VIRY.CZ

Logfile of random's system information tool 1.09 (written by random/random)
Run by marek at 2014-03-12 09:32:41
WIN_7 Service Pack 1
System drive C: has 402 GB (43%) free of 946 GB
Total RAM: 8149 MB (85% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:32:53, on 12. 3. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16521)
Boot mode: Normal

Running processes:
C:\Program Files\trend micro\marek.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: (no name) - cardisabled - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Moje Subory\Programy\Daemon Tools\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-21-3293682074-875854175-1666948384-1000\..\Run: [DAEMON Tools Lite] "C:\Moje Subory\Programy\Daemon Tools\DAEMON Tools Lite\DTLite.exe" -autorun (User '?')
O9 - Extra button: PrivDog - {2F5C139F-79BD-4C84-A95A-E7140525BC55} - C:\Program Files (x86)\AdTrustMedia\PrivDog\1.8.0.18\trustedads.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 4946 bytes

======Listing Processes======


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\cardisabled]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\cardisabled]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-01-23 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-01-23 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"COMODO Internet Security"=C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cistray.exe [2013-11-11 1612504]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Moje Subory\Programy\Daemon Tools\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Users\marek\AppData\Roaming\uTorrent\uTorrent.exe [2014-01-26 1142864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MSIServer]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=189
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=189
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit -
.vbs - edit -

======List of files/folders created in the last 1 month======

2014-03-12 09:32:41 ----D---- C:\rsit
2014-03-12 09:27:00 ----D---- C:\Users\marek\AppData\Roaming\DriverCure
2014-03-12 09:26:59 ----D---- C:\Users\marek\AppData\Roaming\ParetoLogic
2014-03-12 09:26:36 ----D---- C:\ProgramData\ParetoLogic
2014-03-12 09:22:39 ----A---- C:\Windows\system32\drivers\36347552.sys
2014-03-12 09:22:39 ----A---- C:\Windows\system32\drivers\0370935drv.sys
2014-03-12 08:24:32 ----D---- C:\ProgramData\Norton
2014-03-12 07:48:33 ----D---- C:\Program Files\Microsoft Silverlight
2014-03-12 07:48:33 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-03-12 07:23:06 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-03-12 07:23:06 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-03-12 07:23:06 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-03-12 07:23:06 ----A---- C:\Windows\system32\iertutil.dll
2014-03-12 07:23:06 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-03-12 07:23:05 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-03-12 07:23:05 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-03-12 07:23:05 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-03-12 07:23:04 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-03-12 07:23:04 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-03-12 07:23:04 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-03-12 07:23:04 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-03-12 07:23:04 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-03-12 07:23:04 ----A---- C:\Windows\system32\urlmon.dll
2014-03-12 07:23:04 ----A---- C:\Windows\system32\msfeeds.dll
2014-03-12 07:23:04 ----A---- C:\Windows\system32\iernonce.dll
2014-03-12 07:23:04 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-03-12 07:23:03 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-03-12 07:23:03 ----A---- C:\Windows\system32\iesetup.dll
2014-03-12 07:23:03 ----A---- C:\Windows\system32\ie4uinit.exe
2014-03-12 07:23:02 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-03-12 07:23:02 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-03-12 07:23:02 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-03-12 07:23:02 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-03-12 07:23:02 ----A---- C:\Windows\system32\jsproxy.dll
2014-03-12 07:23:02 ----A---- C:\Windows\system32\ieui.dll
2014-03-12 07:23:02 ----A---- C:\Windows\system32\ieframe.dll
2014-03-12 07:23:02 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-03-12 07:23:01 ----A---- C:\Windows\system32\wininet.dll
2014-03-12 07:23:01 ----A---- C:\Windows\system32\jscript9diag.dll
2014-03-12 07:23:01 ----A---- C:\Windows\system32\jscript9.dll
2014-03-12 07:23:01 ----A---- C:\Windows\system32\ieUnatt.exe
2014-03-12 07:23:01 ----A---- C:\Windows\system32\ieapfltr.dll
2014-03-12 07:23:00 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-12 07:23:00 ----A---- C:\Windows\system32\msrating.dll
2014-03-12 07:23:00 ----A---- C:\Windows\system32\mshtml.dll
2014-03-12 07:22:56 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-03-12 07:22:56 ----A---- C:\Windows\system32\qedit.dll
2014-03-12 07:22:55 ----A---- C:\Windows\system32\wwansvc.dll
2014-03-12 07:22:54 ----A---- C:\Windows\SYSWOW64\wer.dll
2014-03-12 07:22:54 ----A---- C:\Windows\system32\wer.dll
2014-03-12 07:22:52 ----A---- C:\Windows\system32\win32k.sys
2014-03-12 07:22:51 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-03-12 07:22:51 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-03-12 06:21:49 ----D---- C:\Users\marek\AppData\Roaming\Malwarebytes
2014-03-12 06:21:43 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-12 05:56:04 ----SHD---- C:\$RECYCLE.BIN
2014-03-12 05:56:02 ----D---- C:\Windows\temp
2014-03-11 22:58:02 ----D---- C:\Program Files (x86)\FileASSASSIN
2014-03-11 22:15:39 ----D---- C:\Program Files (x86)\ESET
2014-03-11 21:09:01 ----D---- C:\Program Files\COMODO
2014-03-11 20:09:49 ----A---- C:\runcheck.txt
2014-03-11 20:06:12 ----D---- C:\zoek_backup
2014-03-10 17:53:29 ----D---- C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-03-09 14:03:26 ----D---- C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-03-08 10:54:08 ----D---- C:\Program Files (x86)\Farming Simulator 2013
2014-03-08 08:17:02 ----D---- C:\Program Files (x86)\Razer
2014-03-08 07:53:39 ----D---- C:\Windows\Minidump
2014-03-07 22:50:29 ----D---- C:\ProgramData\Malwarebytes
2014-03-07 18:56:54 ----A---- C:\Windows\SYSWOW64\certsentry.dll
2014-03-07 18:56:52 ----A---- C:\Windows\system32\drivers\sfi.dat
2014-03-07 18:56:28 ----A---- C:\Windows\SYSWOW64\msvcr71.dll
2014-03-07 18:55:49 ----SD---- C:\ProgramData\Shared Space
2014-03-07 18:55:27 ----D---- C:\ProgramData\Comodo
2014-03-07 18:55:25 ----D---- C:\Program Files\AdTrustMedia
2014-03-07 18:55:25 ----D---- C:\Program Files (x86)\AdTrustMedia
2014-03-07 18:55:24 ----D---- C:\ProgramData\Adtrustmedia
2014-03-07 18:55:17 ----A---- C:\Windows\system32\certsentry.dll
2014-03-07 18:55:13 ----D---- C:\Program Files (x86)\Comodo
2014-03-07 18:55:09 ----D---- C:\ProgramData\Comodo Downloader
2014-03-07 18:13:47 ----D---- C:\Downloads
2014-03-05 16:23:04 ----A---- C:\Windows\system32\drivers\pccsmcfdx64.sys
2014-03-05 16:22:56 ----D---- C:\Program Files (x86)\PC Connectivity Solution
2014-03-03 05:59:07 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-03-03 05:59:07 ----A---- C:\Windows\system32\mstscax.dll
2014-03-02 18:33:37 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-03-02 18:33:34 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-03-02 18:33:34 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-03-02 18:33:34 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2014-03-02 18:33:33 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2014-03-02 18:33:33 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2014-03-02 18:33:33 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2014-03-02 18:33:33 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2014-03-02 18:33:33 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2014-03-02 18:33:33 ----A---- C:\Windows\system32\wksprtPS.dll
2014-03-02 18:33:33 ----A---- C:\Windows\system32\wksprt.exe
2014-03-02 18:33:33 ----A---- C:\Windows\system32\TSWbPrxy.exe
2014-03-02 18:33:33 ----A---- C:\Windows\system32\tsgqec.dll
2014-03-02 18:33:33 ----A---- C:\Windows\system32\rdvidcrl.dll
2014-03-02 18:33:33 ----A---- C:\Windows\system32\mstsc.exe
2014-03-02 18:33:33 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2014-03-02 18:33:16 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2014-03-02 18:33:16 ----A---- C:\Windows\system32\TSWorkspace.dll
2014-03-02 17:57:40 ----D---- C:\Games
2014-03-02 07:06:57 ----RD---- C:\Sandbox
2014-03-02 07:05:07 ----A---- C:\Windows\Sandboxie.ini
2014-02-28 20:39:17 ----D---- C:\Windows\SYSWOW64\FSIM2013Unin
2014-02-25 23:29:01 ----D---- C:\ProgramData\{E1ED556E-3EA0-4F44-8BE7-CC5FB0F4B424}
2014-02-25 23:29:01 ----D---- C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2014-02-25 06:24:49 ----A---- C:\Windows\SYSWOW64\DiskScanDll_log.txt
2014-02-25 05:54:42 ----D---- C:\ProgramData\Razer
2014-02-23 15:16:40 ----D---- C:\Users\marek\AppData\Roaming\Splinter Cell - Blacklist
2014-02-23 12:24:31 ----A---- C:\Windows\system32\SmartDefragBootTime.exe
2014-02-23 12:24:13 ----A---- C:\Windows\system32\IObitSmartDefragExtension.dll
2014-02-23 12:11:08 ----D---- C:\Program Files (x86)\IObit
2014-02-23 12:10:57 ----D---- C:\ProgramData\IObit
2014-02-23 11:52:19 ----A---- C:\Windows\system32\aswBoot.exe
2014-02-16 19:40:53 ----D---- C:\Users\marek\AppData\Roaming\Euro Truck Simulator 2
2014-02-16 19:17:01 ----D---- C:\Users\marek\AppData\Roaming\Far Cry 3
2014-02-16 18:09:50 ----D---- C:\Users\marek\AppData\Roaming\Sniper Ghost Warrior 2
2014-02-16 16:31:04 ----D---- C:\ProgramData\VS Revo Group

======List of files/folders modified in the last 1 month======

2014-03-12 09:32:54 ----D---- C:\Windows\Prefetch
2014-03-12 09:32:46 ----D---- C:\Program Files\trend micro
2014-03-12 09:32:00 ----D---- C:\Windows\System32
2014-03-12 09:32:00 ----D---- C:\Windows\SoftwareDistribution
2014-03-12 09:32:00 ----D---- C:\Windows
2014-03-12 09:29:11 ----D---- C:\Windows\inf
2014-03-12 09:28:54 ----D---- C:\Windows\system32\Tasks
2014-03-12 09:28:53 ----D---- C:\Program Files (x86)\Common Files
2014-03-12 09:28:52 ----D---- C:\Windows\Tasks
2014-03-12 09:28:50 ----RD---- C:\Program Files (x86)
2014-03-12 09:26:36 ----D---- C:\ProgramData
2014-03-12 09:22:56 ----D---- C:\Windows\system32\drivers
2014-03-12 08:58:05 ----D---- C:\Users\marek\AppData\Roaming\Notepad++
2014-03-12 08:58:01 ----D---- C:\Windows\debug
2014-03-12 08:29:44 ----SHD---- C:\System Volume Information
2014-03-12 08:28:58 ----D---- C:\Windows\system32\config
2014-03-12 07:50:48 ----SHD---- C:\Windows\Installer
2014-03-12 07:48:33 ----RD---- C:\Program Files
2014-03-12 07:27:43 ----D---- C:\Windows\winsxs
2014-03-12 07:26:34 ----D---- C:\Windows\SysWOW64
2014-03-12 07:26:34 ----D---- C:\Program Files\Internet Explorer
2014-03-12 07:26:34 ----D---- C:\Program Files (x86)\Internet Explorer
2014-03-12 07:24:25 ----D---- C:\Windows\system32\MRT
2014-03-12 07:24:23 ----A---- C:\Windows\system32\MRT.exe
2014-03-12 07:22:14 ----D---- C:\Windows\system32\catroot2
2014-03-12 07:22:14 ----D---- C:\Windows\system32\catroot
2014-03-12 06:09:42 ----D---- C:\Qoobox
2014-03-12 05:54:59 ----A---- C:\Windows\system.ini
2014-03-12 05:53:50 ----D---- C:\Windows\SYSWOW64\drivers
2014-03-12 05:53:50 ----D---- C:\Windows\AppPatch
2014-03-11 22:35:39 ----D---- C:\ProgramData\Installations
2014-03-11 21:54:28 ----SD---- C:\Users\marek\AppData\Roaming\Microsoft
2014-03-11 21:52:55 ----D---- C:\Windows\system32\DriverStore
2014-03-11 20:53:22 ----D---- C:\Users\marek\AppData\Roaming\DAEMON Tools Lite
2014-03-11 20:53:17 ----D---- C:\Windows\Logs
2014-03-11 20:38:51 ----D---- C:\Users\marek\AppData\Roaming\Comodo
2014-03-11 20:13:35 ----D---- C:\Windows\system32\drivers\etc
2014-03-10 15:48:45 ----RD---- C:\Moje Subory
2014-03-10 15:24:10 ----D---- C:\Users\marek\AppData\Roaming\.minecraft
2014-03-10 06:51:19 ----D---- C:\ProgramData\ProductData
2014-03-09 15:22:23 ----D---- C:\Boot
2014-03-09 14:55:42 ----D---- C:\Users\marek\AppData\Roaming\uTorrent
2014-03-09 13:31:17 ----D---- C:\Game
2014-03-09 13:30:03 ----D---- C:\ProgramData\Ashampoo
2014-03-08 07:52:11 ----D---- C:\Program Files (x86)\Steam
2014-03-07 23:04:59 ----D---- C:\Windows\addins
2014-03-07 18:25:47 ----D---- C:\Users\marek\AppData\Roaming\Adobe
2014-03-05 16:27:49 ----D---- C:\Program Files\DIFX
2014-03-05 16:23:04 ----DC---- C:\Windows\system32\DRVSTORE
2014-03-05 16:19:46 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-03-03 06:22:15 ----D---- C:\Windows\SYSWOW64\sk-SK
2014-03-03 06:22:15 ----D---- C:\Windows\system32\sk-SK
2014-03-03 00:49:01 ----D---- C:\Windows\SYSWOW64\wbem
2014-03-03 00:49:01 ----D---- C:\Windows\system32\wbem
2014-03-03 00:49:01 ----D---- C:\Windows\system32\en-US
2014-03-03 00:49:01 ----D---- C:\Windows\system32\drivers\en-US
2014-03-02 19:30:11 ----RSD---- C:\Windows\assembly
2014-03-02 14:57:21 ----D---- C:\ProgramData\NVIDIA
2014-03-01 17:52:15 ----D---- C:\Program Files (x86)\Google
2014-03-01 17:37:52 ----D---- C:\ProgramData\Intel
2014-02-23 13:38:09 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-02-23 09:52:49 ----A---- C:\Windows\SYSWOW64\log.txt
2014-02-23 00:00:32 ----D---- C:\Program Files\WinZip
2014-02-22 21:11:27 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-02-16 19:10:48 ----RSD---- C:\Windows\Fonts
2014-02-16 17:53:39 ----D---- C:\Windows\SYSWOW64\directx
2014-02-13 06:18:32 ----D---- C:\Windows\Microsoft.NET

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 36347552;36347552; C:\Windows\system32\DRIVERS\36347552.sys [2014-03-12 460888]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 0370935drv;0370935drv; C:\Windows\system32\DRIVERS\0370935drv.sys [2014-03-12 556632]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2013-09-24 23168]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\system32\DRIVERS\cmdguard.sys [2013-11-14 709144]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2013-09-24 48872]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-12-19 283064]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2013-09-24 96800]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2000-01-01 62784]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-11-28 197408]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2013-12-01 883928]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2000-01-01 2206864]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys []
S3 MSICDSetup;MSICDSetup; \??\D:\CDriver64.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2012-01-09 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2012-01-09 27136]
S3 nmwcdnsucx64;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsucx64.sys [2012-01-09 12800]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2012-01-09 171008]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-06-11 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2013-09-29 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2013-09-29 30208]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2012-01-09 9216]
S3 usb_rndisx;USB RNDIS Adapter; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2012-01-09 9216]
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [2010-11-01 14544]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S4 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 cmdAgent;COMODO Internet Security Helper Service; C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cmdagent.exe [2013-10-20 6254152]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S3 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 cmdvirth;COMODO Virtual Service Manager; C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cmdvirth.exe [2013-09-24 164056]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-12 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-01 111616]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-01-27 571816]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-08-31 1255736]
S4 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2013-10-10 144152]
S4 DragonUpdater;COMODO Dragon Update Service; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2014-01-28 2135232]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-12 116648]
S4 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-06-19 634632]
S4 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2000-01-01 166720]
S4 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2000-01-01 277824]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-12-19 922912]
S4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-12-19 411936]
S4 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2000-01-01 365376]
S4 VIAKaraokeService;VIA Karaoke digital mixer Service; C:\Windows\system32\viakaraokesrv.exe [2000-01-01 27768]
S4 wlidsvc;Windows Live ID Sign-in Assistant; c:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]

-----------------EOF-----------------

Zdravím!
Spusťte nejprve tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

# AdwCleaner v3.021 - Report created 12/03/2014 at 17:43:10
# Updated 10/03/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : marek - MAREK-PC
# Running from : C:\Users\marek\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\ParetoLogic
Folder Deleted : C:\Users\marek\AppData\Roaming\DriverCure
Folder Deleted : C:\Users\marek\AppData\Roaming\ParetoLogic

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\ParetoLogic

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16521


-\\ Google Chrome v33.0.1750.146

[ File : C:\Users\marek\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : homepage

*************************

AdwCleaner[R45].txt - [1019 octets] - [12/03/2014 17:42:14]
AdwCleaner[S14].txt - [912 octets] - [12/03/2014 17:43:10]

########## EOF - C:\AdwCleaner\AdwCleaner[S14].txt - [972 octets] ##########

Dejte nový log RSIT.

Logfile of random's system information tool 1.09 (written by random/random)
Run by marek at 2014-03-12 18:32:58
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 405 GB (43%) free of 946 GB
Total RAM: 8149 MB (80% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:33:04, on 12. 3. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16521)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\marek.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: (no name) - cardisabled - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [COMODO] C:\Program Files\COMODO\COMODO livePCsupport\CLPSLA.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Moje Subory\Programy\Daemon Tools\DAEMON Tools Lite\DTLite.exe" -autorun
O9 - Extra button: PrivDog - {2F5C139F-79BD-4C84-A95A-E7140525BC55} - C:\Program Files (x86)\AdTrustMedia\PrivDog\1.8.0.18\trustedads.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: COMODO livePCsupport Service (CLPSLS) - COMODO - C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 5284 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\Explorer.EXE
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Moje Subory\Programy\comodo\COMODO Internet Security\CisTray.exe"
"C:\Moje Subory\Programy\comodo\COMODO Internet Security\cis.exe" --alertsUI
"C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="416.0.280447336\1997134349" --disable-image-transport-surface --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,1,14,27,33 --gpu-vendor-id=0x10de --gpu-device-id=0x0f00 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.3221 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group5/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-1-Percent/group_03/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --extension-process --disable-client-side-phishing-detection --renderer-print-preview --enable-software-compositing --channel="416.2.1973048320\1285000510" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group5/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-1-Percent/group_03/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --extension-process --disable-client-side-phishing-detection --renderer-print-preview --enable-software-compositing --channel="416.3.1287130795\1385073850" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group5/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-1-Percent/group_03/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --disable-client-side-phishing-detection --renderer-print-preview --enable-software-compositing --channel="416.9.2017881205\1981910182" /prefetch:673131151
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Windows\system32\Dwm.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-b5a0fa1a-5995-4145-bca5-f8e6059167be -SystemEventPortName:HostProcess-1a42f725-b017-40b8-a973-d2b432835e81 -IoCancelEventPortName:HostProcess-2bdd0f28-7a26-4998-93f6-2765ce36c642 -NonStateChangingEventPortName:HostProcess-e3ddf829-9cfb-4c33-b331-db94fdfb6805 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:e8c0b643-3d91-4248-a491-73de3a61b902 -DeviceGroupId:WpdFsGroup
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Moje Subory\Cleanery\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\cardisabled]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\cardisabled]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-01-23 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-01-23 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"COMODO Internet Security"=C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cistray.exe [2013-11-11 1612504]
"COMODO"=C:\Program Files\COMODO\COMODO livePCsupport\CLPSLA.exe [2010-08-13 215800]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Moje Subory\Programy\Daemon Tools\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Users\marek\AppData\Roaming\uTorrent\uTorrent.exe [2014-01-26 1142864]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"COMODO"=C:\Program Files\COMODO\COMODO livePCsupport\CLPSLA.exe [2010-08-13 215800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CLPSLS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MSIServer]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=189
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=189
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit -
.vbs - edit -

======List of files/folders created in the last 1 month======

2014-03-12 17:44:07 ----A---- C:\Windows\system32\FNTCACHE.DAT
2014-03-12 17:42:12 ----D---- C:\AdwCleaner
2014-03-12 09:32:41 ----D---- C:\rsit
2014-03-12 09:22:39 ----A---- C:\Windows\system32\drivers\36347552.sys
2014-03-12 09:22:39 ----A---- C:\Windows\system32\drivers\0370935drv.sys
2014-03-12 08:24:32 ----D---- C:\ProgramData\Norton
2014-03-12 07:48:33 ----D---- C:\Program Files\Microsoft Silverlight
2014-03-12 07:48:33 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-03-12 07:23:06 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-03-12 07:23:06 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-03-12 07:23:06 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-03-12 07:23:06 ----A---- C:\Windows\system32\iertutil.dll
2014-03-12 07:23:06 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-03-12 07:23:05 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-03-12 07:23:05 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-03-12 07:23:05 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-03-12 07:23:04 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-03-12 07:23:04 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-03-12 07:23:04 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-03-12 07:23:04 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-03-12 07:23:04 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-03-12 07:23:04 ----A---- C:\Windows\system32\urlmon.dll
2014-03-12 07:23:04 ----A---- C:\Windows\system32\msfeeds.dll
2014-03-12 07:23:04 ----A---- C:\Windows\system32\iernonce.dll
2014-03-12 07:23:04 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-03-12 07:23:03 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-03-12 07:23:03 ----A---- C:\Windows\system32\iesetup.dll
2014-03-12 07:23:03 ----A---- C:\Windows\system32\ie4uinit.exe
2014-03-12 07:23:02 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-03-12 07:23:02 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-03-12 07:23:02 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-03-12 07:23:02 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-03-12 07:23:02 ----A---- C:\Windows\system32\jsproxy.dll
2014-03-12 07:23:02 ----A---- C:\Windows\system32\ieui.dll
2014-03-12 07:23:02 ----A---- C:\Windows\system32\ieframe.dll
2014-03-12 07:23:02 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-03-12 07:23:01 ----A---- C:\Windows\system32\wininet.dll
2014-03-12 07:23:01 ----A---- C:\Windows\system32\jscript9diag.dll
2014-03-12 07:23:01 ----A---- C:\Windows\system32\jscript9.dll
2014-03-12 07:23:01 ----A---- C:\Windows\system32\ieUnatt.exe
2014-03-12 07:23:01 ----A---- C:\Windows\system32\ieapfltr.dll
2014-03-12 07:23:00 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-12 07:23:00 ----A---- C:\Windows\system32\msrating.dll
2014-03-12 07:23:00 ----A---- C:\Windows\system32\mshtml.dll
2014-03-12 07:22:56 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-03-12 07:22:56 ----A---- C:\Windows\system32\qedit.dll
2014-03-12 07:22:55 ----A---- C:\Windows\system32\wwansvc.dll
2014-03-12 07:22:54 ----A---- C:\Windows\SYSWOW64\wer.dll
2014-03-12 07:22:54 ----A---- C:\Windows\system32\wer.dll
2014-03-12 07:22:52 ----A---- C:\Windows\system32\win32k.sys
2014-03-12 07:22:51 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-03-12 07:22:51 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-03-12 06:21:49 ----D---- C:\Users\marek\AppData\Roaming\Malwarebytes
2014-03-12 06:21:43 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-12 05:56:04 ----SHD---- C:\$RECYCLE.BIN
2014-03-12 05:56:02 ----D---- C:\Windows\temp
2014-03-11 22:58:02 ----D---- C:\Program Files (x86)\FileASSASSIN
2014-03-11 22:15:39 ----D---- C:\Program Files (x86)\ESET
2014-03-11 21:09:01 ----D---- C:\Program Files\COMODO
2014-03-11 20:09:49 ----A---- C:\runcheck.txt
2014-03-11 20:06:12 ----D---- C:\zoek_backup
2014-03-10 17:53:29 ----D---- C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-03-09 14:03:26 ----D---- C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-03-08 10:54:08 ----D---- C:\Program Files (x86)\Farming Simulator 2013
2014-03-08 08:17:02 ----D---- C:\Program Files (x86)\Razer
2014-03-08 07:53:39 ----D---- C:\Windows\Minidump
2014-03-07 22:50:29 ----D---- C:\ProgramData\Malwarebytes
2014-03-07 18:56:54 ----A---- C:\Windows\SYSWOW64\certsentry.dll
2014-03-07 18:56:52 ----A---- C:\Windows\system32\drivers\sfi.dat
2014-03-07 18:56:28 ----A---- C:\Windows\SYSWOW64\msvcr71.dll
2014-03-07 18:55:49 ----SD---- C:\ProgramData\Shared Space
2014-03-07 18:55:27 ----D---- C:\ProgramData\Comodo
2014-03-07 18:55:25 ----D---- C:\Program Files\AdTrustMedia
2014-03-07 18:55:25 ----D---- C:\Program Files (x86)\AdTrustMedia
2014-03-07 18:55:24 ----D---- C:\ProgramData\Adtrustmedia
2014-03-07 18:55:17 ----A---- C:\Windows\system32\certsentry.dll
2014-03-07 18:55:13 ----D---- C:\Program Files (x86)\Comodo
2014-03-07 18:55:09 ----D---- C:\ProgramData\Comodo Downloader
2014-03-07 18:13:47 ----D---- C:\Downloads
2014-03-05 16:23:04 ----A---- C:\Windows\system32\drivers\pccsmcfdx64.sys
2014-03-05 16:22:56 ----D---- C:\Program Files (x86)\PC Connectivity Solution
2014-03-03 05:59:07 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-03-03 05:59:07 ----A---- C:\Windows\system32\mstscax.dll
2014-03-02 18:33:37 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-03-02 18:33:34 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-03-02 18:33:34 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-03-02 18:33:34 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2014-03-02 18:33:33 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2014-03-02 18:33:33 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2014-03-02 18:33:33 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2014-03-02 18:33:33 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2014-03-02 18:33:33 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2014-03-02 18:33:33 ----A---- C:\Windows\system32\wksprtPS.dll
2014-03-02 18:33:33 ----A---- C:\Windows\system32\wksprt.exe
2014-03-02 18:33:33 ----A---- C:\Windows\system32\TSWbPrxy.exe
2014-03-02 18:33:33 ----A---- C:\Windows\system32\tsgqec.dll
2014-03-02 18:33:33 ----A---- C:\Windows\system32\rdvidcrl.dll
2014-03-02 18:33:33 ----A---- C:\Windows\system32\mstsc.exe
2014-03-02 18:33:33 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2014-03-02 18:33:16 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2014-03-02 18:33:16 ----A---- C:\Windows\system32\TSWorkspace.dll
2014-03-02 17:57:40 ----D---- C:\Games
2014-03-02 07:06:57 ----RD---- C:\Sandbox
2014-03-02 07:05:07 ----A---- C:\Windows\Sandboxie.ini
2014-02-28 20:39:17 ----D---- C:\Windows\SYSWOW64\FSIM2013Unin
2014-02-25 23:29:01 ----D---- C:\ProgramData\{E1ED556E-3EA0-4F44-8BE7-CC5FB0F4B424}
2014-02-25 23:29:01 ----D---- C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2014-02-25 06:24:49 ----A---- C:\Windows\SYSWOW64\DiskScanDll_log.txt
2014-02-25 05:54:42 ----D---- C:\ProgramData\Razer
2014-02-23 15:16:40 ----D---- C:\Users\marek\AppData\Roaming\Splinter Cell - Blacklist
2014-02-23 12:24:31 ----A---- C:\Windows\system32\SmartDefragBootTime.exe
2014-02-23 12:24:13 ----A---- C:\Windows\system32\IObitSmartDefragExtension.dll
2014-02-23 12:11:08 ----D---- C:\Program Files (x86)\IObit
2014-02-23 12:10:57 ----D---- C:\ProgramData\IObit
2014-02-23 11:52:19 ----A---- C:\Windows\system32\aswBoot.exe
2014-02-16 19:40:53 ----D---- C:\Users\marek\AppData\Roaming\Euro Truck Simulator 2
2014-02-16 19:17:01 ----D---- C:\Users\marek\AppData\Roaming\Far Cry 3
2014-02-16 18:09:50 ----D---- C:\Users\marek\AppData\Roaming\Sniper Ghost Warrior 2
2014-02-16 16:31:04 ----D---- C:\ProgramData\VS Revo Group

======List of files/folders modified in the last 1 month======

2014-03-12 18:33:00 ----D---- C:\Program Files\trend micro
2014-03-12 18:32:49 ----D---- C:\Windows\system32\config
2014-03-12 17:44:19 ----D---- C:\Windows
2014-03-12 17:44:07 ----D---- C:\Windows\System32
2014-03-12 17:43:10 ----D---- C:\ProgramData
2014-03-12 15:27:12 ----SHD---- C:\Windows\Installer
2014-03-12 15:27:12 ----D---- C:\Windows\Prefetch
2014-03-12 15:26:42 ----SHD---- C:\System Volume Information
2014-03-12 14:55:33 ----D---- C:\Users\marek\AppData\Roaming\Notepad++
2014-03-12 09:33:42 ----D---- C:\Windows\SoftwareDistribution
2014-03-12 09:29:11 ----D---- C:\Windows\inf
2014-03-12 09:28:54 ----D---- C:\Windows\system32\Tasks
2014-03-12 09:28:53 ----D---- C:\Program Files (x86)\Common Files
2014-03-12 09:28:52 ----D---- C:\Windows\Tasks
2014-03-12 09:28:50 ----RD---- C:\Program Files (x86)
2014-03-12 09:22:56 ----D---- C:\Windows\system32\drivers
2014-03-12 08:58:01 ----D---- C:\Windows\debug
2014-03-12 07:48:33 ----RD---- C:\Program Files
2014-03-12 07:27:43 ----D---- C:\Windows\winsxs
2014-03-12 07:26:34 ----D---- C:\Windows\SysWOW64
2014-03-12 07:26:34 ----D---- C:\Program Files\Internet Explorer
2014-03-12 07:26:34 ----D---- C:\Program Files (x86)\Internet Explorer
2014-03-12 07:25:35 ----D---- C:\Windows\system32\MRT
2014-03-12 07:24:23 ----A---- C:\Windows\system32\MRT.exe
2014-03-12 07:22:14 ----D---- C:\Windows\system32\catroot2
2014-03-12 07:22:14 ----D---- C:\Windows\system32\catroot
2014-03-12 06:09:42 ----D---- C:\Qoobox
2014-03-12 05:54:59 ----A---- C:\Windows\system.ini
2014-03-12 05:53:50 ----D---- C:\Windows\SYSWOW64\drivers
2014-03-12 05:53:50 ----D---- C:\Windows\AppPatch
2014-03-11 22:35:39 ----D---- C:\ProgramData\Installations
2014-03-11 21:54:28 ----SD---- C:\Users\marek\AppData\Roaming\Microsoft
2014-03-11 21:52:55 ----D---- C:\Windows\system32\DriverStore
2014-03-11 20:53:22 ----D---- C:\Users\marek\AppData\Roaming\DAEMON Tools Lite
2014-03-11 20:53:17 ----D---- C:\Windows\Logs
2014-03-11 20:38:51 ----D---- C:\Users\marek\AppData\Roaming\Comodo
2014-03-11 20:13:35 ----D---- C:\Windows\system32\drivers\etc
2014-03-10 15:48:45 ----RD---- C:\Moje Subory
2014-03-10 15:24:10 ----D---- C:\Users\marek\AppData\Roaming\.minecraft
2014-03-10 06:51:19 ----D---- C:\ProgramData\ProductData
2014-03-09 15:22:23 ----D---- C:\Boot
2014-03-09 14:55:42 ----D---- C:\Users\marek\AppData\Roaming\uTorrent
2014-03-09 13:31:17 ----D---- C:\Game
2014-03-09 13:30:03 ----D---- C:\ProgramData\Ashampoo
2014-03-08 07:52:11 ----D---- C:\Program Files (x86)\Steam
2014-03-07 23:04:59 ----D---- C:\Windows\addins
2014-03-07 18:25:47 ----D---- C:\Users\marek\AppData\Roaming\Adobe
2014-03-05 16:27:49 ----D---- C:\Program Files\DIFX
2014-03-05 16:23:04 ----DC---- C:\Windows\system32\DRVSTORE
2014-03-05 16:19:46 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-03-03 06:22:15 ----D---- C:\Windows\SYSWOW64\sk-SK
2014-03-03 06:22:15 ----D---- C:\Windows\system32\sk-SK
2014-03-03 00:49:01 ----D---- C:\Windows\SYSWOW64\wbem
2014-03-03 00:49:01 ----D---- C:\Windows\system32\wbem
2014-03-03 00:49:01 ----D---- C:\Windows\system32\en-US
2014-03-03 00:49:01 ----D---- C:\Windows\system32\drivers\en-US
2014-03-02 19:30:11 ----RSD---- C:\Windows\assembly
2014-03-02 14:57:21 ----D---- C:\ProgramData\NVIDIA
2014-03-01 17:52:15 ----D---- C:\Program Files (x86)\Google
2014-03-01 17:37:52 ----D---- C:\ProgramData\Intel
2014-02-23 13:38:09 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-02-23 09:52:49 ----A---- C:\Windows\SYSWOW64\log.txt
2014-02-23 00:00:32 ----D---- C:\Program Files\WinZip
2014-02-22 21:11:27 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-02-16 19:10:48 ----RSD---- C:\Windows\Fonts
2014-02-16 17:53:39 ----D---- C:\Windows\SYSWOW64\directx
2014-02-13 06:18:32 ----D---- C:\Windows\Microsoft.NET

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 36347552;36347552; C:\Windows\system32\DRIVERS\36347552.sys [2014-03-12 460888]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 0370935drv;0370935drv; C:\Windows\system32\DRIVERS\0370935drv.sys [2014-03-12 556632]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2013-09-24 23168]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\system32\DRIVERS\cmdguard.sys [2013-11-14 709144]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2013-09-24 48872]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-12-19 283064]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2013-09-24 96800]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2000-01-01 62784]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-11-28 197408]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2013-12-01 883928]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2000-01-01 2206864]
R3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [2010-11-01 14544]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys []
S3 MSICDSetup;MSICDSetup; \??\D:\CDriver64.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2012-01-09 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2012-01-09 27136]
S3 nmwcdnsucx64;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsucx64.sys [2012-01-09 12800]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2012-01-09 171008]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-06-11 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2013-09-29 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2013-09-29 30208]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2012-01-09 9216]
S3 usb_rndisx;USB RNDIS Adapter; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2012-01-09 9216]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S4 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CLPSLS;COMODO livePCsupport Service; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe [2010-08-13 158120]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cmdagent.exe [2013-10-20 6254152]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S3 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 cmdvirth;COMODO Virtual Service Manager; C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cmdvirth.exe [2013-09-24 164056]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-12 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-01 111616]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-01-27 571816]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-08-31 1255736]
S4 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2013-10-10 144152]
S4 DragonUpdater;COMODO Dragon Update Service; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2014-01-28 2135232]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-12 116648]
S4 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-06-19 634632]
S4 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2000-01-01 166720]
S4 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2000-01-01 277824]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-12-19 922912]
S4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-12-19 411936]
S4 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2000-01-01 365376]
S4 VIAKaraokeService;VIA Karaoke digital mixer Service; C:\Windows\system32\viakaraokesrv.exe [2000-01-01 27768]
S4 wlidsvc;Windows Live ID Sign-in Assistant; c:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]

-----------------EOF-----------------

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Windows\system32\drivers\36347552.sys
C:\Windows\system32\drivers\0370935drv.sys

:services
36347552
0370935drv

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\cardisabled]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\cardisabled]

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Logfile of random's system information tool 1.09 (written by random/random)
Run by marek at 2014-03-12 18:50:30
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 406 GB (43%) free of 946 GB
Total RAM: 8149 MB (82% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:50:33, on 12. 3. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16521)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\marek.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [COMODO] C:\Program Files\COMODO\COMODO livePCsupport\CLPSLA.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Moje Subory\Programy\Daemon Tools\DAEMON Tools Lite\DTLite.exe" -autorun
O9 - Extra button: PrivDog - {2F5C139F-79BD-4C84-A95A-E7140525BC55} - C:\Program Files (x86)\AdTrustMedia\PrivDog\1.8.0.18\trustedads.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: COMODO livePCsupport Service (CLPSLS) - COMODO - C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 5237 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\spoolsv.exe
"C:\Windows\system32\Dwm.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\Explorer.EXE
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-747f7847-4606-4788-9451-8f15da111631 -SystemEventPortName:HostProcess-98c46510-40b5-42ba-9869-62d9037c5cec -IoCancelEventPortName:HostProcess-4bf0a21e-e56c-47df-a3d9-b93a1544c956 -NonStateChangingEventPortName:HostProcess-c61d5b16-ba49-4fe9-b335-e501da8e6abf -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:51c38adf-789a-438f-a23b-abc33366cc2d -DeviceGroupId:WpdFsGroup
"C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding
"C:\Windows\notepad.exe" C:\_OTM\MovedFiles\03122014_184405.log
"C:\Moje Subory\Programy\comodo\COMODO Internet Security\CisTray.exe"
"C:\Program Files\COMODO\COMODO livePCsupport\CLPS.exe"
C:\Windows\system32\sppsvc.exe
"C:\Moje Subory\Programy\comodo\COMODO Internet Security\cis.exe" --alertsUI
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2824.0.311070807\1536491391" --disable-image-transport-surface --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,1,14,27,33 --gpu-vendor-id=0x10de --gpu-device-id=0x0f00 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.3221 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group5/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_03/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --extension-process --disable-client-side-phishing-detection --renderer-print-preview --enable-software-compositing --channel="2824.2.662017472\351914739" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group5/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_03/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --extension-process --disable-client-side-phishing-detection --renderer-print-preview --enable-software-compositing --channel="2824.3.1271955670\546749552" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group5/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_03/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --disable-client-side-phishing-detection --renderer-print-preview --enable-software-compositing --channel="2824.5.2121714342\671619532" /prefetch:673131151
"C:\Moje Subory\Cleanery\RSITx64.exe"

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\cardisabled]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-01-23 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-01-23 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"COMODO Internet Security"=C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cistray.exe [2013-11-11 1612504]
"COMODO"=C:\Program Files\COMODO\COMODO livePCsupport\CLPSLA.exe [2010-08-13 215800]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Moje Subory\Programy\Daemon Tools\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Users\marek\AppData\Roaming\uTorrent\uTorrent.exe [2014-01-26 1142864]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"COMODO"=C:\Program Files\COMODO\COMODO livePCsupport\CLPSLA.exe [2010-08-13 215800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CLPSLS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MSIServer]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=189
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=189
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit -
.vbs - edit -

======List of files/folders created in the last 1 month======

2014-03-12 18:44:05 ----D---- C:\_OTM
2014-03-12 17:44:07 ----A---- C:\Windows\system32\FNTCACHE.DAT
2014-03-12 17:42:12 ----D---- C:\AdwCleaner
2014-03-12 09:32:41 ----D---- C:\rsit
2014-03-12 09:22:39 ----A---- C:\Windows\system32\drivers\36347552.sys
2014-03-12 09:22:39 ----A---- C:\Windows\system32\drivers\0370935drv.sys
2014-03-12 08:24:32 ----D---- C:\ProgramData\Norton
2014-03-12 07:48:33 ----D---- C:\Program Files\Microsoft Silverlight
2014-03-12 07:48:33 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-03-12 07:23:06 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-03-12 07:23:06 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-03-12 07:23:06 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-03-12 07:23:06 ----A---- C:\Windows\system32\iertutil.dll
2014-03-12 07:23:06 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-03-12 07:23:05 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-03-12 07:23:05 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-03-12 07:23:05 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-03-12 07:23:04 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-03-12 07:23:04 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-03-12 07:23:04 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-03-12 07:23:04 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-03-12 07:23:04 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-03-12 07:23:04 ----A---- C:\Windows\system32\urlmon.dll
2014-03-12 07:23:04 ----A---- C:\Windows\system32\msfeeds.dll
2014-03-12 07:23:04 ----A---- C:\Windows\system32\iernonce.dll
2014-03-12 07:23:04 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-03-12 07:23:03 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-03-12 07:23:03 ----A---- C:\Windows\system32\iesetup.dll
2014-03-12 07:23:03 ----A---- C:\Windows\system32\ie4uinit.exe
2014-03-12 07:23:02 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-03-12 07:23:02 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-03-12 07:23:02 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-03-12 07:23:02 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-03-12 07:23:02 ----A---- C:\Windows\system32\jsproxy.dll
2014-03-12 07:23:02 ----A---- C:\Windows\system32\ieui.dll
2014-03-12 07:23:02 ----A---- C:\Windows\system32\ieframe.dll
2014-03-12 07:23:02 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-03-12 07:23:01 ----A---- C:\Windows\system32\wininet.dll
2014-03-12 07:23:01 ----A---- C:\Windows\system32\jscript9diag.dll
2014-03-12 07:23:01 ----A---- C:\Windows\system32\jscript9.dll
2014-03-12 07:23:01 ----A---- C:\Windows\system32\ieUnatt.exe
2014-03-12 07:23:01 ----A---- C:\Windows\system32\ieapfltr.dll
2014-03-12 07:23:00 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-12 07:23:00 ----A---- C:\Windows\system32\msrating.dll
2014-03-12 07:23:00 ----A---- C:\Windows\system32\mshtml.dll
2014-03-12 07:22:56 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-03-12 07:22:56 ----A---- C:\Windows\system32\qedit.dll
2014-03-12 07:22:55 ----A---- C:\Windows\system32\wwansvc.dll
2014-03-12 07:22:54 ----A---- C:\Windows\SYSWOW64\wer.dll
2014-03-12 07:22:54 ----A---- C:\Windows\system32\wer.dll
2014-03-12 07:22:52 ----A---- C:\Windows\system32\win32k.sys
2014-03-12 07:22:51 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-03-12 07:22:51 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-03-12 06:21:49 ----D---- C:\Users\marek\AppData\Roaming\Malwarebytes
2014-03-12 06:21:43 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-12 05:56:04 ----SHD---- C:\$RECYCLE.BIN
2014-03-12 05:56:02 ----D---- C:\Windows\temp
2014-03-11 22:58:02 ----D---- C:\Program Files (x86)\FileASSASSIN
2014-03-11 22:15:39 ----D---- C:\Program Files (x86)\ESET
2014-03-11 21:09:01 ----D---- C:\Program Files\COMODO
2014-03-11 20:09:49 ----A---- C:\runcheck.txt
2014-03-11 20:06:12 ----D---- C:\zoek_backup
2014-03-10 17:53:29 ----D---- C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-03-09 14:03:26 ----D---- C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-03-08 10:54:08 ----D---- C:\Program Files (x86)\Farming Simulator 2013
2014-03-08 08:17:02 ----D---- C:\Program Files (x86)\Razer
2014-03-08 07:53:39 ----D---- C:\Windows\Minidump
2014-03-07 22:50:29 ----D---- C:\ProgramData\Malwarebytes
2014-03-07 18:56:54 ----A---- C:\Windows\SYSWOW64\certsentry.dll
2014-03-07 18:56:52 ----A---- C:\Windows\system32\drivers\sfi.dat
2014-03-07 18:56:28 ----A---- C:\Windows\SYSWOW64\msvcr71.dll
2014-03-07 18:55:49 ----SD---- C:\ProgramData\Shared Space
2014-03-07 18:55:27 ----D---- C:\ProgramData\Comodo
2014-03-07 18:55:25 ----D---- C:\Program Files\AdTrustMedia
2014-03-07 18:55:25 ----D---- C:\Program Files (x86)\AdTrustMedia
2014-03-07 18:55:24 ----D---- C:\ProgramData\Adtrustmedia
2014-03-07 18:55:17 ----A---- C:\Windows\system32\certsentry.dll
2014-03-07 18:55:13 ----D---- C:\Program Files (x86)\Comodo
2014-03-07 18:55:09 ----D---- C:\ProgramData\Comodo Downloader
2014-03-07 18:13:47 ----D---- C:\Downloads
2014-03-05 16:23:04 ----A---- C:\Windows\system32\drivers\pccsmcfdx64.sys
2014-03-05 16:22:56 ----D---- C:\Program Files (x86)\PC Connectivity Solution
2014-03-03 05:59:07 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-03-03 05:59:07 ----A---- C:\Windows\system32\mstscax.dll
2014-03-02 18:33:37 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-03-02 18:33:34 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-03-02 18:33:34 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-03-02 18:33:34 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2014-03-02 18:33:33 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2014-03-02 18:33:33 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2014-03-02 18:33:33 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2014-03-02 18:33:33 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2014-03-02 18:33:33 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2014-03-02 18:33:33 ----A---- C:\Windows\system32\wksprtPS.dll
2014-03-02 18:33:33 ----A---- C:\Windows\system32\wksprt.exe
2014-03-02 18:33:33 ----A---- C:\Windows\system32\TSWbPrxy.exe
2014-03-02 18:33:33 ----A---- C:\Windows\system32\tsgqec.dll
2014-03-02 18:33:33 ----A---- C:\Windows\system32\rdvidcrl.dll
2014-03-02 18:33:33 ----A---- C:\Windows\system32\mstsc.exe
2014-03-02 18:33:33 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2014-03-02 18:33:16 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2014-03-02 18:33:16 ----A---- C:\Windows\system32\TSWorkspace.dll
2014-03-02 17:57:40 ----D---- C:\Games
2014-03-02 07:06:57 ----RD---- C:\Sandbox
2014-03-02 07:05:07 ----A---- C:\Windows\Sandboxie.ini
2014-02-28 20:39:17 ----D---- C:\Windows\SYSWOW64\FSIM2013Unin
2014-02-25 23:29:01 ----D---- C:\ProgramData\{E1ED556E-3EA0-4F44-8BE7-CC5FB0F4B424}
2014-02-25 23:29:01 ----D---- C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2014-02-25 06:24:49 ----A---- C:\Windows\SYSWOW64\DiskScanDll_log.txt
2014-02-25 05:54:42 ----D---- C:\ProgramData\Razer
2014-02-23 15:16:40 ----D---- C:\Users\marek\AppData\Roaming\Splinter Cell - Blacklist
2014-02-23 12:24:31 ----A---- C:\Windows\system32\SmartDefragBootTime.exe
2014-02-23 12:24:13 ----A---- C:\Windows\system32\IObitSmartDefragExtension.dll
2014-02-23 12:11:08 ----D---- C:\Program Files (x86)\IObit
2014-02-23 12:10:57 ----D---- C:\ProgramData\IObit
2014-02-23 11:52:19 ----A---- C:\Windows\system32\aswBoot.exe
2014-02-16 19:40:53 ----D---- C:\Users\marek\AppData\Roaming\Euro Truck Simulator 2
2014-02-16 19:17:01 ----D---- C:\Users\marek\AppData\Roaming\Far Cry 3
2014-02-16 18:09:50 ----D---- C:\Users\marek\AppData\Roaming\Sniper Ghost Warrior 2
2014-02-16 16:31:04 ----D---- C:\ProgramData\VS Revo Group

======List of files/folders modified in the last 1 month======

2014-03-12 18:50:32 ----D---- C:\Program Files\trend micro
2014-03-12 18:46:28 ----D---- C:\Windows\system32\config
2014-03-12 17:44:19 ----D---- C:\Windows
2014-03-12 17:44:07 ----D---- C:\Windows\System32
2014-03-12 17:43:10 ----D---- C:\ProgramData
2014-03-12 15:27:12 ----SHD---- C:\Windows\Installer
2014-03-12 15:27:12 ----D---- C:\Windows\Prefetch
2014-03-12 15:26:42 ----SHD---- C:\System Volume Information
2014-03-12 14:55:33 ----D---- C:\Users\marek\AppData\Roaming\Notepad++
2014-03-12 09:33:42 ----D---- C:\Windows\SoftwareDistribution
2014-03-12 09:29:11 ----D---- C:\Windows\inf
2014-03-12 09:28:54 ----D---- C:\Windows\system32\Tasks
2014-03-12 09:28:53 ----D---- C:\Program Files (x86)\Common Files
2014-03-12 09:28:52 ----D---- C:\Windows\Tasks
2014-03-12 09:28:50 ----RD---- C:\Program Files (x86)
2014-03-12 09:22:56 ----D---- C:\Windows\system32\drivers
2014-03-12 08:58:01 ----D---- C:\Windows\debug
2014-03-12 07:48:33 ----RD---- C:\Program Files
2014-03-12 07:27:43 ----D---- C:\Windows\winsxs
2014-03-12 07:26:34 ----D---- C:\Windows\SysWOW64
2014-03-12 07:26:34 ----D---- C:\Program Files\Internet Explorer
2014-03-12 07:26:34 ----D---- C:\Program Files (x86)\Internet Explorer
2014-03-12 07:25:35 ----D---- C:\Windows\system32\MRT
2014-03-12 07:24:23 ----A---- C:\Windows\system32\MRT.exe
2014-03-12 07:22:14 ----D---- C:\Windows\system32\catroot2
2014-03-12 07:22:14 ----D---- C:\Windows\system32\catroot
2014-03-12 06:09:42 ----D---- C:\Qoobox
2014-03-12 05:54:59 ----A---- C:\Windows\system.ini
2014-03-12 05:53:50 ----D---- C:\Windows\SYSWOW64\drivers
2014-03-12 05:53:50 ----D---- C:\Windows\AppPatch
2014-03-11 22:35:39 ----D---- C:\ProgramData\Installations
2014-03-11 21:54:28 ----SD---- C:\Users\marek\AppData\Roaming\Microsoft
2014-03-11 21:52:55 ----D---- C:\Windows\system32\DriverStore
2014-03-11 20:53:22 ----D---- C:\Users\marek\AppData\Roaming\DAEMON Tools Lite
2014-03-11 20:53:17 ----D---- C:\Windows\Logs
2014-03-11 20:38:51 ----D---- C:\Users\marek\AppData\Roaming\Comodo
2014-03-11 20:13:35 ----D---- C:\Windows\system32\drivers\etc
2014-03-10 15:48:45 ----RD---- C:\Moje Subory
2014-03-10 15:24:10 ----D---- C:\Users\marek\AppData\Roaming\.minecraft
2014-03-10 06:51:19 ----D---- C:\ProgramData\ProductData
2014-03-09 15:22:23 ----D---- C:\Boot
2014-03-09 14:55:42 ----D---- C:\Users\marek\AppData\Roaming\uTorrent
2014-03-09 13:31:17 ----D---- C:\Game
2014-03-09 13:30:03 ----D---- C:\ProgramData\Ashampoo
2014-03-08 07:52:11 ----D---- C:\Program Files (x86)\Steam
2014-03-07 23:04:59 ----D---- C:\Windows\addins
2014-03-07 18:25:47 ----D---- C:\Users\marek\AppData\Roaming\Adobe
2014-03-05 16:27:49 ----D---- C:\Program Files\DIFX
2014-03-05 16:23:04 ----DC---- C:\Windows\system32\DRVSTORE
2014-03-05 16:19:46 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-03-03 06:22:15 ----D---- C:\Windows\SYSWOW64\sk-SK
2014-03-03 06:22:15 ----D---- C:\Windows\system32\sk-SK
2014-03-03 00:49:01 ----D---- C:\Windows\SYSWOW64\wbem
2014-03-03 00:49:01 ----D---- C:\Windows\system32\wbem
2014-03-03 00:49:01 ----D---- C:\Windows\system32\en-US
2014-03-03 00:49:01 ----D---- C:\Windows\system32\drivers\en-US
2014-03-02 19:30:11 ----RSD---- C:\Windows\assembly
2014-03-02 14:57:21 ----D---- C:\ProgramData\NVIDIA
2014-03-01 17:52:15 ----D---- C:\Program Files (x86)\Google
2014-03-01 17:37:52 ----D---- C:\ProgramData\Intel
2014-02-23 13:38:09 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-02-23 09:52:49 ----A---- C:\Windows\SYSWOW64\log.txt
2014-02-23 00:00:32 ----D---- C:\Program Files\WinZip
2014-02-22 21:11:27 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-02-16 19:10:48 ----RSD---- C:\Windows\Fonts
2014-02-16 17:53:39 ----D---- C:\Windows\SYSWOW64\directx
2014-02-13 06:18:32 ----D---- C:\Windows\Microsoft.NET

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2013-09-24 23168]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\system32\DRIVERS\cmdguard.sys [2013-11-14 709144]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2013-09-24 48872]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-12-19 283064]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2013-09-24 96800]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2000-01-01 62784]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-11-28 197408]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2013-12-01 883928]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2000-01-01 2206864]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys []
S3 MSICDSetup;MSICDSetup; \??\D:\CDriver64.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2012-01-09 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2012-01-09 27136]
S3 nmwcdnsucx64;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsucx64.sys [2012-01-09 12800]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2012-01-09 171008]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-06-11 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2013-09-29 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2013-09-29 30208]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2012-01-09 9216]
S3 usb_rndisx;USB RNDIS Adapter; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2012-01-09 9216]
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [2010-11-01 14544]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S4 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CLPSLS;COMODO livePCsupport Service; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe [2010-08-13 158120]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cmdagent.exe [2013-10-20 6254152]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S3 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 cmdvirth;COMODO Virtual Service Manager; C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cmdvirth.exe [2013-09-24 164056]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-12 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-01 111616]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-01-27 571816]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-08-31 1255736]
S4 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2013-10-10 144152]
S4 DragonUpdater;COMODO Dragon Update Service; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2014-01-28 2135232]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-12 116648]
S4 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-06-19 634632]
S4 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2000-01-01 166720]
S4 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2000-01-01 277824]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-12-19 922912]
S4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-12-19 411936]
S4 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2000-01-01 365376]
S4 VIAKaraokeService;VIA Karaoke digital mixer Service; C:\Windows\system32\viakaraokesrv.exe [2000-01-01 27768]
S4 wlidsvc;Windows Live ID Sign-in Assistant; c:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]

-----------------EOF-----------------

OTM nemazal. Zkuste znovu se stejnám skriptem, ale před skenem vypněte antivir.

pre istotu prikladam aj log z OTM----All processes killed
========== FILES ==========
File/Folder C:\Windows\system32\drivers\36347552.sys not found.
File/Folder C:\Windows\system32\drivers\0370935drv.sys not found.
========== SERVICES/DRIVERS ==========
Error: No service named 36347552 was found to stop!
Service\Driver key 36347552 not found.
Error: No service named 0370935drv was found to stop!
Service\Driver key 0370935drv not found.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\cardisabled\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\cardisabled\ not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: Default
->Temp folder emptied: 0 bytes

User: marek
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 128 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 6656905 bytes
->Flash cache emptied: 0 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 6,00 mb


[EMPTYFLASH]

User: Default

User: marek
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 03122014_190045

Files moved on Reboot...
C:\Users\marek\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.

Registry entries deleted on Reboot...
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------Logfile of random's system information tool 1.09 (written by random/random)
Run by marek at 2014-03-12 19:04:41
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 406 GB (43%) free of 946 GB
Total RAM: 8149 MB (83% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:04:44, on 12. 3. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16521)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\marek.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [COMODO] C:\Program Files\COMODO\COMODO livePCsupport\CLPSLA.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Moje Subory\Programy\Daemon Tools\DAEMON Tools Lite\DTLite.exe" -autorun
O9 - Extra button: PrivDog - {2F5C139F-79BD-4C84-A95A-E7140525BC55} - C:\Program Files (x86)\AdTrustMedia\PrivDog\1.8.0.18\trustedads.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: COMODO livePCsupport Service (CLPSLS) - COMODO - C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 5237 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k imgsvc
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-dc5d9cac-0eb6-4018-9238-d7f86508d1cb -SystemEventPortName:HostProcess-d94a834b-68d6-4f65-adc5-ad317cc37258 -IoCancelEventPortName:HostProcess-f8dcc0d9-0f3e-493b-841f-66a637ee4eb5 -NonStateChangingEventPortName:HostProcess-c592eff6-e37c-4620-a915-a4e267265c4e -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:06281537-46a2-4b1a-9cb1-4947ebaadf0f -DeviceGroupId:WpdFsGroup
"C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding
"C:\Windows\notepad.exe" C:\_OTM\MovedFiles\03122014_190045.log
"C:\Moje Subory\Programy\comodo\COMODO Internet Security\CisTray.exe"
"C:\Moje Subory\Programy\comodo\COMODO Internet Security\cis.exe" --alertsUI
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="884.0.449994491\429136086" --disable-image-transport-surface --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,1,14,27,33 --gpu-vendor-id=0x10de --gpu-device-id=0x0f00 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.3221 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group5/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_03/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --extension-process --disable-client-side-phishing-detection --renderer-print-preview --enable-software-compositing --channel="884.2.1388483558\1262248445" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group5/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_03/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --extension-process --disable-client-side-phishing-detection --renderer-print-preview --enable-software-compositing --channel="884.3.1427551841\1953958965" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group5/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_03/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --disable-client-side-phishing-detection --renderer-print-preview --enable-software-compositing --channel="884.5.90094503\1241232211" /prefetch:673131151
C:\Windows\system32\sppsvc.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Moje Subory\Cleanery\RSITx64.exe"

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\cardisabled]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-01-23 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-01-23 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"COMODO Internet Security"=C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cistray.exe [2013-11-11 1612504]
"COMODO"=C:\Program Files\COMODO\COMODO livePCsupport\CLPSLA.exe [2010-08-13 215800]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Moje Subory\Programy\Daemon Tools\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Users\marek\AppData\Roaming\uTorrent\uTorrent.exe [2014-01-26 1142864]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"COMODO"=C:\Program Files\COMODO\COMODO livePCsupport\CLPSLA.exe [2010-08-13 215800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CLPSLS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MSIServer]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=189
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=189
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit -
.vbs - edit -

======List of files/folders created in the last 1 month======

2014-03-12 18:44:05 ----D---- C:\_OTM
2014-03-12 17:44:07 ----A---- C:\Windows\system32\FNTCACHE.DAT
2014-03-12 17:42:12 ----D---- C:\AdwCleaner
2014-03-12 09:32:41 ----D---- C:\rsit
2014-03-12 09:22:39 ----A---- C:\Windows\system32\drivers\36347552.sys
2014-03-12 09:22:39 ----A---- C:\Windows\system32\drivers\0370935drv.sys
2014-03-12 08:24:32 ----D---- C:\ProgramData\Norton
2014-03-12 07:48:33 ----D---- C:\Program Files\Microsoft Silverlight
2014-03-12 07:48:33 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-03-12 07:23:06 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-03-12 07:23:06 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-03-12 07:23:06 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-03-12 07:23:06 ----A---- C:\Windows\system32\iertutil.dll
2014-03-12 07:23:06 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-03-12 07:23:05 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-03-12 07:23:05 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-03-12 07:23:05 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-03-12 07:23:04 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-03-12 07:23:04 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-03-12 07:23:04 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-03-12 07:23:04 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-03-12 07:23:04 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-03-12 07:23:04 ----A---- C:\Windows\system32\urlmon.dll
2014-03-12 07:23:04 ----A---- C:\Windows\system32\msfeeds.dll
2014-03-12 07:23:04 ----A---- C:\Windows\system32\iernonce.dll
2014-03-12 07:23:04 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-03-12 07:23:03 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-03-12 07:23:03 ----A---- C:\Windows\system32\iesetup.dll
2014-03-12 07:23:03 ----A---- C:\Windows\system32\ie4uinit.exe
2014-03-12 07:23:02 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-03-12 07:23:02 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-03-12 07:23:02 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-03-12 07:23:02 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-03-12 07:23:02 ----A---- C:\Windows\system32\jsproxy.dll
2014-03-12 07:23:02 ----A---- C:\Windows\system32\ieui.dll
2014-03-12 07:23:02 ----A---- C:\Windows\system32\ieframe.dll
2014-03-12 07:23:02 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-03-12 07:23:01 ----A---- C:\Windows\system32\wininet.dll
2014-03-12 07:23:01 ----A---- C:\Windows\system32\jscript9diag.dll
2014-03-12 07:23:01 ----A---- C:\Windows\system32\jscript9.dll
2014-03-12 07:23:01 ----A---- C:\Windows\system32\ieUnatt.exe
2014-03-12 07:23:01 ----A---- C:\Windows\system32\ieapfltr.dll
2014-03-12 07:23:00 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-12 07:23:00 ----A---- C:\Windows\system32\msrating.dll
2014-03-12 07:23:00 ----A---- C:\Windows\system32\mshtml.dll
2014-03-12 07:22:56 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-03-12 07:22:56 ----A---- C:\Windows\system32\qedit.dll
2014-03-12 07:22:55 ----A---- C:\Windows\system32\wwansvc.dll
2014-03-12 07:22:54 ----A---- C:\Windows\SYSWOW64\wer.dll
2014-03-12 07:22:54 ----A---- C:\Windows\system32\wer.dll
2014-03-12 07:22:52 ----A---- C:\Windows\system32\win32k.sys
2014-03-12 07:22:51 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-03-12 07:22:51 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-03-12 06:21:49 ----D---- C:\Users\marek\AppData\Roaming\Malwarebytes
2014-03-12 06:21:43 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-12 05:56:04 ----SHD---- C:\$RECYCLE.BIN
2014-03-12 05:56:02 ----D---- C:\Windows\temp
2014-03-11 22:58:02 ----D---- C:\Program Files (x86)\FileASSASSIN
2014-03-11 22:15:39 ----D---- C:\Program Files (x86)\ESET
2014-03-11 21:09:01 ----D---- C:\Program Files\COMODO
2014-03-11 20:09:49 ----A---- C:\runcheck.txt
2014-03-11 20:06:12 ----D---- C:\zoek_backup
2014-03-10 17:53:29 ----D---- C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-03-09 14:03:26 ----D---- C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-03-08 10:54:08 ----D---- C:\Program Files (x86)\Farming Simulator 2013
2014-03-08 08:17:02 ----D---- C:\Program Files (x86)\Razer
2014-03-08 07:53:39 ----D---- C:\Windows\Minidump
2014-03-07 22:50:29 ----D---- C:\ProgramData\Malwarebytes
2014-03-07 18:56:54 ----A---- C:\Windows\SYSWOW64\certsentry.dll
2014-03-07 18:56:52 ----A---- C:\Windows\system32\drivers\sfi.dat
2014-03-07 18:56:28 ----A---- C:\Windows\SYSWOW64\msvcr71.dll
2014-03-07 18:55:49 ----SD---- C:\ProgramData\Shared Space
2014-03-07 18:55:27 ----D---- C:\ProgramData\Comodo
2014-03-07 18:55:25 ----D---- C:\Program Files\AdTrustMedia
2014-03-07 18:55:25 ----D---- C:\Program Files (x86)\AdTrustMedia
2014-03-07 18:55:24 ----D---- C:\ProgramData\Adtrustmedia
2014-03-07 18:55:17 ----A---- C:\Windows\system32\certsentry.dll
2014-03-07 18:55:13 ----D---- C:\Program Files (x86)\Comodo
2014-03-07 18:55:09 ----D---- C:\ProgramData\Comodo Downloader
2014-03-07 18:13:47 ----D---- C:\Downloads
2014-03-05 16:23:04 ----A---- C:\Windows\system32\drivers\pccsmcfdx64.sys
2014-03-05 16:22:56 ----D---- C:\Program Files (x86)\PC Connectivity Solution
2014-03-03 05:59:07 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-03-03 05:59:07 ----A---- C:\Windows\system32\mstscax.dll
2014-03-02 18:33:37 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-03-02 18:33:34 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-03-02 18:33:34 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-03-02 18:33:34 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2014-03-02 18:33:33 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2014-03-02 18:33:33 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2014-03-02 18:33:33 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2014-03-02 18:33:33 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2014-03-02 18:33:33 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2014-03-02 18:33:33 ----A---- C:\Windows\system32\wksprtPS.dll
2014-03-02 18:33:33 ----A---- C:\Windows\system32\wksprt.exe
2014-03-02 18:33:33 ----A---- C:\Windows\system32\TSWbPrxy.exe
2014-03-02 18:33:33 ----A---- C:\Windows\system32\tsgqec.dll
2014-03-02 18:33:33 ----A---- C:\Windows\system32\rdvidcrl.dll
2014-03-02 18:33:33 ----A---- C:\Windows\system32\mstsc.exe
2014-03-02 18:33:33 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2014-03-02 18:33:16 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2014-03-02 18:33:16 ----A---- C:\Windows\system32\TSWorkspace.dll
2014-03-02 17:57:40 ----D---- C:\Games
2014-03-02 07:06:57 ----RD---- C:\Sandbox
2014-03-02 07:05:07 ----A---- C:\Windows\Sandboxie.ini
2014-02-28 20:39:17 ----D---- C:\Windows\SYSWOW64\FSIM2013Unin
2014-02-25 23:29:01 ----D---- C:\ProgramData\{E1ED556E-3EA0-4F44-8BE7-CC5FB0F4B424}
2014-02-25 23:29:01 ----D---- C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2014-02-25 06:24:49 ----A---- C:\Windows\SYSWOW64\DiskScanDll_log.txt
2014-02-25 05:54:42 ----D---- C:\ProgramData\Razer
2014-02-23 15:16:40 ----D---- C:\Users\marek\AppData\Roaming\Splinter Cell - Blacklist
2014-02-23 12:24:31 ----A---- C:\Windows\system32\SmartDefragBootTime.exe
2014-02-23 12:24:13 ----A---- C:\Windows\system32\IObitSmartDefragExtension.dll
2014-02-23 12:11:08 ----D---- C:\Program Files (x86)\IObit
2014-02-23 12:10:57 ----D---- C:\ProgramData\IObit
2014-02-23 11:52:19 ----A---- C:\Windows\system32\aswBoot.exe
2014-02-16 19:40:53 ----D---- C:\Users\marek\AppData\Roaming\Euro Truck Simulator 2
2014-02-16 19:17:01 ----D---- C:\Users\marek\AppData\Roaming\Far Cry 3
2014-02-16 18:09:50 ----D---- C:\Users\marek\AppData\Roaming\Sniper Ghost Warrior 2
2014-02-16 16:31:04 ----D---- C:\ProgramData\VS Revo Group

======List of files/folders modified in the last 1 month======

2014-03-12 19:04:43 ----D---- C:\Program Files\trend micro
2014-03-12 19:00:58 ----D---- C:\Windows\system32\config
2014-03-12 17:44:19 ----D---- C:\Windows
2014-03-12 17:44:07 ----D---- C:\Windows\System32
2014-03-12 17:43:10 ----D---- C:\ProgramData
2014-03-12 15:27:12 ----SHD---- C:\Windows\Installer
2014-03-12 15:27:12 ----D---- C:\Windows\Prefetch
2014-03-12 15:26:42 ----SHD---- C:\System Volume Information
2014-03-12 14:55:33 ----D---- C:\Users\marek\AppData\Roaming\Notepad++
2014-03-12 09:33:42 ----D---- C:\Windows\SoftwareDistribution
2014-03-12 09:29:11 ----D---- C:\Windows\inf
2014-03-12 09:28:54 ----D---- C:\Windows\system32\Tasks
2014-03-12 09:28:53 ----D---- C:\Program Files (x86)\Common Files
2014-03-12 09:28:52 ----D---- C:\Windows\Tasks
2014-03-12 09:28:50 ----RD---- C:\Program Files (x86)
2014-03-12 09:22:56 ----D---- C:\Windows\system32\drivers
2014-03-12 08:58:01 ----D---- C:\Windows\debug
2014-03-12 07:48:33 ----RD---- C:\Program Files
2014-03-12 07:27:43 ----D---- C:\Windows\winsxs
2014-03-12 07:26:34 ----D---- C:\Windows\SysWOW64
2014-03-12 07:26:34 ----D---- C:\Program Files\Internet Explorer
2014-03-12 07:26:34 ----D---- C:\Program Files (x86)\Internet Explorer
2014-03-12 07:25:35 ----D---- C:\Windows\system32\MRT
2014-03-12 07:24:23 ----A---- C:\Windows\system32\MRT.exe
2014-03-12 07:22:14 ----D---- C:\Windows\system32\catroot2
2014-03-12 07:22:14 ----D---- C:\Windows\system32\catroot
2014-03-12 06:09:42 ----D---- C:\Qoobox
2014-03-12 05:54:59 ----A---- C:\Windows\system.ini
2014-03-12 05:53:50 ----D---- C:\Windows\SYSWOW64\drivers
2014-03-12 05:53:50 ----D---- C:\Windows\AppPatch
2014-03-11 22:35:39 ----D---- C:\ProgramData\Installations
2014-03-11 21:54:28 ----SD---- C:\Users\marek\AppData\Roaming\Microsoft
2014-03-11 21:52:55 ----D---- C:\Windows\system32\DriverStore
2014-03-11 20:53:22 ----D---- C:\Users\marek\AppData\Roaming\DAEMON Tools Lite
2014-03-11 20:53:17 ----D---- C:\Windows\Logs
2014-03-11 20:38:51 ----D---- C:\Users\marek\AppData\Roaming\Comodo
2014-03-11 20:13:35 ----D---- C:\Windows\system32\drivers\etc
2014-03-10 15:48:45 ----RD---- C:\Moje Subory
2014-03-10 15:24:10 ----D---- C:\Users\marek\AppData\Roaming\.minecraft
2014-03-10 06:51:19 ----D---- C:\ProgramData\ProductData
2014-03-09 15:22:23 ----D---- C:\Boot
2014-03-09 14:55:42 ----D---- C:\Users\marek\AppData\Roaming\uTorrent
2014-03-09 13:31:17 ----D---- C:\Game
2014-03-09 13:30:03 ----D---- C:\ProgramData\Ashampoo
2014-03-08 07:52:11 ----D---- C:\Program Files (x86)\Steam
2014-03-07 23:04:59 ----D---- C:\Windows\addins
2014-03-07 18:25:47 ----D---- C:\Users\marek\AppData\Roaming\Adobe
2014-03-05 16:27:49 ----D---- C:\Program Files\DIFX
2014-03-05 16:23:04 ----DC---- C:\Windows\system32\DRVSTORE
2014-03-05 16:19:46 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-03-03 06:22:15 ----D---- C:\Windows\SYSWOW64\sk-SK
2014-03-03 06:22:15 ----D---- C:\Windows\system32\sk-SK
2014-03-03 00:49:01 ----D---- C:\Windows\SYSWOW64\wbem
2014-03-03 00:49:01 ----D---- C:\Windows\system32\wbem
2014-03-03 00:49:01 ----D---- C:\Windows\system32\en-US
2014-03-03 00:49:01 ----D---- C:\Windows\system32\drivers\en-US
2014-03-02 19:30:11 ----RSD---- C:\Windows\assembly
2014-03-02 14:57:21 ----D---- C:\ProgramData\NVIDIA
2014-03-01 17:52:15 ----D---- C:\Program Files (x86)\Google
2014-03-01 17:37:52 ----D---- C:\ProgramData\Intel
2014-02-23 13:38:09 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-02-23 09:52:49 ----A---- C:\Windows\SYSWOW64\log.txt
2014-02-23 00:00:32 ----D---- C:\Program Files\WinZip
2014-02-22 21:11:27 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-02-16 19:10:48 ----RSD---- C:\Windows\Fonts
2014-02-16 17:53:39 ----D---- C:\Windows\SYSWOW64\directx
2014-02-13 06:18:32 ----D---- C:\Windows\Microsoft.NET

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2013-09-24 23168]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\system32\DRIVERS\cmdguard.sys [2013-11-14 709144]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2013-09-24 48872]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-12-19 283064]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2013-09-24 96800]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2000-01-01 62784]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-11-28 197408]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2013-12-01 883928]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2000-01-01 2206864]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys []
S3 MSICDSetup;MSICDSetup; \??\D:\CDriver64.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2012-01-09 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2012-01-09 27136]
S3 nmwcdnsucx64;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsucx64.sys [2012-01-09 12800]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2012-01-09 171008]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-06-11 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2013-09-29 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2013-09-29 30208]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2012-01-09 9216]
S3 usb_rndisx;USB RNDIS Adapter; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2012-01-09 9216]
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [2010-11-01 14544]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S4 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CLPSLS;COMODO livePCsupport Service; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe [2010-08-13 158120]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cmdagent.exe [2013-10-20 6254152]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S3 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 cmdvirth;COMODO Virtual Service Manager; C:\Moje Subory\Programy\COMODO\COMODO Internet Security\cmdvirth.exe [2013-09-24 164056]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-12 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-01 111616]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-01-27 571816]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-08-31 1255736]
S4 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2013-10-10 144152]
S4 DragonUpdater;COMODO Dragon Update Service; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2014-01-28 2135232]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-12 116648]
S4 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-06-19 634632]
S4 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2000-01-01 166720]
S4 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2000-01-01 277824]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-12-19 922912]
S4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-12-19 411936]
S4 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2000-01-01 365376]
S4 VIAKaraokeService;VIA Karaoke digital mixer Service; C:\Windows\system32\viakaraokesrv.exe [2000-01-01 27768]
S4 wlidsvc;Windows Live ID Sign-in Assistant; c:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]

-----------------EOF-----------------

Chová se to nějak divně. Dejte ještě log ComoboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

ComboFix 14-03-10.01 - marek . 03. 2014 19:22:32.28.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.421.1051.18.8149.6907 [GMT 1:00]
Running from: c:\users\marek\Desktop\ComboFix.exe
AV: COMODO Antivirus *Disabled/Updated* {B74CC7D2-B407-E1DC-1033-DD315BCDC8C8}
FW: COMODO Firewall *Enabled* {8F7746F7-FE68-E084-3B6C-7404A51E8FB3}
SP: COMODO Antivirus *Disabled/Updated* {0C2D2636-923D-EE52-2A83-E643204A8275}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2014-02-12 to 2014-03-12 )))))))))))))))))))))))))))))))
.
.
2014-03-12 17:44 . 2014-03-12 17:44 -------- d-----w- C:\_OTM
2014-03-12 16:42 . 2014-03-12 16:43 -------- d-----w- C:\AdwCleaner
2014-03-12 13:45 . 2014-03-12 13:45 -------- d-----w- c:\users\marek\AppData\Local\VirtualStore
2014-03-12 08:32 . 2014-03-12 08:32 -------- d-----w- C:\rsit
2014-03-12 08:22 . 2014-03-12 10:50 556632 ----a-w- c:\windows\system32\drivers\0370935drv.sys
2014-03-12 08:22 . 2014-03-12 10:50 460888 ----a-w- c:\windows\system32\drivers\36347552.sys
2014-03-12 07:24 . 2014-03-12 07:31 -------- d-----w- c:\users\marek\AppData\Local\NPE
2014-03-12 07:24 . 2014-03-12 07:24 -------- d-----w- c:\programdata\Norton
2014-03-12 06:48 . 2014-03-12 16:44 -------- d-----w- c:\program files\Microsoft Silverlight
2014-03-12 06:48 . 2014-03-12 16:44 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2014-03-12 06:22 . 2014-02-04 02:32 624128 ----a-w- c:\windows\system32\qedit.dll
2014-03-12 06:22 . 2014-02-04 02:04 509440 ----a-w- c:\windows\SysWow64\qedit.dll
2014-03-12 06:22 . 2014-01-28 02:32 228864 ----a-w- c:\windows\system32\wwansvc.dll
2014-03-12 06:22 . 2014-01-29 02:32 484864 ----a-w- c:\windows\system32\wer.dll
2014-03-12 06:22 . 2014-01-29 02:06 381440 ----a-w- c:\windows\SysWow64\wer.dll
2014-03-12 06:22 . 2014-02-07 01:23 3156480 ----a-w- c:\windows\system32\win32k.sys
2014-03-12 06:22 . 2014-02-04 02:32 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-03-12 06:22 . 2014-02-04 02:04 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2014-03-12 05:21 . 2014-03-12 05:21 -------- d-----w- c:\users\marek\AppData\Roaming\Malwarebytes
2014-03-12 05:21 . 2014-03-12 07:47 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2014-03-11 21:58 . 2014-03-11 21:58 -------- d-----w- c:\program files (x86)\FileASSASSIN
2014-03-11 21:15 . 2014-03-11 21:15 -------- d-----w- c:\program files (x86)\ESET
2014-03-11 20:09 . 2014-03-12 14:49 -------- d-----w- c:\program files\COMODO
2014-03-11 20:03 . 2014-03-11 20:04 -------- d-----w- c:\users\marek\Pavark
2014-03-11 19:06 . 2014-03-11 19:06 -------- d-----w- C:\zoek_backup
2014-03-10 16:53 . 2014-03-12 05:20 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable)
2014-03-09 14:16 . 2014-02-06 09:01 10536864 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{1DC8A7A6-BBEF-4719-BFF7-C99C461E07C8}\mpengine.dll
2014-03-09 13:03 . 2014-03-09 13:03 -------- d-----w- c:\programdata\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-03-08 09:54 . 2014-03-11 13:19 -------- d-----w- c:\program files (x86)\Farming Simulator 2013
2014-03-08 07:17 . 2014-03-10 16:48 -------- d-----w- c:\program files (x86)\Razer
2014-03-07 21:50 . 2014-03-07 21:50 -------- d-----w- c:\programdata\Malwarebytes
2014-03-07 17:56 . 2014-03-07 17:56 48392 ----a-w- c:\windows\SysWow64\certsentry.dll
2014-03-07 17:56 . 2014-03-07 17:56 348160 ----a-w- c:\windows\SysWow64\msvcr71.dll
2014-03-07 17:56 . 2014-03-07 17:56 -------- d-----w- c:\users\marek\AppData\Local\AdTrustMedia
2014-03-07 17:55 . 2014-03-07 19:03 -------- d-s---w- c:\programdata\Shared Space
2014-03-07 17:55 . 2014-03-09 00:26 -------- d-----w- c:\programdata\Comodo
2014-03-07 17:55 . 2014-03-07 17:55 -------- d-----w- c:\program files\AdTrustMedia
2014-03-07 17:55 . 2014-03-07 17:55 -------- d-----w- c:\program files (x86)\AdTrustMedia
2014-03-07 17:55 . 2014-03-07 17:55 -------- d-----w- c:\programdata\Adtrustmedia
2014-03-07 17:55 . 2014-03-07 17:55 -------- d-----w- c:\users\marek\AppData\Local\Comodo
2014-03-07 17:55 . 2014-03-07 17:56 57096 ----a-w- c:\windows\system32\certsentry.dll
2014-03-07 17:55 . 2014-03-07 17:56 -------- d-----w- c:\program files (x86)\Comodo
2014-03-07 17:55 . 2014-03-07 17:55 -------- d-----w- c:\programdata\Comodo Downloader
2014-03-07 17:13 . 2014-03-07 17:13 -------- d-----w- C:\Downloads
2014-03-05 15:23 . 2012-06-11 10:33 26112 ----a-w- c:\windows\system32\drivers\pccsmcfdx64.sys
2014-03-05 15:22 . 2014-03-05 15:22 -------- d-----w- c:\program files (x86)\PC Connectivity Solution
2014-03-03 04:59 . 2014-01-09 02:22 5694464 ----a-w- c:\windows\SysWow64\mstscax.dll
2014-03-03 04:59 . 2014-01-03 22:44 6574592 ----a-w- c:\windows\system32\mstscax.dll
2014-03-02 16:57 . 2014-03-02 18:22 -------- d-----w- C:\Games
2014-03-02 06:06 . 2014-03-02 06:06 -------- d-----r- C:\Sandbox
2014-02-28 19:39 . 2014-03-11 13:25 -------- d-----w- c:\windows\SysWow64\FSIM2013Unin
2014-02-25 22:29 . 2014-02-25 22:29 -------- d-----w- c:\programdata\{E1ED556E-3EA0-4F44-8BE7-CC5FB0F4B424}
2014-02-25 22:29 . 2014-02-25 22:29 -------- d-----w- c:\programdata\{D76294E6-03B8-4971-AF2E-3F846161A690}
2014-02-25 04:54 . 2014-03-10 16:48 -------- d-----w- c:\programdata\Razer
2014-02-23 14:16 . 2014-02-23 14:16 -------- d-----w- c:\users\marek\AppData\Roaming\Splinter Cell - Blacklist
2014-02-23 11:24 . 2013-11-19 15:52 34080 ----a-w- c:\windows\system32\SmartDefragBootTime.exe
2014-02-23 11:24 . 2014-02-13 18:01 128320 ----a-w- c:\windows\system32\IObitSmartDefragExtension.dll
2014-02-23 11:11 . 2014-03-12 06:23 -------- d-----w- c:\program files (x86)\IObit
2014-02-23 11:10 . 2014-03-11 21:32 -------- d-----w- c:\programdata\IObit
2014-02-23 10:52 . 2013-02-28 08:35 287840 ----a-w- c:\windows\system32\aswBoot.exe
2014-02-22 21:31 . 2014-03-10 15:13 -------- d-----w- c:\users\marek\AppData\Local\Author__ec8or
2014-02-22 10:17 . 2014-02-22 10:17 -------- d-----w- c:\users\marek\AppData\Local\GIANTS Editor 5.0.1
2014-02-22 10:11 . 2014-02-22 10:30 -------- d-----w- c:\users\marek\AppData\Local\GIANTS Editor 64bit 5.0.3
2014-02-21 23:26 . 2014-02-22 20:11 -------- d-----w- c:\users\marek\AppData\Local\Adobe
2014-02-21 23:04 . 2014-02-22 10:07 -------- d-----w- c:\users\marek\AppData\Local\Diagnostics
2014-02-19 06:40 . 2014-03-11 20:56 -------- d-----w- c:\users\marek\AppData\Local\CrashDumps
2014-02-18 05:18 . 2014-02-23 09:35 -------- d-----w- c:\users\marek\AppData\Local\Google
2014-02-16 18:40 . 2014-02-16 18:40 -------- d-----w- c:\users\marek\AppData\Roaming\Euro Truck Simulator 2
2014-02-16 18:17 . 2014-02-16 18:17 -------- d-----w- c:\users\marek\AppData\Roaming\Far Cry 3
2014-02-16 17:09 . 2014-02-16 17:09 -------- d-----w- c:\users\marek\AppData\Roaming\Sniper Ghost Warrior 2
2014-02-16 15:31 . 2014-02-16 15:31 -------- d-----w- c:\programdata\VS Revo Group
2014-02-12 05:33 . 2014-02-12 05:34 -------- d-----w- C:\573e38b8b9879e8f966a036319e1fc4d
2014-02-12 05:33 . 2013-12-21 09:53 548864 ----a-w- c:\windows\system32\vbscript.dll
2014-02-12 05:33 . 2013-12-21 08:56 454656 ----a-w- c:\windows\SysWow64\vbscript.dll
2014-02-10 23:08 . 2014-02-10 23:08 -------- d-----w- c:\windows\system32\SRSLabs
2014-02-10 23:08 . 2014-02-10 23:08 -------- d-----w- c:\program files\VIA
2014-02-10 23:06 . 2000-01-01 00:00 15168 ----a-w- c:\windows\system32\drivers\IntelMEFWVer.dll
2014-02-10 23:06 . 2014-03-01 16:37 -------- d-----w- c:\programdata\Intel
2014-02-10 23:05 . 2014-02-10 23:06 -------- d-----w- c:\program files\Intel
2014-02-10 23:05 . 2014-02-10 23:05 -------- d-----w- c:\program files (x86)\Common Files\postureAgent
2014-02-10 23:04 . 2000-01-01 00:00 62784 ----a-w- c:\windows\system32\drivers\HECIx64.sys
2014-02-10 23:02 . 2013-08-21 14:16 53248 ----a-w- c:\windows\SysWow64\CSVer.dll
2014-02-10 23:02 . 2014-02-10 23:06 -------- d-----w- c:\program files (x86)\Intel
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-03-12 06:24 . 2013-08-31 21:45 90015360 ----a-w- c:\windows\system32\MRT.exe
2014-02-22 20:11 . 2013-12-16 06:06 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-02-22 20:11 . 2013-10-09 18:36 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-02-03 11:20 . 2010-11-21 03:27 270496 ------w- c:\windows\system32\MpSigStub.exe
2014-01-23 00:25 . 2014-01-23 00:25 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-01-21 14:14 . 2014-01-26 11:06 34624 ----a-w- c:\windows\system32\drivers\Bfmon.sys
2014-01-21 14:14 . 2014-01-26 11:06 52032 ----a-w- c:\windows\system32\drivers\Bfilter.sys
2014-01-21 10:01 . 2014-01-26 11:06 128992 ----a-w- c:\windows\system32\drivers\Bprotect.sys
2014-01-20 00:16 . 2014-01-20 00:14 1828 ----a-w- c:\windows\system32\ASOROSet.bin
2013-12-19 20:33 . 2014-02-02 13:24 9657464 ----a-w- c:\windows\SysWow64\nvopencl.dll
2013-12-19 20:33 . 2014-02-02 13:24 882464 ----a-w- c:\windows\system32\NvIFR64.dll
2013-12-19 20:33 . 2014-02-02 13:24 879392 ----a-w- c:\windows\system32\NvFBC64.dll
2013-12-19 20:33 . 2014-02-02 13:24 852768 ----a-w- c:\windows\SysWow64\NvIFR.dll
2013-12-19 20:33 . 2014-02-02 13:24 847648 ----a-w- c:\windows\SysWow64\NvFBC.dll
2013-12-19 20:33 . 2014-02-02 13:24 317472 ----a-w- c:\windows\system32\nvoglshim64.dll
2013-12-19 20:33 . 2014-02-02 13:24 30372640 ----a-w- c:\windows\system32\nvoglv64.dll
2013-12-19 20:33 . 2014-02-02 13:24 266984 ----a-w- c:\windows\SysWow64\nvoglshim32.dll
2013-12-19 20:33 . 2014-02-02 13:24 22960416 ----a-w- c:\windows\SysWow64\nvoglv32.dll
2013-12-19 20:33 . 2014-02-02 13:24 1884448 ----a-w- c:\windows\system32\nvdispco6433221.dll
2013-12-19 20:33 . 2014-02-02 13:24 18310112 ----a-w- c:\windows\system32\nvwgf2umx.dll
2013-12-19 20:33 . 2014-02-02 13:24 168616 ----a-w- c:\windows\system32\nvinitx.dll
2013-12-19 20:33 . 2014-02-02 13:24 15877216 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
2013-12-19 20:33 . 2014-02-02 13:24 1511712 ----a-w- c:\windows\system32\nvdispgenco6433221.dll
2013-12-19 20:33 . 2014-02-02 13:24 1436528 ----a-w- c:\windows\system32\nvumdshimx.dll
2013-12-19 20:33 . 2014-02-02 13:24 141336 ----a-w- c:\windows\SysWow64\nvinit.dll
2013-12-19 20:33 . 2014-02-02 13:24 12645664 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2013-12-19 20:33 . 2014-02-02 13:24 1242400 ----a-w- c:\windows\SysWow64\nvumdshim.dll
2013-12-19 20:33 . 2014-02-02 13:24 11554264 ----a-w- c:\windows\system32\nvopencl.dll
2013-12-19 20:33 . 2014-02-02 13:24 9700224 ----a-w- c:\windows\SysWow64\nvcuda.dll
2013-12-19 20:33 . 2014-02-02 13:24 3132704 ----a-w- c:\windows\system32\nvcuvid.dll
2013-12-19 20:33 . 2014-02-02 13:24 3125024 ----a-w- c:\windows\system32\nvcuvenc.dll
2013-12-19 20:33 . 2014-02-02 13:24 3071656 ----a-w- c:\windows\system32\nvapi64.dll
2013-12-19 20:33 . 2014-02-02 13:24 2947872 ----a-w- c:\windows\SysWow64\nvcuvid.dll
2013-12-19 20:33 . 2014-02-02 13:24 2747680 ----a-w- c:\windows\SysWow64\nvcuvenc.dll
2013-12-19 20:33 . 2014-02-02 13:24 2698272 ----a-w- c:\windows\SysWow64\nvapi.dll
2013-12-19 20:33 . 2014-02-02 13:24 25257248 ----a-w- c:\windows\system32\nvcompiler.dll
2013-12-19 20:33 . 2014-02-02 13:24 17560352 ----a-w- c:\windows\SysWow64\nvcompiler.dll
2013-12-19 20:33 . 2014-02-02 13:24 15230352 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2013-12-19 20:33 . 2014-02-02 13:24 11605752 ----a-w- c:\windows\system32\nvcuda.dll
2013-12-19 20:33 . 2013-11-28 05:24 18222008 ----a-w- c:\windows\system32\nvd3dumx.dll
2013-12-19 18:53 . 2013-08-31 20:25 6671648 ----a-w- c:\windows\system32\nvcpl.dll
2013-12-19 18:53 . 2013-08-31 20:25 3490080 ----a-w- c:\windows\system32\nvsvc64.dll
2013-12-19 18:53 . 2013-08-31 20:25 922912 ----a-w- c:\windows\system32\nvvsvc.exe
2013-12-19 18:53 . 2013-08-31 20:25 63776 ----a-w- c:\windows\system32\nvshext.dll
2013-12-19 18:53 . 2013-08-31 20:25 386336 ----a-w- c:\windows\system32\nvmctray.dll
2013-12-19 18:53 . 2013-08-31 20:25 2559776 ----a-w- c:\windows\system32\nvsvcr.dll
2013-12-19 16:06 . 2013-12-19 16:06 283064 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-12-19 11:20 . 2013-12-19 11:20 590112 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2013-12-19 05:01 . 2013-08-31 20:25 3539040 ----a-w- c:\windows\system32\nvcoproc.bin
2013-12-17 10:20 . 2013-12-16 13:10 189248 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2013-12-16 17:58 . 2013-12-16 13:10 298032 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2009-12-06 09:18 26624 --sh--w- c:\windows\bfcs2.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\moje subory\Programy\Daemon Tools\DAEMON Tools Lite\DTLite.exe" [2013-10-28 3675352]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"COMODO"="c:\program files\COMODO\COMODO livePCsupport\CLPSLA.exe" [2010-08-13 215800]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0cpmnat
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AutoUpdateDisableNotify"=dword:00000001
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 cmdvirth;COMODO Virtual Service Manager;c:\moje subory\Programy\COMODO\COMODO Internet Security\cmdvirth.exe;c:\moje subory\Programy\COMODO\COMODO Internet Security\cmdvirth.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
R3 MSICDSetup;MSICDSetup;d:\cdriver64.sys;d:\CDriver64.sys [x]
R3 nmwcdnsucx64;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsucx64.sys;c:\windows\SYSNATIVE\drivers\nmwcdnsucx64.sys [x]
R3 nmwcdnsux64;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsux64.sys;c:\windows\SYSNATIVE\drivers\nmwcdnsux64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys;c:\program files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [x]
R4 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [x]
R4 DragonUpdater;COMODO Dragon Update Service;c:\program files (x86)\Comodo\Dragon\dragon_updater.exe;c:\program files (x86)\Comodo\Dragon\dragon_updater.exe [x]
R4 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
R4 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
R4 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
R4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
R4 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
R4 VIAKaraokeService;VIA Karaoke digital mixer Service;c:\windows\system32\viakaraokesrv.exe;c:\windows\SYSNATIVE\viakaraokesrv.exe [x]
S1 cmderd;COMODO Internet Security Eradication Driver;c:\windows\system32\DRIVERS\cmderd.sys;c:\windows\SYSNATIVE\DRIVERS\cmderd.sys [x]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys;c:\windows\SYSNATIVE\DRIVERS\cmdguard.sys [x]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys;c:\windows\SYSNATIVE\DRIVERS\cmdhlp.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [x]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [x]
S2 CLPSLS;COMODO livePCsupport Service;c:\program files\COMODO\COMODO livePCsupport\CLPSLS.exe;c:\program files\COMODO\COMODO livePCsupport\CLPSLS.exe [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys;c:\windows\SYSNATIVE\drivers\viahduaa.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-03-04 11:10 1150280 ----a-w- c:\program files (x86)\Google\Chrome\Application\33.0.1750.146\Installer\chrmstp.exe
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"COMODO Internet Security"="c:\moje subory\Programy\COMODO\COMODO Internet Security\cistray.exe" [2013-11-11 1612504]
"COMODO"="c:\program files\COMODO\COMODO livePCsupport\CLPSLA.exe" [2010-08-13 215800]
.
------- Supplementary Scan -------
.
mStart Page = hxxp://www.google.com
IE: {{2F5C139F-79BD-4C84-A95A-E7140525BC55} - {5B06364D-FF00-4BD5-9D01-4379952513F2} - c:\program files (x86)\AdTrustMedia\PrivDog\1.8.0.18\trustedads.dll
TCP: DhcpNameServer = 188.120.1.2 188.120.0.122
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-3293682074-875854175-1666948384-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{D7C0A140-151C-268F-1FCE-1F6FCED87686}*]
"jaijhhjdcodkmifepfpf"=hex:62,61,6c,70,00,00
"jaijhhjdcodkmifepfle"=hex:62,61,6c,70,00,00
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Nico Mak Computing\WinZip]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Completion time: 2014-03-12 19:30:59 - machine was rebooted
ComboFix-quarantined-files.txt 2014-03-12 18:30
.
Pre-Run: 425 226 346 496 bytes free
Post-Run: 425 041 334 272 bytes free
.
- - End Of File - - BAEF6E05A8823940E2ED2BCBA665B04E
A36C5E4F47E84449FF07ED3517B43A31

Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

File::
c:\windows\system32\drivers\0370935drv.sys
c:\windows\system32\drivers\36347552.sys

Driver::
0370935drv
36347552

Regnull::
[HKEY_USERS\S-1-5-21-3293682074-875854175-1666948384-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{D7C0A140-151C-268F-1FCE-1F6FCED87686}*]

RegLock::
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Nico Mak Computing\WinZip]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

Reboot::

Uložte na plochu jako CFSript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

nechce sa spustit-were you trying ti run CFScript? The name,CFScript appears to be inccorecly spelt--spravne som napisal-CFSript.txt.

Promińte, překlepl jsem se já. Skript uložte jak CFScript.txt.

tak sa to nakoniec podarilo ---------------ComboFix 14-03-10.01 - marek . 03. 2014 21:50:16.29.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.421.1051.18.8149.7067 [GMT 1:00]
Running from: c:\users\marek\Desktop\ComboFix.exe
Command switches used :: c:\users\marek\Desktop\CFScript.txt..txt
AV: COMODO Antivirus *Disabled/Updated* {B74CC7D2-B407-E1DC-1033-DD315BCDC8C8}
FW: COMODO Firewall *Enabled* {8F7746F7-FE68-E084-3B6C-7404A51E8FB3}
SP: COMODO Antivirus *Disabled/Updated* {0C2D2636-923D-EE52-2A83-E643204A8275}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\system32\drivers\0370935drv.sys"
"c:\windows\system32\drivers\36347552.sys"
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\drivers\0370935drv.sys
c:\windows\system32\drivers\36347552.sys
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_0370935DRV
-------\Legacy_36347552
.
.
((((((((((((((((((((((((( Files Created from 2014-02-12 to 2014-03-12 )))))))))))))))))))))))))))))))
.
.
2014-03-12 17:44 . 2014-03-12 17:44 -------- d-----w- C:\_OTM
2014-03-12 16:42 . 2014-03-12 16:43 -------- d-----w- C:\AdwCleaner
2014-03-12 13:45 . 2014-03-12 13:45 -------- d-----w- c:\users\marek\AppData\Local\VirtualStore
2014-03-12 08:32 . 2014-03-12 08:32 -------- d-----w- C:\rsit
2014-03-12 07:24 . 2014-03-12 07:31 -------- d-----w- c:\users\marek\AppData\Local\NPE
2014-03-12 07:24 . 2014-03-12 07:24 -------- d-----w- c:\programdata\Norton
2014-03-12 06:48 . 2014-03-12 16:44 -------- d-----w- c:\program files\Microsoft Silverlight
2014-03-12 06:48 . 2014-03-12 16:44 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2014-03-12 06:22 . 2014-02-04 02:32 624128 ----a-w- c:\windows\system32\qedit.dll
2014-03-12 06:22 . 2014-02-04 02:04 509440 ----a-w- c:\windows\SysWow64\qedit.dll
2014-03-12 06:22 . 2014-01-28 02:32 228864 ----a-w- c:\windows\system32\wwansvc.dll
2014-03-12 06:22 . 2014-01-29 02:32 484864 ----a-w- c:\windows\system32\wer.dll
2014-03-12 06:22 . 2014-01-29 02:06 381440 ----a-w- c:\windows\SysWow64\wer.dll
2014-03-12 06:22 . 2014-02-07 01:23 3156480 ----a-w- c:\windows\system32\win32k.sys
2014-03-12 06:22 . 2014-02-04 02:32 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-03-12 06:22 . 2014-02-04 02:04 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2014-03-12 05:21 . 2014-03-12 05:21 -------- d-----w- c:\users\marek\AppData\Roaming\Malwarebytes
2014-03-12 05:21 . 2014-03-12 07:47 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2014-03-11 21:58 . 2014-03-11 21:58 -------- d-----w- c:\program files (x86)\FileASSASSIN
2014-03-11 21:15 . 2014-03-11 21:15 -------- d-----w- c:\program files (x86)\ESET
2014-03-11 20:09 . 2014-03-12 14:49 -------- d-----w- c:\program files\COMODO
2014-03-11 20:03 . 2014-03-11 20:04 -------- d-----w- c:\users\marek\Pavark
2014-03-11 19:06 . 2014-03-11 19:06 -------- d-----w- C:\zoek_backup
2014-03-10 16:53 . 2014-03-12 05:20 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable)
2014-03-09 14:16 . 2014-02-06 09:01 10536864 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{1DC8A7A6-BBEF-4719-BFF7-C99C461E07C8}\mpengine.dll
2014-03-09 13:03 . 2014-03-09 13:03 -------- d-----w- c:\programdata\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-03-08 09:54 . 2014-03-11 13:19 -------- d-----w- c:\program files (x86)\Farming Simulator 2013
2014-03-08 07:17 . 2014-03-10 16:48 -------- d-----w- c:\program files (x86)\Razer
2014-03-07 21:50 . 2014-03-07 21:50 -------- d-----w- c:\programdata\Malwarebytes
2014-03-07 17:56 . 2014-03-07 17:56 48392 ----a-w- c:\windows\SysWow64\certsentry.dll
2014-03-07 17:56 . 2014-03-07 17:56 348160 ----a-w- c:\windows\SysWow64\msvcr71.dll
2014-03-07 17:56 . 2014-03-07 17:56 -------- d-----w- c:\users\marek\AppData\Local\AdTrustMedia
2014-03-07 17:55 . 2014-03-07 19:03 -------- d-s---w- c:\programdata\Shared Space
2014-03-07 17:55 . 2014-03-09 00:26 -------- d-----w- c:\programdata\Comodo
2014-03-07 17:55 . 2014-03-07 17:55 -------- d-----w- c:\program files\AdTrustMedia
2014-03-07 17:55 . 2014-03-07 17:55 -------- d-----w- c:\program files (x86)\AdTrustMedia
2014-03-07 17:55 . 2014-03-07 17:55 -------- d-----w- c:\programdata\Adtrustmedia
2014-03-07 17:55 . 2014-03-07 17:55 -------- d-----w- c:\users\marek\AppData\Local\Comodo
2014-03-07 17:55 . 2014-03-07 17:56 57096 ----a-w- c:\windows\system32\certsentry.dll
2014-03-07 17:55 . 2014-03-07 17:56 -------- d-----w- c:\program files (x86)\Comodo
2014-03-07 17:55 . 2014-03-07 17:55 -------- d-----w- c:\programdata\Comodo Downloader
2014-03-07 17:13 . 2014-03-07 17:13 -------- d-----w- C:\Downloads
2014-03-05 15:23 . 2012-06-11 10:33 26112 ----a-w- c:\windows\system32\drivers\pccsmcfdx64.sys
2014-03-05 15:22 . 2014-03-05 15:22 -------- d-----w- c:\program files (x86)\PC Connectivity Solution
2014-03-03 04:59 . 2014-01-09 02:22 5694464 ----a-w- c:\windows\SysWow64\mstscax.dll
2014-03-03 04:59 . 2014-01-03 22:44 6574592 ----a-w- c:\windows\system32\mstscax.dll
2014-03-02 16:57 . 2014-03-02 18:22 -------- d-----w- C:\Games
2014-03-02 06:06 . 2014-03-02 06:06 -------- d-----r- C:\Sandbox
2014-02-28 19:39 . 2014-03-11 13:25 -------- d-----w- c:\windows\SysWow64\FSIM2013Unin
2014-02-25 22:29 . 2014-02-25 22:29 -------- d-----w- c:\programdata\{E1ED556E-3EA0-4F44-8BE7-CC5FB0F4B424}
2014-02-25 22:29 . 2014-02-25 22:29 -------- d-----w- c:\programdata\{D76294E6-03B8-4971-AF2E-3F846161A690}
2014-02-25 04:54 . 2014-03-10 16:48 -------- d-----w- c:\programdata\Razer
2014-02-23 14:16 . 2014-02-23 14:16 -------- d-----w- c:\users\marek\AppData\Roaming\Splinter Cell - Blacklist
2014-02-23 11:24 . 2013-11-19 15:52 34080 ----a-w- c:\windows\system32\SmartDefragBootTime.exe
2014-02-23 11:24 . 2014-02-13 18:01 128320 ----a-w- c:\windows\system32\IObitSmartDefragExtension.dll
2014-02-23 11:11 . 2014-03-12 06:23 -------- d-----w- c:\program files (x86)\IObit
2014-02-23 11:10 . 2014-03-11 21:32 -------- d-----w- c:\programdata\IObit
2014-02-23 10:52 . 2013-02-28 08:35 287840 ----a-w- c:\windows\system32\aswBoot.exe
2014-02-22 21:31 . 2014-03-10 15:13 -------- d-----w- c:\users\marek\AppData\Local\Author__ec8or
2014-02-22 10:17 . 2014-02-22 10:17 -------- d-----w- c:\users\marek\AppData\Local\GIANTS Editor 5.0.1
2014-02-22 10:11 . 2014-02-22 10:30 -------- d-----w- c:\users\marek\AppData\Local\GIANTS Editor 64bit 5.0.3
2014-02-21 23:26 . 2014-02-22 20:11 -------- d-----w- c:\users\marek\AppData\Local\Adobe
2014-02-21 23:04 . 2014-02-22 10:07 -------- d-----w- c:\users\marek\AppData\Local\Diagnostics
2014-02-19 06:40 . 2014-03-11 20:56 -------- d-----w- c:\users\marek\AppData\Local\CrashDumps
2014-02-18 05:18 . 2014-02-23 09:35 -------- d-----w- c:\users\marek\AppData\Local\Google
2014-02-16 18:40 . 2014-02-16 18:40 -------- d-----w- c:\users\marek\AppData\Roaming\Euro Truck Simulator 2
2014-02-16 18:17 . 2014-02-16 18:17 -------- d-----w- c:\users\marek\AppData\Roaming\Far Cry 3
2014-02-16 17:09 . 2014-02-16 17:09 -------- d-----w- c:\users\marek\AppData\Roaming\Sniper Ghost Warrior 2
2014-02-16 15:31 . 2014-02-16 15:31 -------- d-----w- c:\programdata\VS Revo Group
2014-02-12 05:33 . 2014-02-12 05:34 -------- d-----w- C:\573e38b8b9879e8f966a036319e1fc4d
2014-02-12 05:33 . 2013-12-21 09:53 548864 ----a-w- c:\windows\system32\vbscript.dll
2014-02-12 05:33 . 2013-12-21 08:56 454656 ----a-w- c:\windows\SysWow64\vbscript.dll
2014-02-10 23:08 . 2014-02-10 23:08 -------- d-----w- c:\windows\system32\SRSLabs
2014-02-10 23:08 . 2014-02-10 23:08 -------- d-----w- c:\program files\VIA
2014-02-10 23:06 . 2000-01-01 00:00 15168 ----a-w- c:\windows\system32\drivers\IntelMEFWVer.dll
2014-02-10 23:06 . 2014-03-01 16:37 -------- d-----w- c:\programdata\Intel
2014-02-10 23:05 . 2014-02-10 23:06 -------- d-----w- c:\program files\Intel
2014-02-10 23:05 . 2014-02-10 23:05 -------- d-----w- c:\program files (x86)\Common Files\postureAgent
2014-02-10 23:04 . 2000-01-01 00:00 62784 ----a-w- c:\windows\system32\drivers\HECIx64.sys
2014-02-10 23:02 . 2013-08-21 14:16 53248 ----a-w- c:\windows\SysWow64\CSVer.dll
2014-02-10 23:02 . 2014-02-10 23:06 -------- d-----w- c:\program files (x86)\Intel
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-03-12 06:24 . 2013-08-31 21:45 90015360 ----a-w- c:\windows\system32\MRT.exe
2014-02-22 20:11 . 2013-12-16 06:06 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-02-22 20:11 . 2013-10-09 18:36 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-02-03 11:20 . 2010-11-21 03:27 270496 ------w- c:\windows\system32\MpSigStub.exe
2014-01-23 00:25 . 2014-01-23 00:25 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-01-21 14:14 . 2014-01-26 11:06 34624 ----a-w- c:\windows\system32\drivers\Bfmon.sys
2014-01-21 14:14 . 2014-01-26 11:06 52032 ----a-w- c:\windows\system32\drivers\Bfilter.sys
2014-01-21 10:01 . 2014-01-26 11:06 128992 ----a-w- c:\windows\system32\drivers\Bprotect.sys
2014-01-20 00:16 . 2014-01-20 00:14 1828 ----a-w- c:\windows\system32\ASOROSet.bin
2013-12-19 20:33 . 2014-02-02 13:24 9657464 ----a-w- c:\windows\SysWow64\nvopencl.dll
2013-12-19 20:33 . 2014-02-02 13:24 882464 ----a-w- c:\windows\system32\NvIFR64.dll
2013-12-19 20:33 . 2014-02-02 13:24 879392 ----a-w- c:\windows\system32\NvFBC64.dll
2013-12-19 20:33 . 2014-02-02 13:24 852768 ----a-w- c:\windows\SysWow64\NvIFR.dll
2013-12-19 20:33 . 2014-02-02 13:24 847648 ----a-w- c:\windows\SysWow64\NvFBC.dll
2013-12-19 20:33 . 2014-02-02 13:24 317472 ----a-w- c:\windows\system32\nvoglshim64.dll
2013-12-19 20:33 . 2014-02-02 13:24 30372640 ----a-w- c:\windows\system32\nvoglv64.dll
2013-12-19 20:33 . 2014-02-02 13:24 266984 ----a-w- c:\windows\SysWow64\nvoglshim32.dll
2013-12-19 20:33 . 2014-02-02 13:24 22960416 ----a-w- c:\windows\SysWow64\nvoglv32.dll
2013-12-19 20:33 . 2014-02-02 13:24 1884448 ----a-w- c:\windows\system32\nvdispco6433221.dll
2013-12-19 20:33 . 2014-02-02 13:24 18310112 ----a-w- c:\windows\system32\nvwgf2umx.dll
2013-12-19 20:33 . 2014-02-02 13:24 168616 ----a-w- c:\windows\system32\nvinitx.dll
2013-12-19 20:33 . 2014-02-02 13:24 15877216 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
2013-12-19 20:33 . 2014-02-02 13:24 1511712 ----a-w- c:\windows\system32\nvdispgenco6433221.dll
2013-12-19 20:33 . 2014-02-02 13:24 1436528 ----a-w- c:\windows\system32\nvumdshimx.dll
2013-12-19 20:33 . 2014-02-02 13:24 141336 ----a-w- c:\windows\SysWow64\nvinit.dll
2013-12-19 20:33 . 2014-02-02 13:24 12645664 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2013-12-19 20:33 . 2014-02-02 13:24 1242400 ----a-w- c:\windows\SysWow64\nvumdshim.dll
2013-12-19 20:33 . 2014-02-02 13:24 11554264 ----a-w- c:\windows\system32\nvopencl.dll
2013-12-19 20:33 . 2014-02-02 13:24 9700224 ----a-w- c:\windows\SysWow64\nvcuda.dll
2013-12-19 20:33 . 2014-02-02 13:24 3132704 ----a-w- c:\windows\system32\nvcuvid.dll
2013-12-19 20:33 . 2014-02-02 13:24 3125024 ----a-w- c:\windows\system32\nvcuvenc.dll
2013-12-19 20:33 . 2014-02-02 13:24 3071656 ----a-w- c:\windows\system32\nvapi64.dll
2013-12-19 20:33 . 2014-02-02 13:24 2947872 ----a-w- c:\windows\SysWow64\nvcuvid.dll
2013-12-19 20:33 . 2014-02-02 13:24 2747680 ----a-w- c:\windows\SysWow64\nvcuvenc.dll
2013-12-19 20:33 . 2014-02-02 13:24 2698272 ----a-w- c:\windows\SysWow64\nvapi.dll
2013-12-19 20:33 . 2014-02-02 13:24 25257248 ----a-w- c:\windows\system32\nvcompiler.dll
2013-12-19 20:33 . 2014-02-02 13:24 17560352 ----a-w- c:\windows\SysWow64\nvcompiler.dll
2013-12-19 20:33 . 2014-02-02 13:24 15230352 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2013-12-19 20:33 . 2014-02-02 13:24 11605752 ----a-w- c:\windows\system32\nvcuda.dll
2013-12-19 20:33 . 2013-11-28 05:24 18222008 ----a-w- c:\windows\system32\nvd3dumx.dll
2013-12-19 18:53 . 2013-08-31 20:25 6671648 ----a-w- c:\windows\system32\nvcpl.dll
2013-12-19 18:53 . 2013-08-31 20:25 3490080 ----a-w- c:\windows\system32\nvsvc64.dll
2013-12-19 18:53 . 2013-08-31 20:25 922912 ----a-w- c:\windows\system32\nvvsvc.exe
2013-12-19 18:53 . 2013-08-31 20:25 63776 ----a-w- c:\windows\system32\nvshext.dll
2013-12-19 18:53 . 2013-08-31 20:25 386336 ----a-w- c:\windows\system32\nvmctray.dll
2013-12-19 18:53 . 2013-08-31 20:25 2559776 ----a-w- c:\windows\system32\nvsvcr.dll
2013-12-19 16:06 . 2013-12-19 16:06 283064 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-12-19 11:20 . 2013-12-19 11:20 590112 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2013-12-19 05:01 . 2013-08-31 20:25 3539040 ----a-w- c:\windows\system32\nvcoproc.bin
2013-12-17 10:20 . 2013-12-16 13:10 189248 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2013-12-16 17:58 . 2013-12-16 13:10 298032 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2009-12-06 09:18 26624 --sh--w- c:\windows\bfcs2.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\moje subory\Programy\Daemon Tools\DAEMON Tools Lite\DTLite.exe" [2013-10-28 3675352]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"COMODO"="c:\program files\COMODO\COMODO livePCsupport\CLPSLA.exe" [2010-08-13 215800]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0cpmnat
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AutoUpdateDisableNotify"=dword:00000001
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 cmdvirth;COMODO Virtual Service Manager;c:\moje subory\Programy\COMODO\COMODO Internet Security\cmdvirth.exe;c:\moje subory\Programy\COMODO\COMODO Internet Security\cmdvirth.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
R3 MSICDSetup;MSICDSetup;d:\cdriver64.sys;d:\CDriver64.sys [x]
R3 nmwcdnsucx64;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsucx64.sys;c:\windows\SYSNATIVE\drivers\nmwcdnsucx64.sys [x]
R3 nmwcdnsux64;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsux64.sys;c:\windows\SYSNATIVE\drivers\nmwcdnsux64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys;c:\program files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [x]
R4 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [x]
R4 DragonUpdater;COMODO Dragon Update Service;c:\program files (x86)\Comodo\Dragon\dragon_updater.exe;c:\program files (x86)\Comodo\Dragon\dragon_updater.exe [x]
R4 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
R4 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
R4 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
R4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
R4 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
R4 VIAKaraokeService;VIA Karaoke digital mixer Service;c:\windows\system32\viakaraokesrv.exe;c:\windows\SYSNATIVE\viakaraokesrv.exe [x]
S1 cmderd;COMODO Internet Security Eradication Driver;c:\windows\system32\DRIVERS\cmderd.sys;c:\windows\SYSNATIVE\DRIVERS\cmderd.sys [x]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys;c:\windows\SYSNATIVE\DRIVERS\cmdguard.sys [x]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys;c:\windows\SYSNATIVE\DRIVERS\cmdhlp.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [x]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [x]
S2 CLPSLS;COMODO livePCsupport Service;c:\program files\COMODO\COMODO livePCsupport\CLPSLS.exe;c:\program files\COMODO\COMODO livePCsupport\CLPSLS.exe [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys;c:\windows\SYSNATIVE\drivers\viahduaa.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-03-04 11:10 1150280 ----a-w- c:\program files (x86)\Google\Chrome\Application\33.0.1750.146\Installer\chrmstp.exe
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"COMODO Internet Security"="c:\moje subory\Programy\COMODO\COMODO Internet Security\cistray.exe" [2013-11-11 1612504]
"COMODO"="c:\program files\COMODO\COMODO livePCsupport\CLPSLA.exe" [2010-08-13 215800]
.
------- Supplementary Scan -------
.
mStart Page = hxxp://www.google.com
IE: {{2F5C139F-79BD-4C84-A95A-E7140525BC55} - {5B06364D-FF00-4BD5-9D01-4379952513F2} - c:\program files (x86)\AdTrustMedia\PrivDog\1.8.0.18\trustedads.dll
TCP: DhcpNameServer = 188.120.1.2 188.120.0.122
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Nico Mak Computing\WinZip]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\
.
Completion time: 2014-03-12 21:58:23 - machine was rebooted
ComboFix-quarantined-files.txt 2014-03-12 20:58
ComboFix2.txt 2014-03-12 18:31
.
Pre-Run: 424 876 662 784 bytes free
Post-Run: 424 732 389 376 bytes free
.
- - End Of File - - BF82FAEFB4663F0CA28A267D56E6F442
A36C5E4F47E84449FF07ED3517B43A31