett-Packard\HP Auto\HPAuto.exe [2011-02-16 682040]
R3 hpCMSrv;HP Connection Manager 4 Service;c:\program files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [2011-06-14 1098296]
R3 HPIR;HP TV Tuner Infrared Receiver;c:\windows\system32\DRIVERS\HPIR.sys [2009-11-16 93184]
R3 mvusbews;USB EWS Device;c:\windows\system32\Drivers\mvusbews.sys [2012-09-25 20480]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2013-01-20 130008]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe [2013-01-27 379360]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-12-13 54784]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2012-09-13 1255736]
R3 whfltr2k;WheelMouse USB Lower Filter Driver;c:\windows\system32\DRIVERS\whfltr2k.sys [2012-11-08 10368]
R4 FPLService;TrueSuiteService;c:\program files (x86)\HP SimplePass 2011\TrueSuiteService.exe [2011-02-17 265544]
R4 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
R4 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-03-25 490280]
R4 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
R4 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2013-02-07 161384]
R4 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-22 2656280]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys [2012-11-08 647736]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys [2012-11-08 28216]
S0 iusb3hcs;Ovládač prepínača hostiteľského radiča Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys [2012-11-08 19264]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2012-09-18 868848]
S1 cnnctfy2;Connectify LightWeight Filter;c:\windows\system32\DRIVERS\cnnctfy2.sys [2013-01-11 31344]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2013-02-16 240640]
S2 Connectify;Connectify;c:\program files (x86)\Connectify\ConnectifyService.exe [2012-11-09 65536]
S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2012-09-27 86528]
S2 HPClientSvc;HP Client Services;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-10-11 346168]
S2 HPSIService;HP SI Service;c:\windows\system32\HPSIsvc.exe [2010-04-29 127800]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2012-04-25 31000]
S2 HPWMISVC;HPWMISVC;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2010-11-09 26680]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-05-20 13592]
S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2011-06-28 2413056]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys [2010-07-28 31088]
S3 IntcDAud;Intel(R) Zvuk pre obrazovky;c:\windows\system32\DRIVERS\IntcDAud.sys [2012-11-08 331264]
S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys [2011-04-15 12228128]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2010-12-10 80384]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2010-12-10 181248]
S3 pmkbdfltr;PenMount Keyboard Device Filter Driver;c:\windows\system32\DRIVERS\pmkbdfltr.sys [2012-11-08 18832]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [2011-05-30 338536]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-02-17 428136]
S3 SmbDrvI;SmbDrvI;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys [2012-11-08 43832]
S3 WinRing0_1_2_0;WinRing0_1_2_0;c:\users\user\AppData\Local\Temp\tmp70AC.tmp [x]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - WINRING0_1_2_0
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-03-17 19:13 1629648 ----a-w- c:\program files (x86)\Google\Chrome\Application\25.0.1364.172\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2013-03-18 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-07 19:17]
.
2013-03-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-10-11 15:53]
.
2013-03-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4204391165-3645872910-4001035389-1000Core.job
- c:\users\user\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-21 22:29]
.
2013-03-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4204391165-3645872910-4001035389-1000UA.job
- c:\users\user\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-21 22:29]
.
2013-03-17 c:\windows\Tasks\HPCeeScheduleForuser.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13 20:15]
.
2013-03-18 c:\windows\Tasks\schedule!3036567561.job
- c:\programdata\BetterSoft\OptimizerPro\OptimizerPro.exe [2013-02-21 19:58]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2011-03-11 1128448]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-04-15 168216]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-04-15 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-04-15 416024]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-01-27 1281512]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
FontCache
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com
uDefault_Search_URL =
mDefault_Page_URL =
mStart Page = hxxp://www.google.com
mLocal Page =
uSearchAssistant =
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Odoslať obrázok do &Zariadenia s rozhraním Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odoslať stránku do &Zariadenia s rozhraním Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: Se&nd to OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 147.251.209.1 147.251.197.2
.
- - - - ORPHANS REMOVED - - - -
.
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-SP_4e24eecb - c:\program files (x86)\WebSearch\uninstall.exe
AddRemove-SP_f2a323db - c:\program files (x86)\BrowseToSave\uninstall.exe
AddRemove-{C670DCAE-E392-AA32-6F42-143C7FC4BDFD} - c:\programdata\Search-NewTab\uninstall.exe
AddRemove-{EE202411-2C26-49E8-9784-1BC1DBF7DE96} - c:\program files (x86)\InstallShield Installation Information\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}\setup.exe
AddRemove-{F42361DD-CE44-B8A2-F7E5-DF5078064FAE} - c:\progra~3\INSTAL~1\{C16CE~1\Setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\WinRing0_1_2_0]
"ImagePath"="\??\c:\users\user\AppData\Local\Temp\tmp70AC.tmp"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_180_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_180_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Policies\Hewlett-Packard\HP Software Framework\{F7A31DE6-534B-4564-808A-7D170A9F74A1}\DeviceDbcc\*"]
@="?"
.
[HKEY_LOCAL_MACHINE\software\Policies\Hewlett-Packard\HP Software Framework\{F7A31DE6-534B-4564-808A-7D170A9F74A1}\DeviceDbcc\ +n**+n*]
@="?n?n"
.
[HKEY_LOCAL_MACHINE\software\Policies\Hewlett-Packard\HP Software Framework\{F7A31DE6-534B-4564-808A-7D170A9F74A1}\DeviceDbcc\P52*p…I]
@="?2??"
.
[HKEY_LOCAL_MACHINE\software\Policies\Hewlett-Packard\HP Software Framework\{F7A31DE6-534B-4564-808A-7D170A9F74A1}\DeviceDbcc\ <m**<m*]
@="?m?m"
.
[HKEY_LOCAL_MACHINE\software\Policies\Hewlett-Packard\HP Software Framework\{F7A31DE6-534B-4564-808A-7D170A9F74A1}\DeviceDbcc\Ad*Ř˝i*]
@="?d?i"
.
[HKEY_LOCAL_MACHINE\software\Policies\Hewlett-Packard\HP Software Framework\{F7A31DE6-534B-4564-808A-7D170A9F74A1}\DeviceDbcc\đH<**]
@="?<\1b"
.
[HKEY_LOCAL_MACHINE\software\Policies\Hewlett-Packard\HP Software Framework\{F7A31DE6-534B-4564-808A-7D170A9F74A1}\DeviceDbcc\řQm*ŘQm*]
@="?m?m"
.
[HKEY_LOCAL_MACHINE\software\Policies\Hewlett-Packard\HP Software Framework\{F7A31DE6-534B-4564-808A-7D170A9F74A1}\DeviceDbcc\[žH®2*]
@="???2"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2013-03-18 18:06:31
ComboFix-quarantined-files.txt 2013-03-18 17:06
.
Pre-Run: 232 570 699 776 bytes free
Post-Run: 232 429 174 784 bytes free
.
- - End Of File - - 1E59159D661AD5321693213C2B7B6602

Pokud nemate, tak presunte Combofix na plochu

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

KillAll::

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\amd_dc_opt]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\l]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSpeedUp]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Powersuite Monitor]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Prime95]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^user^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Obrazovková spinka a spúšťač programu OneNote 2010.lnk]

Folder::
C:\Users\user\Downloads\p95v277.win64
C:\Program Files (x86)\Zrychlenie PC

Driver::
WinRing0_1_2_0

File::
c:\users\user\AppData\Local\Temp\tmp70AC.tmp 
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4204391165-3645872910-4001035389-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4204391165-3645872910-4001035389-1000UA.job
C:\Windows\tasks\HPCeeScheduleForuser.job
C:\Windows\tasks\schedule!3036567561.job

RegLock::
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\software\Policies\Hewlett-Packard\HP Software Framework\{F7A31DE6-534B-4564-808A-7D170A9F74A1}]
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

ClearJavaCache::

Reboot::

Ulozte vytvoreny TXT jako CFScript.txt
Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Pokud vyskoci hlaska "Pokus pouzit neplatnou operaci na klic registru, ktery je oznacen pro odstraneni", tak jen restartujte PC - registr se da do kupy - jedna se o vnitrni chybu, kterou zpusobuje CF a autor ji zatim neumi bohuzel opravit

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

ComboFix 13-03-17.01 - user . 03. 2013 8:22.3.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.421.1051.18.8140.5204 [GMT 1:00]
Running from: c:\users\user\Desktop\ComboFix.exe
Command switches used :: c:\users\user\Desktop\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: Microsoft Security Essentials *Disabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
FILE ::
"c:\users\user\AppData\Local\Temp\tmp70AC.tmp"
"c:\windows\tasks\Adobe Flash Player Updater.job"
"c:\windows\tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-4204391165-3645872910-4001035389-1000Core.job"
"c:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-4204391165-3645872910-4001035389-1000UA.job"
"c:\windows\tasks\HPCeeScheduleForuser.job"
"c:\windows\tasks\schedule!3036567561.job"
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\tasks\Adobe Flash Player Updater.job
c:\windows\tasks\GoogleUpdateTaskMachineCore.job
c:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-4204391165-3645872910-4001035389-1000Core.job
c:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-4204391165-3645872910-4001035389-1000UA.job
c:\windows\tasks\HPCeeScheduleForuser.job
c:\windows\tasks\schedule!3036567561.job
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_WINRING0_1_2_0
-------\Service_WinRing0_1_2_0
.
.
((((((((((((((((((((((((( Files Created from 2013-02-19 to 2013-03-19 )))))))))))))))))))))))))))))))
.
.
2013-03-19 07:27 . 2013-03-19 07:27 -------- d-----w- c:\users\Public\AppData\Local\temp
2013-03-19 07:27 . 2013-03-19 07:27 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-03-19 07:15 . 2013-02-07 15:28 9162192 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{A8F24554-1582-4934-9626-CD339353C2C7}\mpengine.dll
2013-03-18 17:14 . 2013-02-07 15:28 9162192 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-03-17 22:02 . 2013-03-17 22:02 972264 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{41060AA7-4BA2-4028-AB42-0CBDD7FB8D35}\gapaengine.dll
2013-03-17 22:01 . 2013-03-17 22:01 -------- d-----w- c:\program files (x86)\Microsoft Security Client
2013-03-17 22:01 . 2013-03-17 22:01 -------- d-----w- c:\program files\Microsoft Security Client
2013-03-17 19:14 . 2013-02-19 03:57 9162192 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{9E5F9D9C-E13A-48A7-9AFB-79F1D5A79552}\mpengine.dll
2013-03-17 03:00 . 2013-03-18 22:51 -------- d-----w- c:\users\user\AppData\Local\dxhr
2013-03-17 02:59 . 2013-03-17 02:59 -------- d-----w- c:\users\user\AppData\Local\28050
2013-03-14 03:23 . 2013-03-17 19:41 -------- d-----w- c:\program files\Microsoft Silverlight
2013-03-07 22:53 . 2013-03-07 22:53 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-03-07 22:50 . 2013-03-13 19:17 73432 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-03-07 22:50 . 2013-03-13 19:17 693976 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-03-07 22:50 . 2013-03-07 22:50 -------- d-----w- c:\windows\system32\Macromed
2013-03-01 01:04 . 2013-03-01 01:04 -------- d-----w- c:\program files (x86)\Crysis 3
2013-02-23 15:55 . 2013-02-23 15:55 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-02-23 15:55 . 2013-02-23 15:55 -------- d-----w- c:\program files\iTunes
2013-02-23 15:55 . 2013-02-23 15:55 -------- d-----w- c:\program files (x86)\iTunes
2013-02-23 15:55 . 2013-02-23 15:55 -------- d-----w- c:\program files\iPod
2013-02-22 21:12 . 2013-02-22 21:16 -------- d-----w- c:\program files (x86)\SystemRequirementsLab
2013-02-22 11:44 . 2013-02-22 11:44 -------- d-----w- c:\users\user\AppData\Roaming\GoforFiles
2013-02-22 11:31 . 2013-02-22 11:31 -------- d-----w- c:\programdata\ATI
2013-02-22 11:31 . 2013-02-22 11:31 -------- d-----w- c:\program files (x86)\AMD APP
2013-02-21 11:10 . 2013-02-21 11:10 -------- d-----w- c:\programdata\BetterSoft
2013-02-18 11:22 . 2012-07-05 09:46 1414144 ----a-w- c:\programdata\Microsoft\Windows\Templates\Bloody\Bloody2\Setup.exe
2013-02-18 11:20 . 2013-02-18 23:50 -------- d-----w- c:\program files (x86)\Bloody2
2013-02-17 18:47 . 2013-02-17 18:47 -------- d-----w- c:\program files (x86)\Common Files\Skype
2013-02-17 18:47 . 2013-02-17 18:47 -------- d-----r- c:\program files (x86)\Skype
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-03-17 19:44 . 2012-09-13 08:08 72013344 ----a-w- c:\windows\system32\MRT.exe
2013-03-07 22:53 . 2012-09-13 08:40 861088 ----a-w- c:\windows\SysWow64\npdeployJava1.dll
2013-03-07 22:53 . 2011-09-07 08:18 782240 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-02-17 19:12 . 2012-09-15 13:37 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2013-02-16 06:36 . 2013-02-16 06:36 78640 ----a-w- c:\windows\system32\atimpc64.dll
2013-02-16 06:36 . 2013-02-16 06:36 78640 ----a-w- c:\windows\system32\amdpcom64.dll
2013-02-16 06:36 . 2013-02-16 06:36 71912 ----a-w- c:\windows\SysWow64\atimpc32.dll
2013-02-16 06:36 . 2013-02-16 06:36 71912 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2013-02-16 06:35 . 2012-07-28 01:13 139904 ----a-w- c:\windows\system32\atiuxp64.dll
2013-02-16 06:35 . 2013-02-16 06:35 118792 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2013-02-16 06:35 . 2013-02-16 06:35 113672 ----a-w- c:\windows\system32\atiu9p64.dll
2013-02-16 06:35 . 2012-11-15 16:55 92512 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2013-02-16 06:35 . 2011-11-25 13:15 1150328 ----a-w- c:\windows\system32\aticfx64.dll
2013-02-16 06:35 . 2012-11-15 17:41 968560 ----a-w- c:\windows\SysWow64\aticfx32.dll
2013-02-16 06:35 . 2011-11-25 13:15 8209496 ----a-w- c:\windows\system32\atidxx64.dll
2013-02-16 06:35 . 2013-02-16 06:35 7192856 ----a-w- c:\windows\SysWow64\atidxx32.dll
2013-02-16 06:34 . 2013-02-16 06:34 4475192 ----a-w- c:\windows\SysWow64\atiumdva.dll
2013-02-16 06:34 . 2012-11-15 18:15 6036160 ----a-w- c:\windows\SysWow64\atiumdag.dll
2013-02-16 06:34 . 2013-02-16 06:34 5035000 ----a-w- c:\windows\system32\atiumd6a.dll
2013-02-16 06:34 . 2013-02-16 06:34 7040928 ----a-w- c:\windows\system32\atiumd64.dll
2013-02-16 06:22 . 2013-02-16 06:22 11612672 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2013-02-16 03:27 . 2013-02-16 03:27 23581184 ----a-w- c:\windows\system32\atio6axx.dll
2013-02-16 03:21 . 2013-02-16 03:21 163840 ----a-w- c:\windows\system32\atiapfxx.exe
2013-02-16 03:18 . 2013-02-16 03:18 51200 ----a-w- c:\windows\system32\aticalrt64.dll
2013-02-16 03:18 . 2013-02-16 03:18 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll
2013-02-16 03:18 . 2013-02-16 03:18 44544 ----a-w- c:\windows\system32\aticalcl64.dll
2013-02-16 03:18 . 2013-02-16 03:18 44032 ----a-w- c:\windows\SysWow64\aticalcl.dll
2013-02-16 03:18 . 2013-02-16 03:18 16082944 ----a-w- c:\windows\system32\aticaldd64.dll
2013-02-16 03:15 . 2013-02-16 03:15 77312 ----a-w- c:\windows\system32\coinst_12.10.17.dll
2013-02-16 03:14 . 2013-02-16 03:14 13703168 ----a-w- c:\windows\SysWow64\aticaldd.dll
2013-02-16 03:08 . 2013-02-16 03:08 19755520 ----a-w- c:\windows\SysWow64\atioglxx.dll
2013-02-16 02:57 . 2013-02-16 02:57 442368 ----a-w- c:\windows\system32\atidemgy.dll
2013-02-16 02:57 . 2013-02-16 02:57 561152 ----a-w- c:\windows\system32\atieclxx.exe
2013-02-16 02:56 . 2013-02-16 02:56 240640 ----a-w- c:\windows\system32\atiesrxx.exe
2013-02-16 02:55 . 2013-02-16 02:55 120320 ----a-w- c:\windows\system32\atitmm64.dll
2013-02-16 02:55 . 2013-02-16 02:55 25600 ----a-w- c:\windows\system32\atimuixx.dll
2013-02-16 02:55 . 2013-02-16 02:55 59392 ----a-w- c:\windows\system32\atiedu64.dll
2013-02-16 02:54 . 2013-02-16 02:54 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll
2013-02-16 02:30 . 2012-11-15 16:58 630272 ----a-w- c:\windows\system32\atiadlxx.dll
2013-02-16 02:30 . 2013-02-16 02:30 425984 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2013-02-16 02:29 . 2013-02-16 02:29 17920 ----a-w- c:\windows\system32\atig6pxx.dll
2013-02-16 02:29 . 2013-02-16 02:29 14848 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2013-02-16 02:29 . 2013-02-16 02:29 14848 ----a-w- c:\windows\system32\atiglpxx.dll
2013-02-16 02:29 . 2013-02-16 02:29 44032 ----a-w- c:\windows\system32\atig6txx.dll
2013-02-16 02:29 . 2013-02-16 02:29 34816 ----a-w- c:\windows\SysWow64\atigktxx.dll
2013-02-16 02:29 . 2013-02-16 02:29 576000 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2013-02-16 02:26 . 2013-02-16 02:26 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2013-02-15 21:35 . 2013-02-15 21:35 222720 ----a-w- c:\windows\system32\clinfo.exe
2013-02-15 21:34 . 2013-02-15 21:34 76288 ----a-w- c:\windows\system32\OpenVideo64.dll
2013-02-15 21:34 . 2013-02-15 21:34 65536 ----a-w- c:\windows\SysWow64\OpenVideo.dll
2013-02-15 21:34 . 2013-02-15 21:34 64000 ----a-w- c:\windows\system32\OVDecode64.dll
2013-02-15 21:34 . 2013-02-15 21:34 56320 ----a-w- c:\windows\SysWow64\OVDecode.dll
2013-02-15 21:34 . 2013-02-15 21:34 29149696 ----a-w- c:\windows\system32\amdocl64.dll
2013-02-15 21:32 . 2013-02-15 21:32 23810048 ----a-w- c:\windows\SysWow64\amdocl.dll
2013-02-15 21:30 . 2013-02-15 21:30 54784 ----a-w- c:\windows\system32\OpenCL.dll
2013-02-15 21:30 . 2013-02-15 21:30 50176 ----a-w- c:\windows\SysWow64\OpenCL.dll
2013-02-15 21:24 . 2013-02-15 21:24 5067264 ----a-w- c:\windows\system32\amdsc64.dll
2013-02-15 21:24 . 2013-02-15 21:24 4083200 ----a-w- c:\windows\SysWow64\amdsc.dll
2013-02-14 10:41 . 2012-12-05 23:40 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2013-02-14 10:41 . 2012-10-06 14:09 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-02-12 19:17 . 2012-10-06 14:09 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2013-02-12 05:45 . 2013-03-17 19:13 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-02-12 05:45 . 2013-03-17 19:13 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-02-12 05:45 . 2013-03-17 19:13 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-02-12 05:45 . 2013-03-17 19:13 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-02-12 04:48 . 2013-03-17 19:13 474112 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-02-12 04:48 . 2013-03-17 19:13 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
2013-01-28 07:20 . 2013-01-28 07:20 8388608 ----a-w- C:\HCT4FC6.tmp
2013-01-28 07:20 . 2013-01-28 07:20 8388608 ----a-w- C:\HCT4FC5.tmp
2013-01-20 14:59 . 2013-01-20 14:59 230320 ----a-w- c:\windows\system32\drivers\MpFilter.sys
2013-01-20 14:59 . 2013-01-20 14:59 130008 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys
2013-01-17 00:28 . 2010-11-21 03:27 273840 ------w- c:\windows\system32\MpSigStub.exe
2013-01-11 18:52 . 2013-01-11 18:52 31344 ----a-w- c:\windows\system32\drivers\cnnctfy2.sys
2013-01-05 05:53 . 2013-02-13 14:43 5553512 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-01-05 05:00 . 2013-02-13 14:43 3967848 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-01-05 05:00 . 2013-02-13 14:43 3913064 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-01-04 05:46 . 2013-02-13 14:43 215040 ----a-w- c:\windows\system32\winsrv.dll
2013-01-04 04:51 . 2013-02-13 14:43 5120 ----a-w- c:\windows\SysWow64\wow32.dll
2013-01-04 04:43 . 2013-02-13 14:43 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2013-01-04 03:26 . 2013-02-13 14:43 3153408 ----a-w- c:\windows\system32\win32k.sys
2013-01-04 02:47 . 2013-02-13 14:43 25600 ----a-w- c:\windows\SysWow64\setup16.exe
2013-01-04 02:47 . 2013-02-13 14:43 7680 ----a-w- c:\windows\SysWow64\instnm.exe
2013-01-04 02:47 . 2013-02-13 14:43 2048 ----a-w- c:\windows\SysWow64\user.exe
2013-01-04 02:47 . 2013-02-13 14:43 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll
2013-01-03 06:00 . 2013-02-13 14:43 1913192 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-01-03 06:00 . 2013-02-13 14:43 288088 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2013-01-01 15:07 . 2012-09-18 16:50 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2013-01-01 15:07 . 2012-09-15 13:36 483952 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2012-12-21 12:09 . 2012-12-21 12:09 59440 ----a-w- c:\windows\system32\drivers\EpfwLWF.sys
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Bloody2"="c:\program files (x86)\Bloody2\Bloody2\Bloody2.exe" [2012-12-14 4282880]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"HP Quick Launch"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe" [2010-11-09 586296]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-05-20 284440]
"HPOSD"="c:\program files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe" [2011-01-27 318520]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2013-02-16 642656]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"EnableShellExecuteHooks"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 ezSharedSvc;Easybits Services for Windows; [x]
R2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2012-09-27 86528]
R3 7ByteIo;7ByteIo;c:\program files (x86)\Hot CPU Tester Pro 4 LE\SysInfoX64.sys [x]
R3 AVerAF35;HP USB DVB-T TV Tuner;c:\windows\system32\Drivers\HPAF35.sys [2009-10-19 511104]
R3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys [2010-07-14 344616]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2010-03-02 39464]
R3 busenum;SteelBusSvc;c:\windows\system32\DRIVERS\SteelBus64.sys [2012-11-11 131072]
R3 HPAuto;HP Auto;c:\program files\Hewlett-Packard\HP Auto\HPAuto.exe [2011-02-16 682040]
R3 hpCMSrv;HP Connection Manager 4 Service;c:\program files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [2011-06-14 1098296]
R3 HPIR;HP TV Tuner Infrared Receiver;c:\windows\system32\DRIVERS\HPIR.sys [2009-11-16 93184]
R3 mvusbews;USB EWS Device;c:\windows\system32\Drivers\mvusbews.sys [2012-09-25 20480]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2013-01-20 130008]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe [2013-01-27 379360]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-12-13 54784]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2012-09-13 1255736]
R3 whfltr2k;WheelMouse USB Lower Filter Driver;c:\windows\system32\DRIVERS\whfltr2k.sys [2012-11-08 10368]
R4 FPLService;TrueSuiteService;c:\program files (x86)\HP SimplePass 2011\TrueSuiteService.exe [2011-02-17 265544]
R4 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
R4 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-03-25 490280]
R4 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
R4 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2013-02-07 161384]
R4 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-22 2656280]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys [2012-11-08 647736]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys [2012-11-08 28216]
S0 iusb3hcs;Ovládač prepínača hostiteľského radiča Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys [2012-11-08 19264]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2012-09-18 868848]
S1 cnnctfy2;Connectify LightWeight Filter;c:\windows\system32\DRIVERS\cnnctfy2.sys [2013-01-11 31344]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2013-02-16 240640]
S2 Connectify;Connectify;c:\program files (x86)\Connectify\ConnectifyService.exe [2012-11-09 65536]
S2 HPClientSvc;HP Client Services;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-10-11 346168]
S2 HPSIService;HP SI Service;c:\windows\system32\HPSIsvc.exe [2010-04-29 127800]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2012-04-25 31000]
S2 HPWMISVC;HPWMISVC;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2010-11-09 26680]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-05-20 13592]
S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2011-06-28 2413056]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys [2010-07-28 31088]
S3 IntcDAud;Intel(R) Zvuk pre obrazovky;c:\windows\system32\DRIVERS\IntcDAud.sys [2012-11-08 331264]
S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys [2011-04-15 12228128]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2010-12-10 80384]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2010-12-10 181248]
S3 pmkbdfltr;PenMount Keyboard Device Filter Driver;c:\windows\system32\DRIVERS\pmkbdfltr.sys [2012-11-08 18832]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [2011-05-30 338536]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-02-17 428136]
S3 SmbDrvI;SmbDrvI;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys [2012-11-08 43832]
S3 WinRing0_1_2_0;WinRing0_1_2_0;c:\users\user\AppData\Local\Temp\tmpEEFF.tmp [x]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - WINRING0_1_2_0
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-03-17 19:13 1629648 ----a-w- c:\program files (x86)\Google\Chrome\Application\25.0.1364.172\Installer\chrmstp.exe
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2011-03-11 1128448]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-04-15 168216]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-04-15 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-04-15 416024]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-01-27 1281512]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
FontCache
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com
uDefault_Search_URL =
mDefault_Page_URL =
mStart Page = hxxp://www.google.com
mLocal Page =
uInternet Settings,ProxyServer = cache.fi.muni.cz:3128
uInternet Settings,ProxyOverride = <local>
uSearchAssistant =
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Odoslať obrázok do &Zariadenia s rozhraním Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odoslať stránku do &Zariadenia s rozhraním Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: Se&nd to OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 147.251.209.1 147.251.197.2
.
- - - - ORPHANS REMOVED - - - -
.
AddRemove-SP_4e24eecb - c:\program files (x86)\WebSearch\uninstall.exe
AddRemove-SP_f2a323db - c:\program files (x86)\BrowseToSave\uninstall.exe
AddRemove-{C670DCAE-E392-AA32-6F42-143C7FC4BDFD} - c:\programdata\Search-NewTab\uninstall.exe
AddRemove-{EE202411-2C26-49E8-9784-1BC1DBF7DE96} - c:\program files (x86)\InstallShield Installation Information\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}\setup.exe
AddRemove-{F42361DD-CE44-B8A2-F7E5-DF5078064FAE} - c:\progra~3\INSTAL~1\{C16CE~1\Setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\WinRing0_1_2_0]
"ImagePath"="\??\c:\users\user\AppData\Local\Temp\tmpEEFF.tmp"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_180_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_180_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Policies\Hewlett-Packard\HP Software Framework\{F7A31DE6-534B-4564-808A-7D170A9F74A1}\DeviceDbcc\*"]
@="?"
.
[HKEY_LOCAL_MACHINE\software\Policies\Hewlett-Packard\HP Software Framework\{F7A31DE6-534B-4564-808A-7D170A9F74A1}\DeviceDbcc\ +n**+n*]
@="?n?n"
.
[HKEY_LOCAL_MACHINE\software\Policies\Hewlett-Packard\HP Software Framework\{F7A31DE6-534B-4564-808A-7D170A9F74A1}\DeviceDbcc\P52*p…I]
@="?2??"
.
[HKEY_LOCAL_MACHINE\software\Policies\Hewlett-Packard\HP Software Framework\{F7A31DE6-534B-4564-808A-7D170A9F74A1}\DeviceDbcc\ <m**<m*]
@="?m?m"
.
[HKEY_LOCAL_MACHINE\software\Policies\Hewlett-Packard\HP Software Framework\{F7A31DE6-534B-4564-808A-7D170A9F74A1}\DeviceDbcc\Ad*Ř˝i*]
@="?d?i"
.
[HKEY_LOCAL_MACHINE\software\Policies\Hewlett-Packard\HP Software Framework\{F7A31DE6-534B-4564-808A-7D170A9F74A1}\DeviceDbcc\đH<**]
@="?<\1b"
.
[HKEY_LOCAL_MACHINE\software\Policies\Hewlett-Packard\HP Software Framework\{F7A31DE6-534B-4564-808A-7D170A9F74A1}\DeviceDbcc\řQm*ŘQm*]
@="?m?m"
.
[HKEY_LOCAL_MACHINE\software\Policies\Hewlett-Packard\HP Software Framework\{F7A31DE6-534B-4564-808A-7D170A9F74A1}\DeviceDbcc\[žH®2*]
@="???2"
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Connectify\ConnectifyD.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\programdata\BetterSoft\OptimizerPro\OptimizerPro.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\CyberLink\YouCam\YCMMirage.exe
.
**************************************************************************
.
Completion time: 2013-03-19 08:34:33 - machine was rebooted
ComboFix-quarantined-files.txt 2013-03-19 07:34
ComboFix2.txt 2013-03-18 17:06
.
Pre-Run: 231 274 524 672 bytes free
Post-Run: 232 964 186 112 bytes free
.
- - End Of File - - 409BA6EABF99FD4EE36D98873AEEEE4E

Fajn, jak se chova PC

Dakujem pekne,PC vyzera OK. Dakujem este raz

Tak jeste uklidime

Odinstalujte Combofix

Prejmenujte ComboFix na Uninstall
Spustte jej
Tohle smaze Combofix a jeho slozky

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

Dakujem pekne. Myslel som,ze uz je to vsetko,tak combofix som zmazal rucne,dufam,ze to nevadi.

VIRY.CZ

kontrola logu pre podozrenie virusu

kontrola logu pre podozrenie virusu

Re: kontrola logu pre podozrenie virusu

Re: kontrola logu pre podozrenie virusu

Re: kontrola logu pre podozrenie virusu

Re: kontrola logu pre podozrenie virusu

Re: kontrola logu pre podozrenie virusu

Re: kontrola logu pre podozrenie virusu

Re: kontrola logu pre podozrenie virusu

Re: kontrola logu pre podozrenie virusu

Re: kontrola logu pre podozrenie virusu

Re: kontrola logu pre podozrenie virusu

Re: kontrola logu pre podozrenie virusu

Re: kontrola logu pre podozrenie virusu

Re: kontrola logu pre podozrenie virusu

Re: kontrola logu pre podozrenie virusu