Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o pomoc s odvirováním

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
kisha
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 25 říj 2007 11:46
Kontaktovat uživatele:
Kontaktovat uživatele kisha

Prosím o pomoc s odvirováním

#1 Příspěvek od kisha »

Avast mi stále hlásí nějaké hlášky. Vyskakují okna i v Chromu i v Exploreru.

Předem děkuji za pomoc.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Michaela at 2014-11-29 11:42:40
Microsoft Windows 8.1
System drive C: has 260 GB (29%) free of 905 GB
Total RAM: 8058 MB (68% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:42:51, on 29. 11. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17278)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Michaela\AppData\Local\Pokki\Engine\pokki.exe
C:\Users\Michaela\AppData\Local\Pokki\Engine\pokki.exe
C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\WINDOWS\SysWOW64\ctfmon.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Michaela.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: GoSave - {5ea2ae26-a259-4308-aafd-247d4c0c2d14} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331STI.EXE
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [T-Mobile Communication Centre] "C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\Manager.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Web Companion] C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
O4 - HKCU\..\RunOnce: [Application Restart #2] C:\Users\Michaela\AppData\Local\Pokki\Engine\pokki.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\Michaela\AppData\Local\Pokki\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session
O4 - HKCU\..\RunOnce: [Application Restart #1] C:\Users\Michaela\AppData\Local\Pokki\Engine\pokki.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\Michaela\AppData\Local\Pokki\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
O10 - Unknown file in Winsock LSP: c:\windows\system32\lavasofttcpservice.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\lavasofttcpservice.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\lavasofttcpservice.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\lavasofttcpservice.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\lavasofttcpservice.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Web'n'walk Manager mobile equipment installation service (ameisvc) - Gemfor s.r.o. - C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AtherosSvc - Qualcomm Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Conexant Audio Message Service (CxAudMsg) - Unknown owner - C:\windows\system32\CxAudMsg64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Ad-Aware Service 11 (LavasoftAdAwareService11) - Unknown owner - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareService.exe
O23 - Service: LavasoftTcpService - Lavasoft Limited - C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.2.9.5\LavasoftTcpService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: LSCWinService - Unknown owner - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: IE Search Set (SearchProtectionService) - Unknown owner - C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Bt and Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 13112 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"C:\windows\system32\nvvsvc.exe"
"dwm.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\windows\system32\CxAudMsg64.exe
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
dashost.exe {e4df7768-5571-450c-8575efefb9d96795}
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareService.exe"
"C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.2.9.5\LavasoftTcpService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe"
"C:\WINDOWS\system32\rundll32.exe" Shell32.dll,Control_RunDLL mmsys.cpl
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
"C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-dd5cdbd2-e9a8-477b-bcc6-0be7f6cc3188 -SystemEventPortName:HostProcess-79170801-d530-4ec0-8b2f-cd5e1b358050 -IoCancelEventPortName:HostProcess-9f9ccade-af29-4d62-8b14-47d7609a5fc9 -NonStateChangingEventPortName:HostProcess-98ca419a-99c1-4e45-80c6-4a93a15a3915 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:d6c3fb45-afb7-4d1b-ba37-8291c154742a -DeviceGroupId:WudfDefaultDevicePool
taskhostex.exe
C:\WINDOWS\Explorer.EXE
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Users\Michaela\AppData\Local\Pokki\Engine\pokki.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\System32\skydrive.exe -Embedding
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe"
"C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files\Elantech\ETDIntelligent.exe"
"C:\Users\Michaela\AppData\Local\Pokki\Engine\pokki.exe" --type=renderer --disable-breakpad --disable-desktop-notifications --disable-logging --disable-speech-input --lang=en-US --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/16/OneClickSignIn/BlueOnWhite/Prefetch/ContentPrefetchPrefetchOn/Prerender/PrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V1/SpdyCwnd/cwnd16/SpeculativePrefetchingLearning/SpeculativePrefetchingLearningEnabled/Test0PercentDefault/group_01/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/warmest_socket/ --noerrdialogs --disable-client-side-phishing-detection --disable-bundled-ppapi-flash --channel="5236.1.519203919\1487345554" /prefetch:3
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareTray.exe"
"C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe" --minimize
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\WINDOWS\system32\igfxsrvc.exe" -Embedding
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\WINDOWS\system32\wuauclt.exe"
C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\pla.dll,PlaHost "LSC Memory" "0x1cd4_0x12a4_0xa51a25ed"
taskhost.exe $(Arg0)
ctfmon.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="9180.0.868104277\1508691929" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,6,16 --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3316 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/DomRel-Enable/control/EmbeddedSearch/Group1 dev:pp5 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/MaterialDesignNTP/Default/NewProfileManagement/NewAvatarMenu/PasswordGeneration/Disabled/Prerender/Prerender15minTTL/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/cd=3:LocalPredictor=Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SafeBrowsingIncidentReportingService/Default/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_98/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/WebRTC-ApplicationUDPSendSocketSize/Default/" --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="9180.16.1563115635\763048269" /prefetch:673131151
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe12_ Global\UsGthrCtrlFltPipeMssGthrPipe12 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 584 588 596 65536 592
C:\WINDOWS\servicing\TrustedInstaller.exe
C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17246_none_fa4ae8e99b1f603c\TiWorker.exe -Embedding

"C:\Users\Michaela\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-07-20 612248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5ea2ae26-a259-4308-aafd-247d4c0c2d14}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-12-04 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-07-20 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-12-04 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2013-03-05 2876816]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2013-10-03 391128]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2013-10-03 771032]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2013-10-03 769496]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-01-31 36352]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2013-02-04 899680]
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SACpl.exe [2012-06-13 1647616]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2013-05-15 17080376]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2013-05-15 191544]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2013-12-10 2279712]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2013-12-10 1100248]
""= []
"AdAwareTray"=C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareTray.exe [2014-10-15 8925504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-01-25 131712]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"PC Suite Tray"=C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2012-06-26 1516632]
"T-Mobile Communication Centre"=C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\Manager.exe [2010-03-02 1347496]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-08-27 22041192]
"Web Companion"=C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [2014-11-13 1305408]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Application Restart #2"=C:\Users\Michaela\AppData\Local\Pokki\Engine\pokki.exe [2013-11-01 8252744]
"Application Restart #1"=C:\Users\Michaela\AppData\Local\Pokki\Engine\pokki.exe [2013-11-01 8252744]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"331BigDog"=C:\Program Files (x86)\USB Camera\VM331STI.EXE [2013-03-01 552960]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [2012-10-31 168464]
"UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2012-04-19 217088]
"RemoteControl10"=C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [2012-03-29 91432]
"Intel AppUp(SM) center"=C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2012-07-12 155488]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-04 4085896]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"KiesTrayAgent"=C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2014-05-28 310064]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-10-15 157480]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-01-25 131712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2013-10-03 623616]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableCAD"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"midi3"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-11-29 11:42:41 ----D---- C:\Program Files\trend micro
2014-11-29 11:42:40 ----D---- C:\rsit
2014-11-26 13:33:56 ----D---- C:\Users\Michaela\AppData\Roaming\LavasoftStatistics
2014-11-26 13:33:18 ----A---- C:\WINDOWS\SYSWOW64\LavasoftTcpServiceOff.ini
2014-11-26 13:33:18 ----A---- C:\WINDOWS\SYSWOW64\LavasoftTcpService.ini
2014-11-26 13:33:18 ----A---- C:\WINDOWS\system32\LavasoftTcpServiceOff.ini
2014-11-26 13:33:15 ----A---- C:\WINDOWS\system32\LavasoftTcpService64.dll
2014-11-26 13:33:14 ----A---- C:\WINDOWS\SYSWOW64\LavasoftTcpService.dll
2014-11-26 13:32:45 ----D---- C:\Program Files (x86)\Lavasoft
2014-11-26 13:32:33 ----D---- C:\Users\Michaela\AppData\Roaming\Lavasoft
2014-11-26 13:31:38 ----D---- C:\Program Files\Lavasoft
2014-11-26 13:26:11 ----D---- C:\Program Files\Common Files\Lavasoft
2014-11-26 13:23:43 ----D---- C:\ProgramData\Lavasoft
2014-11-18 17:39:07 ----D---- C:\Users\Michaela\AppData\Roaming\Apple Computer
2014-11-18 17:38:57 ----A---- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys
2014-11-18 17:37:59 ----D---- C:\Program Files\iPod
2014-11-18 17:37:57 ----D---- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2014-11-18 17:37:57 ----D---- C:\ProgramData\Apple Computer
2014-11-18 17:37:57 ----D---- C:\Program Files\iTunes
2014-11-18 17:37:57 ----D---- C:\Program Files (x86)\iTunes
2014-11-18 16:38:26 ----D---- C:\Program Files (x86)\Apple Software Update
2014-11-18 16:38:13 ----D---- C:\Program Files\Common Files\Apple
2014-11-18 16:37:59 ----D---- C:\Program Files\Bonjour
2014-11-18 16:37:59 ----D---- C:\Program Files (x86)\Bonjour
2014-11-18 16:37:36 ----D---- C:\ProgramData\Apple
2014-11-18 15:12:59 ----D---- C:\Program Files (x86)\GoSave
2014-11-18 15:12:46 ----D---- C:\ProgramData\2670218481197041320
2014-11-18 15:12:02 ----D---- C:\ProgramData\djbdgefejenacddejhnhfmpppllmhcli

======List of files/folders modified in the last 1 month======

2014-11-29 11:42:46 ----D---- C:\WINDOWS\Prefetch
2014-11-29 11:42:41 ----D---- C:\Program Files
2014-11-29 11:35:25 ----D---- C:\WINDOWS\WinSxS
2014-11-29 11:35:24 ----D---- C:\WINDOWS\CbsTemp
2014-11-29 11:31:52 ----D---- C:\WINDOWS\system32\catroot2
2014-11-29 11:25:07 ----D---- C:\WINDOWS\system32\config
2014-11-29 11:10:24 ----D---- C:\WINDOWS\Temp
2014-11-29 11:00:00 ----D---- C:\WINDOWS\system32\sru
2014-11-29 00:55:05 ----D---- C:\WINDOWS\tracing
2014-11-28 21:54:45 ----D---- C:\WINDOWS\Microsoft.NET
2014-11-28 21:09:02 ----SHD---- C:\WINDOWS\Installer
2014-11-28 21:08:34 ----D---- C:\WINDOWS\SysWOW64
2014-11-28 21:06:54 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2014-11-28 21:02:48 ----RD---- C:\WINDOWS\System32
2014-11-28 21:02:29 ----D---- C:\WINDOWS\system32\drivers
2014-11-28 21:02:01 ----D---- C:\WINDOWS\system32\catroot
2014-11-28 20:52:35 ----D---- C:\ldiag
2014-11-26 13:33:55 ----SD---- C:\Users\Michaela\AppData\Roaming\Microsoft
2014-11-26 13:33:51 ----RSD---- C:\WINDOWS\assembly
2014-11-26 13:32:45 ----RD---- C:\Program Files (x86)
2014-11-26 13:26:11 ----D---- C:\Program Files\Common Files
2014-11-26 13:25:31 ----SHD---- C:\System Volume Information
2014-11-26 13:23:43 ----HD---- C:\ProgramData
2014-11-25 06:36:52 ----HD---- C:\Program Files\WindowsApps
2014-11-25 06:36:52 ----D---- C:\WINDOWS\AppReadiness
2014-11-24 15:16:16 ----D---- C:\WINDOWS\system32\NDF
2014-11-24 15:16:05 ----D---- C:\WINDOWS\Inf
2014-11-18 17:38:57 ----DC---- C:\WINDOWS\system32\DRVSTORE
2014-11-18 16:38:29 ----D---- C:\WINDOWS\system32\Tasks
2014-11-18 16:38:19 ----D---- C:\WINDOWS\system32\DriverStore
2014-11-18 16:37:36 ----D---- C:\Program Files (x86)\Common Files
2014-11-15 20:45:58 ----D---- C:\WINDOWS\Tasks
2014-11-15 01:04:37 ----D---- C:\Users\Michaela\AppData\Roaming\vlc
2014-11-08 01:23:41 ----D---- C:\Users\Michaela\AppData\Roaming\Skype
2014-11-02 10:17:31 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-07-20 65776]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-07-20 224896]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-01-31 652784]
R0 LHDmgr;LHDmgr; C:\WINDOWS\System32\DRIVERS\LhdX64.sys [2013-05-15 39008]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2013-12-19 32544]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2014-07-20 93568]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-11-25 1041168]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-07-20 427360]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2014-07-20 29208]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-07-20 79184]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2014-07-20 92008]
R3 ACPIVPC;@oem16.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2013-05-15 33560]
R3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\system32\DRIVERS\athw8x.sys [2013-06-18 3680256]
R3 BTATH_HCRP;@oem10.inf,%BTATH_HCRP.SvcDesc%;Bluetooth HCRP Server driver; C:\WINDOWS\System32\drivers\btath_hcrp.sys [2013-01-25 179432]
R3 BTATH_RCP;@oem15.inf,%BTATH_RCP%;Bluetooth AVRCP Device; C:\WINDOWS\System32\drivers\btath_rcp.sys [2013-01-25 136424]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2014-04-28 599240]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2013-08-22 53248]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\System32\drivers\BthLEEnum.sys [2013-12-04 226304]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2014-07-24 118272]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-01-31 81920]
R3 CnxtHdAudService;@oem11.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Conexant UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDRT64.sys [2013-02-26 1680992]
R3 ETD;@oem9.inf,%PS2DeviceDesc%;ELAN PS/2 Port Input Device; C:\WINDOWS\system32\DRIVERS\ETD.sys [2013-02-27 355664]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-10-03 33240]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2013-10-03 4185600]
R3 IntcDAud;@oem21.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2013-01-23 342528]
R3 iwdbus;@oem31.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-09-26 27032]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport – ovladač pro řadič Qualcomm Atheros AR81xx PCI-E Ethernet; C:\WINDOWS\system32\DRIVERS\L1C63x64.sys [2013-06-18 129224]
R3 MEIx64;@oem24.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-11-06 62784]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2013-12-19 12645664]
R3 nvvad_WaveExtensible;@oem39.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2013-12-05 39200]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2014-01-27 167424]
R3 vm331avs;@oem3.inf,%USBCamera.DeviceDesc2%;Digital Camera 1; C:\WINDOWS\System32\Drivers\vm331avs.sys [2013-03-01 1045248]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S3 AthBTPort;@oem8.inf,%BTHSUPPORT.SvcDesc%;Qualcomm Atheros Virtual Bluetooth Class; C:\WINDOWS\system32\DRIVERS\btath_flt.sys [2013-01-25 89168]
S3 BTATH_A2DP;@oem7.inf,%BTATH_A2DP.SvcDesc%;Bluetooth A2DP Audio Driver; C:\WINDOWS\system32\drivers\btath_a2dp.sys [2013-01-25 346192]
S3 btath_avdt;@oem7.inf,%btath_avdt.SvcDesc%;Qualcomm Atheros Bluetooth AVDT Service; C:\WINDOWS\system32\drivers\btath_avdt.sys [2013-01-25 115280]
S3 BTATH_LWFLT;@oem19.inf,%BTATH_LWFLT%;Bluetooth LWFLT Device; C:\WINDOWS\system32\DRIVERS\btath_lwflt.sys [2013-01-25 77464]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-07-24 1200640]
S3 dg_ssudbus;@oem52.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-04-11 110336]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [2009-09-10 117248]
S3 hwusbdev;Huawei DataCard USB PNP Device; C:\WINDOWS\system32\DRIVERS\ewusbdev.sys [2009-10-12 114304]
S3 intaud_WaveExtensible;@oem30.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-09-26 39320]
S3 nmwcd;@oem40.inf,%MFG% %SVC%;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmbx64.sys [2012-01-09 19968]
S3 nmwcdc;@oem44.inf,%MFG% %SVC%;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbox64.sys [2012-01-09 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfdx64.sys [2012-06-11 26112]
S3 RSUSBVSTOR;@oem23.inf,%RSUSBVSTOR.SvcDesc%;RtsUVStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUVStor.sys [2012-12-05 317584]
S3 ssudmdm;@oem53.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-04-11 206080]
S3 Trufos;Trufos; C:\WINDOWS\system32\DRIVERS\Trufos.sys [2014-07-10 389240]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltx64.sys [2012-01-09 9216]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-08-22 44544]
S3 usbser;USB Modem Driver; C:\WINDOWS\System32\drivers\usbser.sys [2013-08-22 33280]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltjx64.sys [2012-01-09 9216]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-05-08 65432]
R2 ameisvc;Web'n'walk Manager mobile equipment installation service; C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe [2010-03-02 67312]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-10-07 60744]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2013-01-25 227456]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-07-20 50344]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 CxAudMsg;Conexant Audio Message Service; C:\windows\system32\CxAudMsg64.exe [2012-12-03 202400]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-06-20 634632]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-11-06 165760]
R2 LavasoftAdAwareService11;Ad-Aware Service 11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareService.exe [2014-10-15 707888]
R2 LavasoftTcpService;LavasoftTcpService; C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.2.9.5\LavasoftTcpService.exe [2014-11-13 1351512]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-11-06 276864]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2013-12-10 1494304]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2013-12-10 15129376]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2013-12-19 922912]
R2 SearchProtectionService;IE Search Set; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe [2014-11-13 15208]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-11-06 364416]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-10-15 643880]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-21 116648]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-01-31 15344]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-25 267440]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2013-10-03 279000]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-21 116648]
S3 LSCWinService;LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [2013-09-25 1674720]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119556
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o pomoc s odvirováním

#2 Příspěvek od Rudy »

Zdravím!
Spusťte nejprve tuto utilitu:
Stáhněte AdwCleaner http://www.stahuj.centrum.cz/utility_a_ ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve >Scan< a potom na >Clean< (smazat)
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
kisha
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 25 říj 2007 11:46
Kontaktovat uživatele:
Kontaktovat uživatele kisha

Re: Prosím o pomoc s odvirováním

#3 Příspěvek od kisha »

Dobrý den,

zasílám log z AdwCleaneru.

Děkuji.




# AdwCleaner v4.102 - Report created 29/11/2014 at 13:04:51
# Updated 23/11/2014 by Xplode
# Database : 2014-11-27.1 [Live]
# Operating System : Windows 8.1 (64 bits)
# Username : Michaela - MICHAELA
# Running from : C:\Users\Michaela\Desktop\adwcleaner_4.102.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\2670218481197041320
Folder Deleted : C:\Program Files (x86)\GoSave
[!] Folder Deleted : C:\Users\Michaela\AppData\Local\Pokki
Folder Deleted : C:\Users\Michaela\AppData\Roaming\OpenCandy

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Classes\pokki
Key Deleted : HKCU\Software\MozillaPlugins\pokki.com/PokkiDownloadHelper
Key Deleted : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Key Deleted : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Key Deleted : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Key Deleted : HKCU\Software\Classes\AllFileSystemObjects\shell\pokki
Key Deleted : HKCU\Software\Classes\Directory\shell\pokki
Key Deleted : HKCU\Software\Classes\Drive\shell\pokki
Key Deleted : HKCU\Software\Classes\lnkfile\shell\pokki
Key Deleted : HKCU\Software\Classes\MIME\Database\Content Type\application/x-pokkidownloadhelper
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{22848257-6A2D-4D2A-8D56-C886D25B8B58}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{22848257-6A2D-4D2A-8D56-C886D25B8B58}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
Key Deleted : HKCU\Software\Myfree Codec
Key Deleted : HKCU\Software\Pokki
Key Deleted : HKCU\Software\AppDataLow\Software\adawarebp
Key Deleted : HKLM\SOFTWARE\Myfree Codec
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\PokkiDownloadHelper
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C87834EB-A2A0-B9D4-AA9A-C263D1191051}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FlashComponents
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\YDP Speech Recognition Support

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17278


-\\ Google Chrome v38.0.2125.111

[C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.delta-search.com/?q={searchTerms}&a ... 7BCBD42F59
[C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}
[C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://spokojenypes.cz/inshop/scripts/shop.aspx?action=dosearch&searchphrase={searchTerms}
[C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\preferences] - Deleted [Startup_URLs] : hxxp://www1.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId=6C72D85D4C939FAC

*************************

AdwCleaner[R0].txt - [5914 octets] - [29/11/2014 12:59:53]
AdwCleaner[S0].txt - [5715 octets] - [29/11/2014 13:04:51]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5775 octets] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119556
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o pomoc s odvirováním

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
kisha
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 25 říj 2007 11:46
Kontaktovat uživatele:
Kontaktovat uživatele kisha

Re: Prosím o pomoc s odvirováním

#5 Příspěvek od kisha »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Michaela at 2014-11-29 15:29:11
Microsoft Windows 8.1
System drive C: has 259 GB (29%) free of 905 GB
Total RAM: 8058 MB (78% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:29:13, on 29. 11. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\trend micro\Michaela.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: GoSave - {5ea2ae26-a259-4308-aafd-247d4c0c2d14} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331STI.EXE
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [T-Mobile Communication Centre] "C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\Manager.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Web Companion] C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
O4 - HKCU\..\RunOnce: [Application Restart #2] C:\Users\Michaela\AppData\Local\Pokki\Engine\pokki.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\Michaela\AppData\Local\Pokki\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session
O4 - HKCU\..\RunOnce: [Application Restart #1] C:\Users\Michaela\AppData\Local\Pokki\Engine\pokki.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\Michaela\AppData\Local\Pokki\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Web'n'walk Manager mobile equipment installation service (ameisvc) - Gemfor s.r.o. - C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AtherosSvc - Qualcomm Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Conexant Audio Message Service (CxAudMsg) - Unknown owner - C:\windows\system32\CxAudMsg64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Ad-Aware Service 11 (LavasoftAdAwareService11) - Unknown owner - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareService.exe
O23 - Service: LavasoftTcpService - Lavasoft Limited - C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.2.9.5\LavasoftTcpService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: LSCWinService - Unknown owner - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: IE Search Set (SearchProtectionService) - Unknown owner - C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Bt and Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 12454 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
"C:\windows\system32\nvvsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\windows\system32\CxAudMsg64.exe
dashost.exe {a66e53fd-fa50-447b-ba7372f55bdaf3e1}
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareService.exe"
"C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.2.9.5\LavasoftTcpService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe"
"C:\WINDOWS\system32\rundll32.exe" Shell32.dll,Control_RunDLL mmsys.cpl
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
"C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-3f2b414e-e26a-4756-a6dc-ca639b3c95e7 -SystemEventPortName:HostProcess-1f75694c-55bb-4acb-8bb4-c77bd53f8d18 -IoCancelEventPortName:HostProcess-43c7f193-2f47-4bdd-95e7-d8b57a9e0c13 -NonStateChangingEventPortName:HostProcess-755d3757-2c02-454e-8ad3-48cd4f734506 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:8d205414-97a4-4944-b5e4-6bfe269536d7 -DeviceGroupId:WudfDefaultDevicePool
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
taskhost.exe $(Arg0)
taskhostex.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Windows\System32\skydrive.exe -Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe"
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files\Elantech\ETDIntelligent.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\WINDOWS\system32\igfxsrvc.exe" -Embedding
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe"
"C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareTray.exe"
"C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe" --minimize
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\WINDOWS\system32\NOTEPAD.EXE" C:\AdwCleaner\AdwCleaner[S0].txt
"C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\pla.dll,PlaHost "LSC Memory" "0x1bf4_0x44c_0x10db404e1"
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
C:\Windows\System32\RuntimeBroker.exe -Embedding

"C:\Users\Michaela\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-07-20 612248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5ea2ae26-a259-4308-aafd-247d4c0c2d14}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-12-04 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-07-20 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-12-04 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2013-03-05 2876816]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2013-10-03 391128]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2013-10-03 771032]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2013-10-03 769496]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-01-31 36352]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2013-02-04 899680]
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SACpl.exe [2012-06-13 1647616]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2013-05-15 17080376]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2013-05-15 191544]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2013-12-10 2279712]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2013-12-10 1100248]
""= []
"AdAwareTray"=C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareTray.exe [2014-10-15 8925504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-01-25 131712]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"PC Suite Tray"=C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2012-06-26 1516632]
"T-Mobile Communication Centre"=C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\Manager.exe [2010-03-02 1347496]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-08-27 22041192]
"Web Companion"=C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [2014-11-13 1305408]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Application Restart #2"=C:\Users\Michaela\AppData\Local\Pokki\Engine\pokki.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend=C:\Users\Michaela\AppData\Local\Pokki\Engine\inspector --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session []
"Application Restart #1"=C:\Users\Michaela\AppData\Local\Pokki\Engine\pokki.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend=C:\Users\Michaela\AppData\Local\Pokki\Engine\inspector --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"331BigDog"=C:\Program Files (x86)\USB Camera\VM331STI.EXE [2013-03-01 552960]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [2012-10-31 168464]
"UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2012-04-19 217088]
"RemoteControl10"=C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [2012-03-29 91432]
"Intel AppUp(SM) center"=C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2012-07-12 155488]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-04 4085896]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"KiesTrayAgent"=C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2014-05-28 310064]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-10-15 157480]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-01-25 131712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2013-10-03 623616]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableCAD"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"midi3"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-11-29 12:59:49 ----D---- C:\AdwCleaner
2014-11-29 11:44:08 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2014-11-29 11:44:08 ----A---- C:\WINDOWS\system32\schannel.dll
2014-11-29 11:44:07 ----A---- C:\WINDOWS\SYSWOW64\ncryptsslp.dll
2014-11-29 11:44:07 ----A---- C:\WINDOWS\system32\ncryptsslp.dll
2014-11-29 11:44:07 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2014-11-29 11:42:56 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2014-11-29 11:42:55 ----A---- C:\WINDOWS\system32\msxml3.dll
2014-11-29 11:42:41 ----D---- C:\Program Files\trend micro
2014-11-29 11:42:40 ----D---- C:\rsit
2014-11-29 11:42:38 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2014-11-29 11:42:38 ----A---- C:\WINDOWS\system32\msi.dll
2014-11-29 11:42:38 ----A---- C:\WINDOWS\system32\authui.dll
2014-11-29 11:42:37 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2014-11-29 11:42:37 ----A---- C:\WINDOWS\system32\appinfo.dll
2014-11-29 11:42:35 ----A---- C:\WINDOWS\system32\audiosrv.dll
2014-11-29 11:42:35 ----A---- C:\WINDOWS\system32\AudioSes.dll
2014-11-29 11:42:34 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2014-11-29 11:42:34 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2014-11-29 11:42:34 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2014-11-29 11:42:34 ----A---- C:\WINDOWS\system32\AudioEng.dll
2014-11-29 11:42:34 ----A---- C:\WINDOWS\system32\audiodg.exe
2014-11-29 11:42:33 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2014-11-29 11:42:33 ----A---- C:\WINDOWS\system32\EncDump.dll
2014-11-29 11:42:33 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-11-29 11:42:24 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-11-29 11:42:22 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-11-29 11:41:06 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-11-29 11:40:53 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-11-29 11:40:41 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-11-29 11:40:36 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-11-29 11:40:33 ----A---- C:\WINDOWS\system32\wininet.dll
2014-11-29 11:40:32 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2014-11-29 11:40:31 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-11-29 11:40:31 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-11-29 11:40:30 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-11-29 11:40:29 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2014-11-29 11:40:29 ----A---- C:\WINDOWS\system32\inetcomm.dll
2014-11-29 11:40:28 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2014-11-29 11:40:28 ----A---- C:\WINDOWS\system32\actxprxy.dll
2014-11-29 11:40:27 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2014-11-29 11:40:26 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2014-11-29 11:40:26 ----A---- C:\WINDOWS\system32\jscript.dll
2014-11-29 11:40:26 ----A---- C:\WINDOWS\system32\ieui.dll
2014-11-29 11:40:25 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-11-29 11:40:24 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-11-29 11:40:24 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2014-11-29 11:40:24 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2014-11-29 11:40:23 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2014-11-29 11:40:23 ----A---- C:\WINDOWS\system32\vbscript.dll
2014-11-29 11:40:22 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2014-11-29 11:40:21 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-11-29 11:40:21 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2014-11-29 11:40:21 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-11-29 11:40:21 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2014-11-29 11:40:20 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2014-11-29 11:40:19 ----A---- C:\WINDOWS\system32\ieetwproxystub.dll
2014-11-29 11:40:18 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2014-11-29 11:40:18 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2014-11-29 11:40:18 ----A---- C:\WINDOWS\system32\webcheck.dll
2014-11-29 11:40:16 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2014-11-29 11:40:16 ----A---- C:\WINDOWS\SYSWOW64\hlink.dll
2014-11-29 11:40:16 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-11-29 11:40:15 ----A---- C:\WINDOWS\system32\msrating.dll
2014-11-29 11:40:15 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-11-29 11:40:15 ----A---- C:\WINDOWS\system32\hlink.dll
2014-11-29 11:40:14 ----A---- C:\WINDOWS\SYSWOW64\inseng.dll
2014-11-29 11:40:14 ----A---- C:\WINDOWS\SYSWOW64\ieUnatt.exe
2014-11-29 11:40:14 ----A---- C:\WINDOWS\SYSWOW64\iesysprep.dll
2014-11-29 11:40:14 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2014-11-29 11:40:14 ----A---- C:\WINDOWS\system32\ieUnatt.exe
2014-11-29 11:40:14 ----A---- C:\WINDOWS\system32\iesysprep.dll
2014-11-29 11:40:14 ----A---- C:\WINDOWS\system32\iepeers.dll
2014-11-29 11:40:14 ----A---- C:\WINDOWS\system32\ieetwcollector.exe
2014-11-29 11:40:13 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2014-11-29 11:40:13 ----A---- C:\WINDOWS\system32\inseng.dll
2014-11-29 11:40:12 ----A---- C:\WINDOWS\SYSWOW64\msfeedsbs.dll
2014-11-29 11:40:12 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2014-11-29 11:40:12 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2014-11-29 11:40:12 ----A---- C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-11-29 11:40:11 ----A---- C:\WINDOWS\SYSWOW64\occache.dll
2014-11-29 11:40:11 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-11-29 11:40:11 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-11-29 11:40:11 ----A---- C:\WINDOWS\system32\jsproxy.dll
2014-11-29 11:40:10 ----A---- C:\WINDOWS\SYSWOW64\JavaScriptCollectionAgent.dll
2014-11-29 11:40:10 ----A---- C:\WINDOWS\SYSWOW64\iexpress.exe
2014-11-29 11:40:10 ----A---- C:\WINDOWS\SYSWOW64\IEAdvpack.dll
2014-11-29 11:40:10 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2014-11-29 11:40:09 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2014-11-29 11:40:09 ----A---- C:\WINDOWS\SYSWOW64\imgutil.dll
2014-11-29 11:40:09 ----A---- C:\WINDOWS\SYSWOW64\ieetwproxystub.dll
2014-11-29 11:40:09 ----A---- C:\WINDOWS\system32\occache.dll
2014-11-29 11:40:09 ----A---- C:\WINDOWS\system32\imgutil.dll
2014-11-29 11:40:08 ----A---- C:\WINDOWS\SYSWOW64\pngfilt.dll
2014-11-29 11:40:08 ----A---- C:\WINDOWS\SYSWOW64\licmgr10.dll
2014-11-29 11:40:08 ----A---- C:\WINDOWS\system32\pngfilt.dll
2014-11-29 11:40:08 ----A---- C:\WINDOWS\system32\licmgr10.dll
2014-11-29 11:40:07 ----A---- C:\WINDOWS\SYSWOW64\wextract.exe
2014-11-29 11:40:07 ----A---- C:\WINDOWS\SYSWOW64\url.dll
2014-11-29 11:40:07 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2014-11-29 11:40:07 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2014-11-29 11:40:07 ----A---- C:\WINDOWS\system32\url.dll
2014-11-29 11:40:07 ----A---- C:\WINDOWS\system32\iernonce.dll
2014-11-29 11:40:06 ----A---- C:\WINDOWS\system32\wextract.exe
2014-11-29 11:40:06 ----A---- C:\WINDOWS\system32\iexpress.exe
2014-11-29 11:40:06 ----A---- C:\WINDOWS\system32\iesetup.dll
2014-11-29 11:40:06 ----A---- C:\WINDOWS\system32\IEAdvpack.dll
2014-11-29 11:40:05 ----A---- C:\WINDOWS\SYSWOW64\mshta.exe
2014-11-29 11:40:05 ----A---- C:\WINDOWS\SYSWOW64\msfeedssync.exe
2014-11-29 11:40:05 ----A---- C:\WINDOWS\system32\mshta.exe
2014-11-29 11:40:05 ----A---- C:\WINDOWS\system32\msfeedssync.exe
2014-11-29 11:39:12 ----A---- C:\WINDOWS\SYSWOW64\pku2u.dll
2014-11-29 11:39:12 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2014-11-29 11:39:12 ----A---- C:\WINDOWS\system32\pku2u.dll
2014-11-29 11:39:12 ----A---- C:\WINDOWS\system32\kerberos.dll
2014-11-29 11:39:10 ----A---- C:\WINDOWS\system32\win32k.sys
2014-11-29 11:39:03 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2014-11-29 11:39:01 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2014-11-29 11:39:00 ----A---- C:\WINDOWS\system32\mstscax.dll
2014-11-29 11:38:59 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2014-11-29 11:38:59 ----A---- C:\WINDOWS\system32\SyncEngine.dll
2014-11-29 11:38:57 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2014-11-29 11:38:57 ----A---- C:\WINDOWS\system32\ntdll.dll
2014-11-29 11:38:57 ----A---- C:\WINDOWS\system32\KernelBase.dll
2014-11-29 11:38:56 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2014-11-29 11:38:55 ----A---- C:\WINDOWS\system32\WSShared.dll
2014-11-29 11:38:55 ----A---- C:\WINDOWS\system32\propsys.dll
2014-11-29 11:38:54 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2014-11-29 11:38:54 ----A---- C:\WINDOWS\system32\Wldap32.dll
2014-11-29 11:38:54 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2014-11-29 11:38:53 ----A---- C:\WINDOWS\SYSWOW64\Wldap32.dll
2014-11-29 11:38:53 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2014-11-29 11:38:53 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2014-11-29 11:38:52 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2014-11-29 11:38:52 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-11-29 11:38:51 ----A---- C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-11-29 11:38:51 ----A---- C:\WINDOWS\system32\SkyDrive.exe
2014-11-29 11:38:50 ----A---- C:\WINDOWS\system32\pcsvDevice.dll
2014-11-29 11:38:50 ----A---- C:\WINDOWS\system32\httpprxm.dll
2014-11-29 11:38:50 ----A---- C:\WINDOWS\system32\bisrv.dll
2014-11-29 11:38:49 ----A---- C:\WINDOWS\SYSWOW64\SkyDriveShell.dll
2014-11-29 11:38:49 ----A---- C:\WINDOWS\system32\SkyDriveShell.dll
2014-11-29 11:38:49 ----A---- C:\WINDOWS\system32\ProximityService.dll
2014-11-29 11:38:49 ----A---- C:\WINDOWS\system32\adhsvc.dll
2014-11-29 11:38:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-11-29 11:38:47 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-11-29 11:38:13 ----A---- C:\WINDOWS\SYSWOW64\packager.dll
2014-11-29 11:38:13 ----A---- C:\WINDOWS\system32\packager.dll
2014-11-29 11:37:43 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2014-11-29 11:37:42 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2014-11-29 11:37:42 ----A---- C:\WINDOWS\system32\lsasrv.dll
2014-11-29 11:37:42 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2014-11-29 11:37:42 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2014-11-29 11:37:42 ----A---- C:\WINDOWS\system32\certcli.dll
2014-11-29 11:37:41 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2014-11-29 11:37:41 ----A---- C:\WINDOWS\system32\rfxvmt.dll
2014-11-29 11:37:41 ----A---- C:\WINDOWS\system32\drivers\rdpvideominiport.sys
2014-11-29 11:37:41 ----A---- C:\WINDOWS\system32\adtschema.dll
2014-11-29 11:37:40 ----A---- C:\WINDOWS\SYSWOW64\msaudite.dll
2014-11-29 11:37:40 ----A---- C:\WINDOWS\system32\rdpudd.dll
2014-11-29 11:37:40 ----A---- C:\WINDOWS\system32\msaudite.dll
2014-11-29 11:37:19 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2014-11-29 11:37:19 ----A---- C:\WINDOWS\system32\oleaut32.dll
2014-11-29 11:36:25 ----A---- C:\WINDOWS\system32\rastls.dll
2014-11-29 11:36:24 ----A---- C:\WINDOWS\SYSWOW64\rastls.dll
2014-11-29 11:36:21 ----A---- C:\WINDOWS\system32\wuaueng.dll
2014-11-29 11:36:20 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2014-11-29 11:36:20 ----A---- C:\WINDOWS\system32\wuapi.dll
2014-11-29 11:36:19 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2014-11-29 11:36:19 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2014-11-29 11:36:19 ----A---- C:\WINDOWS\system32\wudriver.dll
2014-11-29 11:36:19 ----A---- C:\WINDOWS\system32\wucltux.dll
2014-11-29 11:36:18 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2014-11-29 11:36:18 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2014-11-29 11:36:18 ----A---- C:\WINDOWS\system32\wuwebv.dll
2014-11-29 11:36:18 ----A---- C:\WINDOWS\system32\wups2.dll
2014-11-29 11:36:18 ----A---- C:\WINDOWS\system32\wups.dll
2014-11-29 11:36:18 ----A---- C:\WINDOWS\system32\wuauclt.exe
2014-11-29 11:36:17 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2014-11-29 11:36:17 ----A---- C:\WINDOWS\system32\wuapp.exe
2014-11-29 11:36:17 ----A---- C:\WINDOWS\system32\wuaext.dll
2014-11-29 11:36:09 ----A---- C:\WINDOWS\system32\shell32.dll
2014-11-29 11:36:07 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2014-11-29 11:36:05 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2014-11-29 11:36:02 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2014-11-29 11:36:01 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2014-11-29 11:35:59 ----A---- C:\WINDOWS\system32\twinui.dll
2014-11-29 11:35:57 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2014-11-29 11:35:57 ----A---- C:\WINDOWS\system32\localspl.dll
2014-11-29 11:35:56 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2014-11-29 11:35:56 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-11-29 11:35:55 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-11-29 11:35:54 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2014-11-29 11:35:54 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2014-11-29 11:35:53 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2014-11-29 11:35:53 ----A---- C:\WINDOWS\system32\win32spl.dll
2014-11-29 11:35:52 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2014-11-29 11:35:52 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2014-11-29 11:35:51 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2014-11-29 11:35:51 ----A---- C:\WINDOWS\system32\puiobj.dll
2014-11-29 11:35:50 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll
2014-11-29 11:35:49 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2014-11-29 11:35:48 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2014-11-29 11:35:47 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll
2014-11-29 11:35:47 ----A---- C:\WINDOWS\system32\untfs.dll
2014-11-29 11:35:44 ----A---- C:\WINDOWS\system32\FXSCOMEX.dll
2014-11-29 11:35:44 ----A---- C:\WINDOWS\system32\FXSAPI.dll
2014-11-29 11:35:43 ----A---- C:\WINDOWS\SYSWOW64\FXSAPI.dll
2014-11-29 11:35:43 ----A---- C:\WINDOWS\system32\winbici.dll
2014-11-26 13:33:56 ----D---- C:\Users\Michaela\AppData\Roaming\LavasoftStatistics
2014-11-26 13:33:18 ----A---- C:\WINDOWS\SYSWOW64\LavasoftTcpServiceOff.ini
2014-11-26 13:33:18 ----A---- C:\WINDOWS\SYSWOW64\LavasoftTcpService.ini
2014-11-26 13:33:18 ----A---- C:\WINDOWS\system32\LavasoftTcpServiceOff.ini
2014-11-26 13:33:15 ----A---- C:\WINDOWS\system32\LavasoftTcpService64.dll
2014-11-26 13:33:14 ----A---- C:\WINDOWS\SYSWOW64\LavasoftTcpService.dll
2014-11-26 13:32:45 ----D---- C:\Program Files (x86)\Lavasoft
2014-11-26 13:32:33 ----D---- C:\Users\Michaela\AppData\Roaming\Lavasoft
2014-11-26 13:31:38 ----D---- C:\Program Files\Lavasoft
2014-11-26 13:26:11 ----D---- C:\Program Files\Common Files\Lavasoft
2014-11-26 13:23:43 ----D---- C:\ProgramData\Lavasoft
2014-11-18 17:39:07 ----D---- C:\Users\Michaela\AppData\Roaming\Apple Computer
2014-11-18 17:38:57 ----A---- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys
2014-11-18 17:37:59 ----D---- C:\Program Files\iPod
2014-11-18 17:37:57 ----D---- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2014-11-18 17:37:57 ----D---- C:\ProgramData\Apple Computer
2014-11-18 17:37:57 ----D---- C:\Program Files\iTunes
2014-11-18 17:37:57 ----D---- C:\Program Files (x86)\iTunes
2014-11-18 16:38:26 ----D---- C:\Program Files (x86)\Apple Software Update
2014-11-18 16:38:13 ----D---- C:\Program Files\Common Files\Apple
2014-11-18 16:37:59 ----D---- C:\Program Files\Bonjour
2014-11-18 16:37:59 ----D---- C:\Program Files (x86)\Bonjour
2014-11-18 16:37:36 ----D---- C:\ProgramData\Apple
2014-11-18 15:12:02 ----D---- C:\ProgramData\djbdgefejenacddejhnhfmpppllmhcli

======List of files/folders modified in the last 1 month======

2014-11-29 15:28:13 ----D---- C:\WINDOWS\system32\sru
2014-11-29 13:54:00 ----D---- C:\WINDOWS\Microsoft.NET
2014-11-29 13:52:47 ----RSD---- C:\WINDOWS\assembly
2014-11-29 13:38:52 ----D---- C:\WINDOWS\Prefetch
2014-11-29 13:29:20 ----D---- C:\WINDOWS\Temp
2014-11-29 13:29:12 ----SHD---- C:\WINDOWS\Installer
2014-11-29 13:14:03 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2014-11-29 13:12:45 ----D---- C:\WINDOWS\system32\config
2014-11-29 13:12:37 ----D---- C:\WINDOWS\WinSxS
2014-11-29 13:10:37 ----D---- C:\WINDOWS\Inf
2014-11-29 13:08:09 ----RD---- C:\WINDOWS\ToastData
2014-11-29 13:08:09 ----RD---- C:\WINDOWS\System32
2014-11-29 13:08:09 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2014-11-29 13:08:09 ----D---- C:\WINDOWS\SysWOW64
2014-11-29 13:08:09 ----D---- C:\WINDOWS\system32\wbem
2014-11-29 13:08:09 ----D---- C:\WINDOWS\system32\drivers
2014-11-29 13:08:09 ----D---- C:\WINDOWS\MediaViewer
2014-11-29 13:08:09 ----D---- C:\WINDOWS\FileManager
2014-11-29 13:08:09 ----D---- C:\WINDOWS\Camera
2014-11-29 13:08:09 ----D---- C:\WINDOWS\apppatch
2014-11-29 13:08:08 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2014-11-29 13:08:08 ----D---- C:\WINDOWS\system32\cs-CZ
2014-11-29 13:08:07 ----D---- C:\WINDOWS\WinStore
2014-11-29 13:08:06 ----D---- C:\WINDOWS\SYSWOW64\migration
2014-11-29 13:08:06 ----D---- C:\WINDOWS\system32\migration
2014-11-29 13:08:06 ----D---- C:\Program Files\Internet Explorer
2014-11-29 13:08:06 ----D---- C:\Program Files (x86)\Internet Explorer
2014-11-29 13:08:04 ----D---- C:\WINDOWS\system32\DriverStore
2014-11-29 13:04:51 ----RD---- C:\Program Files (x86)
2014-11-29 13:04:51 ----HD---- C:\ProgramData
2014-11-29 12:07:09 ----D---- C:\WINDOWS\tracing
2014-11-29 12:04:37 ----D---- C:\WINDOWS\CbsTemp
2014-11-29 11:42:41 ----D---- C:\Program Files
2014-11-29 11:31:52 ----D---- C:\WINDOWS\system32\catroot2
2014-11-28 21:02:01 ----D---- C:\WINDOWS\system32\catroot
2014-11-28 20:52:35 ----D---- C:\ldiag
2014-11-26 13:33:55 ----SD---- C:\Users\Michaela\AppData\Roaming\Microsoft
2014-11-26 13:26:11 ----D---- C:\Program Files\Common Files
2014-11-26 13:25:31 ----SHD---- C:\System Volume Information
2014-11-25 06:36:52 ----HD---- C:\Program Files\WindowsApps
2014-11-25 06:36:52 ----D---- C:\WINDOWS\AppReadiness
2014-11-24 15:16:16 ----D---- C:\WINDOWS\system32\NDF
2014-11-18 17:38:57 ----DC---- C:\WINDOWS\system32\DRVSTORE
2014-11-18 16:38:29 ----D---- C:\WINDOWS\system32\Tasks
2014-11-18 16:37:36 ----D---- C:\Program Files (x86)\Common Files
2014-11-15 20:45:58 ----D---- C:\WINDOWS\Tasks
2014-11-15 01:04:37 ----D---- C:\Users\Michaela\AppData\Roaming\vlc
2014-11-08 01:23:41 ----D---- C:\Users\Michaela\AppData\Roaming\Skype
2014-11-02 10:17:31 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-07-20 65776]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-07-20 224896]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-01-31 652784]
R0 LHDmgr;LHDmgr; C:\WINDOWS\System32\DRIVERS\LhdX64.sys [2013-05-15 39008]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2013-12-19 32544]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2014-07-20 93568]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-11-25 1041168]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-07-20 427360]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2014-07-20 29208]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-07-20 79184]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2014-07-20 92008]
R3 ACPIVPC;@oem16.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2013-05-15 33560]
R3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\system32\DRIVERS\athw8x.sys [2013-06-18 3680256]
R3 BTATH_HCRP;@oem10.inf,%BTATH_HCRP.SvcDesc%;Bluetooth HCRP Server driver; C:\WINDOWS\System32\drivers\btath_hcrp.sys [2013-01-25 179432]
R3 BTATH_RCP;@oem15.inf,%BTATH_RCP%;Bluetooth AVRCP Device; C:\WINDOWS\System32\drivers\btath_rcp.sys [2013-01-25 136424]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2014-04-28 599240]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2013-08-22 53248]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\System32\drivers\BthLEEnum.sys [2013-12-04 226304]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2014-07-24 118272]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-01-31 81920]
R3 CnxtHdAudService;@oem11.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Conexant UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDRT64.sys [2013-02-26 1680992]
R3 ETD;@oem9.inf,%PS2DeviceDesc%;ELAN PS/2 Port Input Device; C:\WINDOWS\system32\DRIVERS\ETD.sys [2013-02-27 355664]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-10-03 33240]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2013-10-03 4185600]
R3 IntcDAud;@oem21.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2013-01-23 342528]
R3 iwdbus;@oem31.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-09-26 27032]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport – ovladač pro řadič Qualcomm Atheros AR81xx PCI-E Ethernet; C:\WINDOWS\system32\DRIVERS\L1C63x64.sys [2013-06-18 129224]
R3 MEIx64;@oem24.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-11-06 62784]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2013-12-19 12645664]
R3 nvvad_WaveExtensible;@oem39.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2013-12-05 39200]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2014-01-27 167424]
R3 vm331avs;@oem3.inf,%USBCamera.DeviceDesc2%;Digital Camera 1; C:\WINDOWS\System32\Drivers\vm331avs.sys [2013-03-01 1045248]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S3 AthBTPort;@oem8.inf,%BTHSUPPORT.SvcDesc%;Qualcomm Atheros Virtual Bluetooth Class; C:\WINDOWS\system32\DRIVERS\btath_flt.sys [2013-01-25 89168]
S3 BTATH_A2DP;@oem7.inf,%BTATH_A2DP.SvcDesc%;Bluetooth A2DP Audio Driver; C:\WINDOWS\system32\drivers\btath_a2dp.sys [2013-01-25 346192]
S3 btath_avdt;@oem7.inf,%btath_avdt.SvcDesc%;Qualcomm Atheros Bluetooth AVDT Service; C:\WINDOWS\system32\drivers\btath_avdt.sys [2013-01-25 115280]
S3 BTATH_LWFLT;@oem19.inf,%BTATH_LWFLT%;Bluetooth LWFLT Device; C:\WINDOWS\system32\DRIVERS\btath_lwflt.sys [2013-01-25 77464]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-07-24 1200640]
S3 dg_ssudbus;@oem52.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-04-11 110336]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [2009-09-10 117248]
S3 hwusbdev;Huawei DataCard USB PNP Device; C:\WINDOWS\system32\DRIVERS\ewusbdev.sys [2009-10-12 114304]
S3 intaud_WaveExtensible;@oem30.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-09-26 39320]
S3 nmwcd;@oem40.inf,%MFG% %SVC%;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmbx64.sys [2012-01-09 19968]
S3 nmwcdc;@oem44.inf,%MFG% %SVC%;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbox64.sys [2012-01-09 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfdx64.sys [2012-06-11 26112]
S3 RSUSBVSTOR;@oem23.inf,%RSUSBVSTOR.SvcDesc%;RtsUVStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUVStor.sys [2012-12-05 317584]
S3 ssudmdm;@oem53.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-04-11 206080]
S3 Trufos;Trufos; C:\WINDOWS\system32\DRIVERS\Trufos.sys [2014-07-10 389240]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltx64.sys [2012-01-09 9216]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-08-22 44544]
S3 usbser;USB Modem Driver; C:\WINDOWS\System32\drivers\usbser.sys [2013-08-22 33280]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltjx64.sys [2012-01-09 9216]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-05-08 65432]
R2 ameisvc;Web'n'walk Manager mobile equipment installation service; C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe [2010-03-02 67312]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-10-07 60744]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2013-01-25 227456]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-07-20 50344]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 CxAudMsg;Conexant Audio Message Service; C:\windows\system32\CxAudMsg64.exe [2012-12-03 202400]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-01-31 15344]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-06-20 634632]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-11-06 165760]
R2 LavasoftAdAwareService11;Ad-Aware Service 11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareService.exe [2014-10-15 707888]
R2 LavasoftTcpService;LavasoftTcpService; C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.2.9.5\LavasoftTcpService.exe [2014-11-13 1351512]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-11-06 276864]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2013-12-10 1494304]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2013-12-10 15129376]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2013-12-19 922912]
R2 SearchProtectionService;IE Search Set; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe [2014-11-13 15208]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-11-06 364416]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-10-15 643880]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-21 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-25 267440]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2013-10-03 279000]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-21 116648]
S3 LSCWinService;LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [2013-09-25 1674720]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119556
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o pomoc s odvirováním

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5ea2ae26-a259-4308-aafd-247d4c0c2d14}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
kisha
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 25 říj 2007 11:46
Kontaktovat uživatele:
Kontaktovat uživatele kisha

Re: Prosím o pomoc s odvirováním

#7 Příspěvek od kisha »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Michaela at 2014-11-29 18:20:14
Microsoft Windows 8.1
System drive C: has 260 GB (29%) free of 905 GB
Total RAM: 8058 MB (80% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:20:19, on 29. 11. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\trend micro\Michaela.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331STI.EXE
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [T-Mobile Communication Centre] "C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\Manager.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Web Companion] C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
O4 - HKCU\..\RunOnce: [Application Restart #2] C:\Users\Michaela\AppData\Local\Pokki\Engine\pokki.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\Michaela\AppData\Local\Pokki\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session
O4 - HKCU\..\RunOnce: [Application Restart #1] C:\Users\Michaela\AppData\Local\Pokki\Engine\pokki.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\Michaela\AppData\Local\Pokki\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Web'n'walk Manager mobile equipment installation service (ameisvc) - Gemfor s.r.o. - C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AtherosSvc - Qualcomm Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Conexant Audio Message Service (CxAudMsg) - Unknown owner - C:\windows\system32\CxAudMsg64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Ad-Aware Service 11 (LavasoftAdAwareService11) - Unknown owner - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareService.exe
O23 - Service: LavasoftTcpService - Lavasoft Limited - C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.2.9.5\LavasoftTcpService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: LSCWinService - Unknown owner - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: IE Search Set (SearchProtectionService) - Unknown owner - C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Bt and Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 12333 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
"C:\windows\system32\nvvsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\nvvsvc.exe -session
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\windows\system32\CxAudMsg64.exe
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
dashost.exe {60d82383-c0fa-4752-8efc476a10992844}
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareService.exe"
taskeng.exe {9B00562A-C4A0-4A77-89F5-68D19417682E}
taskhostex.exe
"C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.2.9.5\LavasoftTcpService.exe"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
taskhost.exe USER
C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe"
"C:\WINDOWS\system32\rundll32.exe" Shell32.dll,Control_RunDLL mmsys.cpl
"C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
C:\Windows\System32\RuntimeBroker.exe -Embedding
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
"C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-fea004a2-c339-460a-9018-c096d1f93699 -SystemEventPortName:HostProcess-188b7b7b-2a7f-476c-963f-0c5841178819 -IoCancelEventPortName:HostProcess-02bf8045-f577-4204-b800-97f9119d1e52 -NonStateChangingEventPortName:HostProcess-16eabe3e-eed5-4167-bf77-9fa80d552159 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:1ee1425f-df04-4b0e-85ef-41a739ec5474 -DeviceGroupId:WudfDefaultDevicePool
C:\WINDOWS\servicing\TrustedInstaller.exe
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17246_none_fa4ae8e99b1f603c\TiWorker.exe -Embedding
C:\Windows\System32\skydrive.exe -Embedding
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 572 576 584 65536 580
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\WINDOWS\system32\igfxsrvc.exe" -Embedding
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe"
"C:\Program Files\Elantech\ETDIntelligent.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareTray.exe"
"C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe" --minimize
"C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
"C:\Program Files\iPod\bin\iPodService.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\msiexec.exe /V
"C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"

"C:\Users\Michaela\Downloads\RSITx64.exe"
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"


======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-07-20 612248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-12-04 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-07-20 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-12-04 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2013-03-05 2876816]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2013-10-03 391128]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2013-10-03 771032]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2013-10-03 769496]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-01-31 36352]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2013-02-04 899680]
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SACpl.exe [2012-06-13 1647616]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2013-05-15 17080376]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2013-05-15 191544]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2013-12-10 2279712]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2013-12-10 1100248]
""= []
"AdAwareTray"=C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareTray.exe [2014-10-15 8925504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-01-25 131712]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"PC Suite Tray"=C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2012-06-26 1516632]
"T-Mobile Communication Centre"=C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\Manager.exe [2010-03-02 1347496]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-08-27 22041192]
"Web Companion"=C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [2014-11-13 1305408]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Application Restart #2"=C:\Users\Michaela\AppData\Local\Pokki\Engine\pokki.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend=C:\Users\Michaela\AppData\Local\Pokki\Engine\inspector --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session []
"Application Restart #1"=C:\Users\Michaela\AppData\Local\Pokki\Engine\pokki.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend=C:\Users\Michaela\AppData\Local\Pokki\Engine\inspector --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"331BigDog"=C:\Program Files (x86)\USB Camera\VM331STI.EXE [2013-03-01 552960]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [2012-10-31 168464]
"UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2012-04-19 217088]
"RemoteControl10"=C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [2012-03-29 91432]
"Intel AppUp(SM) center"=C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2012-07-12 155488]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-04 4085896]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"KiesTrayAgent"=C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2014-05-28 310064]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-10-15 157480]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-01-25 131712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2013-10-03 623616]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableCAD"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"midi3"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-11-29 18:01:28 ----D---- C:\_OTM
2014-11-29 12:59:49 ----D---- C:\AdwCleaner
2014-11-29 11:44:08 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2014-11-29 11:44:08 ----A---- C:\WINDOWS\system32\schannel.dll
2014-11-29 11:44:07 ----A---- C:\WINDOWS\SYSWOW64\ncryptsslp.dll
2014-11-29 11:44:07 ----A---- C:\WINDOWS\system32\ncryptsslp.dll
2014-11-29 11:44:07 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2014-11-29 11:42:56 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2014-11-29 11:42:55 ----A---- C:\WINDOWS\system32\msxml3.dll
2014-11-29 11:42:41 ----D---- C:\Program Files\trend micro
2014-11-29 11:42:40 ----D---- C:\rsit
2014-11-29 11:42:38 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2014-11-29 11:42:38 ----A---- C:\WINDOWS\system32\msi.dll
2014-11-29 11:42:38 ----A---- C:\WINDOWS\system32\authui.dll
2014-11-29 11:42:37 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2014-11-29 11:42:37 ----A---- C:\WINDOWS\system32\appinfo.dll
2014-11-29 11:42:35 ----A---- C:\WINDOWS\system32\audiosrv.dll
2014-11-29 11:42:35 ----A---- C:\WINDOWS\system32\AudioSes.dll
2014-11-29 11:42:34 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2014-11-29 11:42:34 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2014-11-29 11:42:34 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2014-11-29 11:42:34 ----A---- C:\WINDOWS\system32\AudioEng.dll
2014-11-29 11:42:34 ----A---- C:\WINDOWS\system32\audiodg.exe
2014-11-29 11:42:33 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2014-11-29 11:42:33 ----A---- C:\WINDOWS\system32\EncDump.dll
2014-11-29 11:42:33 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-11-29 11:42:24 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-11-29 11:42:22 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-11-29 11:41:06 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-11-29 11:40:53 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-11-29 11:40:41 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-11-29 11:40:36 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-11-29 11:40:33 ----A---- C:\WINDOWS\system32\wininet.dll
2014-11-29 11:40:32 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2014-11-29 11:40:31 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-11-29 11:40:31 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-11-29 11:40:30 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-11-29 11:40:29 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2014-11-29 11:40:29 ----A---- C:\WINDOWS\system32\inetcomm.dll
2014-11-29 11:40:28 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2014-11-29 11:40:28 ----A---- C:\WINDOWS\system32\actxprxy.dll
2014-11-29 11:40:27 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2014-11-29 11:40:26 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2014-11-29 11:40:26 ----A---- C:\WINDOWS\system32\jscript.dll
2014-11-29 11:40:26 ----A---- C:\WINDOWS\system32\ieui.dll
2014-11-29 11:40:25 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-11-29 11:40:24 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-11-29 11:40:24 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2014-11-29 11:40:24 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2014-11-29 11:40:23 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2014-11-29 11:40:23 ----A---- C:\WINDOWS\system32\vbscript.dll
2014-11-29 11:40:22 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2014-11-29 11:40:21 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-11-29 11:40:21 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2014-11-29 11:40:21 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-11-29 11:40:21 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2014-11-29 11:40:20 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2014-11-29 11:40:19 ----A---- C:\WINDOWS\system32\ieetwproxystub.dll
2014-11-29 11:40:18 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2014-11-29 11:40:18 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2014-11-29 11:40:18 ----A---- C:\WINDOWS\system32\webcheck.dll
2014-11-29 11:40:16 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2014-11-29 11:40:16 ----A---- C:\WINDOWS\SYSWOW64\hlink.dll
2014-11-29 11:40:16 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-11-29 11:40:15 ----A---- C:\WINDOWS\system32\msrating.dll
2014-11-29 11:40:15 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-11-29 11:40:15 ----A---- C:\WINDOWS\system32\hlink.dll
2014-11-29 11:40:14 ----A---- C:\WINDOWS\SYSWOW64\inseng.dll
2014-11-29 11:40:14 ----A---- C:\WINDOWS\SYSWOW64\ieUnatt.exe
2014-11-29 11:40:14 ----A---- C:\WINDOWS\SYSWOW64\iesysprep.dll
2014-11-29 11:40:14 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2014-11-29 11:40:14 ----A---- C:\WINDOWS\system32\ieUnatt.exe
2014-11-29 11:40:14 ----A---- C:\WINDOWS\system32\iesysprep.dll
2014-11-29 11:40:14 ----A---- C:\WINDOWS\system32\iepeers.dll
2014-11-29 11:40:14 ----A---- C:\WINDOWS\system32\ieetwcollector.exe
2014-11-29 11:40:13 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2014-11-29 11:40:13 ----A---- C:\WINDOWS\system32\inseng.dll
2014-11-29 11:40:12 ----A---- C:\WINDOWS\SYSWOW64\msfeedsbs.dll
2014-11-29 11:40:12 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2014-11-29 11:40:12 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2014-11-29 11:40:12 ----A---- C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-11-29 11:40:11 ----A---- C:\WINDOWS\SYSWOW64\occache.dll
2014-11-29 11:40:11 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-11-29 11:40:11 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-11-29 11:40:11 ----A---- C:\WINDOWS\system32\jsproxy.dll
2014-11-29 11:40:10 ----A---- C:\WINDOWS\SYSWOW64\JavaScriptCollectionAgent.dll
2014-11-29 11:40:10 ----A---- C:\WINDOWS\SYSWOW64\iexpress.exe
2014-11-29 11:40:10 ----A---- C:\WINDOWS\SYSWOW64\IEAdvpack.dll
2014-11-29 11:40:10 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2014-11-29 11:40:09 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2014-11-29 11:40:09 ----A---- C:\WINDOWS\SYSWOW64\imgutil.dll
2014-11-29 11:40:09 ----A---- C:\WINDOWS\SYSWOW64\ieetwproxystub.dll
2014-11-29 11:40:09 ----A---- C:\WINDOWS\system32\occache.dll
2014-11-29 11:40:09 ----A---- C:\WINDOWS\system32\imgutil.dll
2014-11-29 11:40:08 ----A---- C:\WINDOWS\SYSWOW64\pngfilt.dll
2014-11-29 11:40:08 ----A---- C:\WINDOWS\SYSWOW64\licmgr10.dll
2014-11-29 11:40:08 ----A---- C:\WINDOWS\system32\pngfilt.dll
2014-11-29 11:40:08 ----A---- C:\WINDOWS\system32\licmgr10.dll
2014-11-29 11:40:07 ----A---- C:\WINDOWS\SYSWOW64\wextract.exe
2014-11-29 11:40:07 ----A---- C:\WINDOWS\SYSWOW64\url.dll
2014-11-29 11:40:07 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2014-11-29 11:40:07 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2014-11-29 11:40:07 ----A---- C:\WINDOWS\system32\url.dll
2014-11-29 11:40:07 ----A---- C:\WINDOWS\system32\iernonce.dll
2014-11-29 11:40:06 ----A---- C:\WINDOWS\system32\wextract.exe
2014-11-29 11:40:06 ----A---- C:\WINDOWS\system32\iexpress.exe
2014-11-29 11:40:06 ----A---- C:\WINDOWS\system32\iesetup.dll
2014-11-29 11:40:06 ----A---- C:\WINDOWS\system32\IEAdvpack.dll
2014-11-29 11:40:05 ----A---- C:\WINDOWS\SYSWOW64\mshta.exe
2014-11-29 11:40:05 ----A---- C:\WINDOWS\SYSWOW64\msfeedssync.exe
2014-11-29 11:40:05 ----A---- C:\WINDOWS\system32\mshta.exe
2014-11-29 11:40:05 ----A---- C:\WINDOWS\system32\msfeedssync.exe
2014-11-29 11:39:12 ----A---- C:\WINDOWS\SYSWOW64\pku2u.dll
2014-11-29 11:39:12 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2014-11-29 11:39:12 ----A---- C:\WINDOWS\system32\pku2u.dll
2014-11-29 11:39:12 ----A---- C:\WINDOWS\system32\kerberos.dll
2014-11-29 11:39:10 ----A---- C:\WINDOWS\system32\win32k.sys
2014-11-29 11:39:03 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2014-11-29 11:39:01 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2014-11-29 11:39:00 ----A---- C:\WINDOWS\system32\mstscax.dll
2014-11-29 11:38:59 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2014-11-29 11:38:59 ----A---- C:\WINDOWS\system32\SyncEngine.dll
2014-11-29 11:38:57 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2014-11-29 11:38:57 ----A---- C:\WINDOWS\system32\ntdll.dll
2014-11-29 11:38:57 ----A---- C:\WINDOWS\system32\KernelBase.dll
2014-11-29 11:38:56 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2014-11-29 11:38:55 ----A---- C:\WINDOWS\system32\WSShared.dll
2014-11-29 11:38:55 ----A---- C:\WINDOWS\system32\propsys.dll
2014-11-29 11:38:54 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2014-11-29 11:38:54 ----A---- C:\WINDOWS\system32\Wldap32.dll
2014-11-29 11:38:54 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2014-11-29 11:38:53 ----A---- C:\WINDOWS\SYSWOW64\Wldap32.dll
2014-11-29 11:38:53 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2014-11-29 11:38:53 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2014-11-29 11:38:52 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2014-11-29 11:38:52 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-11-29 11:38:51 ----A---- C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-11-29 11:38:51 ----A---- C:\WINDOWS\system32\SkyDrive.exe
2014-11-29 11:38:50 ----A---- C:\WINDOWS\system32\pcsvDevice.dll
2014-11-29 11:38:50 ----A---- C:\WINDOWS\system32\httpprxm.dll
2014-11-29 11:38:50 ----A---- C:\WINDOWS\system32\bisrv.dll
2014-11-29 11:38:49 ----A---- C:\WINDOWS\SYSWOW64\SkyDriveShell.dll
2014-11-29 11:38:49 ----A---- C:\WINDOWS\system32\SkyDriveShell.dll
2014-11-29 11:38:49 ----A---- C:\WINDOWS\system32\ProximityService.dll
2014-11-29 11:38:49 ----A---- C:\WINDOWS\system32\adhsvc.dll
2014-11-29 11:38:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-11-29 11:38:47 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-11-29 11:38:13 ----A---- C:\WINDOWS\SYSWOW64\packager.dll
2014-11-29 11:38:13 ----A---- C:\WINDOWS\system32\packager.dll
2014-11-29 11:37:43 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2014-11-29 11:37:42 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2014-11-29 11:37:42 ----A---- C:\WINDOWS\system32\lsasrv.dll
2014-11-29 11:37:42 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2014-11-29 11:37:42 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2014-11-29 11:37:42 ----A---- C:\WINDOWS\system32\certcli.dll
2014-11-29 11:37:41 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2014-11-29 11:37:41 ----A---- C:\WINDOWS\system32\rfxvmt.dll
2014-11-29 11:37:41 ----A---- C:\WINDOWS\system32\drivers\rdpvideominiport.sys
2014-11-29 11:37:41 ----A---- C:\WINDOWS\system32\adtschema.dll
2014-11-29 11:37:40 ----A---- C:\WINDOWS\SYSWOW64\msaudite.dll
2014-11-29 11:37:40 ----A---- C:\WINDOWS\system32\rdpudd.dll
2014-11-29 11:37:40 ----A---- C:\WINDOWS\system32\msaudite.dll
2014-11-29 11:37:19 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2014-11-29 11:37:19 ----A---- C:\WINDOWS\system32\oleaut32.dll
2014-11-29 11:36:25 ----A---- C:\WINDOWS\system32\rastls.dll
2014-11-29 11:36:24 ----A---- C:\WINDOWS\SYSWOW64\rastls.dll
2014-11-29 11:36:21 ----A---- C:\WINDOWS\system32\wuaueng.dll
2014-11-29 11:36:20 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2014-11-29 11:36:20 ----A---- C:\WINDOWS\system32\wuapi.dll
2014-11-29 11:36:19 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2014-11-29 11:36:19 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2014-11-29 11:36:19 ----A---- C:\WINDOWS\system32\wudriver.dll
2014-11-29 11:36:19 ----A---- C:\WINDOWS\system32\wucltux.dll
2014-11-29 11:36:18 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2014-11-29 11:36:18 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2014-11-29 11:36:18 ----A---- C:\WINDOWS\system32\wuwebv.dll
2014-11-29 11:36:18 ----A---- C:\WINDOWS\system32\wups2.dll
2014-11-29 11:36:18 ----A---- C:\WINDOWS\system32\wups.dll
2014-11-29 11:36:18 ----A---- C:\WINDOWS\system32\wuauclt.exe
2014-11-29 11:36:17 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2014-11-29 11:36:17 ----A---- C:\WINDOWS\system32\wuapp.exe
2014-11-29 11:36:17 ----A---- C:\WINDOWS\system32\wuaext.dll
2014-11-29 11:36:09 ----A---- C:\WINDOWS\system32\shell32.dll
2014-11-29 11:36:07 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2014-11-29 11:36:05 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2014-11-29 11:36:02 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2014-11-29 11:36:01 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2014-11-29 11:35:59 ----A---- C:\WINDOWS\system32\twinui.dll
2014-11-29 11:35:57 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2014-11-29 11:35:57 ----A---- C:\WINDOWS\system32\localspl.dll
2014-11-29 11:35:56 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2014-11-29 11:35:56 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-11-29 11:35:55 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-11-29 11:35:54 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2014-11-29 11:35:54 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2014-11-29 11:35:53 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2014-11-29 11:35:53 ----A---- C:\WINDOWS\system32\win32spl.dll
2014-11-29 11:35:52 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2014-11-29 11:35:52 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2014-11-29 11:35:51 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2014-11-29 11:35:51 ----A---- C:\WINDOWS\system32\puiobj.dll
2014-11-29 11:35:50 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll
2014-11-29 11:35:49 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2014-11-29 11:35:48 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2014-11-29 11:35:47 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll
2014-11-29 11:35:47 ----A---- C:\WINDOWS\system32\untfs.dll
2014-11-29 11:35:44 ----A---- C:\WINDOWS\system32\FXSCOMEX.dll
2014-11-29 11:35:44 ----A---- C:\WINDOWS\system32\FXSAPI.dll
2014-11-29 11:35:43 ----A---- C:\WINDOWS\SYSWOW64\FXSAPI.dll
2014-11-29 11:35:43 ----A---- C:\WINDOWS\system32\winbici.dll
2014-11-26 13:33:56 ----D---- C:\Users\Michaela\AppData\Roaming\LavasoftStatistics
2014-11-26 13:33:18 ----A---- C:\WINDOWS\SYSWOW64\LavasoftTcpServiceOff.ini
2014-11-26 13:33:18 ----A---- C:\WINDOWS\SYSWOW64\LavasoftTcpService.ini
2014-11-26 13:33:18 ----A---- C:\WINDOWS\system32\LavasoftTcpServiceOff.ini
2014-11-26 13:33:15 ----A---- C:\WINDOWS\system32\LavasoftTcpService64.dll
2014-11-26 13:33:14 ----A---- C:\WINDOWS\SYSWOW64\LavasoftTcpService.dll
2014-11-26 13:32:45 ----D---- C:\Program Files (x86)\Lavasoft
2014-11-26 13:32:33 ----D---- C:\Users\Michaela\AppData\Roaming\Lavasoft
2014-11-26 13:31:38 ----D---- C:\Program Files\Lavasoft
2014-11-26 13:26:11 ----D---- C:\Program Files\Common Files\Lavasoft
2014-11-26 13:23:43 ----D---- C:\ProgramData\Lavasoft
2014-11-18 17:39:07 ----D---- C:\Users\Michaela\AppData\Roaming\Apple Computer
2014-11-18 17:38:57 ----A---- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys
2014-11-18 17:37:59 ----D---- C:\Program Files\iPod
2014-11-18 17:37:57 ----D---- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2014-11-18 17:37:57 ----D---- C:\ProgramData\Apple Computer
2014-11-18 17:37:57 ----D---- C:\Program Files\iTunes
2014-11-18 17:37:57 ----D---- C:\Program Files (x86)\iTunes
2014-11-18 16:38:26 ----D---- C:\Program Files (x86)\Apple Software Update
2014-11-18 16:38:13 ----D---- C:\Program Files\Common Files\Apple
2014-11-18 16:37:59 ----D---- C:\Program Files\Bonjour
2014-11-18 16:37:59 ----D---- C:\Program Files (x86)\Bonjour
2014-11-18 16:37:36 ----D---- C:\ProgramData\Apple
2014-11-18 15:12:02 ----D---- C:\ProgramData\djbdgefejenacddejhnhfmpppllmhcli

======List of files/folders modified in the last 1 month======

2014-11-29 18:20:13 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2014-11-29 18:19:25 ----SHD---- C:\WINDOWS\Installer
2014-11-29 18:18:21 ----D---- C:\WINDOWS\Temp
2014-11-29 18:16:05 ----D---- C:\WINDOWS\Prefetch
2014-11-29 18:12:37 ----D---- C:\WINDOWS\system32\MRT
2014-11-29 18:12:23 ----SHD---- C:\System Volume Information
2014-11-29 18:11:43 ----D---- C:\WINDOWS\system32\config
2014-11-29 18:01:30 ----D---- C:\WINDOWS\Tasks
2014-11-29 18:00:01 ----D---- C:\WINDOWS\system32\sru
2014-11-29 16:15:17 ----D---- C:\WINDOWS\Microsoft.NET
2014-11-29 16:10:58 ----RSD---- C:\WINDOWS\assembly
2014-11-29 16:08:10 ----D---- C:\WINDOWS\rescache
2014-11-29 15:57:26 ----D---- C:\WINDOWS\AppReadiness
2014-11-29 15:57:21 ----HD---- C:\Program Files\WindowsApps
2014-11-29 15:56:36 ----D---- C:\WINDOWS\CbsTemp
2014-11-29 15:55:06 ----D---- C:\WINDOWS\WinSxS
2014-11-29 13:10:37 ----D---- C:\WINDOWS\Inf
2014-11-29 13:08:09 ----RD---- C:\WINDOWS\ToastData
2014-11-29 13:08:09 ----RD---- C:\WINDOWS\System32
2014-11-29 13:08:09 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2014-11-29 13:08:09 ----D---- C:\WINDOWS\SysWOW64
2014-11-29 13:08:09 ----D---- C:\WINDOWS\system32\wbem
2014-11-29 13:08:09 ----D---- C:\WINDOWS\system32\drivers
2014-11-29 13:08:09 ----D---- C:\WINDOWS\MediaViewer
2014-11-29 13:08:09 ----D---- C:\WINDOWS\FileManager
2014-11-29 13:08:09 ----D---- C:\WINDOWS\Camera
2014-11-29 13:08:09 ----D---- C:\WINDOWS\apppatch
2014-11-29 13:08:08 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2014-11-29 13:08:08 ----D---- C:\WINDOWS\system32\cs-CZ
2014-11-29 13:08:07 ----D---- C:\WINDOWS\WinStore
2014-11-29 13:08:06 ----D---- C:\WINDOWS\SYSWOW64\migration
2014-11-29 13:08:06 ----D---- C:\WINDOWS\system32\migration
2014-11-29 13:08:06 ----D---- C:\Program Files\Internet Explorer
2014-11-29 13:08:06 ----D---- C:\Program Files (x86)\Internet Explorer
2014-11-29 13:08:04 ----D---- C:\WINDOWS\system32\DriverStore
2014-11-29 13:04:51 ----RD---- C:\Program Files (x86)
2014-11-29 13:04:51 ----HD---- C:\ProgramData
2014-11-29 12:07:09 ----D---- C:\WINDOWS\tracing
2014-11-29 11:42:41 ----D---- C:\Program Files
2014-11-29 11:31:52 ----D---- C:\WINDOWS\system32\catroot2
2014-11-28 21:02:01 ----D---- C:\WINDOWS\system32\catroot
2014-11-28 20:52:35 ----D---- C:\ldiag
2014-11-26 13:33:55 ----SD---- C:\Users\Michaela\AppData\Roaming\Microsoft
2014-11-26 13:26:11 ----D---- C:\Program Files\Common Files
2014-11-24 15:16:16 ----D---- C:\WINDOWS\system32\NDF
2014-11-18 17:38:57 ----DC---- C:\WINDOWS\system32\DRVSTORE
2014-11-18 16:38:29 ----D---- C:\WINDOWS\system32\Tasks
2014-11-18 16:37:36 ----D---- C:\Program Files (x86)\Common Files
2014-11-15 01:04:37 ----D---- C:\Users\Michaela\AppData\Roaming\vlc
2014-11-08 01:23:41 ----D---- C:\Users\Michaela\AppData\Roaming\Skype
2014-11-02 10:17:31 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-10-31 23:26:42 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-07-20 65776]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-07-20 224896]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-01-31 652784]
R0 LHDmgr;LHDmgr; C:\WINDOWS\System32\DRIVERS\LhdX64.sys [2013-05-15 39008]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2013-12-19 32544]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2014-07-20 93568]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-11-25 1041168]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-07-20 427360]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2014-07-20 29208]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-07-20 79184]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2014-07-20 92008]
R3 ACPIVPC;@oem16.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2013-05-15 33560]
R3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\system32\DRIVERS\athw8x.sys [2013-06-18 3680256]
R3 BTATH_HCRP;@oem10.inf,%BTATH_HCRP.SvcDesc%;Bluetooth HCRP Server driver; C:\WINDOWS\System32\drivers\btath_hcrp.sys [2013-01-25 179432]
R3 BTATH_RCP;@oem15.inf,%BTATH_RCP%;Bluetooth AVRCP Device; C:\WINDOWS\System32\drivers\btath_rcp.sys [2013-01-25 136424]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2014-04-28 599240]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2013-08-22 53248]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\System32\drivers\BthLEEnum.sys [2013-12-04 226304]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2014-07-24 118272]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-01-31 81920]
R3 CnxtHdAudService;@oem11.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Conexant UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDRT64.sys [2013-02-26 1680992]
R3 ETD;@oem9.inf,%PS2DeviceDesc%;ELAN PS/2 Port Input Device; C:\WINDOWS\system32\DRIVERS\ETD.sys [2013-02-27 355664]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-10-03 33240]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2013-10-03 4185600]
R3 IntcDAud;@oem21.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2013-01-23 342528]
R3 iwdbus;@oem31.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-09-26 27032]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport – ovladač pro řadič Qualcomm Atheros AR81xx PCI-E Ethernet; C:\WINDOWS\system32\DRIVERS\L1C63x64.sys [2013-06-18 129224]
R3 MEIx64;@oem24.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-11-06 62784]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2013-12-19 12645664]
R3 nvvad_WaveExtensible;@oem39.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2013-12-05 39200]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2014-01-27 167424]
R3 vm331avs;@oem3.inf,%USBCamera.DeviceDesc2%;Digital Camera 1; C:\WINDOWS\System32\Drivers\vm331avs.sys [2013-03-01 1045248]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S3 AthBTPort;@oem8.inf,%BTHSUPPORT.SvcDesc%;Qualcomm Atheros Virtual Bluetooth Class; C:\WINDOWS\system32\DRIVERS\btath_flt.sys [2013-01-25 89168]
S3 BTATH_A2DP;@oem7.inf,%BTATH_A2DP.SvcDesc%;Bluetooth A2DP Audio Driver; C:\WINDOWS\system32\drivers\btath_a2dp.sys [2013-01-25 346192]
S3 btath_avdt;@oem7.inf,%btath_avdt.SvcDesc%;Qualcomm Atheros Bluetooth AVDT Service; C:\WINDOWS\system32\drivers\btath_avdt.sys [2013-01-25 115280]
S3 BTATH_LWFLT;@oem19.inf,%BTATH_LWFLT%;Bluetooth LWFLT Device; C:\WINDOWS\system32\DRIVERS\btath_lwflt.sys [2013-01-25 77464]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-07-24 1200640]
S3 dg_ssudbus;@oem52.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-04-11 110336]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [2009-09-10 117248]
S3 hwusbdev;Huawei DataCard USB PNP Device; C:\WINDOWS\system32\DRIVERS\ewusbdev.sys [2009-10-12 114304]
S3 intaud_WaveExtensible;@oem30.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-09-26 39320]
S3 nmwcd;@oem40.inf,%MFG% %SVC%;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmbx64.sys [2012-01-09 19968]
S3 nmwcdc;@oem44.inf,%MFG% %SVC%;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbox64.sys [2012-01-09 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfdx64.sys [2012-06-11 26112]
S3 RSUSBVSTOR;@oem23.inf,%RSUSBVSTOR.SvcDesc%;RtsUVStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUVStor.sys [2012-12-05 317584]
S3 ssudmdm;@oem53.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-04-11 206080]
S3 Trufos;Trufos; C:\WINDOWS\system32\DRIVERS\Trufos.sys [2014-07-10 389240]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltx64.sys [2012-01-09 9216]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-08-22 44544]
S3 usbser;USB Modem Driver; C:\WINDOWS\System32\drivers\usbser.sys [2013-08-22 33280]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltjx64.sys [2012-01-09 9216]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-05-08 65432]
R2 ameisvc;Web'n'walk Manager mobile equipment installation service; C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe [2010-03-02 67312]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-10-07 60744]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2013-01-25 227456]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-07-20 50344]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 CxAudMsg;Conexant Audio Message Service; C:\windows\system32\CxAudMsg64.exe [2012-12-03 202400]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-01-31 15344]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-06-20 634632]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-11-06 165760]
R2 LavasoftAdAwareService11;Ad-Aware Service 11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareService.exe [2014-10-15 707888]
R2 LavasoftTcpService;LavasoftTcpService; C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.2.9.5\LavasoftTcpService.exe [2014-11-13 1351512]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-11-06 276864]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2013-12-10 1494304]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2013-12-10 15129376]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2013-12-19 922912]
R2 SearchProtectionService;IE Search Set; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe [2014-11-13 15208]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-11-06 364416]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-10-15 643880]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-21 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-25 267440]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2013-10-03 279000]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-21 116648]
S3 LSCWinService;LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [2013-09-25 1674720]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119556
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o pomoc s odvirováním

#8 Příspěvek od Rudy »

Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
kisha
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 25 říj 2007 11:46
Kontaktovat uživatele:
Kontaktovat uživatele kisha

Re: Prosím o pomoc s odvirováním

#9 Příspěvek od kisha »

avast.jpg
avast.jpg (30.84 KiB) Zobrazeno 1163 x
Pořád tam skáče tohle
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119556
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o pomoc s odvirováním

#10 Příspěvek od Rudy »

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
kisha
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 25 říj 2007 11:46
Kontaktovat uživatele:
Kontaktovat uživatele kisha

Re: Prosím o pomoc s odvirováním

#11 Příspěvek od kisha »

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 29. 11. 2014
Scan Time: 19:55:49
Logfile: log.txt
Administrator: Yes

Version: 2.00.3.1025
Malware Database: v2014.11.29.07
Rootkit Database: v2014.11.29.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: Michaela

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 389829
Time Elapsed: 14 min, 41 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 1
PUP.Optional.Delta.A, C:\Users\Michaela\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: ( "startup_urls": [ "http://www.google.com/ig/redirectdomain ... &bmod=EU01", "http://www.google.com", "http://www.delta-search.com/?affID=1215 ... 7BCBD42F59", "http://www1.delta-search.com/?affID=119 ... 5D4C939FAC" ],), ,[afdca29f8bf156e007dbbdd50df8fd03]

Physical Sectors: 0
(No malicious items detected)


(end)
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119556
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o pomoc s odvirováním

#12 Příspěvek od Rudy »

Vše, co MBAM nalezl, smažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“