VIRY.CZ

Prosím o kontrolu logu, počítač (Samsung r730, 3gb ram) je pomalý, dlouho nabíhá. Děkuji.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Mattu at 2014-09-03 19:13:57
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 8 GB (5%) free of 142 GB
Total RAM: 3033 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:13:59, on 3.9.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\windows\system32\taskhost.exe
C:\windows\system32\taskeng.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe
C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe
C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe
C:\windows\system32\igfxext.exe
C:\windows\system32\igfxsrvc.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\windows\system32\wbem\unsecapp.exe
C:\windows\system32\wuauclt.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Mattu\Downloads\RSIT.exe
C:\Program Files\trend micro\Mattu.exe
C:\windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [IgfxTray] C:\windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\windows\system32\igfxpers.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: @C:\windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - (no file)
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - (no file)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: Garmin Communicator Plug-In - https://static.garmincdn.com/gcp/ie/4.0 ... rol_32.CAB
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: COMODO System - Cleaner Service (Cleaner_Validator) - Unknown owner - C:\Program Files\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Služba Microsoft Office (OfficeSvc) - Unknown owner - C:\Program Files\Microsoft Office 15\ClientX86\integratedoffice.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe

--
End of file - 6429 bytes

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\windows\tasks\COMODO Updater.job - C:\Program Files\COMODO\COMODO System-Cleaner\Updater.exe
C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-3046079806-2612904832-3248945475-1003Core.job - C:\Users\Radka\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver
C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-3046079806-2612904832-3248945475-1003UA.job - C:\Users\Radka\AppData\Local\Facebook\Update\FacebookUpdate.exe /ua /installsource scheduler
C:\windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\windows\tasks\Norton Security Scan for Mattu.job - C:\PROGRA~1\NORTON~2\Engine\403~1.24\Nss.exe /scan-quick /scheduled
C:\windows\tasks\Norton Security Scan for Radka.job - C:\PROGRA~1\NORTON~2\Engine\403~1.24\Nss.exe /scan-quick /scheduled

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-07-18 463272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-08-06 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2014-03-31 194504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-07-18 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2014-03-31 194504]
{D4027C7F-154A-4066-A1AD-4243D8127440}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-02-26 1713448]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-06 4085896]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2011-02-11 137752]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2011-02-11 171032]
"Persistence"=C:\windows\system32\igfxpers.exe [2011-02-11 172568]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [2009-06-03 103720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDVD8LanguageShortcut]
C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe [2009-04-15 50472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl8]
C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe [2009-04-15 91432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-12-15 8120864]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UCam_Menu]
C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateLBPShortCut]
C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateP2GoShortCut]
C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePDRShortCut]
C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [2008-01-04 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePPShortCut]
C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [2008-12-03 218408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile Device Center]
C:\windows\WindowsMobile\wmdc.exe [2007-05-31 648072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2011-02-11 228864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-09-03 19:05:58 ----D---- C:\rsit
2014-09-03 19:05:58 ----D---- C:\Program Files\trend micro
2014-09-03 18:44:02 ----A---- C:\windows\system32\drivers\rdpvideominiport.sys
2014-09-03 18:44:01 ----A---- C:\windows\system32\RdpGroupPolicyExtension.dll
2014-09-03 18:43:57 ----A---- C:\windows\system32\rdpudd.dll
2014-09-03 18:43:57 ----A---- C:\windows\system32\rdpendp_winip.dll
2014-09-03 18:43:57 ----A---- C:\windows\system32\rdpcorets.dll
2014-09-03 18:43:37 ----A---- C:\windows\system32\TsUsbGDCoInstaller.dll
2014-09-03 18:43:35 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-09-03 18:43:34 ----A---- C:\windows\system32\drivers\TsUsbFlt.sys
2014-09-03 18:43:33 ----A---- C:\windows\system32\wksprtPS.dll
2014-09-03 18:43:33 ----A---- C:\windows\system32\wksprt.exe
2014-09-03 18:43:33 ----A---- C:\windows\system32\TSWbPrxy.exe
2014-09-03 18:43:33 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-09-03 18:43:33 ----A---- C:\windows\system32\tsgqec.dll
2014-09-03 18:43:33 ----A---- C:\windows\system32\rdvidcrl.dll
2014-09-03 18:43:33 ----A---- C:\windows\system32\MsRdpWebAccess.dll
2014-09-03 18:43:32 ----A---- C:\windows\system32\mstscax.dll
2014-09-03 18:43:32 ----A---- C:\windows\system32\mstsc.exe
2014-09-03 18:43:00 ----D---- C:\Program Files\Microsoft Silverlight
2014-09-03 18:38:29 ----A---- C:\windows\system32\qdvd.dll
2014-09-03 18:38:20 ----A---- C:\windows\system32\TSWorkspace.dll
2014-09-03 00:20:39 ----D---- C:\ProgramData\SAMSUNG
2014-09-03 00:13:02 ----D---- C:\windows\pss
2014-09-02 23:17:04 ----D---- C:\Program Files\Microsoft Analysis Services
2014-09-02 23:16:45 ----D---- C:\Program Files\Microsoft Office
2014-09-02 23:16:35 ----RHD---- C:\MSOCache
2014-09-02 20:48:57 ----D---- C:\Users\Mattu\AppData\Roaming\Sony
2014-09-02 20:48:50 ----D---- C:\Users\Mattu\AppData\Roaming\vlc
2014-09-02 20:07:24 ----D---- C:\Users\Mattu\AppData\Roaming\Garmin
2014-09-01 22:13:22 ----D---- C:\Program Files\DriverPack Solution Installer 13
2014-09-01 22:07:13 ----D---- C:\Program Files\DriverToolkit
2014-09-01 21:01:00 ----D---- C:\Program Files\VS Revo Group
2014-08-28 20:25:25 ----A---- C:\windows\system32\win32k.sys
2014-08-28 20:25:25 ----A---- C:\windows\system32\gdi32.dll
2014-08-28 20:07:09 ----ASH---- C:\pagefile.sys
2014-08-25 11:24:19 ----D---- C:\ProgramData\IDM
2014-08-24 17:47:42 ----A---- C:\windows\system32\wups2.dll
2014-08-24 17:47:42 ----A---- C:\windows\system32\wucltux.dll
2014-08-24 17:47:42 ----A---- C:\windows\system32\wuaueng.dll
2014-08-24 17:47:42 ----A---- C:\windows\system32\wuauclt.exe
2014-08-24 17:47:12 ----A---- C:\windows\system32\wups.dll
2014-08-24 17:47:12 ----A---- C:\windows\system32\wudriver.dll
2014-08-24 17:47:12 ----A---- C:\windows\system32\wuapi.dll
2014-08-24 17:46:47 ----A---- C:\windows\system32\wuwebv.dll
2014-08-24 17:46:47 ----A---- C:\windows\system32\wuapp.exe
2014-08-14 07:13:09 ----A---- C:\windows\system32\infocardapi.dll
2014-08-14 07:13:03 ----A---- C:\windows\system32\icardres.dll
2014-08-14 07:12:50 ----A---- C:\windows\system32\icardagt.exe
2014-08-14 07:12:46 ----A---- C:\windows\system32\TsWpfWrp.exe
2014-08-14 06:53:40 ----A---- C:\windows\system32\rpcrt4.dll
2014-08-14 06:53:39 ----A---- C:\windows\system32\drivers\dxgmms1.sys
2014-08-14 06:53:39 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2014-08-14 06:53:39 ----A---- C:\windows\system32\cdd.dll
2014-08-14 06:53:34 ----A---- C:\windows\system32\ieetwproxystub.dll
2014-08-14 06:53:33 ----A---- C:\windows\system32\urlmon.dll
2014-08-14 06:53:33 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2014-08-14 06:53:33 ----A---- C:\windows\system32\JavaScriptCollectionAgent.dll
2014-08-14 06:53:33 ----A---- C:\windows\system32\iernonce.dll
2014-08-14 06:53:33 ----A---- C:\windows\system32\ieetwcollector.exe
2014-08-14 06:53:32 ----A---- C:\windows\system32\msfeeds.dll
2014-08-14 06:53:32 ----A---- C:\windows\system32\jsproxy.dll
2014-08-14 06:53:32 ----A---- C:\windows\system32\ieUnatt.exe
2014-08-14 06:53:32 ----A---- C:\windows\system32\iedkcs32.dll
2014-08-14 06:53:32 ----A---- C:\windows\system32\dxtmsft.dll
2014-08-14 06:53:31 ----A---- C:\windows\system32\msrating.dll
2014-08-14 06:53:31 ----A---- C:\windows\system32\iesetup.dll
2014-08-14 06:53:31 ----A---- C:\windows\system32\ie4uinit.exe
2014-08-14 06:53:30 ----A---- C:\windows\system32\vbscript.dll
2014-08-14 06:53:30 ----A---- C:\windows\system32\ieetwcollectorres.dll
2014-08-14 06:53:30 ----A---- C:\windows\system32\ieapfltr.dll
2014-08-14 06:53:29 ----A---- C:\windows\system32\wininet.dll
2014-08-14 06:53:27 ----A---- C:\windows\system32\dxtrans.dll
2014-08-14 06:53:26 ----A---- C:\windows\system32\ieui.dll
2014-08-14 06:53:25 ----A---- C:\windows\system32\ieframe.dll
2014-08-14 06:53:24 ----A---- C:\windows\system32\mshtmled.dll
2014-08-14 06:53:23 ----A---- C:\windows\system32\mshtmlmedia.dll
2014-08-14 06:53:23 ----A---- C:\windows\system32\MshtmlDac.dll
2014-08-14 06:53:23 ----A---- C:\windows\system32\iertutil.dll
2014-08-14 06:53:22 ----A---- C:\windows\system32\jscript9diag.dll
2014-08-14 06:53:21 ----A---- C:\windows\system32\jscript9.dll
2014-08-14 06:53:20 ----A---- C:\windows\system32\mshtml.dll
2014-08-14 06:52:52 ----A---- C:\windows\system32\tzres.dll
2014-08-14 06:52:48 ----A---- C:\windows\system32\msihnd.dll
2014-08-14 06:52:48 ----A---- C:\windows\system32\msi.dll
2014-08-14 06:52:48 ----A---- C:\windows\system32\consent.exe
2014-08-14 06:52:48 ----A---- C:\windows\system32\authui.dll
2014-08-14 06:52:42 ----A---- C:\windows\system32\aepdu.dll
2014-08-14 06:52:40 ----A---- C:\windows\system32\shell32.dll
2014-08-14 06:52:40 ----A---- C:\windows\system32\aeinv.dll
2014-08-14 06:52:36 ----A---- C:\windows\system32\KBDYAK.DLL
2014-08-14 06:52:36 ----A---- C:\windows\system32\KBDTAT.DLL
2014-08-14 06:52:36 ----A---- C:\windows\system32\KBDRU1.DLL
2014-08-14 06:52:36 ----A---- C:\windows\system32\KBDRU.DLL
2014-08-14 06:52:36 ----A---- C:\windows\system32\KBDBASH.DLL
2014-08-06 17:39:12 ----A---- C:\windows\system32\drivers\aswHwid.sys
2014-08-06 17:38:58 ----A---- C:\windows\avastSS.scr

======List of files/folders modified in the last 1 month======

2014-09-03 19:13:58 ----D---- C:\windows\Temp
2014-09-03 19:07:07 ----D---- C:\windows\system32\config
2014-09-03 19:05:58 ----D---- C:\Program Files
2014-09-03 18:50:39 ----D---- C:\windows\winsxs
2014-09-03 18:48:19 ----D---- C:\windows\System32
2014-09-03 18:47:44 ----D---- C:\windows\system32\catroot
2014-09-03 18:47:33 ----D---- C:\windows\system32\en-US
2014-09-03 18:47:33 ----D---- C:\windows\system32\drivers
2014-09-03 18:47:33 ----D---- C:\windows\system32\cs-CZ
2014-09-03 18:47:33 ----D---- C:\windows\PolicyDefinitions
2014-09-03 18:47:32 ----D---- C:\windows\system32\wbem
2014-09-03 18:47:32 ----D---- C:\windows\system32\DriverStore
2014-09-03 18:47:32 ----D---- C:\windows\system32\drivers\en-US
2014-09-03 18:47:31 ----D---- C:\windows\inf
2014-09-03 18:44:07 ----D---- C:\windows\system32\catroot2
2014-09-03 18:43:31 ----D---- C:\Windows
2014-09-03 18:43:28 ----SHD---- C:\windows\Installer
2014-09-03 18:43:28 ----SHD---- C:\Config.Msi
2014-09-03 18:40:17 ----SHD---- C:\System Volume Information
2014-09-03 00:38:19 ----D---- C:\ProgramData\Microsoft Help
2014-09-03 00:32:34 ----D---- C:\Program Files\Windows Sidebar
2014-09-03 00:32:33 ----D---- C:\Program Files\Internet Explorer
2014-09-03 00:20:39 ----HD---- C:\ProgramData
2014-09-02 23:22:36 ----RSD---- C:\windows\assembly
2014-09-02 23:20:45 ----RSD---- C:\windows\Fonts
2014-09-02 23:20:39 ----D---- C:\Program Files\Common Files\microsoft shared
2014-09-02 23:20:01 ----D---- C:\Program Files\Common Files\DESIGNER
2014-09-02 23:19:51 ----D---- C:\Program Files\Microsoft.NET
2014-09-02 23:17:37 ----D---- C:\windows\ShellNew
2014-09-02 23:16:45 ----SD---- C:\ProgramData\Microsoft
2014-09-02 22:37:33 ----D---- C:\Program Files\Microsoft
2014-09-02 22:24:33 ----HD---- C:\Program Files\InstallShield Installation Information
2014-09-02 21:40:32 ----D---- C:\Program Files\Sony
2014-09-02 21:15:50 ----D---- C:\Program Files\Microsoft Office 15
2014-09-02 20:58:53 ----D---- C:\Program Files\WinRAR
2014-09-02 17:22:09 ----D---- C:\Program Files\Common Files
2014-09-02 10:13:01 ----D---- C:\ProgramData\Sony Mobile
2014-09-02 10:12:59 ----D---- C:\Program Files\Sony Mobile
2014-09-02 10:00:53 ----D---- C:\Program Files\Samsung
2014-09-02 09:28:39 ----D---- C:\windows\system32\wdi
2014-09-02 09:17:27 ----D---- C:\windows\Microsoft.NET
2014-09-02 08:36:56 ----DC---- C:\windows\system32\DRVSTORE
2014-09-02 07:44:51 ----D---- C:\windows\system32\Tasks
2014-09-02 07:26:03 ----D---- C:\Program Files\Fotolab
2014-09-01 22:38:08 ----D---- C:\windows\Tasks
2014-09-01 22:38:08 ----D---- C:\windows\system32\wfp
2014-09-01 22:37:22 ----D---- C:\windows\system32\drivers\UMDF
2014-09-01 22:37:22 ----D---- C:\windows\system32\CodeIntegrity
2014-09-01 22:37:21 ----D---- C:\ProgramData\WinClon
2014-09-01 22:37:21 ----D---- C:\Program Files\Atheros Client Installation Program
2014-09-01 22:37:20 ----D---- C:\windows\registration
2014-09-01 21:22:31 ----D---- C:\Program Files\AskPartnerNetwork
2014-09-01 21:14:11 ----D---- C:\Users\Mattu\AppData\Roaming\ArcSoft
2014-08-31 11:11:07 ----A---- C:\windows\system32\PerfStringBackup.INI
2014-08-29 17:21:21 ----D---- C:\windows\rescache
2014-08-29 17:16:10 ----D---- C:\Program Files\Common Files\Symantec Shared
2014-08-25 06:53:44 ----N---- C:\windows\system32\MpSigStub.exe
2014-08-18 13:37:19 ----D---- C:\windows\system32\FxsTmp
2014-08-14 15:04:01 ----D---- C:\windows\ehome
2014-08-14 15:03:51 ----SD---- C:\windows\system32\CompatTel
2014-08-14 07:20:32 ----D---- C:\windows\system32\MRT
2014-08-14 07:15:54 ----A---- C:\windows\system32\MRT.exe
2014-08-12 21:35:42 ----SD---- C:\Users\Mattu\AppData\Roaming\Microsoft
2014-08-06 17:38:57 ----A---- C:\windows\system32\aswBoot.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\windows\system32\drivers\aswRvrt.sys [2014-08-06 49944]
R0 aswVmm;avast! VM Monitor; C:\windows\system32\drivers\aswVmm.sys [2014-08-06 192352]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2009-10-13 331288]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 aswKbd;aswKbd; C:\windows\system32\drivers\aswKbd.sys [2014-08-06 26136]
R1 aswRdr;aswRdr; C:\windows\system32\drivers\aswRdr2.sys [2014-08-06 81768]
R1 aswSnx;aswSnx; C:\windows\system32\drivers\aswSnx.sys [2014-08-06 779536]
R1 aswSP;aswSP; C:\windows\system32\drivers\aswSP.sys [2014-08-06 414520]
R1 aswTdi;avast! Network Shield Support; C:\windows\system32\drivers\aswTdi.sys [2014-01-22 56080]
R1 CFRMD;CFRMD; C:\windows\system32\DRIVERS\CFRMD.sys [2010-12-09 64608]
R1 CFRPD;CFRPD; C:\windows\system32\DRIVERS\CFRPD.sys [2010-12-09 33744]
R1 SABI;SAMSUNG Kernel Driver For Windows 7; \??\C:\windows\system32\Drivers\SABI.sys [2010-03-31 10752]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 aswHwid;avast! HardwareID; C:\windows\system32\drivers\aswHwid.sys [2014-08-06 24184]
R2 aswMonFlt;aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [2014-08-06 67824]
R2 aswStm;aswStm; C:\windows\system32\drivers\aswStm.sys [2014-08-06 71944]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athr.sys [2011-12-13 2228224]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2011-02-11 9036800]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHDA.sys [2009-12-15 2977248]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI; C:\windows\system32\drivers\IntcHdmi.sys [2009-07-10 122880]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2010-02-26 242992]
S2 Parvdm;Parvdm; C:\windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 ggflt;SEMC USB Flash Driver Filter; C:\windows\system32\DRIVERS\ggflt.sys [2014-02-09 12400]
S3 ggsemc;SEMC USB Flash Driver; C:\windows\system32\DRIVERS\ggsemc.sys [2014-02-09 25200]
S3 OlyCamComm;OLYMPUS USB Communication Device; C:\windows\system32\DRIVERS\OlyCamComm.sys [2009-09-14 21648]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-14 139776]
S3 rtport;rtport; \??\C:\windows\system32\drivers\rtport.sys [2010-09-15 15656]
S3 s1039bus;Sony Ericsson Device 1039 driver (WDM); C:\windows\system32\DRIVERS\s1039bus.sys [2010-03-15 98672]
S3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter; C:\windows\system32\DRIVERS\s1039mdfl.sys [2010-03-15 14960]
S3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver; C:\windows\system32\DRIVERS\s1039mdm.sys [2010-03-15 124016]
S3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM); C:\windows\system32\DRIVERS\s1039mgmt.sys [2010-03-15 117872]
S3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS); C:\windows\system32\DRIVERS\s1039nd5.sys [2010-03-15 25456]
S3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface; C:\windows\system32\DRIVERS\s1039obex.sys [2010-03-15 113904]
S3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM); C:\windows\system32\DRIVERS\s1039unic.sys [2010-03-15 123504]
S3 sisagp;Filtr SIS sběrnice AGP; C:\windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 usbbus;LGE Mobile Composite USB Device; C:\windows\system32\DRIVERS\lgusbbus.sys [2008-11-19 13056]
S3 UsbDiag;LGE Mobile USB Serial Port; C:\windows\system32\DRIVERS\lgusbdiag.sys [2008-11-19 19968]
S3 USBModem;LGE Mobile USB Modem; C:\windows\system32\DRIVERS\lgusbmodem.sys [2008-11-19 24832]
S3 viaagp;Filtr VIA sběrnice AGP; C:\windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;Sony sa0104 ADB Interface; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-08-06 50344]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\windows\system32\svchost.exe [2009-07-14 20992]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo.exe [2009-07-07 247152]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\windows\system32\svchost.exe [2009-07-14 20992]
S2 Cleaner_Validator;COMODO System - Cleaner Service; C:\Program Files\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe [2010-12-09 305600]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-01-29 135664]
S2 OfficeSvc;Služba Microsoft Office; C:\Program Files\Microsoft Office 15\ClientX86\integratedoffice.exe []
S3 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-01-29 135664]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-21 194032]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2014-07-25 108032]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2013-04-23 150600]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2013-04-23 4846168]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2011-01-30 1343400]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-08 262320]
S4 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 Garmin Core Update Service;Garmin Core Update Service; C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [2014-07-23 438616]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Zdravím!
Spusťte nejprve tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

# AdwCleaner v3.309 - Report created 03/09/2014 at 19:39:38
# Updated 02/09/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (32 bits)
# Username : Mattu - MATTU-PC
# Running from : C:\Users\Mattu\Desktop\adwcleaner_3.309.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\apn
Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\ProgramData\AskPartnerNetwork
Folder Deleted : C:\ProgramData\Partner
Folder Deleted : C:\Program Files\AskPartnerNetwork
Folder Deleted : C:\Program Files\Conduit
Folder Deleted : C:\windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}
Folder Deleted : C:\Users\Mattu\AppData\Local\Conduit
Folder Deleted : C:\Users\Mattu\AppData\Local\Temp\apn
Folder Deleted : C:\Users\Mattu\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Mattu\AppData\LocalLow\PriceGong
Folder Deleted : C:\Users\Mattu\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Radka\AppData\Local\iac
Folder Deleted : C:\Users\Radka\AppData\Local\Temp\apn
Folder Deleted : C:\Users\Radka\AppData\LocalLow\iac
Folder Deleted : C:\Users\Radka\AppData\LocalLow\Search Settings
Folder Deleted : C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpiifgmgnfdiblgpaepbmfdkcheicgof
Folder Deleted : C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlcphjankhppgohedpkjonpadimhaoof
[!] Folder Deleted : C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlcphjankhppgohedpkjonpadimhaoof
[!] Folder Deleted : C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlcphjankhppgohedpkjonpadimhaoof

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SearchSettings_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SearchSettings_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT1060933
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F20DE5E0-2A6E-4C54-985F-1CF59551CE39}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F20DE5E0-2A6E-4C54-985F-1CF59551CE39}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AFB904C4-C255-4540-B97E-A75A34F1FFB0}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Key Deleted : HKCU\Software\Ask&Record
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\AskToolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKCU\Software\AppDataLow\Software\Search Settings
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKLM\SOFTWARE\APN
Key Deleted : HKLM\SOFTWARE\Conduit
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\00E944CB89111313EAF35A0553F547F9
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\53F55AF3F4049ED3FA6EA6F88E414E24
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E4BF4B11615E03C97732FD581AB607
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CE3DDAB2D152683FBCEB4866BCD2B0F
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AF6CE16AFEA5C9A39B766468A8B35C21
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB1E44269B58F433A8C8E671E37CFDCF

***** [ Browsers ] *****

-\\ Internet Explorer v0.0.0.0


-\\ Google Chrome v36.0.1985.143

[ File : C:\Users\Mattu\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ File : C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Extension] : gpiifgmgnfdiblgpaepbmfdkcheicgof
Deleted [Extension] : nlcphjankhppgohedpkjonpadimhaoof

*************************

AdwCleaner[R0].txt - [5707 octets] - [03/09/2014 19:36:42]
AdwCleaner[S0].txt - [5760 octets] - [03/09/2014 19:39:38]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5820 octets] ##########

Dejte nový log RSIT.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Mattu at 2014-09-03 21:57:38
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 7 GB (5%) free of 142 GB
Total RAM: 3033 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:58:47, on 3.9.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\windows\system32\taskhost.exe
C:\windows\system32\taskeng.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe
C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe
C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe
C:\windows\system32\igfxext.exe
C:\windows\system32\igfxsrvc.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\windows\system32\wbem\unsecapp.exe
C:\windows\system32\SearchFilterHost.exe
C:\Users\Mattu\Downloads\RSIT.exe
C:\Program Files\trend micro\Mattu.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [IgfxTray] C:\windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\windows\system32\igfxpers.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: @C:\windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - (no file)
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - (no file)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: Garmin Communicator Plug-In - https://static.garmincdn.com/gcp/ie/4.0 ... rol_32.CAB
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: COMODO System - Cleaner Service (Cleaner_Validator) - Unknown owner - C:\Program Files\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Služba Microsoft Office (OfficeSvc) - Unknown owner - C:\Program Files\Microsoft Office 15\ClientX86\integratedoffice.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe

--
End of file - 5878 bytes

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\windows\tasks\COMODO Updater.job - C:\Program Files\COMODO\COMODO System-Cleaner\Updater.exe
C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-3046079806-2612904832-3248945475-1003Core.job - C:\Users\Radka\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver
C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-3046079806-2612904832-3248945475-1003UA.job - C:\Users\Radka\AppData\Local\Facebook\Update\FacebookUpdate.exe /ua /installsource scheduler
C:\windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\windows\tasks\Norton Security Scan for Mattu.job - C:\PROGRA~1\NORTON~2\Engine\403~1.24\Nss.exe /scan-quick /scheduled
C:\windows\tasks\Norton Security Scan for Radka.job - C:\PROGRA~1\NORTON~2\Engine\403~1.24\Nss.exe /scan-quick /scheduled

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-07-18 463272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-08-06 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2014-03-31 194504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-07-18 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2014-03-31 194504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-02-26 1713448]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-06 4085896]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2011-02-11 137752]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2011-02-11 171032]
"Persistence"=C:\windows\system32\igfxpers.exe [2011-02-11 172568]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [2009-06-03 103720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDVD8LanguageShortcut]
C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe [2009-04-15 50472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl8]
C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe [2009-04-15 91432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-12-15 8120864]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UCam_Menu]
C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateLBPShortCut]
C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateP2GoShortCut]
C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePDRShortCut]
C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [2008-01-04 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePPShortCut]
C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [2008-12-03 218408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile Device Center]
C:\windows\WindowsMobile\wmdc.exe [2007-05-31 648072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2011-02-11 228864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-09-03 19:37:48 ----A---- C:\windows\system32\sqlite3.dll
2014-09-03 19:36:33 ----D---- C:\AdwCleaner
2014-09-03 19:05:58 ----D---- C:\rsit
2014-09-03 19:05:58 ----D---- C:\Program Files\trend micro
2014-09-03 18:44:02 ----A---- C:\windows\system32\drivers\rdpvideominiport.sys
2014-09-03 18:44:01 ----A---- C:\windows\system32\RdpGroupPolicyExtension.dll
2014-09-03 18:43:57 ----A---- C:\windows\system32\rdpudd.dll
2014-09-03 18:43:57 ----A---- C:\windows\system32\rdpendp_winip.dll
2014-09-03 18:43:57 ----A---- C:\windows\system32\rdpcorets.dll
2014-09-03 18:43:37 ----A---- C:\windows\system32\TsUsbGDCoInstaller.dll
2014-09-03 18:43:35 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-09-03 18:43:34 ----A---- C:\windows\system32\drivers\TsUsbFlt.sys
2014-09-03 18:43:33 ----A---- C:\windows\system32\wksprtPS.dll
2014-09-03 18:43:33 ----A---- C:\windows\system32\wksprt.exe
2014-09-03 18:43:33 ----A---- C:\windows\system32\TSWbPrxy.exe
2014-09-03 18:43:33 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-09-03 18:43:33 ----A---- C:\windows\system32\tsgqec.dll
2014-09-03 18:43:33 ----A---- C:\windows\system32\rdvidcrl.dll
2014-09-03 18:43:33 ----A---- C:\windows\system32\MsRdpWebAccess.dll
2014-09-03 18:43:32 ----A---- C:\windows\system32\mstscax.dll
2014-09-03 18:43:32 ----A---- C:\windows\system32\mstsc.exe
2014-09-03 18:43:00 ----D---- C:\Program Files\Microsoft Silverlight
2014-09-03 18:38:29 ----A---- C:\windows\system32\qdvd.dll
2014-09-03 18:38:20 ----A---- C:\windows\system32\TSWorkspace.dll
2014-09-03 00:20:39 ----D---- C:\ProgramData\SAMSUNG
2014-09-03 00:13:02 ----D---- C:\windows\pss
2014-09-02 23:17:04 ----D---- C:\Program Files\Microsoft Analysis Services
2014-09-02 23:16:45 ----D---- C:\Program Files\Microsoft Office
2014-09-02 23:16:35 ----RHD---- C:\MSOCache
2014-09-02 20:48:57 ----D---- C:\Users\Mattu\AppData\Roaming\Sony
2014-09-02 20:48:50 ----D---- C:\Users\Mattu\AppData\Roaming\vlc
2014-09-02 20:07:24 ----D---- C:\Users\Mattu\AppData\Roaming\Garmin
2014-09-01 22:13:22 ----D---- C:\Program Files\DriverPack Solution Installer 13
2014-09-01 22:07:13 ----D---- C:\Program Files\DriverToolkit
2014-09-01 21:01:00 ----D---- C:\Program Files\VS Revo Group
2014-08-28 20:25:25 ----A---- C:\windows\system32\win32k.sys
2014-08-28 20:25:25 ----A---- C:\windows\system32\gdi32.dll
2014-08-28 20:07:09 ----ASH---- C:\pagefile.sys
2014-08-25 11:24:19 ----D---- C:\ProgramData\IDM
2014-08-24 17:47:42 ----A---- C:\windows\system32\wups2.dll
2014-08-24 17:47:42 ----A---- C:\windows\system32\wucltux.dll
2014-08-24 17:47:42 ----A---- C:\windows\system32\wuaueng.dll
2014-08-24 17:47:42 ----A---- C:\windows\system32\wuauclt.exe
2014-08-24 17:47:12 ----A---- C:\windows\system32\wups.dll
2014-08-24 17:47:12 ----A---- C:\windows\system32\wudriver.dll
2014-08-24 17:47:12 ----A---- C:\windows\system32\wuapi.dll
2014-08-24 17:46:47 ----A---- C:\windows\system32\wuwebv.dll
2014-08-24 17:46:47 ----A---- C:\windows\system32\wuapp.exe
2014-08-14 07:13:09 ----A---- C:\windows\system32\infocardapi.dll
2014-08-14 07:13:03 ----A---- C:\windows\system32\icardres.dll
2014-08-14 07:12:50 ----A---- C:\windows\system32\icardagt.exe
2014-08-14 07:12:46 ----A---- C:\windows\system32\TsWpfWrp.exe
2014-08-14 06:53:40 ----A---- C:\windows\system32\rpcrt4.dll
2014-08-14 06:53:39 ----A---- C:\windows\system32\drivers\dxgmms1.sys
2014-08-14 06:53:39 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2014-08-14 06:53:39 ----A---- C:\windows\system32\cdd.dll
2014-08-14 06:53:34 ----A---- C:\windows\system32\ieetwproxystub.dll
2014-08-14 06:53:33 ----A---- C:\windows\system32\urlmon.dll
2014-08-14 06:53:33 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2014-08-14 06:53:33 ----A---- C:\windows\system32\JavaScriptCollectionAgent.dll
2014-08-14 06:53:33 ----A---- C:\windows\system32\iernonce.dll
2014-08-14 06:53:33 ----A---- C:\windows\system32\ieetwcollector.exe
2014-08-14 06:53:32 ----A---- C:\windows\system32\msfeeds.dll
2014-08-14 06:53:32 ----A---- C:\windows\system32\jsproxy.dll
2014-08-14 06:53:32 ----A---- C:\windows\system32\ieUnatt.exe
2014-08-14 06:53:32 ----A---- C:\windows\system32\iedkcs32.dll
2014-08-14 06:53:32 ----A---- C:\windows\system32\dxtmsft.dll
2014-08-14 06:53:31 ----A---- C:\windows\system32\msrating.dll
2014-08-14 06:53:31 ----A---- C:\windows\system32\iesetup.dll
2014-08-14 06:53:31 ----A---- C:\windows\system32\ie4uinit.exe
2014-08-14 06:53:30 ----A---- C:\windows\system32\vbscript.dll
2014-08-14 06:53:30 ----A---- C:\windows\system32\ieetwcollectorres.dll
2014-08-14 06:53:30 ----A---- C:\windows\system32\ieapfltr.dll
2014-08-14 06:53:29 ----A---- C:\windows\system32\wininet.dll
2014-08-14 06:53:27 ----A---- C:\windows\system32\dxtrans.dll
2014-08-14 06:53:26 ----A---- C:\windows\system32\ieui.dll
2014-08-14 06:53:25 ----A---- C:\windows\system32\ieframe.dll
2014-08-14 06:53:24 ----A---- C:\windows\system32\mshtmled.dll
2014-08-14 06:53:23 ----A---- C:\windows\system32\mshtmlmedia.dll
2014-08-14 06:53:23 ----A---- C:\windows\system32\MshtmlDac.dll
2014-08-14 06:53:23 ----A---- C:\windows\system32\iertutil.dll
2014-08-14 06:53:22 ----A---- C:\windows\system32\jscript9diag.dll
2014-08-14 06:53:21 ----A---- C:\windows\system32\jscript9.dll
2014-08-14 06:53:20 ----A---- C:\windows\system32\mshtml.dll
2014-08-14 06:52:52 ----A---- C:\windows\system32\tzres.dll
2014-08-14 06:52:48 ----A---- C:\windows\system32\msihnd.dll
2014-08-14 06:52:48 ----A---- C:\windows\system32\msi.dll
2014-08-14 06:52:48 ----A---- C:\windows\system32\consent.exe
2014-08-14 06:52:48 ----A---- C:\windows\system32\authui.dll
2014-08-14 06:52:42 ----A---- C:\windows\system32\aepdu.dll
2014-08-14 06:52:40 ----A---- C:\windows\system32\shell32.dll
2014-08-14 06:52:40 ----A---- C:\windows\system32\aeinv.dll
2014-08-14 06:52:36 ----A---- C:\windows\system32\KBDYAK.DLL
2014-08-14 06:52:36 ----A---- C:\windows\system32\KBDTAT.DLL
2014-08-14 06:52:36 ----A---- C:\windows\system32\KBDRU1.DLL
2014-08-14 06:52:36 ----A---- C:\windows\system32\KBDRU.DLL
2014-08-14 06:52:36 ----A---- C:\windows\system32\KBDBASH.DLL
2014-08-06 17:39:12 ----A---- C:\windows\system32\drivers\aswHwid.sys
2014-08-06 17:38:58 ----A---- C:\windows\avastSS.scr

======List of files/folders modified in the last 1 month======

2014-09-03 21:58:29 ----D---- C:\windows\Temp
2014-09-03 21:57:51 ----D---- C:\windows\Prefetch
2014-09-03 21:53:55 ----D---- C:\windows\system32\config
2014-09-03 21:47:20 ----SHD---- C:\windows\Installer
2014-09-03 21:47:20 ----SHD---- C:\Config.Msi
2014-09-03 21:47:19 ----D---- C:\ProgramData\Microsoft Help
2014-09-03 21:44:09 ----SHD---- C:\System Volume Information
2014-09-03 21:31:52 ----D---- C:\windows\rescache
2014-09-03 21:03:50 ----D---- C:\windows\Microsoft.NET
2014-09-03 20:52:59 ----D---- C:\windows\system32\catroot2
2014-09-03 20:48:44 ----D---- C:\windows\System32
2014-09-03 19:39:38 ----HD---- C:\ProgramData
2014-09-03 19:39:38 ----D---- C:\Program Files
2014-09-03 18:50:39 ----D---- C:\windows\winsxs
2014-09-03 18:47:44 ----D---- C:\windows\system32\catroot
2014-09-03 18:47:33 ----D---- C:\windows\system32\en-US
2014-09-03 18:47:33 ----D---- C:\windows\system32\drivers
2014-09-03 18:47:33 ----D---- C:\windows\system32\cs-CZ
2014-09-03 18:47:33 ----D---- C:\windows\PolicyDefinitions
2014-09-03 18:47:32 ----D---- C:\windows\system32\wbem
2014-09-03 18:47:32 ----D---- C:\windows\system32\DriverStore
2014-09-03 18:47:32 ----D---- C:\windows\system32\drivers\en-US
2014-09-03 18:47:31 ----D---- C:\windows\inf
2014-09-03 18:43:31 ----D---- C:\Windows
2014-09-03 00:32:34 ----D---- C:\Program Files\Windows Sidebar
2014-09-03 00:32:33 ----D---- C:\Program Files\Internet Explorer
2014-09-02 23:22:36 ----RSD---- C:\windows\assembly
2014-09-02 23:20:45 ----RSD---- C:\windows\Fonts
2014-09-02 23:20:39 ----D---- C:\Program Files\Common Files\microsoft shared
2014-09-02 23:20:01 ----D---- C:\Program Files\Common Files\DESIGNER
2014-09-02 23:19:51 ----D---- C:\Program Files\Microsoft.NET
2014-09-02 23:17:37 ----D---- C:\windows\ShellNew
2014-09-02 23:16:45 ----SD---- C:\ProgramData\Microsoft
2014-09-02 22:37:33 ----D---- C:\Program Files\Microsoft
2014-09-02 22:24:33 ----HD---- C:\Program Files\InstallShield Installation Information
2014-09-02 21:40:32 ----D---- C:\Program Files\Sony
2014-09-02 21:15:50 ----D---- C:\Program Files\Microsoft Office 15
2014-09-02 20:58:53 ----D---- C:\Program Files\WinRAR
2014-09-02 17:22:09 ----D---- C:\Program Files\Common Files
2014-09-02 10:13:01 ----D---- C:\ProgramData\Sony Mobile
2014-09-02 10:12:59 ----D---- C:\Program Files\Sony Mobile
2014-09-02 10:00:53 ----D---- C:\Program Files\Samsung
2014-09-02 09:28:39 ----D---- C:\windows\system32\wdi
2014-09-02 08:36:56 ----DC---- C:\windows\system32\DRVSTORE
2014-09-02 07:44:51 ----D---- C:\windows\system32\Tasks
2014-09-02 07:26:03 ----D---- C:\Program Files\Fotolab
2014-09-01 22:38:08 ----D---- C:\windows\Tasks
2014-09-01 22:38:08 ----D---- C:\windows\system32\wfp
2014-09-01 22:37:22 ----D---- C:\windows\system32\drivers\UMDF
2014-09-01 22:37:22 ----D---- C:\windows\system32\CodeIntegrity
2014-09-01 22:37:21 ----D---- C:\ProgramData\WinClon
2014-09-01 22:37:21 ----D---- C:\Program Files\Atheros Client Installation Program
2014-09-01 22:37:20 ----D---- C:\windows\registration
2014-09-01 21:14:11 ----D---- C:\Users\Mattu\AppData\Roaming\ArcSoft
2014-08-31 11:11:07 ----A---- C:\windows\system32\PerfStringBackup.INI
2014-08-29 17:16:10 ----D---- C:\Program Files\Common Files\Symantec Shared
2014-08-25 06:53:44 ----N---- C:\windows\system32\MpSigStub.exe
2014-08-18 13:37:19 ----D---- C:\windows\system32\FxsTmp
2014-08-14 15:04:01 ----D---- C:\windows\ehome
2014-08-14 15:03:51 ----SD---- C:\windows\system32\CompatTel
2014-08-14 07:20:32 ----D---- C:\windows\system32\MRT
2014-08-14 07:15:54 ----A---- C:\windows\system32\MRT.exe
2014-08-12 21:35:42 ----SD---- C:\Users\Mattu\AppData\Roaming\Microsoft
2014-08-06 17:38:57 ----A---- C:\windows\system32\aswBoot.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\windows\system32\drivers\aswRvrt.sys [2014-08-06 49944]
R0 aswVmm;avast! VM Monitor; C:\windows\system32\drivers\aswVmm.sys [2014-08-06 192352]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2009-10-13 331288]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 aswKbd;aswKbd; C:\windows\system32\drivers\aswKbd.sys [2014-08-06 26136]
R1 aswRdr;aswRdr; C:\windows\system32\drivers\aswRdr2.sys [2014-08-06 81768]
R1 aswSnx;aswSnx; C:\windows\system32\drivers\aswSnx.sys [2014-08-06 779536]
R1 aswSP;aswSP; C:\windows\system32\drivers\aswSP.sys [2014-08-06 414520]
R1 aswTdi;avast! Network Shield Support; C:\windows\system32\drivers\aswTdi.sys [2014-01-22 56080]
R1 CFRMD;CFRMD; C:\windows\system32\DRIVERS\CFRMD.sys [2010-12-09 64608]
R1 CFRPD;CFRPD; C:\windows\system32\DRIVERS\CFRPD.sys [2010-12-09 33744]
R1 SABI;SAMSUNG Kernel Driver For Windows 7; \??\C:\windows\system32\Drivers\SABI.sys [2010-03-31 10752]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 aswHwid;avast! HardwareID; C:\windows\system32\drivers\aswHwid.sys [2014-08-06 24184]
R2 aswMonFlt;aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [2014-08-06 67824]
R2 aswStm;aswStm; C:\windows\system32\drivers\aswStm.sys [2014-08-06 71944]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athr.sys [2011-12-13 2228224]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2011-02-11 9036800]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHDA.sys [2009-12-15 2977248]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI; C:\windows\system32\drivers\IntcHdmi.sys [2009-07-10 122880]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2010-02-26 242992]
S2 Parvdm;Parvdm; C:\windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 ggflt;SEMC USB Flash Driver Filter; C:\windows\system32\DRIVERS\ggflt.sys [2014-02-09 12400]
S3 ggsemc;SEMC USB Flash Driver; C:\windows\system32\DRIVERS\ggsemc.sys [2014-02-09 25200]
S3 OlyCamComm;OLYMPUS USB Communication Device; C:\windows\system32\DRIVERS\OlyCamComm.sys [2009-09-14 21648]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-14 139776]
S3 rtport;rtport; \??\C:\windows\system32\drivers\rtport.sys [2010-09-15 15656]
S3 s1039bus;Sony Ericsson Device 1039 driver (WDM); C:\windows\system32\DRIVERS\s1039bus.sys [2010-03-15 98672]
S3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter; C:\windows\system32\DRIVERS\s1039mdfl.sys [2010-03-15 14960]
S3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver; C:\windows\system32\DRIVERS\s1039mdm.sys [2010-03-15 124016]
S3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM); C:\windows\system32\DRIVERS\s1039mgmt.sys [2010-03-15 117872]
S3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS); C:\windows\system32\DRIVERS\s1039nd5.sys [2010-03-15 25456]
S3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface; C:\windows\system32\DRIVERS\s1039obex.sys [2010-03-15 113904]
S3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM); C:\windows\system32\DRIVERS\s1039unic.sys [2010-03-15 123504]
S3 sisagp;Filtr SIS sběrnice AGP; C:\windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 usbbus;LGE Mobile Composite USB Device; C:\windows\system32\DRIVERS\lgusbbus.sys [2008-11-19 13056]
S3 UsbDiag;LGE Mobile USB Serial Port; C:\windows\system32\DRIVERS\lgusbdiag.sys [2008-11-19 19968]
S3 USBModem;LGE Mobile USB Modem; C:\windows\system32\DRIVERS\lgusbmodem.sys [2008-11-19 24832]
S3 viaagp;Filtr VIA sběrnice AGP; C:\windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;Sony sa0104 ADB Interface; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-08-06 50344]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\windows\system32\svchost.exe [2009-07-14 20992]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo.exe [2009-07-07 247152]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\windows\system32\svchost.exe [2009-07-14 20992]
S2 Cleaner_Validator;COMODO System - Cleaner Service; C:\Program Files\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe [2010-12-09 305600]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-01-29 135664]
S2 OfficeSvc;Služba Microsoft Office; C:\Program Files\Microsoft Office 15\ClientX86\integratedoffice.exe []
S3 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-01-29 135664]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-21 194032]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2014-07-25 108032]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2013-04-23 150600]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2013-04-23 4846168]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2011-01-30 1343400]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-08 262320]
S4 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 Garmin Core Update Service;Garmin Core Update Service; C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [2014-07-23 438616]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Program Files\Google\Google Toolbar
C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-3046079806-2612904832-3248945475-1003Core.job
C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-3046079806-2612904832-3248945475-1003UA.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.

All processes killed
========== FILES ==========
C:\Program Files\Google\Google Toolbar\Component folder moved successfully.
C:\Program Files\Google\Google Toolbar folder moved successfully.
C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-3046079806-2612904832-3248945475-1003Core.job moved successfully.
C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-3046079806-2612904832-3248945475-1003UA.job moved successfully.
C:\windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Mattu
->Temp folder emptied: 460138361 bytes
->Temporary Internet Files folder emptied: 307962178 bytes
->Java cache emptied: 2803506 bytes
->Google Chrome cache emptied: 407277420 bytes
->Flash cache emptied: 202488 bytes

User: Public

User: Radka
->Temp folder emptied: 507624590 bytes
->Temporary Internet Files folder emptied: 635844680 bytes
->Java cache emptied: 5957769 bytes
->Google Chrome cache emptied: 283397528 bytes
->Flash cache emptied: 126092 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 954977362 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 54193546 bytes
%systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 741 bytes
RecycleBin emptied: 58713 bytes

Total Files Cleaned = 3,453.00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Mattu
->Flash cache emptied: 0 bytes

User: Public

User: Radka
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0.00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 09042014_075435

Files moved on Reboot...
File move failed. C:\windows\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

Ještě poprosím o nový log RSIT.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Mattu at 2014-09-04 18:55:40
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 13 GB (9%) free of 142 GB
Total RAM: 3033 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:55:56, on 4.9.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\windows\system32\taskeng.exe
C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe
C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe
C:\windows\system32\taskhost.exe
C:\windows\system32\taskeng.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe
C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe
C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\windows\system32\igfxext.exe
C:\windows\system32\igfxsrvc.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\windows\system32\wbem\unsecapp.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\windows\system32\SearchFilterHost.exe
C:\Users\Mattu\Downloads\RSIT.exe
C:\Program Files\trend micro\Mattu.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - (no file)
R3 - URLSearchHook: (no name) - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - (no file)
R3 - URLSearchHook: (no name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - (no file)
R3 - URLSearchHook: (no name) - {00000000-6E41-4FD3-8538-502F5495E5FC} - (no file)
R3 - URLSearchHook: (no name) - {8ba2cfef-a1bc-4964-aadc-33be1ae5a33c} - (no file)
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [IgfxTray] C:\windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\windows\system32\igfxpers.exe
O4 - HKLM\..\RunOnce: [*Restore] C:\windows\System32\rstrui.exe /runonce
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Add to AMV/AVI Video Converter... - C:\Program Files\Media Player Utilities 4.36\AMVConverter\grab.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: @C:\windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - (no file)
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - (no file)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: Garmin Communicator Plug-In - https://static.garmincdn.com/gcp/ie/4.0 ... rol_32.CAB
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: COMODO System - Cleaner Service (Cleaner_Validator) - Unknown owner - C:\Program Files\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe

--
End of file - 6330 bytes

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\windows\tasks\COMODO Updater.job - C:\Program Files\COMODO\COMODO System-Cleaner\Updater.exe
C:\windows\tasks\Norton Security Scan for Mattu.job - C:\PROGRA~1\NORTON~2\Engine\403~1.24\Nss.exe /scan-quick /scheduled
C:\windows\tasks\Norton Security Scan for Radka.job - C:\PROGRA~1\NORTON~2\Engine\403~1.24\Nss.exe /scan-quick /scheduled

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-08-06 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-02-26 1713448]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-06 4085896]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2011-02-11 137752]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2011-02-11 171032]
"Persistence"=C:\windows\system32\igfxpers.exe [2011-02-11 172568]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"*Restore"=C:\windows\System32\rstrui.exe [2010-11-20 262656]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [2009-06-03 103720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Facebook Update]
C:\Users\Radka\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-09-28 138096]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GarminExpressTrayApp]
C:\Program Files\Garmin\Express Tray\ExpressTray.exe [2014-07-23 688984]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Olympus ib]
C:\Program Files\Olympus\ib\olycamdetect.exe /Startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDVD8LanguageShortcut]
C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe [2009-04-15 50472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl8]
C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe [2009-04-15 91432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyDrive]
C:\Users\Radka\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [2014-08-12 251040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony PC Companion]
C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe /Background []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UCam_Menu]
C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateLBPShortCut]
C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateP2GoShortCut]
C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePDRShortCut]
C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [2008-01-04 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePPShortCut]
C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [2008-12-03 218408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile Device Center]
C:\windows\WindowsMobile\wmdc.exe [2007-05-31 648072]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Radka^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE /tsr []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2011-02-11 228864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-09-04 11:44:00 ----A---- C:\windows\DIFxAPI.dll
2014-09-04 11:42:21 ----A---- C:\windows\system32\SETF6FE.tmp
2014-09-04 11:42:21 ----A---- C:\windows\system32\SET1401.tmp
2014-09-04 11:42:20 ----A---- C:\windows\system32\RtkAPO.dll
2014-09-04 10:15:13 ----D---- C:\Program Files\CCleaner
2014-09-04 09:49:44 ----A---- C:\windows\system32\uxtFF64.tmp
2014-09-04 09:45:43 ----D---- C:\ProgramData\AVG
2014-09-04 09:45:26 ----SHD---- C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-09-04 09:45:25 ----HD---- C:\ProgramData\Common Files
2014-09-04 09:26:35 ----D---- C:\DriverPack Solution
2014-09-04 09:25:27 ----A---- C:\windows\system32\mstscax.dll
2014-09-04 09:03:43 ----A---- C:\windows\system32\RdpGroupPolicyExtension.dll
2014-09-04 09:03:43 ----A---- C:\windows\system32\rdpcorets.dll
2014-09-04 07:54:35 ----D---- C:\_OTM
2014-09-03 19:37:48 ----A---- C:\windows\system32\sqlite3.dll
2014-09-03 19:36:33 ----D---- C:\AdwCleaner
2014-09-03 19:05:58 ----D---- C:\rsit
2014-09-03 19:05:58 ----D---- C:\Program Files\trend micro
2014-09-03 18:44:02 ----A---- C:\windows\system32\drivers\rdpvideominiport.sys
2014-09-03 18:43:57 ----A---- C:\windows\system32\rdpudd.dll
2014-09-03 18:43:57 ----A---- C:\windows\system32\rdpendp_winip.dll
2014-09-03 18:43:37 ----A---- C:\windows\system32\TsUsbGDCoInstaller.dll
2014-09-03 18:43:35 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-09-03 18:43:34 ----A---- C:\windows\system32\drivers\TsUsbFlt.sys
2014-09-03 18:43:33 ----A---- C:\windows\system32\wksprtPS.dll
2014-09-03 18:43:33 ----A---- C:\windows\system32\wksprt.exe
2014-09-03 18:43:33 ----A---- C:\windows\system32\TSWbPrxy.exe
2014-09-03 18:43:33 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-09-03 18:43:33 ----A---- C:\windows\system32\tsgqec.dll
2014-09-03 18:43:33 ----A---- C:\windows\system32\rdvidcrl.dll
2014-09-03 18:43:33 ----A---- C:\windows\system32\MsRdpWebAccess.dll
2014-09-03 18:43:32 ----A---- C:\windows\system32\mstsc.exe
2014-09-03 18:43:00 ----D---- C:\Program Files\Microsoft Silverlight
2014-09-03 18:38:29 ----A---- C:\windows\system32\qdvd.dll
2014-09-03 18:38:20 ----A---- C:\windows\system32\TSWorkspace.dll
2014-09-03 00:20:39 ----D---- C:\ProgramData\SAMSUNG
2014-09-03 00:13:02 ----D---- C:\windows\pss
2014-09-02 23:17:04 ----D---- C:\Program Files\Microsoft Analysis Services
2014-09-02 23:16:45 ----D---- C:\Program Files\Microsoft Office
2014-09-02 23:16:35 ----RHD---- C:\MSOCache
2014-09-02 20:48:57 ----D---- C:\Users\Mattu\AppData\Roaming\Sony
2014-09-02 20:48:50 ----D---- C:\Users\Mattu\AppData\Roaming\vlc
2014-09-02 20:07:24 ----D---- C:\Users\Mattu\AppData\Roaming\Garmin
2014-09-01 22:13:22 ----D---- C:\Program Files\DriverPack Solution Installer 13
2014-09-01 22:07:13 ----D---- C:\Program Files\DriverToolkit
2014-09-01 21:01:00 ----D---- C:\Program Files\VS Revo Group
2014-08-28 20:25:25 ----A---- C:\windows\system32\win32k.sys
2014-08-28 20:25:25 ----A---- C:\windows\system32\gdi32.dll
2014-08-28 20:07:09 ----ASH---- C:\pagefile.sys
2014-08-25 11:24:19 ----D---- C:\ProgramData\IDM
2014-08-24 17:47:42 ----A---- C:\windows\system32\wups2.dll
2014-08-24 17:47:42 ----A---- C:\windows\system32\wucltux.dll
2014-08-24 17:47:42 ----A---- C:\windows\system32\wuaueng.dll
2014-08-24 17:47:42 ----A---- C:\windows\system32\wuauclt.exe
2014-08-24 17:47:12 ----A---- C:\windows\system32\wups.dll
2014-08-24 17:47:12 ----A---- C:\windows\system32\wudriver.dll
2014-08-24 17:47:12 ----A---- C:\windows\system32\wuapi.dll
2014-08-24 17:46:47 ----A---- C:\windows\system32\wuwebv.dll
2014-08-24 17:46:47 ----A---- C:\windows\system32\wuapp.exe
2014-08-14 07:13:09 ----A---- C:\windows\system32\infocardapi.dll
2014-08-14 07:13:03 ----A---- C:\windows\system32\icardres.dll
2014-08-14 07:12:50 ----A---- C:\windows\system32\icardagt.exe
2014-08-14 07:12:46 ----A---- C:\windows\system32\TsWpfWrp.exe
2014-08-14 06:53:40 ----A---- C:\windows\system32\rpcrt4.dll
2014-08-14 06:53:39 ----A---- C:\windows\system32\drivers\dxgmms1.sys
2014-08-14 06:53:39 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2014-08-14 06:53:39 ----A---- C:\windows\system32\cdd.dll
2014-08-14 06:53:34 ----A---- C:\windows\system32\ieetwproxystub.dll
2014-08-14 06:53:33 ----A---- C:\windows\system32\urlmon.dll
2014-08-14 06:53:33 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2014-08-14 06:53:33 ----A---- C:\windows\system32\JavaScriptCollectionAgent.dll
2014-08-14 06:53:33 ----A---- C:\windows\system32\iernonce.dll
2014-08-14 06:53:33 ----A---- C:\windows\system32\ieetwcollector.exe
2014-08-14 06:53:32 ----A---- C:\windows\system32\msfeeds.dll
2014-08-14 06:53:32 ----A---- C:\windows\system32\jsproxy.dll
2014-08-14 06:53:32 ----A---- C:\windows\system32\ieUnatt.exe
2014-08-14 06:53:32 ----A---- C:\windows\system32\iedkcs32.dll
2014-08-14 06:53:32 ----A---- C:\windows\system32\dxtmsft.dll
2014-08-14 06:53:31 ----A---- C:\windows\system32\msrating.dll
2014-08-14 06:53:31 ----A---- C:\windows\system32\iesetup.dll
2014-08-14 06:53:31 ----A---- C:\windows\system32\ie4uinit.exe
2014-08-14 06:53:30 ----A---- C:\windows\system32\vbscript.dll
2014-08-14 06:53:30 ----A---- C:\windows\system32\ieetwcollectorres.dll
2014-08-14 06:53:30 ----A---- C:\windows\system32\ieapfltr.dll
2014-08-14 06:53:29 ----A---- C:\windows\system32\wininet.dll
2014-08-14 06:53:27 ----A---- C:\windows\system32\dxtrans.dll
2014-08-14 06:53:26 ----A---- C:\windows\system32\ieui.dll
2014-08-14 06:53:25 ----A---- C:\windows\system32\ieframe.dll
2014-08-14 06:53:24 ----A---- C:\windows\system32\mshtmled.dll
2014-08-14 06:53:23 ----A---- C:\windows\system32\mshtmlmedia.dll
2014-08-14 06:53:23 ----A---- C:\windows\system32\MshtmlDac.dll
2014-08-14 06:53:23 ----A---- C:\windows\system32\iertutil.dll
2014-08-14 06:53:22 ----A---- C:\windows\system32\jscript9diag.dll
2014-08-14 06:53:21 ----A---- C:\windows\system32\jscript9.dll
2014-08-14 06:53:20 ----A---- C:\windows\system32\mshtml.dll
2014-08-14 06:52:52 ----A---- C:\windows\system32\tzres.dll
2014-08-14 06:52:48 ----A---- C:\windows\system32\msihnd.dll
2014-08-14 06:52:48 ----A---- C:\windows\system32\msi.dll
2014-08-14 06:52:48 ----A---- C:\windows\system32\consent.exe
2014-08-14 06:52:48 ----A---- C:\windows\system32\authui.dll
2014-08-14 06:52:42 ----A---- C:\windows\system32\aepdu.dll
2014-08-14 06:52:40 ----A---- C:\windows\system32\shell32.dll
2014-08-14 06:52:40 ----A---- C:\windows\system32\aeinv.dll
2014-08-14 06:52:36 ----A---- C:\windows\system32\KBDYAK.DLL
2014-08-14 06:52:36 ----A---- C:\windows\system32\KBDTAT.DLL
2014-08-14 06:52:36 ----A---- C:\windows\system32\KBDRU1.DLL
2014-08-14 06:52:36 ----A---- C:\windows\system32\KBDRU.DLL
2014-08-14 06:52:36 ----A---- C:\windows\system32\KBDBASH.DLL
2014-08-06 17:39:12 ----A---- C:\windows\system32\drivers\aswHwid.sys
2014-08-06 17:38:58 ----A---- C:\windows\avastSS.scr

======List of files/folders modified in the last 1 month======

2014-09-04 18:55:52 ----D---- C:\windows\Prefetch
2014-09-04 18:55:51 ----D---- C:\windows\Temp
2014-09-04 18:51:52 ----D---- C:\windows\system32\config
2014-09-04 16:14:44 ----D---- C:\windows\rescache
2014-09-04 15:08:43 ----SHD---- C:\System Volume Information
2014-09-04 12:27:31 ----D---- C:\windows\inf
2014-09-04 12:27:23 ----D---- C:\windows\SoftwareDistribution
2014-09-04 12:27:17 ----D---- C:\Windows
2014-09-04 12:22:21 ----D---- C:\windows\Tasks
2014-09-04 12:22:21 ----D---- C:\windows\system32\wfp
2014-09-04 12:22:20 ----D---- C:\windows\system32\wbem
2014-09-04 12:21:45 ----D---- C:\windows\system32\Tasks
2014-09-04 12:21:44 ----D---- C:\windows\system32\DriverStore
2014-09-04 12:21:44 ----D---- C:\windows\system32\CodeIntegrity
2014-09-04 12:21:44 ----D---- C:\windows\system32\catroot2
2014-09-04 12:21:44 ----D---- C:\windows\system32\catroot
2014-09-04 12:21:42 ----D---- C:\ProgramData\WinClon
2014-09-04 12:21:41 ----D---- C:\windows\registration
2014-09-04 12:21:40 ----D---- C:\windows\System32
2014-09-04 12:21:31 ----D---- C:\Program Files
2014-09-04 11:51:47 ----HD---- C:\Program Files\Temp
2014-09-04 11:51:38 ----HD---- C:\Program Files\InstallShield Installation Information
2014-09-04 11:51:35 ----D---- C:\windows\system32\drivers
2014-09-04 11:44:28 ----A---- C:\windows\system32\PerfStringBackup.INI
2014-09-04 11:21:13 ----D---- C:\windows\Microsoft.NET
2014-09-04 11:21:12 ----RSD---- C:\windows\assembly
2014-09-04 10:18:55 ----D---- C:\windows\Panther
2014-09-04 10:18:54 ----D---- C:\windows\Minidump
2014-09-04 10:18:54 ----D---- C:\windows\Logs
2014-09-04 10:18:54 ----D---- C:\windows\debug
2014-09-04 10:09:20 ----SHD---- C:\windows\Installer
2014-09-04 10:09:18 ----SHD---- C:\Config.Msi
2014-09-04 09:45:43 ----HD---- C:\ProgramData
2014-09-04 09:33:15 ----D---- C:\windows\winsxs
2014-09-04 09:33:07 ----D---- C:\windows\system32\cs-CZ
2014-09-04 08:49:35 ----D---- C:\Program Files\Common Files
2014-09-04 08:44:50 ----A---- C:\windows\system32\FlashPlayerApp.exe
2014-09-04 08:16:24 ----D---- C:\windows\PolicyDefinitions
2014-09-04 08:16:24 ----D---- C:\windows\ehome
2014-09-04 08:16:24 ----D---- C:\Program Files\DVD Maker
2014-09-04 08:14:37 ----D---- C:\windows\system32\migration
2014-09-04 07:54:36 ----D---- C:\Program Files\Google
2014-09-03 22:49:29 ----D---- C:\windows\system32\drivers\etc
2014-09-03 22:49:25 ----D---- C:\ProgramData\Microsoft Help
2014-09-03 22:49:25 ----D---- C:\Program Files\Common Files\microsoft shared
2014-09-03 18:47:33 ----D---- C:\windows\system32\en-US
2014-09-03 18:47:32 ----D---- C:\windows\system32\drivers\en-US
2014-09-03 00:32:34 ----D---- C:\Program Files\Windows Sidebar
2014-09-03 00:32:33 ----D---- C:\Program Files\Internet Explorer
2014-09-02 23:20:45 ----RSD---- C:\windows\Fonts
2014-09-02 23:20:01 ----D---- C:\Program Files\Common Files\DESIGNER
2014-09-02 23:19:51 ----D---- C:\Program Files\Microsoft.NET
2014-09-02 23:17:37 ----D---- C:\windows\ShellNew
2014-09-02 23:16:45 ----SD---- C:\ProgramData\Microsoft
2014-09-02 22:37:33 ----D---- C:\Program Files\Microsoft
2014-09-02 21:40:32 ----D---- C:\Program Files\Sony
2014-09-02 21:15:50 ----D---- C:\Program Files\Microsoft Office 15
2014-09-02 20:58:53 ----D---- C:\Program Files\WinRAR
2014-09-02 10:13:01 ----D---- C:\ProgramData\Sony Mobile
2014-09-02 10:12:59 ----D---- C:\Program Files\Sony Mobile
2014-09-02 10:00:53 ----D---- C:\Program Files\Samsung
2014-09-02 09:28:39 ----D---- C:\windows\system32\wdi
2014-09-02 08:36:56 ----DC---- C:\windows\system32\DRVSTORE
2014-09-02 07:26:03 ----D---- C:\Program Files\Fotolab
2014-09-01 22:37:22 ----D---- C:\windows\system32\drivers\UMDF
2014-09-01 22:37:21 ----D---- C:\Program Files\Atheros Client Installation Program
2014-09-01 21:14:11 ----D---- C:\Users\Mattu\AppData\Roaming\ArcSoft
2014-08-29 17:16:10 ----D---- C:\Program Files\Common Files\Symantec Shared
2014-08-25 06:53:44 ----N---- C:\windows\system32\MpSigStub.exe
2014-08-18 13:37:19 ----D---- C:\windows\system32\FxsTmp
2014-08-14 15:03:51 ----SD---- C:\windows\system32\CompatTel
2014-08-14 07:20:32 ----D---- C:\windows\system32\MRT
2014-08-14 07:15:54 ----A---- C:\windows\system32\MRT.exe
2014-08-12 21:35:42 ----SD---- C:\Users\Mattu\AppData\Roaming\Microsoft
2014-08-06 17:38:57 ----A---- C:\windows\system32\aswBoot.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\windows\system32\drivers\aswRvrt.sys [2014-08-06 49944]
R0 aswVmm;avast! VM Monitor; C:\windows\system32\drivers\aswVmm.sys [2014-08-06 192352]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2009-10-13 331288]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 aswKbd;aswKbd; C:\windows\system32\drivers\aswKbd.sys [2014-08-06 26136]
R1 aswRdr;aswRdr; C:\windows\system32\drivers\aswRdr2.sys [2014-08-06 81768]
R1 aswSnx;aswSnx; C:\windows\system32\drivers\aswSnx.sys [2014-08-06 779536]
R1 aswSP;aswSP; C:\windows\system32\drivers\aswSP.sys [2014-08-06 414520]
R1 aswTdi;avast! Network Shield Support; C:\windows\system32\drivers\aswTdi.sys [2014-01-22 56080]
R1 CFRMD;CFRMD; C:\windows\system32\DRIVERS\CFRMD.sys [2010-12-09 64608]
R1 CFRPD;CFRPD; C:\windows\system32\DRIVERS\CFRPD.sys [2010-12-09 33744]
R1 SABI;SAMSUNG Kernel Driver For Windows 7; \??\C:\windows\system32\Drivers\SABI.sys [2010-03-31 10752]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 aswHwid;avast! HardwareID; C:\windows\system32\drivers\aswHwid.sys [2014-08-06 24184]
R2 aswMonFlt;aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [2014-08-06 67824]
R2 aswStm;aswStm; C:\windows\system32\drivers\aswStm.sys [2014-08-06 71944]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athr.sys [2011-12-13 2228224]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2011-02-11 9036800]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI; C:\windows\system32\drivers\IntcHdmi.sys [2009-07-10 122880]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2010-02-26 242992]
S2 Parvdm;Parvdm; C:\windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 ggflt;SEMC USB Flash Driver Filter; C:\windows\system32\DRIVERS\ggflt.sys [2014-02-09 12400]
S3 ggsemc;SEMC USB Flash Driver; C:\windows\system32\DRIVERS\ggsemc.sys [2014-02-09 25200]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHDA.sys []
S3 OlyCamComm;OLYMPUS USB Communication Device; C:\windows\system32\DRIVERS\OlyCamComm.sys [2009-09-14 21648]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-14 139776]
S3 rtport;rtport; \??\C:\windows\system32\drivers\rtport.sys [2010-09-15 15656]
S3 s1039bus;Sony Ericsson Device 1039 driver (WDM); C:\windows\system32\DRIVERS\s1039bus.sys [2010-03-15 98672]
S3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter; C:\windows\system32\DRIVERS\s1039mdfl.sys [2010-03-15 14960]
S3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver; C:\windows\system32\DRIVERS\s1039mdm.sys [2010-03-15 124016]
S3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM); C:\windows\system32\DRIVERS\s1039mgmt.sys [2010-03-15 117872]
S3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS); C:\windows\system32\DRIVERS\s1039nd5.sys [2010-03-15 25456]
S3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface; C:\windows\system32\DRIVERS\s1039obex.sys [2010-03-15 113904]
S3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM); C:\windows\system32\DRIVERS\s1039unic.sys [2010-03-15 123504]
S3 sisagp;Filtr SIS sběrnice AGP; C:\windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 usbbus;LGE Mobile Composite USB Device; C:\windows\system32\DRIVERS\lgusbbus.sys [2008-11-19 13056]
S3 UsbDiag;LGE Mobile USB Serial Port; C:\windows\system32\DRIVERS\lgusbdiag.sys [2008-11-19 19968]
S3 USBModem;LGE Mobile USB Modem; C:\windows\system32\DRIVERS\lgusbmodem.sys [2008-11-19 24832]
S3 viaagp;Filtr VIA sběrnice AGP; C:\windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;Sony sa0104 ADB Interface; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-08-06 50344]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\windows\system32\svchost.exe [2009-07-14 20992]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo.exe [2009-07-07 247152]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\windows\system32\svchost.exe [2009-07-14 20992]
S2 Cleaner_Validator;COMODO System - Cleaner Service; C:\Program Files\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe [2010-12-09 305600]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-01-29 135664]
S3 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-01-29 135664]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-21 194032]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2014-07-25 108032]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2013-04-23 150600]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2013-04-23 4846168]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2011-01-30 1343400]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-04 262320]
S4 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 Garmin Core Update Service;Garmin Core Update Service; C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [2014-07-23 438616]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Users\Radka\AppData\Local\Facebook\Update
C:\windows\system32\SET*.tmp

:reg
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Facebook Update]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.

(btw strašně pomalu nabíhají Downloads a Knihovny - může to být tím velkým množstvím souborů, které to obsahuje?)



Logfile of random's system information tool 1.10 (written by random/random)
Run by Mattu at 2014-09-04 20:22:19
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 13 GB (9%) free of 142 GB
Total RAM: 3033 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:23:25, on 4.9.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\windows\system32\taskhost.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\windows\system32\taskeng.exe
C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe
C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe
C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\windows\system32\igfxext.exe
C:\windows\system32\igfxsrvc.exe
C:\windows\system32\wbem\unsecapp.exe
C:\windows\system32\SearchFilterHost.exe
C:\Users\Mattu\Downloads\RSIT.exe
C:\Program Files\trend micro\Mattu.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - (no file)
R3 - URLSearchHook: (no name) - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - (no file)
R3 - URLSearchHook: (no name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - (no file)
R3 - URLSearchHook: (no name) - {00000000-6E41-4FD3-8538-502F5495E5FC} - (no file)
R3 - URLSearchHook: (no name) - {8ba2cfef-a1bc-4964-aadc-33be1ae5a33c} - (no file)
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [IgfxTray] C:\windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\windows\system32\igfxpers.exe
O4 - HKLM\..\RunOnce: [*Restore] C:\windows\System32\rstrui.exe /runonce
O4 - HKLM\..\RunOnce: [OTM] "C:\Users\Mattu\Desktop\OTM.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Add to AMV/AVI Video Converter... - C:\Program Files\Media Player Utilities 4.36\AMVConverter\grab.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: @C:\windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - (no file)
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - (no file)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: Garmin Communicator Plug-In - https://static.garmincdn.com/gcp/ie/4.0 ... rol_32.CAB
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: COMODO System - Cleaner Service (Cleaner_Validator) - Unknown owner - C:\Program Files\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe

--
End of file - 5816 bytes

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\windows\tasks\COMODO Updater.job - C:\Program Files\COMODO\COMODO System-Cleaner\Updater.exe
C:\windows\tasks\Norton Security Scan for Mattu.job - C:\PROGRA~1\NORTON~2\Engine\403~1.24\Nss.exe /scan-quick /scheduled
C:\windows\tasks\Norton Security Scan for Radka.job - C:\PROGRA~1\NORTON~2\Engine\403~1.24\Nss.exe /scan-quick /scheduled

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-08-06 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-02-26 1713448]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-06 4085896]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2011-02-11 137752]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2011-02-11 171032]
"Persistence"=C:\windows\system32\igfxpers.exe [2011-02-11 172568]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"*Restore"=C:\windows\System32\rstrui.exe [2010-11-20 262656]
"OTM"=C:\Users\Mattu\Desktop\OTM.exe [2014-09-04 522240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [2009-06-03 103720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GarminExpressTrayApp]
C:\Program Files\Garmin\Express Tray\ExpressTray.exe [2014-07-23 688984]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Olympus ib]
C:\Program Files\Olympus\ib\olycamdetect.exe /Startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDVD8LanguageShortcut]
C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe [2009-04-15 50472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl8]
C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe [2009-04-15 91432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyDrive]
C:\Users\Radka\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [2014-08-12 251040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony PC Companion]
C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe /Background []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UCam_Menu]
C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateLBPShortCut]
C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateP2GoShortCut]
C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePDRShortCut]
C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [2008-01-04 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePPShortCut]
C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [2008-12-03 218408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile Device Center]
C:\windows\WindowsMobile\wmdc.exe [2007-05-31 648072]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Radka^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE /tsr []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2011-02-11 228864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-09-04 11:44:00 ----A---- C:\windows\DIFxAPI.dll
2014-09-04 11:42:20 ----A---- C:\windows\system32\RtkAPO.dll
2014-09-04 10:15:13 ----D---- C:\Program Files\CCleaner
2014-09-04 09:45:43 ----D---- C:\ProgramData\AVG
2014-09-04 09:45:26 ----SHD---- C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-09-04 09:45:25 ----HD---- C:\ProgramData\Common Files
2014-09-04 09:26:35 ----D---- C:\DriverPack Solution
2014-09-04 09:25:27 ----A---- C:\windows\system32\mstscax.dll
2014-09-04 09:03:43 ----A---- C:\windows\system32\RdpGroupPolicyExtension.dll
2014-09-04 09:03:43 ----A---- C:\windows\system32\rdpcorets.dll
2014-09-04 07:54:35 ----D---- C:\_OTM
2014-09-03 19:37:48 ----A---- C:\windows\system32\sqlite3.dll
2014-09-03 19:36:33 ----D---- C:\AdwCleaner
2014-09-03 19:05:58 ----D---- C:\rsit
2014-09-03 19:05:58 ----D---- C:\Program Files\trend micro
2014-09-03 18:44:02 ----A---- C:\windows\system32\drivers\rdpvideominiport.sys
2014-09-03 18:43:57 ----A---- C:\windows\system32\rdpudd.dll
2014-09-03 18:43:57 ----A---- C:\windows\system32\rdpendp_winip.dll
2014-09-03 18:43:37 ----A---- C:\windows\system32\TsUsbGDCoInstaller.dll
2014-09-03 18:43:35 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-09-03 18:43:34 ----A---- C:\windows\system32\drivers\TsUsbFlt.sys
2014-09-03 18:43:33 ----A---- C:\windows\system32\wksprtPS.dll
2014-09-03 18:43:33 ----A---- C:\windows\system32\wksprt.exe
2014-09-03 18:43:33 ----A---- C:\windows\system32\TSWbPrxy.exe
2014-09-03 18:43:33 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-09-03 18:43:33 ----A---- C:\windows\system32\tsgqec.dll
2014-09-03 18:43:33 ----A---- C:\windows\system32\rdvidcrl.dll
2014-09-03 18:43:33 ----A---- C:\windows\system32\MsRdpWebAccess.dll
2014-09-03 18:43:32 ----A---- C:\windows\system32\mstsc.exe
2014-09-03 18:43:00 ----D---- C:\Program Files\Microsoft Silverlight
2014-09-03 18:38:29 ----A---- C:\windows\system32\qdvd.dll
2014-09-03 18:38:20 ----A---- C:\windows\system32\TSWorkspace.dll
2014-09-03 00:20:39 ----D---- C:\ProgramData\SAMSUNG
2014-09-03 00:13:02 ----D---- C:\windows\pss
2014-09-02 23:17:04 ----D---- C:\Program Files\Microsoft Analysis Services
2014-09-02 23:16:45 ----D---- C:\Program Files\Microsoft Office
2014-09-02 23:16:35 ----RHD---- C:\MSOCache
2014-09-02 20:48:57 ----D---- C:\Users\Mattu\AppData\Roaming\Sony
2014-09-02 20:48:50 ----D---- C:\Users\Mattu\AppData\Roaming\vlc
2014-09-02 20:07:24 ----D---- C:\Users\Mattu\AppData\Roaming\Garmin
2014-09-01 22:13:22 ----D---- C:\Program Files\DriverPack Solution Installer 13
2014-09-01 22:07:13 ----D---- C:\Program Files\DriverToolkit
2014-09-01 21:01:00 ----D---- C:\Program Files\VS Revo Group
2014-08-28 20:25:25 ----A---- C:\windows\system32\win32k.sys
2014-08-28 20:25:25 ----A---- C:\windows\system32\gdi32.dll
2014-08-28 20:07:09 ----ASH---- C:\pagefile.sys
2014-08-25 11:24:19 ----D---- C:\ProgramData\IDM
2014-08-24 17:47:42 ----A---- C:\windows\system32\wups2.dll
2014-08-24 17:47:42 ----A---- C:\windows\system32\wucltux.dll
2014-08-24 17:47:42 ----A---- C:\windows\system32\wuaueng.dll
2014-08-24 17:47:42 ----A---- C:\windows\system32\wuauclt.exe
2014-08-24 17:47:12 ----A---- C:\windows\system32\wups.dll
2014-08-24 17:47:12 ----A---- C:\windows\system32\wudriver.dll
2014-08-24 17:47:12 ----A---- C:\windows\system32\wuapi.dll
2014-08-24 17:46:47 ----A---- C:\windows\system32\wuwebv.dll
2014-08-24 17:46:47 ----A---- C:\windows\system32\wuapp.exe
2014-08-14 07:13:09 ----A---- C:\windows\system32\infocardapi.dll
2014-08-14 07:13:03 ----A---- C:\windows\system32\icardres.dll
2014-08-14 07:12:50 ----A---- C:\windows\system32\icardagt.exe
2014-08-14 07:12:46 ----A---- C:\windows\system32\TsWpfWrp.exe
2014-08-14 06:53:40 ----A---- C:\windows\system32\rpcrt4.dll
2014-08-14 06:53:39 ----A---- C:\windows\system32\drivers\dxgmms1.sys
2014-08-14 06:53:39 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2014-08-14 06:53:39 ----A---- C:\windows\system32\cdd.dll
2014-08-14 06:53:34 ----A---- C:\windows\system32\ieetwproxystub.dll
2014-08-14 06:53:33 ----A---- C:\windows\system32\urlmon.dll
2014-08-14 06:53:33 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2014-08-14 06:53:33 ----A---- C:\windows\system32\JavaScriptCollectionAgent.dll
2014-08-14 06:53:33 ----A---- C:\windows\system32\iernonce.dll
2014-08-14 06:53:33 ----A---- C:\windows\system32\ieetwcollector.exe
2014-08-14 06:53:32 ----A---- C:\windows\system32\msfeeds.dll
2014-08-14 06:53:32 ----A---- C:\windows\system32\jsproxy.dll
2014-08-14 06:53:32 ----A---- C:\windows\system32\ieUnatt.exe
2014-08-14 06:53:32 ----A---- C:\windows\system32\iedkcs32.dll
2014-08-14 06:53:32 ----A---- C:\windows\system32\dxtmsft.dll
2014-08-14 06:53:31 ----A---- C:\windows\system32\msrating.dll
2014-08-14 06:53:31 ----A---- C:\windows\system32\iesetup.dll
2014-08-14 06:53:31 ----A---- C:\windows\system32\ie4uinit.exe
2014-08-14 06:53:30 ----A---- C:\windows\system32\vbscript.dll
2014-08-14 06:53:30 ----A---- C:\windows\system32\ieetwcollectorres.dll
2014-08-14 06:53:30 ----A---- C:\windows\system32\ieapfltr.dll
2014-08-14 06:53:29 ----A---- C:\windows\system32\wininet.dll
2014-08-14 06:53:27 ----A---- C:\windows\system32\dxtrans.dll
2014-08-14 06:53:26 ----A---- C:\windows\system32\ieui.dll
2014-08-14 06:53:25 ----A---- C:\windows\system32\ieframe.dll
2014-08-14 06:53:24 ----A---- C:\windows\system32\mshtmled.dll
2014-08-14 06:53:23 ----A---- C:\windows\system32\mshtmlmedia.dll
2014-08-14 06:53:23 ----A---- C:\windows\system32\MshtmlDac.dll
2014-08-14 06:53:23 ----A---- C:\windows\system32\iertutil.dll
2014-08-14 06:53:22 ----A---- C:\windows\system32\jscript9diag.dll
2014-08-14 06:53:21 ----A---- C:\windows\system32\jscript9.dll
2014-08-14 06:53:20 ----A---- C:\windows\system32\mshtml.dll
2014-08-14 06:52:52 ----A---- C:\windows\system32\tzres.dll
2014-08-14 06:52:48 ----A---- C:\windows\system32\msihnd.dll
2014-08-14 06:52:48 ----A---- C:\windows\system32\msi.dll
2014-08-14 06:52:48 ----A---- C:\windows\system32\consent.exe
2014-08-14 06:52:48 ----A---- C:\windows\system32\authui.dll
2014-08-14 06:52:42 ----A---- C:\windows\system32\aepdu.dll
2014-08-14 06:52:40 ----A---- C:\windows\system32\shell32.dll
2014-08-14 06:52:40 ----A---- C:\windows\system32\aeinv.dll
2014-08-14 06:52:36 ----A---- C:\windows\system32\KBDYAK.DLL
2014-08-14 06:52:36 ----A---- C:\windows\system32\KBDTAT.DLL
2014-08-14 06:52:36 ----A---- C:\windows\system32\KBDRU1.DLL
2014-08-14 06:52:36 ----A---- C:\windows\system32\KBDRU.DLL
2014-08-14 06:52:36 ----A---- C:\windows\system32\KBDBASH.DLL
2014-08-06 17:39:12 ----A---- C:\windows\system32\drivers\aswHwid.sys
2014-08-06 17:38:58 ----A---- C:\windows\avastSS.scr

======List of files/folders modified in the last 1 month======

2014-09-04 20:23:18 ----D---- C:\windows\Temp
2014-09-04 20:19:46 ----D---- C:\windows\Prefetch
2014-09-04 20:19:15 ----D---- C:\windows\system32\config
2014-09-04 20:17:08 ----D---- C:\windows\System32
2014-09-04 20:09:54 ----D---- C:\windows\inf
2014-09-04 20:09:36 ----D---- C:\Windows
2014-09-04 19:52:37 ----D---- C:\windows\system32\catroot
2014-09-04 16:14:44 ----D---- C:\windows\rescache
2014-09-04 15:08:43 ----SHD---- C:\System Volume Information
2014-09-04 12:27:23 ----D---- C:\windows\SoftwareDistribution
2014-09-04 12:22:21 ----D---- C:\windows\Tasks
2014-09-04 12:22:21 ----D---- C:\windows\system32\wfp
2014-09-04 12:22:20 ----D---- C:\windows\system32\wbem
2014-09-04 12:21:45 ----D---- C:\windows\system32\Tasks
2014-09-04 12:21:44 ----D---- C:\windows\system32\DriverStore
2014-09-04 12:21:44 ----D---- C:\windows\system32\CodeIntegrity
2014-09-04 12:21:44 ----D---- C:\windows\system32\catroot2
2014-09-04 12:21:42 ----D---- C:\ProgramData\WinClon
2014-09-04 12:21:41 ----D---- C:\windows\registration
2014-09-04 12:21:31 ----D---- C:\Program Files
2014-09-04 11:51:47 ----HD---- C:\Program Files\Temp
2014-09-04 11:51:38 ----HD---- C:\Program Files\InstallShield Installation Information
2014-09-04 11:51:35 ----D---- C:\windows\system32\drivers
2014-09-04 11:44:28 ----A---- C:\windows\system32\PerfStringBackup.INI
2014-09-04 11:21:13 ----D---- C:\windows\Microsoft.NET
2014-09-04 11:21:12 ----RSD---- C:\windows\assembly
2014-09-04 10:18:55 ----D---- C:\windows\Panther
2014-09-04 10:18:54 ----D---- C:\windows\Minidump
2014-09-04 10:18:54 ----D---- C:\windows\Logs
2014-09-04 10:18:54 ----D---- C:\windows\debug
2014-09-04 10:09:20 ----SHD---- C:\windows\Installer
2014-09-04 10:09:18 ----SHD---- C:\Config.Msi
2014-09-04 09:45:43 ----HD---- C:\ProgramData
2014-09-04 09:33:15 ----D---- C:\windows\winsxs
2014-09-04 09:33:07 ----D---- C:\windows\system32\cs-CZ
2014-09-04 08:49:35 ----D---- C:\Program Files\Common Files
2014-09-04 08:44:50 ----A---- C:\windows\system32\FlashPlayerApp.exe
2014-09-04 08:16:24 ----D---- C:\windows\PolicyDefinitions
2014-09-04 08:16:24 ----D---- C:\windows\ehome
2014-09-04 08:16:24 ----D---- C:\Program Files\DVD Maker
2014-09-04 08:14:37 ----D---- C:\windows\system32\migration
2014-09-04 07:54:36 ----D---- C:\Program Files\Google
2014-09-03 22:49:29 ----D---- C:\windows\system32\drivers\etc
2014-09-03 22:49:25 ----D---- C:\ProgramData\Microsoft Help
2014-09-03 22:49:25 ----D---- C:\Program Files\Common Files\microsoft shared
2014-09-03 18:47:33 ----D---- C:\windows\system32\en-US
2014-09-03 18:47:32 ----D---- C:\windows\system32\drivers\en-US
2014-09-03 00:32:34 ----D---- C:\Program Files\Windows Sidebar
2014-09-03 00:32:33 ----D---- C:\Program Files\Internet Explorer
2014-09-02 23:20:45 ----RSD---- C:\windows\Fonts
2014-09-02 23:20:01 ----D---- C:\Program Files\Common Files\DESIGNER
2014-09-02 23:19:51 ----D---- C:\Program Files\Microsoft.NET
2014-09-02 23:17:37 ----D---- C:\windows\ShellNew
2014-09-02 23:16:45 ----SD---- C:\ProgramData\Microsoft
2014-09-02 22:37:33 ----D---- C:\Program Files\Microsoft
2014-09-02 21:40:32 ----D---- C:\Program Files\Sony
2014-09-02 21:15:50 ----D---- C:\Program Files\Microsoft Office 15
2014-09-02 20:58:53 ----D---- C:\Program Files\WinRAR
2014-09-02 10:13:01 ----D---- C:\ProgramData\Sony Mobile
2014-09-02 10:12:59 ----D---- C:\Program Files\Sony Mobile
2014-09-02 10:00:53 ----D---- C:\Program Files\Samsung
2014-09-02 09:28:39 ----D---- C:\windows\system32\wdi
2014-09-02 08:36:56 ----DC---- C:\windows\system32\DRVSTORE
2014-09-02 07:26:03 ----D---- C:\Program Files\Fotolab
2014-09-01 22:37:22 ----D---- C:\windows\system32\drivers\UMDF
2014-09-01 22:37:21 ----D---- C:\Program Files\Atheros Client Installation Program
2014-09-01 21:14:11 ----D---- C:\Users\Mattu\AppData\Roaming\ArcSoft
2014-08-29 17:16:10 ----D---- C:\Program Files\Common Files\Symantec Shared
2014-08-25 06:53:44 ----N---- C:\windows\system32\MpSigStub.exe
2014-08-18 13:37:19 ----D---- C:\windows\system32\FxsTmp
2014-08-14 15:03:51 ----SD---- C:\windows\system32\CompatTel
2014-08-14 07:20:32 ----D---- C:\windows\system32\MRT
2014-08-14 07:15:54 ----A---- C:\windows\system32\MRT.exe
2014-08-12 21:35:42 ----SD---- C:\Users\Mattu\AppData\Roaming\Microsoft
2014-08-06 17:38:57 ----A---- C:\windows\system32\aswBoot.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\windows\system32\drivers\aswRvrt.sys [2014-08-06 49944]
R0 aswVmm;avast! VM Monitor; C:\windows\system32\drivers\aswVmm.sys [2014-08-06 192352]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2009-10-13 331288]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 aswKbd;aswKbd; C:\windows\system32\drivers\aswKbd.sys [2014-08-06 26136]
R1 aswRdr;aswRdr; C:\windows\system32\drivers\aswRdr2.sys [2014-08-06 81768]
R1 aswSnx;aswSnx; C:\windows\system32\drivers\aswSnx.sys [2014-08-06 779536]
R1 aswSP;aswSP; C:\windows\system32\drivers\aswSP.sys [2014-08-06 414520]
R1 aswTdi;avast! Network Shield Support; C:\windows\system32\drivers\aswTdi.sys [2014-01-22 56080]
R1 CFRMD;CFRMD; C:\windows\system32\DRIVERS\CFRMD.sys [2010-12-09 64608]
R1 CFRPD;CFRPD; C:\windows\system32\DRIVERS\CFRPD.sys [2010-12-09 33744]
R1 SABI;SAMSUNG Kernel Driver For Windows 7; \??\C:\windows\system32\Drivers\SABI.sys [2010-03-31 10752]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 aswHwid;avast! HardwareID; C:\windows\system32\drivers\aswHwid.sys [2014-08-06 24184]
R2 aswMonFlt;aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [2014-08-06 67824]
R2 aswStm;aswStm; C:\windows\system32\drivers\aswStm.sys [2014-08-06 71944]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athr.sys [2011-12-13 2228224]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2011-02-11 9036800]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI; C:\windows\system32\drivers\IntcHdmi.sys [2009-07-10 122880]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2010-02-26 242992]
S2 Parvdm;Parvdm; C:\windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 ggflt;SEMC USB Flash Driver Filter; C:\windows\system32\DRIVERS\ggflt.sys [2014-02-09 12400]
S3 ggsemc;SEMC USB Flash Driver; C:\windows\system32\DRIVERS\ggsemc.sys [2014-02-09 25200]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHDA.sys []
S3 OlyCamComm;OLYMPUS USB Communication Device; C:\windows\system32\DRIVERS\OlyCamComm.sys [2009-09-14 21648]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-14 139776]
S3 rtport;rtport; \??\C:\windows\system32\drivers\rtport.sys [2010-09-15 15656]
S3 s1039bus;Sony Ericsson Device 1039 driver (WDM); C:\windows\system32\DRIVERS\s1039bus.sys [2010-03-15 98672]
S3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter; C:\windows\system32\DRIVERS\s1039mdfl.sys [2010-03-15 14960]
S3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver; C:\windows\system32\DRIVERS\s1039mdm.sys [2010-03-15 124016]
S3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM); C:\windows\system32\DRIVERS\s1039mgmt.sys [2010-03-15 117872]
S3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS); C:\windows\system32\DRIVERS\s1039nd5.sys [2010-03-15 25456]
S3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface; C:\windows\system32\DRIVERS\s1039obex.sys [2010-03-15 113904]
S3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM); C:\windows\system32\DRIVERS\s1039unic.sys [2010-03-15 123504]
S3 sisagp;Filtr SIS sběrnice AGP; C:\windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 usbbus;LGE Mobile Composite USB Device; C:\windows\system32\DRIVERS\lgusbbus.sys [2008-11-19 13056]
S3 UsbDiag;LGE Mobile USB Serial Port; C:\windows\system32\DRIVERS\lgusbdiag.sys [2008-11-19 19968]
S3 USBModem;LGE Mobile USB Modem; C:\windows\system32\DRIVERS\lgusbmodem.sys [2008-11-19 24832]
S3 viaagp;Filtr VIA sběrnice AGP; C:\windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;Sony sa0104 ADB Interface; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-08-06 50344]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\windows\system32\svchost.exe [2009-07-14 20992]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo.exe [2009-07-07 247152]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\windows\system32\svchost.exe [2009-07-14 20992]
S2 Cleaner_Validator;COMODO System - Cleaner Service; C:\Program Files\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe [2010-12-09 305600]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-01-29 135664]
S3 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-01-29 135664]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-21 194032]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2014-07-25 108032]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2013-04-23 150600]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2013-04-23 4846168]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2011-01-30 1343400]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-04 262320]
S4 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 Garmin Core Update Service;Garmin Core Update Service; C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [2014-07-23 438616]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Po druhém restartu už by to mělo být lepší. Dvouklikem na soubor C:\Program Files\trend micro\Mattu.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:

R3 - URLSearchHook: (no name) - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - (no file)
R3 - URLSearchHook: (no name) - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - (no file)
R3 - URLSearchHook: (no name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - (no file)
R3 - URLSearchHook: (no name) - {00000000-6E41-4FD3-8538-502F5495E5FC} - (no file)
R3 - URLSearchHook: (no name) - {8ba2cfef-a1bc-4964-aadc-33be1ae5a33c} - (no file)
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - (no file)
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - (no file)

Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.

Vyhodí mi hlášku:

Spusťte HJT jako administrator.

Maká to lépe, děkuji. Ale furt to není ono. Ovšem nevím, jak to makalo dříve, protože tento notebook vidím prvně. Spouštění OS jede parádně. Ale po přihlášení uživatele to je horší, především co se týče pohybu ve složkách (hlavně Downloads).