VIRY.CZ

Zdravím, chtěla bych požádat o pomoc. Nevím, zda jde o vir či o špatné nastavení, nicméně jde o náhlou změnu, kdy mi přestaly fungovat online videa (např. při sledování seriálů se po minutě video zasekne, gif obrázky se nepohybují) a celkově se mi zdá, že je počítač pomalejší a problémovější (nešly např. spustit instalátory adobe flash či shockwave). Bohužel nešly ani spustit programy RSIT nebo FRST pro vytvoření požadovaného logu a tak mi přítel poradil nahodit sel zatím aspoň HijackThis log, který mi udělat šel.

Předem děkuji za jakoukoliv pomoc!

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:53:40, on 20. 9. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.16537)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files (x86)\Lenovo\Intelligent Touchpad\IntelligentTouchpad.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
C:\Program Files (x86)\PodoWeb\bin\PodoWeb.BrowserAdapter.exe
C:\Users\Michaela\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo13.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - (no file)
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: PodoWeb - {980b8a8f-ea0b-4c24-a2e9-70635e2502e9} - C:\Program Files (x86)\PodoWeb\PodoWebbho.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [Dolby Home Theater v4] "C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [IntellingentTouchpad] C:\Program Files (x86)\Lenovo\Intelligent Touchpad\IntelligentTouchpad.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [LiveSupport] "C:\Program Files (x86)\LiveSupport\LiveSupport.exe" /noshow /log
O4 - HKCU\..\Run: [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Michaela\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Michaela\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Michaela\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk = C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://www.samsungsetup.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{529563AA-8B38-49AC-9470-6491A9100AFC}: NameServer = 85.135.32.100,62.129.50.20
O17 - HKLM\System\CS1\Services\Tcpip\..\{529563AA-8B38-49AC-9470-6491A9100AFC}: NameServer = 85.135.32.100,62.129.50.20
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: c:\windows\syswow64\nvinit.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @C:\windows\system32\CxAudMsg64.exe,-100 (CxAudMsg) - Unknown owner - C:\windows\system32\CxAudMsg64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Unknown owner - C:\Program Files\Intel\WiFi\bin\EvtEng.exe (file missing)
O23 - Service: ExpressCache - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Rapid Start Technology Service (irstrtsv) - Intel Corporation - C:\windows\SysWOW64\irstrtsv.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Lenovo Smart Update Service - Lenovo - C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Unknown owner - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: ScsiAccess - Unknown owner - C:\Program Files (x86)\Photodex\ProShow Gold\ScsiAccess.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: Update PodoWeb - Unknown owner - C:\Program Files (x86)\PodoWeb\updatePodoWeb.exe
O23 - Service: Util PodoWeb - Unknown owner - C:\Program Files (x86)\PodoWeb\bin\utilPodoWeb.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Unknown owner - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (file missing)

--
End of file - 11705 bytes

Zdravím!
Dejte log RSIT: http://forum.viry.cz/viewtopic.php?f=13&t=130786 , nebo FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 .

Chtěla jsem, ale pokaždé, co se to pokouším podle Vašeho návodu spustit mi to vyhazuje hlášku, že tato aplikace nemůže běžet na mém počítači. A to jsem dala vypnout štíty (které to napoprvé zakazovaly spustit) a spouštím jako správce.

Omlouvám se za nezkušenost, ale nevím jak se přes tuto chybovou hlášku dostat.

Který? Jeden z nich, nebo oba?

Zkoušela jsem oba. Oba stejný problém.

Tak změna. Po několika restartech a vypnutí všech možných štítů se mi podařilo nejen spustit RSIT (log teda přikládám níže), ale i Adobe Flash a Shockwave, takže videa (zdá se mi) jedou už bez zaseknutí - prozatím. Pořád mě ale znervozňují některé další věci jako třeba, že se některé stránky nenačtou hned (hlasí problém, že nelze načíst a při obnově v pořádku - a to jak internetové bankovnictví, tak i toto fórum atp.) a taky, že některé "operace" na internetu požadují místo provedení operace stažení neznámého souboru - například když jsem klikla na "Odpovědět" na tomto fóru, tak to po mě chtělo stažení nějakého souboru, po obnovení stránky už nikoliv a vše bylo ok.


Logfile of random's system information tool 1.10 (written by random/random)
Run by Michaela at 2014-09-20 14:51:25
Microsoft Windows 8
System drive C: has 556 GB (61%) free of 905 GB
Total RAM: 8050 MB (37% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:51:28, on 20. 9. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.16537)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files (x86)\Lenovo\Intelligent Touchpad\IntelligentTouchpad.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\PodoWeb\bin\PodoWeb.BrowserAdapter.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
C:\Program Files\trend micro\Michaela.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo13.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - (no file)
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: PodoWeb - {980b8a8f-ea0b-4c24-a2e9-70635e2502e9} - C:\Program Files (x86)\PodoWeb\PodoWebbho.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [Dolby Home Theater v4] "C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [IntellingentTouchpad] C:\Program Files (x86)\Lenovo\Intelligent Touchpad\IntelligentTouchpad.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [LiveSupport] "C:\Program Files (x86)\LiveSupport\LiveSupport.exe" /noshow /log
O4 - HKCU\..\Run: [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Michaela\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Michaela\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Michaela\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk = C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://www.samsungsetup.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{529563AA-8B38-49AC-9470-6491A9100AFC}: NameServer = 85.135.32.100,62.129.50.20
O17 - HKLM\System\CS1\Services\Tcpip\..\{529563AA-8B38-49AC-9470-6491A9100AFC}: NameServer = 85.135.32.100,62.129.50.20
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: c:\windows\syswow64\nvinit.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @C:\windows\system32\CxAudMsg64.exe,-100 (CxAudMsg) - Unknown owner - C:\windows\system32\CxAudMsg64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Unknown owner - C:\Program Files\Intel\WiFi\bin\EvtEng.exe (file missing)
O23 - Service: ExpressCache - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Rapid Start Technology Service (irstrtsv) - Intel Corporation - C:\windows\SysWOW64\irstrtsv.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Lenovo Smart Update Service - Lenovo - C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Unknown owner - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: ScsiAccess - Unknown owner - C:\Program Files (x86)\Photodex\ProShow Gold\ScsiAccess.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: Update PodoWeb - Unknown owner - C:\Program Files (x86)\PodoWeb\updatePodoWeb.exe
O23 - Service: Util PodoWeb - Unknown owner - C:\Program Files (x86)\PodoWeb\bin\utilPodoWeb.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Unknown owner - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (file missing)

--
End of file - 11706 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\nvvsvc.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k LocalService
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\windows\system32\CxAudMsg64.exe
"C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe"
dashost.exe {6afd2c51-47d8-424b-9e671117c3190978}
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
C:\windows\SysWOW64\irstrtsv.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe"
"C:\Program Files (x86)\Photodex\ProShow Gold\ScsiAccess.exe"
C:\windows\system32\svchost.exe -k imgsvc
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-d8c505be-5bb7-4b74-9081-d168b6f1a620 -SystemEventPortName:HostProcess-4a8e3688-5e94-49cf-9144-6b17952df304 -IoCancelEventPortName:HostProcess-0e81763a-7cb0-485f-8a39-981a4de9af9f -NonStateChangingEventPortName:HostProcess-73564aff-2a29-4d6a-b540-3f93c00bdd80 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:0f966c7b-e086-4243-b5f0-9c7d471a0116 -DeviceGroupId:WudfDefaultDevicePool
C:\windows\System32\alg.exe
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Origin Games\FIFA 15 DEMO\fifa15_demo.exe"
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\System32\WinLogon.exe -SpecialSession
-hiberboot
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\windows\system32\nvvsvc.exe -session
taskhostex.exe
C:\windows\Explorer.EXE
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE" /tsr
"C:\Program Files (x86)\Lenovo\Intelligent Touchpad\IntelligentTouchpad.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
"C:\Program Files (x86)\PodoWeb\updatePodoWeb.exe"
"C:\Program Files (x86)\PodoWeb\bin\utilPodoWeb.exe"
/c 3974689e-a616-4fb3-baec-7f681348841f /i 8d0262ad-3aa7-416e-bf66-3560e5dfe175 /f c8006be9-567d-46ab-bac5-146187be617e /z "n=PodoWeb&is=smdvcz&dpt=20"
/c 3974689e-a616-4fb3-baec-7f681348841f /i 8d0262ad-3aa7-416e-bf66-3560e5dfe175 /f c8006be9-567d-46ab-bac5-146187be617e /z "n=PodoWeb&is=smdvcz&dpt=20"
"C:\Program Files (x86)\PodoWeb\bin\PodoWeb.PurBrowse64.exe" /l false /s false /c "PodoWeb" /t "C:\Program Files (x86)\PodoWeb\bin\TEMP" /i "http://apipodowebnet-a.akamaihd.net/gsr ... 0000000000" /d {00c97d86-accb-4288-9972-6d929c1fe93a}Gw64 /p 3974689e-a616-4fb3-baec-7f681348841f:chrome /h cdn.sharedaddomain.com,cdn.sharedaddomain2.com 0 3 "C:\Program Files (x86)\PodoWeb\bin\bau" true
\??\C:\windows\system32\conhost.exe 0x4
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
taskhost.exe $(Arg0)

"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -osint -url "https://get3.adobe.com/flashplayer/comp ... &appid=200"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=1088.14167570.565110222 "C:\windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 1088 "\\.\pipe\gecko-crash-server-pipe.1088" plugin
"C:\windows\SYSTEM32\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe" --proxy-stub-channel=Flash1604.5C1A6EE8.6858 --host-broker-channel=Flash1604.5C1A6EE8.9751 --host-pid=1604 --host-npapi-version=27 --plugin-path="C:\windows\SYSTEM32\Macromed\Flash\NPSWF32_15_0_0_152.dll"
"C:\windows\SYSTEM32\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe" --channel=5012.00FAF57C.814939332 --proxy-stub-channel=Flash1604.5C1A6EE8.6858 --plugin-path="C:\windows\SYSTEM32\Macromed\Flash\NPSWF32_15_0_0_152.dll" --host-npapi-version=27 --type=renderer
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe40_ Global\UsGthrCtrlFltPipeMssGthrPipe40 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\windows\system32\SearchFilterHost.exe" 0 576 580 588 65536 584
"C:\Users\Michaela\Desktop\RSITx64(4).exe"

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\windows\tasks\Norton Security Scan for Michaela.job - C:\PROGRA~2\NORTON~2\Engine\410~1.28\Nss.exe /scan-quick /scheduled
C:\windows\tasks\WinThruster_DEFAULT.job - C:\Program Files (x86)\WinThruster\WinThruster.exe -default
C:\windows\tasks\WinThruster_UPDATES.job - C:\Program Files (x86)\WinThruster\WinThruster.exe -updatecheck

=========Mozilla firefox=========

ProfilePath - C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\f4yd392a.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.152 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@photodex.com/PhotodexPresenter]
"Description"=Photodex Presenter Plugin
"Path"=C:\Program Files (x86)\Photodex Presenter\npPxPlay.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.152 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL


C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\f4yd392a.default\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-08-07 612248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-08-07 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{980b8a8f-ea0b-4c24-a2e9-70635e2502e9}]
PodoWeb - C:\Program Files (x86)\PodoWeb\PodoWebbho.dll [2014-09-18 250136]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2012-06-29 380544]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2012-06-15 887968]
"ForteConfig"=C:\Program Files\Conexant\ForteConfig\fmapp.exe [2010-10-26 49056]
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SACpl.exe [2012-06-13 1647616]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2012-09-21 17079376]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2012-09-21 191568]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2012-12-14 172144]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2012-12-14 399984]
"Persistence"=C:\windows\system32\igfxpers.exe [2012-12-14 441968]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"LiveSupport"=C:\Program Files (x86)\LiveSupport\LiveSupport.exe /noshow /log []
"EA Core"=C:\Program Files (x86)\Electronic Arts\EADM\Core.exe -silent []
"EADM"=C:\Program Files (x86)\Origin\Origin.exe [2014-09-15 3600216]
"Spotify Web Helper"=C:\Users\Michaela\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2014-02-27 1171968]
"cz.seznam.software.autoupdate"=C:\Users\Michaela\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Michaela\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Dolby Home Theater v4"=C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [2012-07-26 508656]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-07-27 136488]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [2012-07-27 167024]
"IntellingentTouchpad"=C:\Program Files (x86)\Lenovo\Intelligent Touchpad\IntelligentTouchpad.exe [2012-07-23 673336]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-07 4085896]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]

C:\Users\Michaela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk - C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2012-12-14 442880]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-09-20 14:51:27 ----D---- C:\Program Files\trend micro
2014-09-20 14:51:25 ----D---- C:\rsit
2014-09-19 14:21:08 ----D---- C:\windows\SYSWOW64\Adobe
2014-09-19 00:09:02 ----D---- C:\ProgramData\Package Cache
2014-09-18 21:08:55 ----D---- C:\Program Files (x86)\Electronic Arts Inc
2014-09-18 21:07:40 ----A---- C:\windows\system32\drivers\{00c97d86-accb-4288-9972-6d929c1fe93a}Gw64.sys
2014-09-18 21:03:32 ----A---- C:\windows\system32\drivers\dtsoftbus01.sys
2014-09-18 21:03:12 ----D---- C:\Program Files (x86)\PodoWeb
2014-09-18 20:58:10 ----A---- C:\windows\AdobeFlashPlayerUpdate.exe
2014-09-13 17:01:13 ----D---- C:\windows\system32\drivers\NSSx64
2014-09-13 17:01:13 ----D---- C:\Program Files (x86)\Norton Security Scan
2014-09-13 17:01:09 ----D---- C:\ProgramData\Norton
2014-09-13 17:01:07 ----D---- C:\ProgramData\NortonInstaller
2014-09-13 17:01:07 ----D---- C:\Program Files (x86)\NortonInstaller
2014-09-13 17:00:27 ----D---- C:\Users\Michaela\AppData\Roaming\0V1L2Z2Z1T1I1L1T
2014-09-13 13:25:54 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-09-11 23:26:09 ----A---- C:\windows\system32\aepdu.dll
2014-09-11 23:26:09 ----A---- C:\windows\system32\aeinv.dll
2014-09-11 09:23:44 ----A---- C:\windows\SYSWOW64\msrating.dll
2014-09-11 09:23:44 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2014-09-11 09:23:44 ----A---- C:\windows\system32\msrating.dll
2014-09-11 09:23:44 ----A---- C:\windows\system32\mshtmled.dll
2014-09-11 09:23:43 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2014-09-11 09:23:43 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2014-09-11 09:23:43 ----A---- C:\windows\system32\ie4uinit.exe
2014-09-11 09:23:43 ----A---- C:\windows\system32\dxtrans.dll
2014-09-11 09:23:43 ----A---- C:\windows\system32\dxtmsft.dll
2014-09-11 09:23:42 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2014-09-11 09:23:42 ----A---- C:\windows\SYSWOW64\iesetup.dll
2014-09-11 09:23:42 ----A---- C:\windows\system32\msfeeds.dll
2014-09-11 09:23:42 ----A---- C:\windows\system32\iesetup.dll
2014-09-11 09:23:41 ----A---- C:\windows\SYSWOW64\urlmon.dll
2014-09-11 09:23:41 ----A---- C:\windows\SYSWOW64\jscript.dll
2014-09-11 09:23:41 ----A---- C:\windows\SYSWOW64\iesysprep.dll
2014-09-11 09:23:41 ----A---- C:\windows\SYSWOW64\iernonce.dll
2014-09-11 09:23:41 ----A---- C:\windows\system32\urlmon.dll
2014-09-11 09:23:41 ----A---- C:\windows\system32\jscript.dll
2014-09-11 09:23:41 ----A---- C:\windows\system32\iernonce.dll
2014-09-11 09:23:40 ----A---- C:\windows\system32\jscript9.dll
2014-09-11 09:23:40 ----A---- C:\windows\system32\iesysprep.dll
2014-09-11 09:23:39 ----A---- C:\windows\SYSWOW64\UXInit.dll
2014-09-11 09:23:39 ----A---- C:\windows\SYSWOW64\jscript9.dll
2014-09-11 09:23:39 ----A---- C:\windows\system32\UXInit.dll
2014-09-11 09:23:39 ----A---- C:\windows\system32\iertutil.dll
2014-09-11 09:23:38 ----A---- C:\windows\SYSWOW64\uxtheme.dll
2014-09-11 09:23:38 ----A---- C:\windows\SYSWOW64\iertutil.dll
2014-09-11 09:23:37 ----A---- C:\windows\system32\uxtheme.dll
2014-09-11 09:23:36 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2014-09-11 09:23:36 ----A---- C:\windows\system32\iedkcs32.dll
2014-09-11 09:23:35 ----A---- C:\windows\SYSWOW64\wininet.dll
2014-09-11 09:23:35 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2014-09-11 09:23:35 ----A---- C:\windows\system32\wininet.dll
2014-09-11 09:23:35 ----A---- C:\windows\system32\jsproxy.dll
2014-09-11 09:23:34 ----A---- C:\windows\SYSWOW64\ieframe.dll
2014-09-11 09:23:32 ----A---- C:\windows\system32\ieframe.dll
2014-09-11 09:23:23 ----A---- C:\windows\system32\mshtml.dll
2014-09-11 09:23:18 ----A---- C:\windows\SYSWOW64\mshtml.dll
2014-09-11 09:12:07 ----A---- C:\windows\SYSWOW64\msvcp120_clr0400.dll
2014-09-11 09:12:06 ----A---- C:\windows\system32\msvcp120_clr0400.dll
2014-09-11 09:12:01 ----A---- C:\windows\system32\schedsvc.dll
2014-09-11 09:11:58 ----A---- C:\windows\SYSWOW64\wudriver.dll
2014-09-11 09:11:58 ----A---- C:\windows\SYSWOW64\wuapi.dll
2014-09-11 09:11:58 ----A---- C:\windows\system32\WUSettingsProvider.dll
2014-09-11 09:11:58 ----A---- C:\windows\system32\wudriver.dll
2014-09-11 09:11:58 ----A---- C:\windows\system32\wucltux.dll
2014-09-11 09:11:58 ----A---- C:\windows\system32\wuaueng.dll
2014-09-11 09:11:58 ----A---- C:\windows\system32\wuauclt.exe
2014-09-11 09:11:58 ----A---- C:\windows\system32\wuapi.dll
2014-09-11 09:11:58 ----A---- C:\windows\system32\storewuauth.dll
2014-09-11 09:11:57 ----A---- C:\windows\SYSWOW64\wuwebv.dll
2014-09-11 09:11:57 ----A---- C:\windows\SYSWOW64\wuapp.exe
2014-09-11 09:11:57 ----A---- C:\windows\system32\wuwebv.dll
2014-09-11 09:11:57 ----A---- C:\windows\system32\wuapp.exe
2014-09-11 09:11:57 ----A---- C:\windows\system32\wuaext.dll
2014-09-11 09:11:48 ----A---- C:\windows\SYSWOW64\msvcr120_clr0400.dll
2014-09-11 09:11:48 ----A---- C:\windows\system32\msvcr120_clr0400.dll
2014-09-11 09:11:26 ----A---- C:\windows\system32\tssdisai.dll
2014-09-11 09:11:26 ----A---- C:\windows\system32\poqexec.exe
2014-08-29 20:58:12 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2014-08-27 21:38:27 ----A---- C:\windows\system32\drivers\hdaudbus.sys
2014-08-27 21:36:43 ----A---- C:\windows\SYSWOW64\TsWpfWrp.exe
2014-08-27 21:36:43 ----A---- C:\windows\system32\TsWpfWrp.exe
2014-08-27 21:32:34 ----A---- C:\windows\SYSWOW64\rpcrt4.dll
2014-08-27 21:32:34 ----A---- C:\windows\system32\rpcrt4.dll
2014-08-27 21:32:33 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2014-08-27 21:32:32 ----A---- C:\windows\system32\cdd.dll
2014-08-27 21:32:27 ----A---- C:\windows\system32\twinui.dll
2014-08-27 21:32:25 ----A---- C:\windows\SYSWOW64\twinui.dll
2014-08-27 21:32:24 ----A---- C:\windows\SYSWOW64\msi.dll
2014-08-27 21:32:24 ----A---- C:\windows\system32\msi.dll
2014-08-27 21:32:24 ----A---- C:\windows\system32\authui.dll
2014-08-27 21:32:24 ----A---- C:\windows\system32\actxprxy.dll
2014-08-27 21:32:23 ----A---- C:\windows\SYSWOW64\msihnd.dll
2014-08-27 21:32:23 ----A---- C:\windows\SYSWOW64\authui.dll
2014-08-27 21:32:23 ----A---- C:\windows\SYSWOW64\actxprxy.dll
2014-08-27 21:32:23 ----A---- C:\windows\system32\msihnd.dll
2014-08-27 21:32:23 ----A---- C:\windows\system32\consent.exe
2014-08-27 21:31:37 ----A---- C:\windows\system32\win32k.sys
2014-08-27 21:31:36 ----A---- C:\windows\SYSWOW64\gdi32.dll
2014-08-27 21:31:36 ----A---- C:\windows\system32\gdi32.dll
2014-08-27 21:31:34 ----A---- C:\windows\system32\drivers\mountmgr.sys
2014-08-27 21:31:34 ----A---- C:\windows\system32\drivers\Classpnp.sys
2014-08-27 21:16:44 ----A---- C:\windows\SYSWOW64\Access.dat
2014-08-27 21:11:14 ----D---- C:\Users\Michaela\AppData\Roaming\Tunngle
2014-08-27 21:11:13 ----A---- C:\windows\system32\drivers\tap0901t.sys
2014-08-27 20:31:27 ----D---- C:\ProgramData\Codemasters

======List of files/folders modified in the last 1 month======

2014-09-20 14:51:27 ----D---- C:\Program Files
2014-09-20 14:45:06 ----D---- C:\windows\Prefetch
2014-09-20 14:44:58 ----SHD---- C:\windows\Installer
2014-09-20 14:44:58 ----D---- C:\windows\Temp
2014-09-20 14:40:36 ----D---- C:\Users\Michaela\AppData\Roaming\vlc
2014-09-20 13:00:00 ----D---- C:\windows\system32\sru
2014-09-20 12:28:23 ----D---- C:\windows\Microsoft.NET
2014-09-20 10:32:18 ----A---- C:\windows\win.ini
2014-09-20 10:25:34 ----AD---- C:\windows\System32
2014-09-20 06:12:22 ----AD---- C:\Windows
2014-09-19 23:29:24 ----D---- C:\windows\debug
2014-09-19 14:21:08 ----D---- C:\windows\SysWOW64
2014-09-19 01:56:05 ----D---- C:\ProgramData\Origin
2014-09-19 01:46:32 ----D---- C:\Program Files (x86)\Origin
2014-09-19 00:52:12 ----D---- C:\HRY
2014-09-19 00:50:57 ----D---- C:\windows\Inf
2014-09-19 00:50:57 ----A---- C:\windows\system32\PerfStringBackup.INI
2014-09-19 00:46:39 ----A---- C:\windows\SYSWOW64\log.txt
2014-09-19 00:45:19 ----D---- C:\windows\system32\catroot2
2014-09-19 00:42:57 ----D---- C:\windows\system32\catroot
2014-09-19 00:09:05 ----D---- C:\Program Files (x86)\Common Files
2014-09-19 00:09:02 ----HD---- C:\ProgramData
2014-09-18 21:45:29 ----D---- C:\Program Files (x86)\Origin Games
2014-09-18 21:08:55 ----RD---- C:\Program Files (x86)
2014-09-18 21:07:40 ----D---- C:\windows\system32\Drivers
2014-09-18 21:03:56 ----D---- C:\Users\Michaela\AppData\Roaming\Seznam.cz
2014-09-18 21:03:53 ----D---- C:\Program Files (x86)\Seznam.cz
2014-09-18 21:03:32 ----D---- C:\windows\system32\DriverStore
2014-09-18 21:03:32 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2014-09-18 14:27:54 ----SHD---- C:\System Volume Information
2014-09-16 18:33:28 ----HD---- C:\Program Files\WindowsApps
2014-09-16 18:33:28 ----D---- C:\windows\AUInstallAgent
2014-09-15 23:59:52 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-15 23:39:27 ----D---- C:\Users\Michaela\AppData\Roaming\Origin
2014-09-15 13:59:56 ----D---- C:\windows\system32\config
2014-09-15 08:59:33 ----D---- C:\windows\system32\NDF
2014-09-13 20:44:11 ----D---- C:\windows\rescache
2014-09-13 20:34:38 ----RSD---- C:\windows\assembly
2014-09-13 19:08:54 ----D---- C:\windows\CbsTemp
2014-09-13 19:08:53 ----SD---- C:\windows\system32\CompatTel
2014-09-13 19:08:52 ----D---- C:\windows\WinSxS
2014-09-13 19:08:45 ----D---- C:\windows\system32\MRT
2014-09-13 19:04:27 ----A---- C:\windows\system32\MRT.exe
2014-09-13 17:01:18 ----D---- C:\windows\Tasks
2014-09-13 17:01:18 ----D---- C:\windows\system32\Tasks
2014-09-11 23:24:46 ----D---- C:\Program Files (x86)\WinRAR
2014-09-11 23:24:46 ----D---- C:\Program Files (x86)\SugarSync
2014-09-11 23:24:46 ----D---- C:\Program Files (x86)\SamsungPrinterLiveUpdateInstaller
2014-09-11 23:24:46 ----D---- C:\Program Files (x86)\Photodex Presenter
2014-09-11 22:50:56 ----D---- C:\Program Files (x86)\Internet Explorer
2014-09-11 22:50:55 ----D---- C:\Program Files\Internet Explorer
2014-09-11 22:50:02 ----D---- C:\ProgramData\Microsoft Help
2014-09-02 22:42:47 ----D---- C:\Users\Michaela\AppData\Roaming\Skype
2014-09-01 19:15:14 ----D---- C:\Users\Michaela\AppData\Roaming\BSplayer
2014-08-29 20:55:28 ----D---- C:\windows\SYSWOW64\en-US
2014-08-29 20:55:28 ----D---- C:\windows\SYSWOW64\cs-CZ
2014-08-29 20:55:28 ----D---- C:\windows\system32\en-US
2014-08-29 20:55:28 ----D---- C:\windows\system32\cs-CZ
2014-08-29 20:55:22 ----RD---- C:\windows\ToastData
2014-08-27 21:23:09 ----RSD---- C:\windows\Fonts

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswKbd;aswKbd; C:\windows\system32\drivers\aswKbd.sys [2013-08-30 22600]
R0 aswRvrt;avast! Revert; C:\windows\system32\drivers\aswRvrt.sys [2014-08-07 65776]
R0 aswVmm;avast! VM Monitor; C:\windows\system32\drivers\aswVmm.sys [2014-08-07 224896]
R0 excsd;ExpressCache Storage Filter Driver; C:\windows\system32\DRIVERS\excsd.sys [2012-03-30 95024]
R0 iaStorA;iaStorA; C:\windows\System32\drivers\iaStorA.sys [2012-07-09 645952]
R0 LHDmgr;LHDmgr; C:\windows\System32\DRIVERS\LhdX64.sys [2012-09-21 39008]
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys [2012-12-03 30056]
R1 aswRdr;aswRdr; C:\windows\system32\drivers\aswRdr2.sys [2014-08-07 93568]
R1 aswSnx;aswSnx; C:\windows\system32\drivers\aswSnx.sys [2014-08-07 1041168]
R1 aswSP;aswSP; C:\windows\system32\drivers\aswSP.sys [2014-08-07 427360]
R1 dtsoftbus01;@oem33.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\windows\System32\drivers\dtsoftbus01.sys [2014-09-18 283064]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2014-09-14 487216]
R1 excfs;ExpressCache File System Filter Driver; C:\windows\system32\DRIVERS\excfs.sys [2012-03-30 23344]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\windows\system32\DRIVERS\vwififlt.sys [2012-07-26 64000]
R2 aswHwid;avast! HardwareID; C:\windows\system32\drivers\aswHwid.sys [2014-08-07 29208]
R2 aswMonFlt;aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [2014-08-07 79184]
R3 ACPIVPC;@oem23.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\windows\System32\drivers\AcpiVpc.sys [2012-09-21 33560]
R3 CnxtHdAudService;@oem15.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Conexant UAA Function Driver for High Definition Audio Service; C:\windows\system32\drivers\CHDRT64.sys [2012-06-27 1608864]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2012-12-14 5353888]
R3 IntcDAud;@oem8.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 iwdbus;@oem19.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\windows\System32\drivers\iwdbus.sys [2012-08-10 25568]
R3 LAD;@oem22.inf,%SvcDesc%;Lenovo AOAC Driver; C:\windows\System32\drivers\LAD.sys [2012-06-08 8704]
R3 MEIx64;@oem6.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\windows\System32\drivers\HECIx64.sys [2012-07-02 62784]
R3 NETwNe64;@oem11.inf,___ %NIC_Service_DispName_WIN8_64%;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 8 - 64 Bit; C:\windows\system32\DRIVERS\NETwew00.sys [2012-08-08 4273192]
R3 nvlddmkm;nvlddmkm; C:\windows\system32\DRIVERS\nvlddmkm.sys [2012-12-03 11532648]
R3 RTL8168;@oem16.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\windows\system32\DRIVERS\Rt630x64.sys [2012-06-12 683664]
R3 SmbDrvI;SmbDrvI; C:\windows\system32\DRIVERS\Smb_driver_Intel.sys [2012-11-30 31032]
R3 SynTP;@oem14.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2013-08-28 524528]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\windows\System32\Drivers\usbvideo.sys [2013-07-06 210560]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\windows\system32\DRIVERS\vwifimp.sys [2012-07-26 17920]
S2 aswStm;aswStm; C:\windows\system32\drivers\aswStm.sys [2014-08-07 92008]
S2 MLPTDR_N;MLPTDR_N; \??\C:\windows\syswow64\MLPTDR_N.SYS [2003-07-19 18848]
S3 aswTap;@oem37.inf,%DeviceDescription%;avast! SecureLine TAP Adapter v3; C:\windows\system32\DRIVERS\aswTap.sys [2013-10-19 44640]
S3 dg_ssudbus;@oem35.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudbus.sys [2013-02-06 102936]
S3 e1iexpress;@net1ic64.inf,%E1IExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver I; C:\windows\system32\DRIVERS\e1i63x64.sys [2012-06-02 333824]
S3 InputFilter_Hid_FlexDef2b;@oem36.inf,%HIDUASServiceDesc%;Siliten HID Devices(FlexDef2b) Driver Service; C:\windows\System32\drivers\InputFilter_FlexDef2b.sys [2010-06-19 17920]
S3 intaud_WaveExtensible;@oem18.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\windows\system32\drivers\intelaud.sys [2012-08-10 35296]
S3 irstrtdv;@oem17.inf,%Irstrt.DispName%;Intel(R) Rapid Start Technology Driver; C:\windows\System32\drivers\irstrtdv.sys [2012-08-13 43800]
S3 NETwNs64;@netwns64.inf,___ %NIC_Service_DispName_WIN7_64%;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\windows\system32\DRIVERS\NETwNs64.sys [2012-06-02 8604672]
S3 ssudmdm;@oem34.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudmdm.sys [2013-02-06 203544]
S3 ssudserd;@oem31.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudserd.sys [2012-09-19 203104]
S3 usb3Hub;@oem20.inf,%usb3Hub.SVCDESC%;USB-IF USB 3.0 Hub; C:\windows\System32\drivers\usb3Hub.sys [2012-08-10 48096]
S3 vm331avs;@oem12.inf,%USBCamera.DeviceDesc2%;Digital Camera 1; C:\windows\System32\Drivers\vm331avs.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-08-07 50344]
R2 CxAudMsg;@C:\windows\system32\CxAudMsg64.exe,-100; C:\windows\system32\CxAudMsg64.exe [2012-06-08 201376]
R2 ExpressCache;ExpressCache; C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe [2012-03-30 79664]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-07-09 7168]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-07-17 128896]
R2 irstrtsv;Intel(R) Rapid Start Technology Service; C:\windows\SysWOW64\irstrtsv.exe [2012-08-13 193576]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-07-17 165760]
R2 Lenovo Smart Update Service;Lenovo Smart Update Service; C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe [2012-07-18 66640]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 276864]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2012-12-01 890216]
R2 ScsiAccess;ScsiAccess; C:\Program Files (x86)\Photodex\ProShow Gold\ScsiAccess.exe [2013-03-21 186760]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 364416]
R2 Update PodoWeb;Update PodoWeb; C:\Program Files (x86)\PodoWeb\updatePodoWeb.exe [2014-09-20 325400]
R2 Util PodoWeb;Util PodoWeb; C:\Program Files (x86)\PodoWeb\bin\utilPodoWeb.exe [2014-09-20 325400]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe []
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-22 136176]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-12-03 1259880]
S2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe []
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-20 267440]
S3 cphs;Intel(R) Content Protection HECI Service; C:\windows\SysWow64\IntelCpHeciSvc.exe [2012-12-14 277616]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2012-07-26 43616]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-22 136176]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-09-13 114288]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe []
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]

-----------------EOF-----------------

Ještě jedna změna - po zapnutí štítů opět problém s videem. Tak třeba je to tím. Možná avast nebo tak blokuje zásuvný modul od Adobe. Ale nevím jestli to má souvislost s těmi dalšími problémy, co jsem psala výše.

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.

Provedeno. Tady je nový log z RSIT:

Logfile of random's system information tool 1.10 (written by random/random)
Run by Michaela at 2014-09-20 15:56:32
Microsoft Windows 8
System drive C: has 556 GB (61%) free of 905 GB
Total RAM: 8050 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:56:35, on 20. 9. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.16537)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\PodoWeb\bin\PodoWeb.BrowserAdapter.exe
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files (x86)\Lenovo\Intelligent Touchpad\IntelligentTouchpad.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\trend micro\Michaela.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo13.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: PodoWeb - {980b8a8f-ea0b-4c24-a2e9-70635e2502e9} - C:\Program Files (x86)\PodoWeb\PodoWebbho.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [Dolby Home Theater v4] "C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [IntellingentTouchpad] C:\Program Files (x86)\Lenovo\Intelligent Touchpad\IntelligentTouchpad.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [LiveSupport] "C:\Program Files (x86)\LiveSupport\LiveSupport.exe" /noshow /log
O4 - HKCU\..\Run: [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Michaela\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Michaela\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Michaela\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk = C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://www.samsungsetup.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{529563AA-8B38-49AC-9470-6491A9100AFC}: NameServer = 85.135.32.100,62.129.50.20
O17 - HKLM\System\CS1\Services\Tcpip\..\{529563AA-8B38-49AC-9470-6491A9100AFC}: NameServer = 85.135.32.100,62.129.50.20
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: c:\windows\syswow64\nvinit.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @C:\windows\system32\CxAudMsg64.exe,-100 (CxAudMsg) - Unknown owner - C:\windows\system32\CxAudMsg64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Unknown owner - C:\Program Files\Intel\WiFi\bin\EvtEng.exe (file missing)
O23 - Service: ExpressCache - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Rapid Start Technology Service (irstrtsv) - Intel Corporation - C:\windows\SysWOW64\irstrtsv.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Lenovo Smart Update Service - Lenovo - C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Unknown owner - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: ScsiAccess - Unknown owner - C:\Program Files (x86)\Photodex\ProShow Gold\ScsiAccess.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: Update PodoWeb - Unknown owner - C:\Program Files (x86)\PodoWeb\updatePodoWeb.exe
O23 - Service: Util PodoWeb - Unknown owner - C:\Program Files (x86)\PodoWeb\bin\utilPodoWeb.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Unknown owner - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (file missing)

--
End of file - 11375 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\nvvsvc.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
"dwm.exe"
C:\windows\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\windows\system32\nvvsvc.exe -session -first
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\windows\Explorer.EXE
C:\windows\System32\rundll32.exe C:\windows\System32\shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
taskhostex.exe
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\windows\system32\CxAudMsg64.exe
"C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe"
dashost.exe {85517042-5c73-423e-a8df3bb9653d134e}
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
C:\windows\SysWOW64\irstrtsv.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
taskeng.exe {0B2B304D-82E1-4937-A40B-CC28EBFB3E26}
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe"
"C:\Program Files (x86)\Photodex\ProShow Gold\ScsiAccess.exe"
"C:\Program Files (x86)\Skype\Updater\Updater.exe"
C:\windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\PodoWeb\updatePodoWeb.exe"
"C:\Program Files (x86)\PodoWeb\bin\utilPodoWeb.exe"
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\System32\alg.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-15378c72-e106-4b33-a68e-8f159d3a4ccf -SystemEventPortName:HostProcess-e8ebb110-4497-4765-90a5-73c82fe57566 -IoCancelEventPortName:HostProcess-89a511eb-596b-43dd-8bec-e0c345fa24c5 -NonStateChangingEventPortName:HostProcess-245ae155-79a1-4591-a3ce-34f3c239c283 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:e102d139-03d4-4fdf-b433-b56c327ea033 -DeviceGroupId:WudfDefaultDevicePool
C:\windows\servicing\TrustedInstaller.exe
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.2.9200.17074_none_6233bc1f5106b696\TiWorker.exe -Embedding
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
"C:\Program Files (x86)\PodoWeb\bin\PodoWeb.PurBrowse64.exe" /l false /s false /c "PodoWeb" /t "C:\Program Files (x86)\PodoWeb\bin\TEMP" /i "http://apipodowebnet-a.akamaihd.net/gsr ... 0000000000" /d {00c97d86-accb-4288-9972-6d929c1fe93a}Gw64 /p 3974689e-a616-4fb3-baec-7f681348841f:chrome /h cdn.sharedaddomain.com,cdn.sharedaddomain2.com 0 3 "C:\Program Files (x86)\PodoWeb\bin\bau" true
\??\C:\windows\system32\conhost.exe 0x4
/c 3974689e-a616-4fb3-baec-7f681348841f /i 8d0262ad-3aa7-416e-bf66-3560e5dfe175 /f c8006be9-567d-46ab-bac5-146187be617e /z "n=PodoWeb&is=smdvcz&dpt=20"
/c 3974689e-a616-4fb3-baec-7f681348841f /i 8d0262ad-3aa7-416e-bf66-3560e5dfe175 /f c8006be9-567d-46ab-bac5-146187be617e /z "n=PodoWeb&is=smdvcz&dpt=20"
C:\windows\system32\SearchIndexer.exe /Embedding
C:\windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {9BA05972-F6A8-11CF-A442-00A0C90A8F39} -Embedding
"C:\windows\notepad.exe" C:\_OTM\MovedFiles\09202014_155233.log
C:\windows\System32\ThumbnailExtractionHost.exe -Embedding
"C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE" /tsr
"C:\Program Files (x86)\Lenovo\Intelligent Touchpad\IntelligentTouchpad.exe"

"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Users\Michaela\Desktop\RSITx64(4).exe"
C:\windows\system32\wbem\unsecapp.exe -Embedding

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\windows\tasks\Norton Security Scan for Michaela.job - C:\PROGRA~2\NORTON~2\Engine\410~1.28\Nss.exe /scan-quick /scheduled
C:\windows\tasks\WinThruster_DEFAULT.job - C:\Program Files (x86)\WinThruster\WinThruster.exe -default
C:\windows\tasks\WinThruster_UPDATES.job - C:\Program Files (x86)\WinThruster\WinThruster.exe -updatecheck

=========Mozilla firefox=========

ProfilePath - C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\f4yd392a.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.152 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@photodex.com/PhotodexPresenter]
"Description"=Photodex Presenter Plugin
"Path"=C:\Program Files (x86)\Photodex Presenter\npPxPlay.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.152 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL


C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\f4yd392a.default\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-08-07 612248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-08-07 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{980b8a8f-ea0b-4c24-a2e9-70635e2502e9}]
PodoWeb - C:\Program Files (x86)\PodoWeb\PodoWebbho.dll [2014-09-18 250136]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2012-06-29 380544]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2012-06-15 887968]
"ForteConfig"=C:\Program Files\Conexant\ForteConfig\fmapp.exe [2010-10-26 49056]
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SACpl.exe [2012-06-13 1647616]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2012-09-21 17079376]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2012-09-21 191568]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2012-12-14 172144]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2012-12-14 399984]
"Persistence"=C:\windows\system32\igfxpers.exe [2012-12-14 441968]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"LiveSupport"=C:\Program Files (x86)\LiveSupport\LiveSupport.exe /noshow /log []
"EA Core"=C:\Program Files (x86)\Electronic Arts\EADM\Core.exe -silent []
"EADM"=C:\Program Files (x86)\Origin\Origin.exe [2014-09-15 3600216]
"Spotify Web Helper"=C:\Users\Michaela\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2014-02-27 1171968]
"cz.seznam.software.autoupdate"=C:\Users\Michaela\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Michaela\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Dolby Home Theater v4"=C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [2012-07-26 508656]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-07-27 136488]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [2012-07-27 167024]
"IntellingentTouchpad"=C:\Program Files (x86)\Lenovo\Intelligent Touchpad\IntelligentTouchpad.exe [2012-07-23 673336]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-07 4085896]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]

C:\Users\Michaela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk - C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2012-12-14 442880]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-09-20 15:52:33 ----D---- C:\_OTM
2014-09-20 14:51:27 ----D---- C:\Program Files\trend micro
2014-09-20 14:51:25 ----D---- C:\rsit
2014-09-19 14:21:08 ----D---- C:\windows\SYSWOW64\Adobe
2014-09-19 00:09:02 ----D---- C:\ProgramData\Package Cache
2014-09-18 21:08:55 ----D---- C:\Program Files (x86)\Electronic Arts Inc
2014-09-18 21:07:40 ----A---- C:\windows\system32\drivers\{00c97d86-accb-4288-9972-6d929c1fe93a}Gw64.sys
2014-09-18 21:03:32 ----A---- C:\windows\system32\drivers\dtsoftbus01.sys
2014-09-18 21:03:12 ----D---- C:\Program Files (x86)\PodoWeb
2014-09-18 20:58:10 ----A---- C:\windows\AdobeFlashPlayerUpdate.exe
2014-09-13 17:01:13 ----D---- C:\windows\system32\drivers\NSSx64
2014-09-13 17:01:13 ----D---- C:\Program Files (x86)\Norton Security Scan
2014-09-13 17:01:09 ----D---- C:\ProgramData\Norton
2014-09-13 17:01:07 ----D---- C:\ProgramData\NortonInstaller
2014-09-13 17:01:07 ----D---- C:\Program Files (x86)\NortonInstaller
2014-09-13 17:00:27 ----D---- C:\Users\Michaela\AppData\Roaming\0V1L2Z2Z1T1I1L1T
2014-09-13 13:25:54 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-09-11 23:26:09 ----A---- C:\windows\system32\aepdu.dll
2014-09-11 23:26:09 ----A---- C:\windows\system32\aeinv.dll
2014-09-11 09:23:44 ----A---- C:\windows\SYSWOW64\msrating.dll
2014-09-11 09:23:44 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2014-09-11 09:23:44 ----A---- C:\windows\system32\msrating.dll
2014-09-11 09:23:44 ----A---- C:\windows\system32\mshtmled.dll
2014-09-11 09:23:43 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2014-09-11 09:23:43 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2014-09-11 09:23:43 ----A---- C:\windows\system32\ie4uinit.exe
2014-09-11 09:23:43 ----A---- C:\windows\system32\dxtrans.dll
2014-09-11 09:23:43 ----A---- C:\windows\system32\dxtmsft.dll
2014-09-11 09:23:42 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2014-09-11 09:23:42 ----A---- C:\windows\SYSWOW64\iesetup.dll
2014-09-11 09:23:42 ----A---- C:\windows\system32\msfeeds.dll
2014-09-11 09:23:42 ----A---- C:\windows\system32\iesetup.dll
2014-09-11 09:23:41 ----A---- C:\windows\SYSWOW64\urlmon.dll
2014-09-11 09:23:41 ----A---- C:\windows\SYSWOW64\jscript.dll
2014-09-11 09:23:41 ----A---- C:\windows\SYSWOW64\iesysprep.dll
2014-09-11 09:23:41 ----A---- C:\windows\SYSWOW64\iernonce.dll
2014-09-11 09:23:41 ----A---- C:\windows\system32\urlmon.dll
2014-09-11 09:23:41 ----A---- C:\windows\system32\jscript.dll
2014-09-11 09:23:41 ----A---- C:\windows\system32\iernonce.dll
2014-09-11 09:23:40 ----A---- C:\windows\system32\jscript9.dll
2014-09-11 09:23:40 ----A---- C:\windows\system32\iesysprep.dll
2014-09-11 09:23:39 ----A---- C:\windows\SYSWOW64\UXInit.dll
2014-09-11 09:23:39 ----A---- C:\windows\SYSWOW64\jscript9.dll
2014-09-11 09:23:39 ----A---- C:\windows\system32\UXInit.dll
2014-09-11 09:23:39 ----A---- C:\windows\system32\iertutil.dll
2014-09-11 09:23:38 ----A---- C:\windows\SYSWOW64\uxtheme.dll
2014-09-11 09:23:38 ----A---- C:\windows\SYSWOW64\iertutil.dll
2014-09-11 09:23:37 ----A---- C:\windows\system32\uxtheme.dll
2014-09-11 09:23:36 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2014-09-11 09:23:36 ----A---- C:\windows\system32\iedkcs32.dll
2014-09-11 09:23:35 ----A---- C:\windows\SYSWOW64\wininet.dll
2014-09-11 09:23:35 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2014-09-11 09:23:35 ----A---- C:\windows\system32\wininet.dll
2014-09-11 09:23:35 ----A---- C:\windows\system32\jsproxy.dll
2014-09-11 09:23:34 ----A---- C:\windows\SYSWOW64\ieframe.dll
2014-09-11 09:23:32 ----A---- C:\windows\system32\ieframe.dll
2014-09-11 09:23:23 ----A---- C:\windows\system32\mshtml.dll
2014-09-11 09:23:18 ----A---- C:\windows\SYSWOW64\mshtml.dll
2014-09-11 09:12:07 ----A---- C:\windows\SYSWOW64\msvcp120_clr0400.dll
2014-09-11 09:12:06 ----A---- C:\windows\system32\msvcp120_clr0400.dll
2014-09-11 09:12:01 ----A---- C:\windows\system32\schedsvc.dll
2014-09-11 09:11:58 ----A---- C:\windows\SYSWOW64\wudriver.dll
2014-09-11 09:11:58 ----A---- C:\windows\SYSWOW64\wuapi.dll
2014-09-11 09:11:58 ----A---- C:\windows\system32\WUSettingsProvider.dll
2014-09-11 09:11:58 ----A---- C:\windows\system32\wudriver.dll
2014-09-11 09:11:58 ----A---- C:\windows\system32\wucltux.dll
2014-09-11 09:11:58 ----A---- C:\windows\system32\wuaueng.dll
2014-09-11 09:11:58 ----A---- C:\windows\system32\wuauclt.exe
2014-09-11 09:11:58 ----A---- C:\windows\system32\wuapi.dll
2014-09-11 09:11:58 ----A---- C:\windows\system32\storewuauth.dll
2014-09-11 09:11:57 ----A---- C:\windows\SYSWOW64\wuwebv.dll
2014-09-11 09:11:57 ----A---- C:\windows\SYSWOW64\wuapp.exe
2014-09-11 09:11:57 ----A---- C:\windows\system32\wuwebv.dll
2014-09-11 09:11:57 ----A---- C:\windows\system32\wuapp.exe
2014-09-11 09:11:57 ----A---- C:\windows\system32\wuaext.dll
2014-09-11 09:11:48 ----A---- C:\windows\SYSWOW64\msvcr120_clr0400.dll
2014-09-11 09:11:48 ----A---- C:\windows\system32\msvcr120_clr0400.dll
2014-09-11 09:11:26 ----A---- C:\windows\system32\tssdisai.dll
2014-09-11 09:11:26 ----A---- C:\windows\system32\poqexec.exe
2014-08-29 20:58:12 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2014-08-27 21:38:27 ----A---- C:\windows\system32\drivers\hdaudbus.sys
2014-08-27 21:36:43 ----A---- C:\windows\SYSWOW64\TsWpfWrp.exe
2014-08-27 21:36:43 ----A---- C:\windows\system32\TsWpfWrp.exe
2014-08-27 21:32:34 ----A---- C:\windows\SYSWOW64\rpcrt4.dll
2014-08-27 21:32:34 ----A---- C:\windows\system32\rpcrt4.dll
2014-08-27 21:32:33 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2014-08-27 21:32:32 ----A---- C:\windows\system32\cdd.dll
2014-08-27 21:32:27 ----A---- C:\windows\system32\twinui.dll
2014-08-27 21:32:25 ----A---- C:\windows\SYSWOW64\twinui.dll
2014-08-27 21:32:24 ----A---- C:\windows\SYSWOW64\msi.dll
2014-08-27 21:32:24 ----A---- C:\windows\system32\msi.dll
2014-08-27 21:32:24 ----A---- C:\windows\system32\authui.dll
2014-08-27 21:32:24 ----A---- C:\windows\system32\actxprxy.dll
2014-08-27 21:32:23 ----A---- C:\windows\SYSWOW64\msihnd.dll
2014-08-27 21:32:23 ----A---- C:\windows\SYSWOW64\authui.dll
2014-08-27 21:32:23 ----A---- C:\windows\SYSWOW64\actxprxy.dll
2014-08-27 21:32:23 ----A---- C:\windows\system32\msihnd.dll
2014-08-27 21:32:23 ----A---- C:\windows\system32\consent.exe
2014-08-27 21:31:37 ----A---- C:\windows\system32\win32k.sys
2014-08-27 21:31:36 ----A---- C:\windows\SYSWOW64\gdi32.dll
2014-08-27 21:31:36 ----A---- C:\windows\system32\gdi32.dll
2014-08-27 21:31:34 ----A---- C:\windows\system32\drivers\mountmgr.sys
2014-08-27 21:31:34 ----A---- C:\windows\system32\drivers\Classpnp.sys
2014-08-27 21:16:44 ----A---- C:\windows\SYSWOW64\Access.dat
2014-08-27 21:11:14 ----D---- C:\Users\Michaela\AppData\Roaming\Tunngle
2014-08-27 21:11:13 ----A---- C:\windows\system32\drivers\tap0901t.sys
2014-08-27 20:31:27 ----D---- C:\ProgramData\Codemasters

======List of files/folders modified in the last 1 month======

2014-09-20 15:56:35 ----D---- C:\windows\Prefetch
2014-09-20 15:55:59 ----A---- C:\windows\win.ini
2014-09-20 15:55:48 ----D---- C:\windows\Temp
2014-09-20 15:55:03 ----AD---- C:\Windows
2014-09-20 15:54:36 ----A---- C:\windows\SYSWOW64\log.txt
2014-09-20 15:52:33 ----D---- C:\windows\Tasks
2014-09-20 15:19:47 ----D---- C:\Users\Michaela\AppData\Roaming\vlc
2014-09-20 15:00:00 ----D---- C:\windows\system32\sru
2014-09-20 14:51:27 ----D---- C:\Program Files
2014-09-20 14:44:58 ----SHD---- C:\windows\Installer
2014-09-20 12:28:23 ----D---- C:\windows\Microsoft.NET
2014-09-20 10:25:34 ----AD---- C:\windows\System32
2014-09-19 23:29:24 ----D---- C:\windows\debug
2014-09-19 14:21:08 ----D---- C:\windows\SysWOW64
2014-09-19 01:56:05 ----D---- C:\ProgramData\Origin
2014-09-19 01:46:32 ----D---- C:\Program Files (x86)\Origin
2014-09-19 00:52:12 ----D---- C:\HRY
2014-09-19 00:50:57 ----D---- C:\windows\Inf
2014-09-19 00:50:57 ----A---- C:\windows\system32\PerfStringBackup.INI
2014-09-19 00:45:19 ----D---- C:\windows\system32\catroot2
2014-09-19 00:42:57 ----D---- C:\windows\system32\catroot
2014-09-19 00:09:05 ----D---- C:\Program Files (x86)\Common Files
2014-09-19 00:09:02 ----HD---- C:\ProgramData
2014-09-18 21:45:29 ----D---- C:\Program Files (x86)\Origin Games
2014-09-18 21:08:55 ----RD---- C:\Program Files (x86)
2014-09-18 21:07:40 ----D---- C:\windows\system32\Drivers
2014-09-18 21:03:56 ----D---- C:\Users\Michaela\AppData\Roaming\Seznam.cz
2014-09-18 21:03:53 ----D---- C:\Program Files (x86)\Seznam.cz
2014-09-18 21:03:32 ----D---- C:\windows\system32\DriverStore
2014-09-18 21:03:32 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2014-09-18 14:27:54 ----SHD---- C:\System Volume Information
2014-09-16 18:33:28 ----HD---- C:\Program Files\WindowsApps
2014-09-16 18:33:28 ----D---- C:\windows\AUInstallAgent
2014-09-15 23:59:52 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-15 23:39:27 ----D---- C:\Users\Michaela\AppData\Roaming\Origin
2014-09-15 13:59:56 ----D---- C:\windows\system32\config
2014-09-15 08:59:33 ----D---- C:\windows\system32\NDF
2014-09-13 20:44:11 ----D---- C:\windows\rescache
2014-09-13 20:34:38 ----RSD---- C:\windows\assembly
2014-09-13 19:08:54 ----D---- C:\windows\CbsTemp
2014-09-13 19:08:53 ----SD---- C:\windows\system32\CompatTel
2014-09-13 19:08:52 ----D---- C:\windows\WinSxS
2014-09-13 19:08:45 ----D---- C:\windows\system32\MRT
2014-09-13 19:04:27 ----A---- C:\windows\system32\MRT.exe
2014-09-13 17:01:18 ----D---- C:\windows\system32\Tasks
2014-09-11 23:24:46 ----D---- C:\Program Files (x86)\WinRAR
2014-09-11 23:24:46 ----D---- C:\Program Files (x86)\SugarSync
2014-09-11 23:24:46 ----D---- C:\Program Files (x86)\SamsungPrinterLiveUpdateInstaller
2014-09-11 23:24:46 ----D---- C:\Program Files (x86)\Photodex Presenter
2014-09-11 22:50:56 ----D---- C:\Program Files (x86)\Internet Explorer
2014-09-11 22:50:55 ----D---- C:\Program Files\Internet Explorer
2014-09-11 22:50:02 ----D---- C:\ProgramData\Microsoft Help
2014-09-02 22:42:47 ----D---- C:\Users\Michaela\AppData\Roaming\Skype
2014-09-01 19:15:14 ----D---- C:\Users\Michaela\AppData\Roaming\BSplayer
2014-08-29 20:55:28 ----D---- C:\windows\SYSWOW64\en-US
2014-08-29 20:55:28 ----D---- C:\windows\SYSWOW64\cs-CZ
2014-08-29 20:55:28 ----D---- C:\windows\system32\en-US
2014-08-29 20:55:28 ----D---- C:\windows\system32\cs-CZ
2014-08-29 20:55:22 ----RD---- C:\windows\ToastData
2014-08-27 21:23:09 ----RSD---- C:\windows\Fonts

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswKbd;aswKbd; C:\windows\system32\drivers\aswKbd.sys [2013-08-30 22600]
R0 aswRvrt;avast! Revert; C:\windows\system32\drivers\aswRvrt.sys [2014-08-07 65776]
R0 aswVmm;avast! VM Monitor; C:\windows\system32\drivers\aswVmm.sys [2014-08-07 224896]
R0 excsd;ExpressCache Storage Filter Driver; C:\windows\system32\DRIVERS\excsd.sys [2012-03-30 95024]
R0 iaStorA;iaStorA; C:\windows\System32\drivers\iaStorA.sys [2012-07-09 645952]
R0 LHDmgr;LHDmgr; C:\windows\System32\DRIVERS\LhdX64.sys [2012-09-21 39008]
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys [2012-12-03 30056]
R1 aswRdr;aswRdr; C:\windows\system32\drivers\aswRdr2.sys [2014-08-07 93568]
R1 aswSnx;aswSnx; C:\windows\system32\drivers\aswSnx.sys [2014-08-07 1041168]
R1 aswSP;aswSP; C:\windows\system32\drivers\aswSP.sys [2014-08-07 427360]
R1 dtsoftbus01;@oem33.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\windows\System32\drivers\dtsoftbus01.sys [2014-09-18 283064]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2014-09-14 487216]
R1 excfs;ExpressCache File System Filter Driver; C:\windows\system32\DRIVERS\excfs.sys [2012-03-30 23344]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\windows\system32\DRIVERS\vwififlt.sys [2012-07-26 64000]
R2 aswHwid;avast! HardwareID; C:\windows\system32\drivers\aswHwid.sys [2014-08-07 29208]
R2 aswMonFlt;aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [2014-08-07 79184]
R2 aswStm;aswStm; C:\windows\system32\drivers\aswStm.sys [2014-08-07 92008]
R3 ACPIVPC;@oem23.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\windows\System32\drivers\AcpiVpc.sys [2012-09-21 33560]
R3 CnxtHdAudService;@oem15.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Conexant UAA Function Driver for High Definition Audio Service; C:\windows\system32\drivers\CHDRT64.sys [2012-06-27 1608864]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2012-12-14 5353888]
R3 IntcDAud;@oem8.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 iwdbus;@oem19.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\windows\System32\drivers\iwdbus.sys [2012-08-10 25568]
R3 LAD;@oem22.inf,%SvcDesc%;Lenovo AOAC Driver; C:\windows\System32\drivers\LAD.sys [2012-06-08 8704]
R3 MEIx64;@oem6.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\windows\System32\drivers\HECIx64.sys [2012-07-02 62784]
R3 NETwNe64;@oem11.inf,___ %NIC_Service_DispName_WIN8_64%;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 8 - 64 Bit; C:\windows\system32\DRIVERS\NETwew00.sys [2012-08-08 4273192]
R3 nvlddmkm;nvlddmkm; C:\windows\system32\DRIVERS\nvlddmkm.sys [2012-12-03 11532648]
R3 RTL8168;@oem16.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\windows\system32\DRIVERS\Rt630x64.sys [2012-06-12 683664]
R3 SmbDrvI;SmbDrvI; C:\windows\system32\DRIVERS\Smb_driver_Intel.sys [2012-11-30 31032]
R3 SynTP;@oem14.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2013-08-28 524528]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\windows\System32\Drivers\usbvideo.sys [2013-07-06 210560]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\windows\system32\DRIVERS\vwifimp.sys [2012-07-26 17920]
S2 MLPTDR_N;MLPTDR_N; \??\C:\windows\syswow64\MLPTDR_N.SYS [2003-07-19 18848]
S3 aswTap;@oem37.inf,%DeviceDescription%;avast! SecureLine TAP Adapter v3; C:\windows\system32\DRIVERS\aswTap.sys [2013-10-19 44640]
S3 dg_ssudbus;@oem35.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudbus.sys [2013-02-06 102936]
S3 e1iexpress;@net1ic64.inf,%E1IExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver I; C:\windows\system32\DRIVERS\e1i63x64.sys [2012-06-02 333824]
S3 InputFilter_Hid_FlexDef2b;@oem36.inf,%HIDUASServiceDesc%;Siliten HID Devices(FlexDef2b) Driver Service; C:\windows\System32\drivers\InputFilter_FlexDef2b.sys [2010-06-19 17920]
S3 intaud_WaveExtensible;@oem18.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\windows\system32\drivers\intelaud.sys [2012-08-10 35296]
S3 irstrtdv;@oem17.inf,%Irstrt.DispName%;Intel(R) Rapid Start Technology Driver; C:\windows\System32\drivers\irstrtdv.sys [2012-08-13 43800]
S3 NETwNs64;@netwns64.inf,___ %NIC_Service_DispName_WIN7_64%;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\windows\system32\DRIVERS\NETwNs64.sys [2012-06-02 8604672]
S3 ssudmdm;@oem34.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudmdm.sys [2013-02-06 203544]
S3 ssudserd;@oem31.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudserd.sys [2012-09-19 203104]
S3 usb3Hub;@oem20.inf,%usb3Hub.SVCDESC%;USB-IF USB 3.0 Hub; C:\windows\System32\drivers\usb3Hub.sys [2012-08-10 48096]
S3 vm331avs;@oem12.inf,%USBCamera.DeviceDesc2%;Digital Camera 1; C:\windows\System32\Drivers\vm331avs.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-08-07 50344]
R2 CxAudMsg;@C:\windows\system32\CxAudMsg64.exe,-100; C:\windows\system32\CxAudMsg64.exe [2012-06-08 201376]
R2 ExpressCache;ExpressCache; C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe [2012-03-30 79664]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 irstrtsv;Intel(R) Rapid Start Technology Service; C:\windows\SysWOW64\irstrtsv.exe [2012-08-13 193576]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-07-17 165760]
R2 Lenovo Smart Update Service;Lenovo Smart Update Service; C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe [2012-07-18 66640]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2012-12-01 890216]
R2 ScsiAccess;ScsiAccess; C:\Program Files (x86)\Photodex\ProShow Gold\ScsiAccess.exe [2013-03-21 186760]
R2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
R2 Update PodoWeb;Update PodoWeb; C:\Program Files (x86)\PodoWeb\updatePodoWeb.exe [2014-09-20 325400]
R2 Util PodoWeb;Util PodoWeb; C:\Program Files (x86)\PodoWeb\bin\utilPodoWeb.exe [2014-09-20 325400]
S2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe []
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-22 136176]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-07-09 7168]
S2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-07-17 128896]
S2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 276864]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-12-03 1259880]
S2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe []
S2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 364416]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-20 267440]
S3 cphs;Intel(R) Content Protection HECI Service; C:\windows\SysWow64\IntelCpHeciSvc.exe [2012-12-14 277616]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2012-07-26 43616]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-22 136176]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-09-13 114288]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe []
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]

-----------------EOF-----------------

Dvouklikem na soubor C:\Program Files\trend micro\Michaela.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:

O15 - Trusted Zone: http://www.samsungsetup.com

Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.

Provedeno. Jen ty videa se stále sekají při zapnutých štítech avastu - mám s tím ještě něco dělat nebo s tím už nic nenadělám? Díky moc

Zkuste přeinstalovat FlashPlayer, příp. defragmentujte disk.

Moc děkuji za pomoc!

Rádo se stalo!