VIRY.CZ

Dobrý den, chtěla bych poprosit o Vaši pomoc. Zatím jste mi vždy dobře poradili.
Už asi 14 dní pořád PC hučí, jako když je ve velké zátěži. PC zapnu a pak jdu na internet, který velice dlouho nabíhá a PC začne v okamžiku hučet. Zatím jsem vždy vypla přes správce úloh msietxghh.exe a hučení trochu ustálo, ale asi s mým počítačem přesto nebude něco v pořádku. Můžete mi tedy poradit co mám dělat? Děkuji

Přikládám log z RSIT

Logfile of random's system information tool 1.08 (written by random/random)
Run by Notebook at 2014-03-11 13:29:03
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 149 GB (62%) free of 238 GB
Total RAM: 4095 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:29:05, on 11.3.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16518)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe
C:\Program Files\trend micro\Notebook.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [mseqejfSrv] C:\Windows\inf\mseqejf.vbe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Notebook\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Notebook\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O12 - Plugin for .cdx: C:\Program Files (x86)\Internet Explorer\PLUGINS\Npcdp32.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8673 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "757001545-950258799-687386417-13886886119492081111521590391111938612-1087579313
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe"
Atouch64.exe
ATKOSD.exe
KBFiltr.exe
WDC.exe
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\SearchIndexer.exe /Embedding
szndesktop.exe default start
"C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe "-2090641329-605394699-1394132179-1360283676-586395180-10079127431916699499242918003
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe"
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=3208.1afb6d00.716727474 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 3208 "\\.\pipe\gecko-crash-server-pipe.3208" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe" --proxy-stub-channel=Flash4980.6D8CC768.21426 --host-broker-channel=Flash4980.6D8CC768.5772 --host-pid=4980 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe" --channel=5016.0014F2A0.1128226359 --proxy-stub-channel=Flash4980.6D8CC768.21426 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll" --host-npapi-version=27 --type=renderer
taskmgr.exe /3
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
"C:\Users\Notebook\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2436232761-2230767736-924208380-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2436232761-2230767736-924208380-1000UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2010-11-08 202144]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-01-27 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-01-27 170912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2010-11-08 1619352]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2013-10-23 1266912]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-10-19 2185032]
"CanonSolutionMenu"=C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [2009-09-04 767312]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2012-12-30 617856]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-02-05 2234144]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-02-05 1179576]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"Facebook Update"=C:\Users\Notebook\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-06-06 138096]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]
"cz.seznam.software.autoupdate"=C:\Users\Notebook\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
C:\Windows\system32\NvCpl.dll [2014-03-04 6714312]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-12-28 8114720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SRS Premium Sound.lnk]
C:\Windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe [2012-12-28 156880]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-01-20 43848]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"mseqejfSrv"=C:\Windows\inf\mseqejf.vbe [2013-08-27 1558]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-01-20 152392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2014-03-10 23:21:05 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2014-03-10 23:21:05 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2014-03-10 23:21:05 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2014-03-10 23:21:05 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2014-03-10 23:21:05 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2014-03-10 23:21:05 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2014-03-10 23:21:05 ----A---- C:\Windows\system32\nvopencl.dll
2014-03-10 23:21:05 ----A---- C:\Windows\system32\nvoglv64.dll
2014-03-10 23:21:05 ----A---- C:\Windows\system32\NvIFR64.dll
2014-03-10 23:21:05 ----A---- C:\Windows\system32\NvFBC64.dll
2014-03-10 23:21:05 ----A---- C:\Windows\system32\nvdispgenco6433523.dll
2014-03-10 23:21:05 ----A---- C:\Windows\system32\nvdispco6433523.dll
2014-03-10 23:21:05 ----A---- C:\Windows\system32\nvd3dumx.dll
2014-03-10 23:21:05 ----A---- C:\Windows\system32\nvcuvid.dll
2014-03-10 23:21:05 ----A---- C:\Windows\system32\nvcuvenc.dll
2014-03-10 23:21:05 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2014-03-10 23:21:04 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2014-03-10 23:21:04 ----A---- C:\Windows\system32\nvcuda.dll
2014-03-10 23:21:02 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2014-03-10 23:21:02 ----A---- C:\Windows\system32\nvcompiler.dll
2014-02-28 08:59:32 ----D---- C:\Users\Notebook\AppData\Roaming\NVIDIA
2014-02-26 12:08:52 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2014-02-26 12:08:52 ----A---- C:\Windows\system32\d3dx11_43.dll
2014-02-26 12:08:51 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2014-02-26 12:08:51 ----A---- C:\Windows\system32\d3dx10_43.dll
2014-02-26 12:08:50 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2014-02-26 12:08:50 ----A---- C:\Windows\system32\D3DX9_43.dll
2014-02-26 12:08:20 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2014-02-26 12:08:20 ----A---- C:\Windows\system32\nvspcap64.dll
2014-02-26 12:07:20 ----D---- C:\Program Files (x86)\AGEIA Technologies
2014-02-26 12:07:02 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-02-26 12:06:10 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2014-02-26 12:06:10 ----A---- C:\Windows\system32\OpenCL.dll
2014-02-26 12:05:56 ----D---- C:\ProgramData\NVIDIA Corporation
2014-02-26 12:03:25 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2014-02-26 12:03:25 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2014-02-26 12:03:25 ----A---- C:\Windows\system32\nvdispgenco6433489.dll
2014-02-26 12:03:25 ----A---- C:\Windows\system32\nvaudcap64v.dll
2014-02-26 12:03:25 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2014-02-26 12:03:24 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2014-02-26 12:03:24 ----A---- C:\Windows\system32\nvdispco6433489.dll
2014-02-26 12:03:23 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2014-02-26 12:03:23 ----A---- C:\Windows\system32\nvapi64.dll
2014-02-26 12:00:04 ----D---- C:\Program Files\NVIDIA Corporation
2014-02-26 11:58:59 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-02-26 11:58:59 ----A---- C:\Windows\system32\mstscax.dll
2014-02-26 11:31:57 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-02-26 11:31:53 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-26 11:31:53 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-26 11:31:53 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2014-02-26 11:31:51 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2014-02-26 11:31:51 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2014-02-26 11:31:51 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2014-02-26 11:31:51 ----A---- C:\Windows\system32\wksprtPS.dll
2014-02-26 11:31:51 ----A---- C:\Windows\system32\tsgqec.dll
2014-02-26 11:31:51 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2014-02-26 11:31:50 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2014-02-26 11:31:50 ----A---- C:\Windows\system32\wksprt.exe
2014-02-26 11:31:50 ----A---- C:\Windows\system32\TSWbPrxy.exe
2014-02-26 11:31:50 ----A---- C:\Windows\system32\mstsc.exe
2014-02-26 11:31:49 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2014-02-26 11:31:49 ----A---- C:\Windows\system32\rdvidcrl.dll
2014-02-26 11:31:03 ----A---- C:\Windows\system32\TSWorkspace.dll
2014-02-26 11:31:02 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2014-02-25 23:11:24 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-02-25 23:08:45 ----D---- C:\Windows\Migration
2014-02-12 22:17:50 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-02-12 22:17:50 ----A---- C:\Windows\system32\vbscript.dll
2014-02-12 22:17:03 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-02-12 22:17:03 ----A---- C:\Windows\system32\msrating.dll
2014-02-12 22:17:02 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-02-12 22:17:02 ----A---- C:\Windows\system32\ieui.dll
2014-02-12 22:17:01 ----A---- C:\Windows\system32\iernonce.dll
2014-02-12 22:17:01 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-02-12 22:17:01 ----A---- C:\Windows\system32\ie4uinit.exe
2014-02-12 22:17:00 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-02-12 22:17:00 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-02-12 22:17:00 ----A---- C:\Windows\system32\msfeeds.dll
2014-02-12 22:17:00 ----A---- C:\Windows\system32\jsproxy.dll
2014-02-12 22:16:59 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-02-12 22:16:59 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-02-12 22:16:59 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-02-12 22:16:59 ----A---- C:\Windows\system32\ieUnatt.exe
2014-02-12 22:16:59 ----A---- C:\Windows\system32\iesetup.dll
2014-02-12 22:16:58 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-02-12 22:16:58 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-02-12 22:16:58 ----A---- C:\Windows\system32\mshtml.dll
2014-02-12 22:16:58 ----A---- C:\Windows\system32\jscript9diag.dll
2014-02-12 22:16:58 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-02-12 22:16:58 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-02-12 22:16:57 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-02-12 22:16:57 ----A---- C:\Windows\system32\ieapfltr.dll
2014-02-12 22:16:56 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-02-12 22:16:56 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-02-12 22:16:56 ----A---- C:\Windows\system32\iertutil.dll
2014-02-12 22:16:55 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-02-12 22:16:55 ----A---- C:\Windows\system32\wininet.dll
2014-02-12 22:16:55 ----A---- C:\Windows\system32\urlmon.dll
2014-02-12 22:16:54 ----A---- C:\Windows\system32\ieframe.dll
2014-02-12 22:16:53 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-02-12 22:16:52 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-02-12 22:16:52 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-02-12 22:16:51 ----A---- C:\Windows\system32\jscript9.dll
2014-02-12 17:31:08 ----A---- C:\Windows\system32\msxml3.dll
2014-02-12 17:31:07 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-02-12 17:31:07 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-02-12 17:31:07 ----A---- C:\Windows\system32\msxml3r.dll
2014-02-12 17:30:58 ----A---- C:\Windows\system32\RMActivate_isv.exe
2014-02-12 17:30:57 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2014-02-12 17:30:57 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2014-02-12 17:30:57 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2014-02-12 17:30:57 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 17:30:57 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 17:30:57 ----A---- C:\Windows\system32\RMActivate.exe
2014-02-12 17:30:56 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2014-02-12 17:30:56 ----A---- C:\Windows\SYSWOW64\secproc.dll
2014-02-12 17:30:56 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2014-02-12 17:30:56 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2014-02-12 17:30:56 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 17:30:56 ----A---- C:\Windows\system32\secproc_ssp.dll
2014-02-12 17:30:56 ----A---- C:\Windows\system32\secproc_isv.dll
2014-02-12 17:30:56 ----A---- C:\Windows\system32\secproc.dll
2014-02-12 17:30:56 ----A---- C:\Windows\system32\msdrm.dll
2014-02-12 17:30:55 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2014-02-12 17:30:55 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2014-02-12 17:30:52 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2014-02-12 17:30:52 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2014-02-12 17:30:52 ----A---- C:\Windows\system32\d3d10warp.dll
2014-02-12 17:30:52 ----A---- C:\Windows\system32\d2d1.dll

======List of files/folders modified in the last 1 months======

2014-03-11 13:29:06 ----D---- C:\Windows\Prefetch
2014-03-11 13:29:05 ----D---- C:\Program Files\trend micro
2014-03-11 13:02:44 ----D---- C:\Windows\temp
2014-03-11 12:41:11 ----D---- C:\Windows\system32\config
2014-03-11 12:32:32 ----D---- C:\Users\Notebook\AppData\Roaming\Seznam.cz
2014-03-11 12:27:44 ----D---- C:\Windows
2014-03-11 12:26:47 ----D---- C:\Windows\SysWOW64
2014-03-11 12:26:47 ----D---- C:\Windows\System32
2014-03-10 23:33:58 ----D---- C:\ProgramData\NVIDIA
2014-03-10 23:26:53 ----D---- C:\Windows\system32\drivers
2014-03-10 23:26:46 ----D---- C:\Windows\inf
2014-03-10 23:26:45 ----D---- C:\Windows\system32\catroot
2014-03-10 23:26:34 ----D---- C:\Windows\system32\DriverStore
2014-03-10 22:34:55 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-03-09 15:13:06 ----SHD---- C:\System Volume Information
2014-03-06 22:59:50 ----D---- C:\Windows\rescache
2014-03-06 21:04:27 ----D---- C:\Users\Notebook\AppData\Roaming\vlc
2014-03-06 20:58:09 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-03-05 22:45:44 ----SHD---- C:\Windows\Installer
2014-03-05 22:45:42 ----RD---- C:\Program Files (x86)\Skype
2014-03-05 22:45:37 ----D---- C:\ProgramData\Skype
2014-03-05 20:23:40 ----D---- C:\Windows\system32\wdi
2014-03-05 16:43:05 ----D---- C:\Users\Notebook\AppData\Roaming\Skype
2014-03-04 15:35:23 ----A---- C:\Windows\system32\nvwgf2umx.dll
2014-03-04 14:06:00 ----A---- C:\Windows\system32\nvsvc64.dll
2014-03-04 14:06:00 ----A---- C:\Windows\system32\nvcpl.dll
2014-03-04 14:05:58 ----A---- C:\Windows\system32\nvvsvc.exe
2014-03-04 14:05:58 ----A---- C:\Windows\system32\nvsvcr.dll
2014-03-04 14:05:58 ----A---- C:\Windows\system32\nvshext.dll
2014-03-04 14:05:57 ----A---- C:\Windows\system32\nvmctray.dll
2014-03-02 19:05:11 ----D---- C:\Windows\Logs
2014-03-02 19:05:11 ----D---- C:\Windows\debug
2014-02-28 18:29:41 ----D---- C:\Windows\system32\catroot2
2014-02-28 12:04:16 ----D---- C:\Users\Notebook\AppData\Roaming\uTorrent
2014-02-28 10:04:26 ----D---- C:\Windows\Microsoft.NET
2014-02-26 23:34:01 ----D---- C:\Windows\winsxs
2014-02-26 23:33:57 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-02-26 23:33:57 ----D---- C:\Windows\system32\cs-CZ
2014-02-26 12:07:20 ----RD---- C:\Program Files (x86)
2014-02-26 12:05:56 ----D---- C:\ProgramData
2014-02-26 12:00:04 ----RD---- C:\Program Files
2014-02-26 11:59:07 ----D---- C:\NVIDIA
2014-02-26 11:46:54 ----D---- C:\Windows\SYSWOW64\wbem
2014-02-26 11:46:54 ----D---- C:\Windows\system32\wbem
2014-02-26 11:46:54 ----D---- C:\Windows\system32\drivers\en-US
2014-02-26 05:13:28 ----RSD---- C:\Windows\assembly
2014-02-25 23:09:01 ----D---- C:\Windows\SYSWOW64\en-US
2014-02-25 23:09:01 ----D---- C:\Windows\system32\en-US
2014-02-25 23:08:45 ----SD---- C:\ProgramData\Microsoft
2014-02-17 18:12:14 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-17 12:32:28 ----D---- C:\Windows\system32\MRT
2014-02-17 12:31:04 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-02-17 12:30:20 ----A---- C:\Windows\system32\MRT.exe
2014-02-13 20:27:42 ----D---- C:\Program Files\Internet Explorer
2014-02-13 20:27:42 ----D---- C:\Program Files (x86)\Internet Explorer

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-09-27 248240]
R0 nvstor64;nvstor64; C:\Windows\system32\DRIVERS\nvstor64.sys [2009-08-04 241696]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-11-09 283064]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-09-27 134944]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2011-06-27 2753536]
R3 DNE;Deterministic Network Enhancer Miniport; C:\Windows\system32\DRIVERS\dne64x.sys [2008-11-16 157968]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2012-12-30 140800]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-12-28 2004128]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2012-12-30 15416]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATK64AMD.sys [2007-08-09 13680]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2012-12-28 28704]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2013-12-27 39200]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-03-01 187392]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-06-06 1806400]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S0 gtegtd;gtegtd; C:\Windows\system32\drivers\eroeinr.sys []
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BthAvrcp;Bluetooth AVRCP Profile; C:\Windows\system32\DRIVERS\BthAvrcp.sys [2009-08-13 29184]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 CVirtA;Cisco Systems VPN Adapter for 64-bit Windows; C:\Windows\system32\DRIVERS\CVirtA64.sys [2010-02-08 14992]
S3 CVPNDRVA;Cisco Systems Inc. IPSec Driver; \??\C:\Windows\system32\Drivers\CVPNDRVA.sys [2011-03-04 306536]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 42496]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe [2009-06-15 84536]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-10-23 23808]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-02-05 1593632]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-02-05 16941856]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-03-04 922968]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-01-20 641352]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 348376]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-07 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
S3 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-01-07 43336]
S3 CVPND;Cisco Systems, Inc. VPN Service; C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe [2011-03-04 1529856]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-07 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-02-06 111616]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-12-28 1255736]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-06 257928]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-02-17 118896]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Zdravim a pekny den preji

Vas odhad je spravny, je to bordel - nekomu tezite bitcointy, bez vaseho vedomi samozrejme

Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) http://forum.viry.cz/viewtopic.php?f=29&t=115222

Provedte aktualizaci
Provedte uplny sken - nic nemazte
MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni

Vůbec jsem si nevšimla, že jste mi odepsal tak rychle. Nějak se mi to nezobrazilo, nevadí. Tak stáhla jsem si to MBAM a zde přikládám ten log. Ale i jako lajk tedka vidím, že tu mám trojana..

zajímalo by mně kde jsem k němu přišla

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
http://www.malwarebytes.org

Verze: v2014.03.12.10

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16518
Notebook :: ZUZANKA [administrátor]

Ochrana: Povolena

12.3.2014 20:39:18
MBAM-log-2014-03-12 (22-40-40).txt

Typ: Kompletní kontrola (C:\|D:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 537741
Uplynulý čas: 2 hodin, 29 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 2
HKCR\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007} (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
HKLM\Software\InstallIQ (PUP.Optional.InstallBrain.A) -> Nebyla provedena žádná instrukce.

Nalezené hodnoty v registru: 1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|mseqejfSrv (Trojan.Agent.VBSGen) -> Data: C:\Windows\inf\mseqejf.vbe -> Nebyla provedena žádná instrukce.

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 6
C:\Users\Notebook\AppData\Local\Application Data\Bundled software uninstaller\bi_client.exe (PUP.Optional.Somoto.A) -> Nebyla provedena žádná instrukce.
C:\Users\Notebook\Downloads\DTLite4481-0347.exe (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
C:\Windows\inf\msietxghh\msietxghh.exe (BitcoinMiner) -> Nebyla provedena žádná instrukce.
D:\Users\Zuzka\Documents\Hry\Guitar Pro 5.2! Newest version! Fully cracked!\guitar pro Keygen.exe (RiskWare.Tool.CK) -> Nebyla provedena žádná instrukce.
D:\Users\Zuzka\Downloads\DTLite4451-0236.exe (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
C:\Windows\inf\mseqejf.vbe (Trojan.Agent.VBSGen) -> Nebyla provedena žádná instrukce.

(konec)

Nalezy nemazte, odstrelime je jinak

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;

Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Tady vkládám log. Trochu jsem si četla o těch bitcoinech, co to vlastně je. Takže někdo zneužíval mou výpočetní techniku pro své účely a byl odměňován těmi virtuálnímu pěnězi? A jde nějak dohledat, kdo se to na mě napojil?

Zoek.exe v5.0.0.0 Updated 07-March-2014
Tool run by Notebook on źt 13.03.2014 at 18:50:01,65.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Notebook\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

13.3.2014 18:52:26 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== FireFox Fix ======================

Deleted from C:\Users\Notebook\AppData\Roaming\Mozilla\Firefox\Profiles\s1fzerza.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.seznam.cz/");
user_pref("browser.search.useDBForOrder", true);

Added to C:\Users\Notebook\AppData\Roaming\Mozilla\Firefox\Profiles\s1fzerza.default\prefs.js:

ProfilePath: C:\Users\Notebook\AppData\Roaming\Mozilla\Firefox\Profiles\s1fzerza.default

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_13.03.2014_1904_.backup

==== Deleting Files \ Folders ======================

C:\PROGRA~2\Mozilla Firefox\defaults\preferences\pref.js deleted
C:\PROGRA~2\GreenTree Applications deleted
C:\Users\Notebook\AppData\Roaming\pdfforge deleted
C:\PROGRA~3\YTD Video Downloader deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader deleted
"C:\Users\Notebook\AppData\Roaming\GHISLER" deleted

==== Firefox Extensions ======================

ProfilePath: C:\Users\Notebook\AppData\Roaming\Mozilla\Firefox\Profiles\s1fzerza.default
- Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Notebook\AppData\Roaming\Mozilla\Firefox\Profiles\s1fzerza.default
D775FA6F1E88B3B99E69E8A0D6C3A819 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll - Shockwave Flash
FF0D6F82A0EC13952E83B9439100E45D - C:\Users\Notebook\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll - Facebook Video Calling Plugin
053E986A84F5EE271D38896B8079157D - C:\Windows\SysWOW64\npDeployJava1.dll - Java Deployment Toolkit 7.0.110.21
15E298B5EC5B89C5994A59863969D9FF - C:\Windows\SysWOW64\npmproxy.dll - Microsoft® Windows® Operating System

==== Chrome Look ======================

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE10SR"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... {startPage}"

==== Reset Google Chrome ======================

C:\Users\Notebook\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Notebook\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Notebook\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\Notebook\AppData\Local\Mozilla\Firefox\Profiles\s1fzerza.default\Cache emptied successfully
C:\Users\Notebook\AppData\Roaming\Mozilla\Firefox\Profiles\s1fzerza.default\personas\cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Notebook\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=50 folders=8 10377297 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\temp emptied successfully
C:\Users\Default User\AppData\Local\temp emptied successfully
C:\Users\Notebook\AppData\Local\Temp will be emptied at reboot
C:\Users\Public\AppData\Local\temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Notebook\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on źt 13.03.2014 at 19:14:27,37 ======================

Je to jak pisete, nekdo zneuzival Vas stroj, aby tezil pro nej ty bitcointy. Bohuzel toto doledat nejde

Poprosim nyni o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

Dobrý den, tady je ten FRST.txt log a v příloze ten addition.txt

Addition.rar: (6.93 KiB) Staženo 40 x

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Notebook (administrator) on ZUZANKA on 14-03-2014 14:08:42
Running from C:\Users\Notebook\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe
() C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
() C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
() C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(forum.viry.cz) C:\Users\Notebook\Desktop\FRSTLauncher.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MpCmdRun.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2185032 2009-10-19] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-09-04] (CANON INC.)
HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [617856 2012-12-30] (ELAN Microelectronic Corp.)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1179576 2014-02-05] (NVIDIA Corporation)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [seznam-listicka-distribuce] - C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [mseqejfSrv] - C:\Windows\inf\mseqejf.vbe [1558 2013-08-27] ()
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
HKU\S-1-5-21-2436232761-2230767736-924208380-1000\...\Run: [Facebook Update] - C:\Users\Notebook\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-06-06] (Facebook Inc.)
HKU\S-1-5-21-2436232761-2230767736-924208380-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-2436232761-2230767736-924208380-1000\...\Run: [cz.seznam.software.autoupdate] - C:\Users\Notebook\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-2436232761-2230767736-924208380-1000\...\Run: [cz.seznam.software.szndesktop] - C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
AppInit_DLLs: => File Not Found

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/s ... wflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 93.185.0.5

FireFox:
========
FF ProfilePath: C:\Users\Notebook\AppData\Roaming\Mozilla\Firefox\Profiles\s1fzerza.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @java.com/DTPlugin,version=10.11.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.11.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Notebook\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Adblock Plus - C:\Users\Notebook\AppData\Roaming\Mozilla\Firefox\Profiles\s1fzerza.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-11]

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Google Docs) - C:\Users\Notebook\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-07]
CHR Extension: (Google Drive) - C:\Users\Notebook\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-12-28]
CHR Extension: (YouTube) - C:\Users\Notebook\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-12-28]
CHR Extension: (Google Search) - C:\Users\Notebook\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-12-28]
CHR Extension: (Google Wallet) - C:\Users\Notebook\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-07]
CHR Extension: (Gmail) - C:\Users\Notebook\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-12-28]

==================== Services (Whitelisted) =================

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16941856 2014-02-05] (NVIDIA Corporation)

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc)
S3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [306536 2011-03-04] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-11-09] (Disc Soft Ltd)
S0 gtegtd; C:\Windows\SysWOW64\drivers\eroeinr.sys [61440 2013-02-17] ()
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2012-12-30] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ATK64AMD.sys [13680 2007-08-09] ()
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1806400 2009-06-06] ()
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-03-14 14:08 - 2014-03-14 14:08 - 00012238 _____ () C:\Users\Notebook\Desktop\FRST.txt
2014-03-14 14:07 - 2014-03-14 14:08 - 00000000 ____D () C:\FRST
2014-03-14 14:05 - 2014-03-14 14:05 - 00112640 _____ (forum.viry.cz) C:\Users\Notebook\Desktop\FRSTLauncher.exe
2014-03-14 14:04 - 2014-03-14 14:04 - 02157056 _____ (Farbar) C:\Users\Notebook\Desktop\FRST64.exe
2014-03-13 19:22 - 2014-03-13 19:22 - 00007094 _____ () C:\Users\Notebook\Downloads\zoek-results.txt
2014-03-13 19:12 - 2014-03-14 13:57 - 00000336 _____ () C:\Windows\setupact.log
2014-03-13 19:12 - 2014-03-13 19:12 - 00000338 _____ () C:\Windows\PFRO.log
2014-03-13 19:12 - 2014-03-13 19:12 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-13 19:09 - 2014-03-13 18:49 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-13 18:52 - 2014-03-13 19:14 - 00007094 _____ () C:\zoek-results.log
2014-03-13 18:51 - 2014-03-01 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-13 18:51 - 2014-03-01 06:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 18:51 - 2014-03-01 05:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-13 18:51 - 2014-03-01 05:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-13 18:51 - 2014-03-01 05:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-13 18:51 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-13 18:51 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-13 18:51 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-13 18:51 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-13 18:51 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-13 18:51 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-13 18:51 - 2014-03-01 04:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-13 18:51 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-13 18:51 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-13 18:51 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-13 18:51 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-13 18:51 - 2014-03-01 03:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-13 18:51 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-13 18:51 - 2014-02-07 02:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-13 18:51 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 18:51 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-13 18:51 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-13 18:50 - 2014-03-01 07:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-13 18:50 - 2014-03-01 05:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-13 18:50 - 2014-03-01 05:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-13 18:50 - 2014-03-01 05:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-13 18:50 - 2014-03-01 05:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-13 18:50 - 2014-03-01 05:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-13 18:50 - 2014-03-01 05:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-13 18:50 - 2014-03-01 05:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 18:50 - 2014-03-01 05:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-13 18:50 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-13 18:50 - 2014-03-01 05:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-13 18:50 - 2014-03-01 04:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-13 18:50 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-13 18:50 - 2014-03-01 04:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-13 18:50 - 2014-03-01 04:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-13 18:50 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-13 18:50 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-13 18:50 - 2014-03-01 04:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-13 18:50 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-13 18:50 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-13 18:50 - 2014-03-01 03:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-13 18:50 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-13 18:50 - 2014-02-04 03:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-13 18:50 - 2014-02-04 03:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-13 18:50 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-13 18:50 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-13 18:49 - 2014-03-13 19:04 - 00000000 ____D () C:\zoek_backup
2014-03-13 18:49 - 2014-03-13 18:49 - 01285120 _____ () C:\Users\Notebook\Desktop\zoek.exe
2014-03-12 20:09 - 2014-03-12 20:09 - 00001109 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-12 20:09 - 2014-03-12 20:09 - 00000000 ____D () C:\Users\Notebook\AppData\Roaming\Malwarebytes
2014-03-12 20:08 - 2014-03-12 20:09 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-12 20:08 - 2014-03-12 20:08 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-12 20:08 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-12 20:07 - 2014-03-12 20:07 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Notebook\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-11 13:28 - 2014-03-11 13:28 - 00832273 _____ () C:\Users\Notebook\Downloads\RSITx64.exe
2014-03-10 23:21 - 2014-03-04 15:35 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-10 23:21 - 2014-03-04 15:35 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-10 23:21 - 2014-03-04 15:35 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-10 23:21 - 2014-03-04 15:35 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-03-10 23:21 - 2014-03-04 15:35 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-10 23:21 - 2014-03-04 15:35 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-10 23:21 - 2014-03-04 15:35 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-10 23:21 - 2014-03-04 15:35 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-10 23:21 - 2014-03-04 15:35 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-10 23:21 - 2014-03-04 15:35 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-10 23:21 - 2014-03-04 15:35 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-10 23:21 - 2014-03-04 15:35 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-10 23:21 - 2014-03-04 15:35 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-10 23:21 - 2014-03-04 15:35 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-10 23:21 - 2014-03-04 15:35 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-10 23:21 - 2014-03-04 15:35 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-03-10 23:21 - 2014-03-04 15:35 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-10 23:21 - 2014-03-04 15:35 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-10 23:21 - 2014-03-04 15:35 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-10 23:21 - 2014-03-04 15:35 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-03-10 23:21 - 2014-03-04 15:35 - 00024544 _____ () C:\Windows\system32\nvinfo.pb
2014-03-09 22:40 - 2014-03-09 22:39 - 00019505 _____ () C:\Users\Notebook\Downloads\optika pokus.xlsx
2014-02-28 09:09 - 2014-02-28 11:56 - 730718766 _____ () C:\Users\Notebook\Downloads\Terry Pratchett - Otec prasátek (Hogfather) 2006 HD720p.mkv
2014-02-28 09:03 - 2014-02-28 09:04 - 00000000 ____D () C:\Users\Notebook\Downloads\Terry Pratchett - Zěměplocha - čte Jan Kantůrek
2014-02-28 08:59 - 2014-03-02 19:02 - 00000000 ____D () C:\Users\Notebook\AppData\Roaming\NVIDIA
2014-02-28 08:59 - 2014-02-28 08:59 - 00000000 _____ () C:\Users\Notebook\regbcm
2014-02-26 12:09 - 2014-02-26 12:09 - 00000000 ____D () C:\Users\Notebook\AppData\Local\NVIDIA Corporation
2014-02-26 12:08 - 2014-02-28 20:36 - 00000000 ____D () C:\Users\Notebook\AppData\Local\NVIDIA
2014-02-26 12:08 - 2014-02-05 10:31 - 01048152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-02-26 12:08 - 2014-02-05 10:30 - 01179576 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-02-26 12:08 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-02-26 12:08 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-02-26 12:08 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-02-26 12:08 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-02-26 12:08 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-02-26 12:08 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-02-26 12:07 - 2014-02-26 12:08 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-02-26 12:07 - 2014-02-26 12:07 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-02-26 12:06 - 2014-03-04 15:35 - 00062408 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-02-26 12:06 - 2014-03-04 15:35 - 00054216 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-02-26 12:05 - 2014-02-26 12:09 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-02-26 12:03 - 2014-03-04 15:35 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-02-26 12:03 - 2014-03-04 15:35 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-02-26 12:03 - 2014-03-04 15:35 - 03093280 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-02-26 12:03 - 2014-03-04 15:35 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-02-26 12:03 - 2014-02-08 19:34 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433489.dll
2014-02-26 12:03 - 2014-02-08 19:34 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433489.dll
2014-02-26 12:03 - 2013-12-27 19:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-02-26 12:03 - 2013-12-27 19:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-02-26 12:03 - 2013-12-27 19:42 - 00033056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-02-26 12:00 - 2014-02-26 12:08 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-02-26 11:58 - 2014-01-09 03:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-02-26 11:58 - 2014-01-03 23:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-02-26 11:31 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-02-26 11:31 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-26 11:31 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-26 11:31 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-02-26 11:31 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-02-26 11:31 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-02-26 11:31 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-02-26 11:31 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-02-26 11:31 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-02-26 11:31 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-02-26 11:31 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-02-26 11:31 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-02-26 11:31 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-02-26 11:31 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-02-26 11:31 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-02-26 11:31 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-02-26 11:31 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-02-26 11:31 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-02-25 23:11 - 2014-02-26 23:36 - 01560276 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-16 14:48 - 2014-02-16 14:48 - 00177104 _____ () C:\Users\Notebook\Downloads\The-Wolf-of-Wall-Street(0000230187).srt
2014-02-16 14:24 - 2014-02-16 14:41 - 1888777871 _____ () C:\Users\Notebook\Downloads\The.Wolf.of.Wall.Street.2013.mp4
2014-02-12 22:17 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-12 22:17 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-12 17:31 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-12 17:31 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 17:31 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 17:31 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 17:31 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-12 17:31 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-12 17:30 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-12 17:30 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 17:30 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 17:30 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 17:30 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 17:30 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 17:30 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 17:30 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 17:30 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 17:30 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 17:30 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 17:30 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-12 17:30 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-12 17:30 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 17:30 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-12 17:30 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-12 17:30 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-12 17:30 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-12 17:30 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 17:30 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 17:30 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-12 17:30 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

==================== One Month Modified Files and Folders =======

2014-03-14 14:08 - 2014-03-14 14:08 - 00012238 _____ () C:\Users\Notebook\Desktop\FRST.txt
2014-03-14 14:08 - 2014-03-14 14:07 - 00000000 ____D () C:\FRST
2014-03-14 14:05 - 2014-03-14 14:05 - 00112640 _____ (forum.viry.cz) C:\Users\Notebook\Desktop\FRSTLauncher.exe
2014-03-14 14:04 - 2014-03-14 14:04 - 02157056 _____ (Farbar) C:\Users\Notebook\Desktop\FRST64.exe
2014-03-14 14:03 - 2013-11-09 19:37 - 00000000 ____D () C:\Users\Notebook\AppData\Roaming\Seznam.cz
2014-03-14 14:03 - 2013-09-11 16:28 - 01752451 _____ () C:\Windows\WindowsUpdate.log
2014-03-14 14:02 - 2009-07-14 05:45 - 00022544 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-14 14:02 - 2009-07-14 05:45 - 00022544 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-14 13:58 - 2013-12-07 12:30 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-14 13:57 - 2014-03-13 19:12 - 00000336 _____ () C:\Windows\setupact.log
2014-03-14 13:57 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-14 13:57 - 2009-07-14 05:45 - 00347536 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-13 23:24 - 2012-12-28 18:36 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-13 23:10 - 2012-12-28 17:49 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-13 22:46 - 2013-12-07 12:30 - 00000956 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-13 20:33 - 2013-06-06 10:28 - 00000940 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2436232761-2230767736-924208380-1000UA.job
2014-03-13 19:22 - 2014-03-13 19:22 - 00007094 _____ () C:\Users\Notebook\Downloads\zoek-results.txt
2014-03-13 19:14 - 2014-03-13 18:52 - 00007094 _____ () C:\zoek-results.log
2014-03-13 19:12 - 2014-03-13 19:12 - 00000338 _____ () C:\Windows\PFRO.log
2014-03-13 19:12 - 2014-03-13 19:12 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-13 19:11 - 2014-01-26 18:00 - 00000000 ____D () C:\Users\Notebook\AppData\Roaming\uTorrent
2014-03-13 19:04 - 2014-03-13 18:49 - 00000000 ____D () C:\zoek_backup
2014-03-13 19:00 - 2013-06-06 10:28 - 00000918 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2436232761-2230767736-924208380-1000Core.job
2014-03-13 18:49 - 2014-03-13 19:09 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-13 18:49 - 2014-03-13 18:49 - 01285120 _____ () C:\Users\Notebook\Desktop\zoek.exe
2014-03-12 20:09 - 2014-03-12 20:09 - 00001109 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-12 20:09 - 2014-03-12 20:09 - 00000000 ____D () C:\Users\Notebook\AppData\Roaming\Malwarebytes
2014-03-12 20:09 - 2014-03-12 20:08 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-12 20:08 - 2014-03-12 20:08 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-12 20:07 - 2014-03-12 20:07 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Notebook\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-11 13:29 - 2013-02-16 20:04 - 00000000 ____D () C:\Program Files\trend micro
2014-03-11 13:28 - 2014-03-11 13:28 - 00832273 _____ () C:\Users\Notebook\Downloads\RSITx64.exe
2014-03-10 23:33 - 2012-12-28 10:57 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-03-10 22:34 - 2010-11-21 10:27 - 00669132 _____ () C:\Windows\system32\perfh005.dat
2014-03-10 22:34 - 2010-11-21 10:27 - 00141760 _____ () C:\Windows\system32\perfc005.dat
2014-03-10 22:34 - 2009-07-14 06:13 - 01584626 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-09 22:39 - 2014-03-09 22:40 - 00019505 _____ () C:\Users\Notebook\Downloads\optika pokus.xlsx
2014-03-06 22:59 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-03-06 21:04 - 2012-12-28 14:34 - 00000000 ____D () C:\Users\Notebook\AppData\Roaming\vlc
2014-03-06 20:58 - 2012-12-28 17:49 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-06 20:58 - 2012-12-28 17:49 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-06 20:58 - 2012-12-28 17:49 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-05 22:45 - 2012-12-28 19:45 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-05 22:45 - 2012-12-28 19:44 - 00000000 ____D () C:\ProgramData\Skype
2014-03-05 16:43 - 2012-12-28 19:45 - 00000000 ____D () C:\Users\Notebook\AppData\Roaming\Skype
2014-03-04 18:53 - 2013-12-07 12:31 - 00002183 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-04 15:35 - 2014-03-10 23:21 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-04 15:35 - 2014-03-10 23:21 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-04 15:35 - 2014-03-10 23:21 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-04 15:35 - 2014-03-10 23:21 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-03-04 15:35 - 2014-03-10 23:21 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-04 15:35 - 2014-03-10 23:21 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-04 15:35 - 2014-03-10 23:21 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-04 15:35 - 2014-03-10 23:21 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-04 15:35 - 2014-03-10 23:21 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-04 15:35 - 2014-03-10 23:21 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-04 15:35 - 2014-03-10 23:21 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-04 15:35 - 2014-03-10 23:21 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-04 15:35 - 2014-03-10 23:21 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-04 15:35 - 2014-03-10 23:21 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-04 15:35 - 2014-03-10 23:21 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-04 15:35 - 2014-03-10 23:21 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-03-04 15:35 - 2014-03-10 23:21 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-04 15:35 - 2014-03-10 23:21 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-04 15:35 - 2014-03-10 23:21 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-04 15:35 - 2014-03-10 23:21 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-03-04 15:35 - 2014-03-10 23:21 - 00024544 _____ () C:\Windows\system32\nvinfo.pb
2014-03-04 15:35 - 2014-02-26 12:06 - 00062408 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-03-04 15:35 - 2014-02-26 12:06 - 00054216 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-03-04 15:35 - 2014-02-26 12:03 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-03-04 15:35 - 2014-02-26 12:03 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-03-04 15:35 - 2014-02-26 12:03 - 03093280 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-03-04 15:35 - 2014-02-26 12:03 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-03-04 15:35 - 2009-06-11 10:09 - 18302384 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-03-04 14:06 - 2009-07-02 02:20 - 06714312 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-03-04 14:06 - 2009-07-02 02:20 - 03497816 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-03-04 14:05 - 2009-07-02 02:20 - 02558808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-03-04 14:05 - 2009-07-02 02:20 - 00922968 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-03-04 14:05 - 2009-07-02 02:20 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-03-04 14:05 - 2009-06-11 13:48 - 00064968 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-03-02 19:02 - 2014-02-28 08:59 - 00000000 ____D () C:\Users\Notebook\AppData\Roaming\NVIDIA
2014-03-01 07:05 - 2014-03-13 18:50 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 06:17 - 2014-03-13 18:51 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 06:16 - 2014-03-13 18:51 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 05:58 - 2014-03-13 18:51 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 05:52 - 2014-03-13 18:50 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 05:51 - 2014-03-13 18:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 05:42 - 2014-03-13 18:50 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 05:40 - 2014-03-13 18:51 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 05:37 - 2014-03-13 18:50 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 05:33 - 2014-03-13 18:50 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 05:33 - 2014-03-13 18:50 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 05:32 - 2014-03-13 18:50 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 05:30 - 2014-03-13 18:51 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-01 05:23 - 2014-03-13 18:50 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 05:17 - 2014-03-13 18:50 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 05:11 - 2014-03-13 18:50 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-01 05:02 - 2014-03-13 18:50 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-01 04:54 - 2014-03-13 18:50 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-01 04:52 - 2014-03-13 18:51 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-01 04:51 - 2014-03-13 18:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-13 18:51 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-01 04:43 - 2014-03-13 18:51 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-01 04:43 - 2014-03-13 18:51 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-01 04:42 - 2014-03-13 18:51 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-01 04:40 - 2014-03-13 18:51 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-01 04:38 - 2014-03-13 18:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-01 04:37 - 2014-03-13 18:51 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-01 04:35 - 2014-03-13 18:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-01 04:18 - 2014-03-13 18:50 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-01 04:16 - 2014-03-13 18:50 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-01 04:14 - 2014-03-13 18:50 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-01 04:10 - 2014-03-13 18:50 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-01 04:03 - 2014-03-13 18:51 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-01 04:00 - 2014-03-13 18:51 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-01 03:57 - 2014-03-13 18:50 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-01 03:38 - 2014-03-13 18:51 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-01 03:32 - 2014-03-13 18:50 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-01 03:27 - 2014-03-13 18:51 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-01 03:25 - 2014-03-13 18:50 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-01 03:25 - 2014-03-13 18:50 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-28 20:36 - 2014-02-26 12:08 - 00000000 ____D () C:\Users\Notebook\AppData\Local\NVIDIA
2014-02-28 11:56 - 2014-02-28 09:09 - 730718766 _____ () C:\Users\Notebook\Downloads\Terry Pratchett - Otec prasátek (Hogfather) 2006 HD720p.mkv
2014-02-28 09:04 - 2014-02-28 09:03 - 00000000 ____D () C:\Users\Notebook\Downloads\Terry Pratchett - Zěměplocha - čte Jan Kantůrek
2014-02-28 08:59 - 2014-02-28 08:59 - 00000000 _____ () C:\Users\Notebook\regbcm
2014-02-28 08:59 - 2012-12-28 09:57 - 00000000 ____D () C:\Users\Notebook
2014-02-26 23:36 - 2014-02-25 23:11 - 01560276 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-26 12:09 - 2014-02-26 12:09 - 00000000 ____D () C:\Users\Notebook\AppData\Local\NVIDIA Corporation
2014-02-26 12:09 - 2014-02-26 12:05 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-02-26 12:08 - 2014-02-26 12:07 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-02-26 12:08 - 2014-02-26 12:00 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-02-26 12:07 - 2014-02-26 12:07 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-02-26 11:59 - 2013-01-27 17:07 - 00000000 ____D () C:\NVIDIA
2014-02-17 18:12 - 2012-12-28 11:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-17 12:32 - 2013-08-14 21:15 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-17 12:31 - 2012-12-28 11:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-17 12:30 - 2012-12-28 11:10 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-16 14:48 - 2014-02-16 14:48 - 00177104 _____ () C:\Users\Notebook\Downloads\The-Wolf-of-Wall-Street(0000230187).srt
2014-02-16 14:41 - 2014-02-16 14:24 - 1888777871 _____ () C:\Users\Notebook\Downloads\The.Wolf.of.Wall.Street.2013.mp4
2014-02-16 13:41 - 2013-12-07 12:30 - 00003952 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-16 13:41 - 2013-12-07 12:30 - 00003700 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

LastRegBack: 2014-03-10 11:36

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:232.78 GB) (Free:154.69 GB) NTFS
Drive d: (DATA) (Fixed) (Total:232.88 GB) (Free:34.97 GB) NTFS

Available physical RAM: 2369.68 MB
Total physical RAM: 4095.27 MB
Percentage of memory in use: 42%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: EE7FD84E)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2436232761-2230767736-924208380-1000Core.job => C:\Users\Notebook\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2436232761-2230767736-924208380-1000UA.job => C:\Users\Notebook\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

==================== Security Center ==================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Notebook\Desktop" je 635 MB.

***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon
RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SRS Premium Sound.lnk
C:\Windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe /f=srs_premium_sound_nopreset.zip /h [x]

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000

==================== End Of Log ==============================

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [seznam-listicka-distribuce] - C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [mseqejfSrv] - C:\Windows\inf\mseqejf.vbe [1558 2013-08-27] ()
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
HKU\S-1-5-21-2436232761-2230767736-924208380-1000\...\Run: [Facebook Update] - C:\Users\Notebook\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-06-06] (Facebook Inc.)
HKU\S-1-5-21-2436232761-2230767736-924208380-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-2436232761-2230767736-924208380-1000\...\Run: [cz.seznam.software.autoupdate] - C:\Users\Notebook\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-2436232761-2230767736-924208380-1000\...\Run: [cz.seznam.software.szndesktop] - C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
AppInit_DLLs:  =>  File Not Found

C:\Windows\inf\mseqejf.vbe
2014-03-14 14:05 - 2014-03-14 14:05 - 00112640 _____ (forum.viry.cz) C:\Users\Notebook\Desktop\FRSTLauncher.exe
2014-03-13 19:22 - 2014-03-13 19:22 - 00007094 _____ () C:\Users\Notebook\Downloads\zoek-results.txt
2014-03-13 19:09 - 2014-03-13 18:49 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-13 18:52 - 2014-03-13 19:14 - 00007094 _____ () C:\zoek-results.log
2014-03-13 18:49 - 2014-03-13 19:04 - 00000000 ____D () C:\zoek_backup
2014-03-13 18:49 - 2014-03-13 18:49 - 01285120 _____ () C:\Users\Notebook\Desktop\zoek.exe
2014-03-12 20:07 - 2014-03-12 20:07 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Notebook\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-14 14:05 - 2014-03-14 14:05 - 00112640 _____ (forum.viry.cz) C:\Users\Notebook\Desktop\FRSTLauncher.exe

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2436232761-2230767736-924208380-1000Core.job => C:\Users\Notebook\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2436232761-2230767736-924208380-1000UA.job => C:\Users\Notebook\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f

Hosts:
CMD: shutdown /r /f /t 2

End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by Notebook at 2014-03-15 12:19:57 Run:1
Running from C:\Users\Notebook\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [seznam-listicka-distribuce] - C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [mseqejfSrv] - C:\Windows\inf\mseqejf.vbe [1558 2013-08-27] ()
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
HKU\S-1-5-21-2436232761-2230767736-924208380-1000\...\Run: [Facebook Update] - C:\Users\Notebook\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-06-06] (Facebook Inc.)
HKU\S-1-5-21-2436232761-2230767736-924208380-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-2436232761-2230767736-924208380-1000\...\Run: [cz.seznam.software.autoupdate] - C:\Users\Notebook\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-2436232761-2230767736-924208380-1000\...\Run: [cz.seznam.software.szndesktop] - C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
AppInit_DLLs: => File Not Found

C:\Windows\inf\mseqejf.vbe
2014-03-14 14:05 - 2014-03-14 14:05 - 00112640 _____ (forum.viry.cz) C:\Users\Notebook\Desktop\FRSTLauncher.exe
2014-03-13 19:22 - 2014-03-13 19:22 - 00007094 _____ () C:\Users\Notebook\Downloads\zoek-results.txt
2014-03-13 19:09 - 2014-03-13 18:49 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-13 18:52 - 2014-03-13 19:14 - 00007094 _____ () C:\zoek-results.log
2014-03-13 18:49 - 2014-03-13 19:04 - 00000000 ____D () C:\zoek_backup
2014-03-13 18:49 - 2014-03-13 18:49 - 01285120 _____ () C:\Users\Notebook\Desktop\zoek.exe
2014-03-12 20:07 - 2014-03-12 20:07 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Notebook\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-14 14:05 - 2014-03-14 14:05 - 00112640 _____ (forum.viry.cz) C:\Users\Notebook\Desktop\FRSTLauncher.exe

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2436232761-2230767736-924208380-1000Core.job => C:\Users\Notebook\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2436232761-2230767736-924208380-1000UA.job => C:\Users\Notebook\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f

Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\seznam-listicka-distribuce => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\mseqejfSrv => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\iTunesHelper => Value deleted successfully.
HKU\S-1-5-21-2436232761-2230767736-924208380-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Facebook Update => Value deleted successfully.
HKU\S-1-5-21-2436232761-2230767736-924208380-1000\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => Value deleted successfully.
HKU\S-1-5-21-2436232761-2230767736-924208380-1000\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.autoupdate => Value deleted successfully.
HKU\S-1-5-21-2436232761-2230767736-924208380-1000\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.szndesktop => Value deleted successfully.
"" => Value Data removed successfully.
C:\Windows\inf\mseqejf.vbe => Moved successfully.
C:\Users\Notebook\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Users\Notebook\Downloads\zoek-results.txt => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Notebook\Desktop\zoek.exe => Moved successfully.
C:\Users\Notebook\Downloads\mbam-setup-1.75.0.1300.exe => Moved successfully.
"C:\Users\Notebook\Desktop\FRSTLauncher.exe" => File/Directory not found.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2436232761-2230767736-924208380-1000Core.job => Moved successfully.
C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2436232761-2230767736-924208380-1000UA.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

========= shutdown /r /f /t 2 =========

========= End of CMD: =========

==== End of Fixlog ====

Tak jeste uklidime

T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

Mockrát děkuji

Měla bych doat pouze zda si mám nechat ten MBAM nebo to mam taky smazat? A nejsem si jistá zda problěhlo vše v pořádku, když jsem postupovala dle návodu u toho TFC, PC se na závěr nezrestartoval. Po stažení a spoštění TFC jsem dala start a vyjel nějaký ten log, ale pak mi nevyskočilo žádně OK, tak jsem asi tak 10 minut počkala a dala jsem exit. Tak nevím. Jinak notebook je tišší, avšak nejtišší byl před tím jak se prováděl ten FRST.
Takže teďka bych měla mít smázano všech těch 9 výstrah, co objevil ten MBAM?
Mockrát děkuji za Váš čas a ochotu

MBAM muzete odinstalovat nebo nechat na obcasny sken - v pripade nalezu velmi doporucuji dat sem log na posouzeni, at si neodstrelite neco legitimniho

TFC nemusi vzdy restartovat, jen kdyz neco nemuze smazat hned

Dobře, zrovna včera jsem tedy udělala přes MBAM ten sken, takže už to není nic škodlivého? Akorát pc začíná opět zase hučet, tak nevím. A kdybych ho vzala někam do servisu, vyřešili by to nějak jinak? Nebo v podstatě stejně, jako jste mi radil vy? Přítel mi ještě tvrdí, že by ten vetráček mohl pořád pracovat z důvodu zaschnutí toho lepidla, kterým je připevněn procesor a tím se prý procesor stále zahřívá a větrák se snaží ho pořád chladit, a že by nebylo od věci nanést novou vrstvu...

přikládám ten log z MBAM, jestli se na něj můžete tedy ještě podívat, prosím. A třeba mi ve zkratce říct, co to vlastně je to, co tam našel?
Děkuji

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2014.03.17.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16521
Notebook :: ZUZANKA [administrátor]

Ochrana: Povolena

17.3.2014 15:10:56
MBAM-log-2014-03-17 (17-11-05).txt

Typ: Kompletní kontrola (C:\|D:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 533816
Uplynulý čas: 1 hodin, 57 minut, 30 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 2
HKCR\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007} (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
HKLM\Software\InstallIQ (PUP.Optional.InstallBrain.A) -> Nebyla provedena žádná instrukce.

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 4
C:\Users\Notebook\AppData\Local\Application Data\Bundled software uninstaller\bi_client.exe (PUP.Optional.Somoto.A) -> Nebyla provedena žádná instrukce.
C:\Users\Notebook\Downloads\DTLite4481-0347.exe (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
D:\Users\Zuzka\Documents\Hry\Guitar Pro 5.2! Newest version! Fully cracked!\guitar pro Keygen.exe (RiskWare.Tool.CK) -> Nebyla provedena žádná instrukce.
D:\Users\Zuzka\Downloads\DTLite4451-0236.exe (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.

(konec)

Je mozne ze je zaschla teplovodiva pasta, dale mohou byt zaneseny vetraky prachem - toto mohou v servisu vycistit

Ještě jednou děkuji za ochotu a pomoc

VIRY.CZ

Co to je msietxghh.exe? Může za zpomalení počítače?

Co to je msietxghh.exe? Může za zpomalení počítače?

Re: Co to je msietxghh.exe? Může za zpomalení počítače?

Re: Co to je msietxghh.exe? Může za zpomalení počítače?

Re: Co to je msietxghh.exe? Může za zpomalení počítače?

Re: Co to je msietxghh.exe? Může za zpomalení počítače?

Re: Co to je msietxghh.exe? Může za zpomalení počítače?

Re: Co to je msietxghh.exe? Může za zpomalení počítače?

Re: Co to je msietxghh.exe? Může za zpomalení počítače?

Re: Co to je msietxghh.exe? Může za zpomalení počítače?

Re: Co to je msietxghh.exe? Může za zpomalení počítače?

Re: Co to je msietxghh.exe? Může za zpomalení počítače?

Re: Co to je msietxghh.exe? Může za zpomalení počítače?

Re: Co to je msietxghh.exe? Může za zpomalení počítače?

Re: Co to je msietxghh.exe? Může za zpomalení počítače?

Re: Co to je msietxghh.exe? Může za zpomalení počítače?