Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Vir - web?

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Pheliox
Návštěvník
Návštěvník
Příspěvky: 85
Registrován: 06 srp 2012 11:28

Vir - web?

#1 Příspěvek od Pheliox »

Dobrý den,
včera jsem si nechtěně stahnul pochybný soubor, nevšiml si toho a teď si myslím, že se mi vir zažral do windows, prosím pomoc.
Děkuji.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Viktor at 2014-12-01 14:59:59
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 203 GB (45%) free of 456 GB
Total RAM: 3894 MB (49% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:00:01, on 1.12.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17420)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Motorola\Bluetooth\btplayerctrl.exe
C:\Program Files (x86)\Hewlett-Packard\Media\Webcam\YCMMirage.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera_crashreporter.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Clover\clover.exe
C:\Program Files\trend micro\Viktor.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: LinkVerifierBHO - {D5974A72-C81C-4DC3-BE77-A8A7BBC8864E} - C:\Program Files (x86)\DAP\LinkVerifier.dll
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)
O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [ADSKAppManager] "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
O4 - HKUS\S-1-5-18\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (User 'Default user')
O8 - Extra context menu item: &Download with &DAP - C:\Program Files (x86)\DAP\dapextie.htm
O8 - Extra context menu item: &Verify with DAP - C:\Program Files (x86)\DAP\dapverify.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files (x86)\DAP\dapextie2.htm
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-137 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-137 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Autodesk Application Manager Service (AdAppMgrSvc) - Autodesk Inc. - C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: Bluetooth Device Manager - Motorola, Inc. - C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe
O23 - Service: Bluetooth Media Service - Motorola, Inc. - C:\Program Files\Motorola\Bluetooth\audiosrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola, Inc. - C:\Program Files\Motorola\Bluetooth\obexsrv.exe
O23 - Service: @C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\Windows\System32\ezSharedSvcHost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Wireless Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: HPWMISVC - Unknown owner - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Autodesk Simulation Moldflow MITSI 2015 Job Manager (mitsijm2015) - Autodesk, Inc. - C:\Program Files\Autodesk\Inventor 2015\Moldflow\bin\mitsijm.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12455 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\vcsFPService.exe
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
atieclxx
taskeng.exe {71A96F0C-356E-49AA-8DB1-43BC303F46C0}
C:\Windows\System32\spoolsv.exe
"C:\Program Files\DigitalPersona\Bin\DpHostW.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\IDT\WDM\AESTSr64.exe"
"C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe"
C:\Windows\SysWOW64\ezSharedSvcHost.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe"
"C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"
"C:\Program Files\Autodesk\Inventor 2015\Moldflow\bin\mitsijm.exe"
"C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
C:\Windows\System32\tcpsvcs.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 1492
"C:\Program Files\Motorola\Bluetooth\obexsrv.exe"
"C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe"
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
ngservice.exe pipeserver
"taskhost.exe"
taskeng.exe {FE0D56D1-0496-4D99-868C-AD4907E5861B}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\System32\rundll32.exe" "C:\Program Files\Motorola\Bluetooth\btmshell.dll",TrayApp
"C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" /background
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Windows\System32\igfxpers.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Motorola\Bluetooth\audiosrv.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Motorola\Bluetooth\btplayerctrl.exe" -Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Hewlett-Packard\Media\Webcam\YCMMirage.exe"
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe" /hidden
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe" "<hpNotification><Toast><Title>HP Wireless Assistant</Title><Text>Combo: On</Text><IconPath>C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WA_tray_32_on.ico</IconPath><ID>1656413666</ID><Path>C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe</Path><Parameters></Parameters></Toast></hpNotification>"
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --ran-launcher /crash-reporter-parent-id=4568
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --type=gpu-process --channel="4568.0.324757236\1119386497" --enable-proprietary-media-types-playback --crash-reporter-pid=3788 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,17,39 --disable-accelerated-video-decode --gpu-vendor-id=0x1002 --gpu-device-id=0x68c1 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=8.961.0.0 --enable-proprietary-media-types-playback --crash-reporter-pid=3788 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=3788 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="4568.2.939593127\44019420" /prefetch:673131151
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=3788 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="4568.3.1145564449\365444596" /prefetch:673131151
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=3788 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-gpu-compositing --channel="4568.5.303504090\1606913346" /prefetch:673131151
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=3788 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-gpu-compositing --channel="4568.6.803390038\510704001" /prefetch:673131151
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=3788 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-gpu-compositing --channel="4568.7.1941484695\98146472" /prefetch:673131151
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=3788 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-gpu-compositing --channel="4568.8.626554408\976710320" /prefetch:673131151
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --type=plugin --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll" --disable-direct-npapi-requests --lang=cs --channel="4568.10.2106512042\2120403501" --enable-proprietary-media-types-playback --crash-reporter-pid=3788 /prefetch:-390060480

taskhost.exe $(Arg0)
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\explorer.exe /factory,{ceff45ee-c862-41de-aee2-a022c81eda92} -Embedding
"C:\Program Files (x86)\Clover\clover.exe"
"C:\Users\Viktor\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-08-04 553896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-11-30 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-08-04 211880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F8A6CAA2-533D-4AED-9E05-8EB19A4021AB}]
ExplorerWatcher Class - C:\Program Files (x86)\Clover\TabHelper64.dll [2014-01-23 201216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-30 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5974A72-C81C-4DC3-BE77-A8A7BBC8864E}]
SpeedBit Link Verification Helper - C:\Program Files (x86)\DAP\LinkVerifier.dll [2014-09-28 442472]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-10-14 2837288]
"BTMTrayAgent"=C:\Program Files\Motorola\Bluetooth\btmshell.dll [2010-06-10 24783624]
"SmartMenu"=C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [2010-01-20 611896]
"HPWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe [2010-06-18 8192]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-07-27 161304]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-07-27 386584]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-07-27 415256]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2010-07-22 487424]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"Autodesk Sync"=C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [2014-08-28 1235336]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HP Quick Launch"=C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [2010-06-29 602168]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-04-06 641664]
"ADSKAppManager"=C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [2014-06-21 488328]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-11-30 5226600]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-07-27 271360]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=DPPassFilter
scecli

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DpHost]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"EnableShellExecuteHooks"=1
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2014-12-01 14:55:40 ----D---- C:\rsit
2014-11-30 00:17:17 ----D---- C:\Windows\SYSWOW64\vbox
2014-11-30 00:17:17 ----D---- C:\Windows\system32\vbox
2014-11-30 00:11:31 ----A---- C:\Windows\system32\aswBoot.exe
2014-11-30 00:11:27 ----A---- C:\Windows\avastSS.scr
2014-11-28 19:41:53 ----D---- C:\Program Files (x86)\Bang
2014-11-24 15:29:02 ----A---- C:\Windows\system32\drivers\stwrt64.sys
2014-11-24 15:29:01 ----N---- C:\Windows\system32\stapi64.dll
2014-11-24 15:29:01 ----A---- C:\Windows\system32\stcplx64.dll
2014-11-24 15:29:01 ----A---- C:\Windows\system32\stapo64.dll
2014-11-24 15:28:56 ----D---- C:\Program Files\IDT
2014-11-18 20:35:29 ----A---- C:\Windows\SYSWOW64\pku2u.dll
2014-11-18 20:35:29 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-11-18 20:35:29 ----A---- C:\Windows\system32\pku2u.dll
2014-11-18 20:35:29 ----A---- C:\Windows\system32\kerberos.dll
2014-11-12 16:47:42 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-11-12 16:47:42 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-11-12 16:47:41 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-11-12 16:47:41 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-11-12 16:47:41 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-11-12 16:47:41 ----A---- C:\Windows\system32\iernonce.dll
2014-11-12 16:47:41 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-11-12 16:47:41 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-11-12 16:47:41 ----A---- C:\Windows\system32\ie4uinit.exe
2014-11-12 16:47:40 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-11-12 16:47:40 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-11-12 16:47:40 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-11-12 16:47:40 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-11-12 16:47:40 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 16:47:39 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-11-12 16:47:39 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-11-12 16:47:39 ----A---- C:\Windows\system32\iedkcs32.dll
2014-11-12 16:47:38 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-11-12 16:47:38 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-11-12 16:47:38 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-11-12 16:47:38 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-11-12 16:47:38 ----A---- C:\Windows\system32\urlmon.dll
2014-11-12 16:47:38 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 16:47:37 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-11-12 16:47:37 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-11-12 16:47:37 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-11-12 16:47:37 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 16:47:37 ----A---- C:\Windows\system32\msfeeds.dll
2014-11-12 16:47:37 ----A---- C:\Windows\system32\dxtrans.dll
2014-11-12 16:47:36 ----A---- C:\Windows\system32\iesetup.dll
2014-11-12 16:47:36 ----A---- C:\Windows\system32\ieapfltr.dll
2014-11-12 16:47:35 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-11-12 16:47:35 ----A---- C:\Windows\system32\iertutil.dll
2014-11-12 16:47:34 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-11-12 16:47:34 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-11-12 16:47:34 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-11-12 16:47:34 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-11-12 16:47:34 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-11-12 16:47:34 ----A---- C:\Windows\system32\jsproxy.dll
2014-11-12 16:47:34 ----A---- C:\Windows\system32\ieUnatt.exe
2014-11-12 16:47:33 ----A---- C:\Windows\system32\ieui.dll
2014-11-12 16:47:33 ----A---- C:\Windows\system32\ieframe.dll
2014-11-12 16:47:33 ----A---- C:\Windows\system32\dxtmsft.dll
2014-11-12 16:47:32 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-11-12 16:47:32 ----A---- C:\Windows\system32\mshtmled.dll
2014-11-12 16:47:32 ----A---- C:\Windows\system32\jscript9diag.dll
2014-11-12 16:47:32 ----A---- C:\Windows\system32\jscript9.dll
2014-11-12 16:47:31 ----A---- C:\Windows\system32\wininet.dll
2014-11-12 16:47:31 ----A---- C:\Windows\system32\vbscript.dll
2014-11-12 16:47:31 ----A---- C:\Windows\system32\msrating.dll
2014-11-12 16:47:31 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-11-12 16:47:30 ----A---- C:\Windows\system32\mshtml.dll
2014-11-12 16:46:54 ----A---- C:\Windows\system32\termsrv.dll
2014-11-12 16:46:54 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-11-12 16:46:54 ----A---- C:\Windows\system32\adtschema.dll
2014-11-12 16:46:53 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-11-12 16:46:53 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-11-12 16:46:53 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2014-11-12 16:46:53 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2014-11-12 16:46:53 ----A---- C:\Windows\system32\msaudite.dll
2014-11-12 16:46:53 ----A---- C:\Windows\system32\lsasrv.dll
2014-11-12 16:41:57 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-11-12 16:41:57 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-11-12 16:41:57 ----A---- C:\Windows\system32\msxml3r.dll
2014-11-12 16:41:57 ----A---- C:\Windows\system32\msxml3.dll
2014-11-12 16:41:56 ----A---- C:\Windows\SYSWOW64\IMJP10K.DLL
2014-11-12 16:41:56 ----A---- C:\Windows\system32\IMJP10K.DLL
2014-11-12 16:41:55 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2014-11-12 16:41:55 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2014-11-12 16:41:55 ----A---- C:\Windows\system32\EncDump.dll
2014-11-12 16:41:55 ----A---- C:\Windows\system32\audiosrv.dll
2014-11-12 16:41:55 ----A---- C:\Windows\system32\AudioSes.dll
2014-11-12 16:41:55 ----A---- C:\Windows\system32\AUDIOKSE.dll
2014-11-12 16:41:55 ----A---- C:\Windows\system32\AudioEng.dll
2014-11-12 16:41:54 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2014-11-12 16:41:52 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-11-12 16:41:52 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-11-12 16:41:52 ----A---- C:\Windows\system32\schannel.dll
2014-11-12 16:41:52 ----A---- C:\Windows\system32\ncrypt.dll
2014-11-12 16:41:51 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-11-12 16:41:51 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-11-12 16:41:51 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-11-12 16:41:51 ----A---- C:\Windows\system32\wdigest.dll
2014-11-12 16:41:51 ----A---- C:\Windows\system32\TSpkg.dll
2014-11-12 16:41:51 ----A---- C:\Windows\system32\msv1_0.dll
2014-11-12 16:41:51 ----A---- C:\Windows\system32\credssp.dll
2014-11-12 16:41:50 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-11-12 16:41:45 ----A---- C:\Windows\system32\packager.dll
2014-11-12 16:41:44 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-11-12 16:41:43 ----A---- C:\Windows\system32\win32k.sys
2014-11-12 16:41:42 ----A---- C:\Windows\system32\msi.dll
2014-11-12 16:41:41 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-11-12 16:41:26 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2014-11-12 16:41:26 ----A---- C:\Windows\system32\oleaut32.dll
2014-11-09 15:03:01 ----D---- C:\2-click run
2014-11-09 15:02:48 ----D---- C:\Program Files (x86)\Euro Truck Simulator 2

======List of files/folders modified in the last 1 month======

2014-12-01 15:00:01 ----D---- C:\Windows\Temp
2014-12-01 15:00:01 ----D---- C:\Program Files\trend micro
2014-12-01 14:53:44 ----D---- C:\Windows\SoftwareDistribution
2014-12-01 14:53:43 ----D---- C:\Windows\inf
2014-12-01 14:53:38 ----D---- C:\Windows
2014-12-01 14:52:54 ----A---- C:\Windows\SYSWOW64\log.txt
2014-12-01 14:51:28 ----D---- C:\Windows\Prefetch
2014-12-01 14:50:47 ----D---- C:\Windows\system32\config
2014-11-30 00:28:44 ----D---- C:\Windows\System32
2014-11-30 00:17:52 ----SHD---- C:\System Volume Information
2014-11-30 00:17:17 ----D---- C:\Windows\SysWOW64
2014-11-30 00:14:34 ----D---- C:\Windows\system32\drivers
2014-11-30 00:11:37 ----D---- C:\Windows\system32\Tasks
2014-11-29 22:18:41 ----D---- C:\Users\Viktor\AppData\Roaming\vlc
2014-11-28 19:42:20 ----SHD---- C:\Windows\Installer
2014-11-28 19:41:53 ----D---- C:\Program Files (x86)
2014-11-25 23:08:11 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-11-25 21:52:24 ----SD---- C:\Users\Viktor\AppData\Roaming\Microsoft
2014-11-24 21:30:11 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-11-24 15:29:32 ----D---- C:\Windows\system32\catroot
2014-11-24 15:29:30 ----D---- C:\Windows\system32\DriverStore
2014-11-24 15:28:56 ----D---- C:\Program Files
2014-11-24 15:28:43 ----D---- C:\SwSetup
2014-11-24 15:22:26 ----D---- C:\Program Files (x86)\Opera
2014-11-24 15:00:45 ----D---- C:\Windows\system32\wdi
2014-11-23 13:54:09 ----D---- C:\Windows\rescache
2014-11-23 13:53:50 ----D---- C:\Windows\system32\catroot2
2014-11-21 13:45:46 ----D---- C:\Windows\debug
2014-11-19 17:21:13 ----D---- C:\Windows\winsxs
2014-11-17 14:19:05 ----D---- C:\ProgramData\Microsoft Help
2014-11-17 00:03:49 ----D---- C:\Windows\system32\NDF
2014-11-15 14:44:01 ----D---- C:\Windows\Tasks
2014-11-14 18:06:25 ----D---- C:\Windows\Microsoft.NET
2014-11-14 16:59:52 ----RSD---- C:\Windows\assembly
2014-11-13 22:15:22 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-11-13 22:15:22 ----D---- C:\Windows\system32\cs-CZ
2014-11-13 22:15:21 ----D---- C:\Windows\SYSWOW64\en-US
2014-11-13 22:15:21 ----D---- C:\Windows\system32\en-US
2014-11-13 22:15:21 ----D---- C:\Program Files\Internet Explorer
2014-11-13 22:15:20 ----D---- C:\Program Files (x86)\Internet Explorer
2014-11-13 19:08:25 ----D---- C:\Windows\system32\MRT
2014-11-13 19:05:04 ----A---- C:\Windows\system32\MRT.exe
2014-11-12 16:59:04 ----AD---- C:\ProgramData\Temp
2014-11-09 17:03:07 ----D---- C:\Users\Viktor\AppData\Roaming\BitComet
2014-11-09 15:02:44 ----D---- C:\Program Files (x86)\Common Files
2014-11-09 14:28:30 ----D---- C:\BitCometDownloads
2014-11-04 14:30:58 ----N---- C:\Windows\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-30 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-30 267632]
R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2009-07-08 30008]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-04-13 540696]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-30 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-30 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-30 436624]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-30 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-30 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-30 116728]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2014-07-15 314016]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2014-07-15 43680]
R3 Accelerometer;HP Accelerometer; C:\Windows\system32\DRIVERS\Accelerometer.sys [2009-07-08 41272]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-04-06 11174400]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-04-06 343040]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-02-23 95760]
R3 clwvd;HP Webcam Splitter; C:\Windows\system32\DRIVERS\clwvd.sys [2010-06-24 32880]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-05-03 283064]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-05-01 56344]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2009-10-26 151936]
R3 intelkmd;intelkmd; C:\Windows\system32\DRIVERS\igdpmd64.sys [2010-07-27 10610400]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2012-12-06 2350176]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2010-07-22 515584]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-10-14 396848]
R3 WinUSB;WinUSB Service; C:\Windows\system32\DRIVERS\WinUSB.sys [2010-11-20 41984]
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 125456]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 BTMCOM;Bluetooth Serial Port; C:\Windows\System32\Drivers\btmcom.sys [2010-04-09 52736]
S3 BTMUSB;Motorola Bluetooth Radio Service; C:\Windows\System32\Drivers\btmusb.sys [2010-06-29 3232768]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2010-07-27 10610400]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-01-11 232992]
S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-03-05 346144]
S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S4 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2014-11-30 271752]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdAppMgrSvc;Autodesk Application Manager Service; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [2014-06-21 596360]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-04-06 236544]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-30 50344]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files\Motorola\Bluetooth\obexsrv.exe [2010-05-20 677128]
R2 DpHost;@C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128; C:\Program Files\DigitalPersona\Bin\DpHostW.exe [2010-04-23 445192]
R2 ezSharedSvc;Easybits Services for Windows; C:\Windows\syswow64\ezSharedSvcHost.exe [2010-04-23 514232]
R2 HP Wireless Assistant Service;HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2010-06-18 103992]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2010-06-25 92216]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2009-07-08 30520]
R2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2010-06-29 27192]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2010-06-16 73728]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-05-01 325656]
R2 mitsijm2015;Autodesk Simulation Moldflow MITSI 2015 Job Manager; C:\Program Files\Autodesk\Inventor 2015\Moldflow\bin\mitsijm.exe [2013-10-11 968480]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-07-20 935208]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2014-08-21 75064]
R2 PnkBstrB;PnkBstrB; C:\Windows\syswow64\PnkBstrB.exe [2014-08-26 214520]
R2 simptcp;@%SystemRoot%\system32\simptcp.dll,-200; C:\Windows\System32\tcpsvcs.exe [2009-07-14 10240]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2010-07-22 263168]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-05-01 2533400]
R2 vcsFPService;Validity VCS Fingerprint Service; C:\Windows\system32\vcsFPService.exe [2010-02-23 2192176]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2014-11-30 4012248]
R3 Bluetooth Device Manager;Bluetooth Device Manager; C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe [2010-06-29 4181256]
R3 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files\Motorola\Bluetooth\audiosrv.exe [2010-05-20 1096968]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2014-07-14 1357104]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2010-06-25 665656]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-14 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-25 267440]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-09-16 647680]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-14 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-06 114688]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-04-23 572096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-05-23 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119556
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Vir - web?

#2 Příspěvek od Rudy »

Zdravím!
Spusťte nejprve tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Pheliox
Návštěvník
Návštěvník
Příspěvky: 85
Registrován: 06 srp 2012 11:28

Re: Vir - web?

#3 Příspěvek od Pheliox »

# AdwCleaner v4.103 - Report created 01/12/2014 at 21:40:10
# Updated 01/12/2014 by Xplode
# Database : 2014-12-01.2 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Viktor - VIKTOR-HP
# Running from : C:\Users\Viktor\Downloads\adwcleaner_4.103.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Trymedia
Folder Deleted : C:\Users\Viktor\AppData\Roaming\YourFileDownloader
Folder Deleted : C:\Users\Viktor\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpegkgagfojjbcpkihigfmkojdmmimdf
Folder Deleted : C:\Users\Viktor\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehgldbbpchgpcfagfpfjgoomddhccfgh

***** [ Scheduled Tasks ] *****

Task Deleted : YourFile DownloaderUpdate

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bpegkgagfojjbcpkihigfmkojdmmimdf
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ehgldbbpchgpcfagfpfjgoomddhccfgh
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{03771AEF-400D-4A13-B712-25878EC4A3F5}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKLM\SOFTWARE\YourFileDownloader

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17420


-\\ Google Chrome v39.0.2171.71


-\\ Chromium v


-\\ Opera v26.0.1656.24

[C:\Users\Viktor\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : aaipilfmheplbcghignccoiiebekkdhe
[C:\Users\Viktor\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : elchiiiejkobdbblfejjkbphbddgmljf
[C:\Users\Viktor\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : ffhfoagmjcnkolneahbpagjcjjaeofbg
[C:\Users\Viktor\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : hjghiofiijcepdnocbgefbdlbckjfheg
[C:\Users\Viktor\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : iklgpchfbohgmghgfagediakopecfmbm
[C:\Users\Viktor\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : kfgaibfbmkjgmimhbbaikfnpkkjkpoan
[C:\Users\Viktor\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : lmnbobhffedhdhfpcjkjphcfpeeiocdn
[C:\Users\Viktor\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : hoidflomjnnnbiemmkjdjkkialmhbago
[C:\Users\Viktor\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : ekpibplnnkfdcafdpoekhoffegcajene

*************************

AdwCleaner[R1].txt - [3251 octets] - [01/12/2014 21:38:43]
AdwCleaner[S1].txt - [3173 octets] - [01/12/2014 21:40:10]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [3233 octets] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119556
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Vir - web?

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Pheliox
Návštěvník
Návštěvník
Příspěvky: 85
Registrován: 06 srp 2012 11:28

Re: Vir - web?

#5 Příspěvek od Pheliox »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Viktor at 2014-12-01 21:53:47
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 196 GB (43%) free of 456 GB
Total RAM: 3894 MB (57% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:54:00, on 1.12.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17420)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Hewlett-Packard\Media\Webcam\YCMMirage.exe
C:\Program Files\Motorola\Bluetooth\btplayerctrl.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera_crashreporter.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\trend micro\Viktor.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: LinkVerifierBHO - {D5974A72-C81C-4DC3-BE77-A8A7BBC8864E} - (no file)
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)
O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [ADSKAppManager] "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
O4 - HKUS\S-1-5-18\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-137 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-137 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Autodesk Application Manager Service (AdAppMgrSvc) - Autodesk Inc. - C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: Bluetooth Device Manager - Motorola, Inc. - C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe
O23 - Service: Bluetooth Media Service - Motorola, Inc. - C:\Program Files\Motorola\Bluetooth\audiosrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola, Inc. - C:\Program Files\Motorola\Bluetooth\obexsrv.exe
O23 - Service: @C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\Windows\System32\ezSharedSvcHost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Wireless Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: HPWMISVC - Unknown owner - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Autodesk Simulation Moldflow MITSI 2015 Job Manager (mitsijm2015) - Autodesk, Inc. - C:\Program Files\Autodesk\Inventor 2015\Moldflow\bin\mitsijm.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12066 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"

atieclxx
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\vcsFPService.exe
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
taskeng.exe {F82FBDD2-51C2-4649-8958-821DB00DE21E}
"C:\Program Files\DigitalPersona\Bin\DpHostW.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\IDT\WDM\AESTSr64.exe"
"C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe"
C:\Windows\SysWOW64\ezSharedSvcHost.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe"
"C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files\Autodesk\Inventor 2015\Moldflow\bin\mitsijm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe"
taskeng.exe {5D4E763F-B138-43C9-A4AE-436E4CC48124}
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
C:\Windows\System32\tcpsvcs.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\System32\rundll32.exe" "C:\Program Files\Motorola\Bluetooth\btmshell.dll",TrayApp
"C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" /background
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
WLIDSvcM.exe 3180
"C:\Program Files\Motorola\Bluetooth\obexsrv.exe"
"C:\Program Files (x86)\Hewlett-Packard\Media\Webcam\YCMMirage.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\svchost.exe -k WbioSvcGroup
"C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe"
"C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
ngservice.exe pipeserver
"C:\Program Files\Motorola\Bluetooth\audiosrv.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Motorola\Bluetooth\btplayerctrl.exe" -Embedding
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Windows\explorer.exe /factory,{ceff45ee-c862-41de-aee2-a022c81eda92} -Embedding
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --ran-launcher /crash-reporter-parent-id=3040
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --type=gpu-process --channel="3040.0.1011997434\1117309551" --enable-proprietary-media-types-playback --crash-reporter-pid=6064 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,17,39 --disable-accelerated-video-decode --gpu-vendor-id=0x1002 --gpu-device-id=0x68c1 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=8.961.0.0 --enable-proprietary-media-types-playback --crash-reporter-pid=6064 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=6064 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="3040.2.1339126480\162381597" /prefetch:673131151
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=6064 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="3040.3.495167402\568075114" /prefetch:673131151
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=6064 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="3040.4.416829921\1398951589" /prefetch:673131151
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=6064 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="3040.5.1480921112\1771409790" /prefetch:673131151
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=6064 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="3040.8.1516031235\560202628" /prefetch:673131151
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe" /hidden
"C:\Users\Viktor\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-08-04 553896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-11-30 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-08-04 211880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F8A6CAA2-533D-4AED-9E05-8EB19A4021AB}]
ExplorerWatcher Class - C:\Program Files (x86)\Clover\TabHelper64.dll [2014-01-23 201216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-30 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5974A72-C81C-4DC3-BE77-A8A7BBC8864E}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-10-14 2837288]
"BTMTrayAgent"=C:\Program Files\Motorola\Bluetooth\btmshell.dll [2010-06-10 24783624]
"SmartMenu"=C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [2010-01-20 611896]
"HPWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe [2010-06-18 8192]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-07-27 161304]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-07-27 386584]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-07-27 415256]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2010-07-22 487424]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"Autodesk Sync"=C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [2014-08-28 1235336]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HP Quick Launch"=C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [2010-06-29 602168]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-04-06 641664]
"ADSKAppManager"=C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [2014-06-21 488328]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-11-30 5226600]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-07-27 271360]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=DPPassFilter
scecli

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DpHost]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"EnableShellExecuteHooks"=1
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2014-12-01 21:50:28 ----A---- C:\Windows\_MSRSTRT.EXE
2014-12-01 21:37:04 ----D---- C:\AdwCleaner
2014-12-01 14:55:40 ----D---- C:\rsit
2014-11-30 00:17:17 ----D---- C:\Windows\SYSWOW64\vbox
2014-11-30 00:17:17 ----D---- C:\Windows\system32\vbox
2014-11-30 00:11:31 ----A---- C:\Windows\system32\aswBoot.exe
2014-11-30 00:11:27 ----A---- C:\Windows\avastSS.scr
2014-11-28 19:41:53 ----D---- C:\Program Files (x86)\Bang
2014-11-24 15:29:02 ----A---- C:\Windows\system32\drivers\stwrt64.sys
2014-11-24 15:29:01 ----N---- C:\Windows\system32\stapi64.dll
2014-11-24 15:29:01 ----A---- C:\Windows\system32\stcplx64.dll
2014-11-24 15:29:01 ----A---- C:\Windows\system32\stapo64.dll
2014-11-24 15:28:56 ----D---- C:\Program Files\IDT
2014-11-18 20:35:29 ----A---- C:\Windows\SYSWOW64\pku2u.dll
2014-11-18 20:35:29 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-11-18 20:35:29 ----A---- C:\Windows\system32\pku2u.dll
2014-11-18 20:35:29 ----A---- C:\Windows\system32\kerberos.dll
2014-11-12 16:47:42 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-11-12 16:47:42 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-11-12 16:47:41 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-11-12 16:47:41 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-11-12 16:47:41 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-11-12 16:47:41 ----A---- C:\Windows\system32\iernonce.dll
2014-11-12 16:47:41 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-11-12 16:47:41 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-11-12 16:47:41 ----A---- C:\Windows\system32\ie4uinit.exe
2014-11-12 16:47:40 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-11-12 16:47:40 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-11-12 16:47:40 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-11-12 16:47:40 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-11-12 16:47:40 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 16:47:39 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-11-12 16:47:39 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-11-12 16:47:39 ----A---- C:\Windows\system32\iedkcs32.dll
2014-11-12 16:47:38 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-11-12 16:47:38 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-11-12 16:47:38 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-11-12 16:47:38 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-11-12 16:47:38 ----A---- C:\Windows\system32\urlmon.dll
2014-11-12 16:47:38 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 16:47:37 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-11-12 16:47:37 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-11-12 16:47:37 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-11-12 16:47:37 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 16:47:37 ----A---- C:\Windows\system32\msfeeds.dll
2014-11-12 16:47:37 ----A---- C:\Windows\system32\dxtrans.dll
2014-11-12 16:47:36 ----A---- C:\Windows\system32\iesetup.dll
2014-11-12 16:47:36 ----A---- C:\Windows\system32\ieapfltr.dll
2014-11-12 16:47:35 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-11-12 16:47:35 ----A---- C:\Windows\system32\iertutil.dll
2014-11-12 16:47:34 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-11-12 16:47:34 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-11-12 16:47:34 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-11-12 16:47:34 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-11-12 16:47:34 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-11-12 16:47:34 ----A---- C:\Windows\system32\jsproxy.dll
2014-11-12 16:47:34 ----A---- C:\Windows\system32\ieUnatt.exe
2014-11-12 16:47:33 ----A---- C:\Windows\system32\ieui.dll
2014-11-12 16:47:33 ----A---- C:\Windows\system32\ieframe.dll
2014-11-12 16:47:33 ----A---- C:\Windows\system32\dxtmsft.dll
2014-11-12 16:47:32 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-11-12 16:47:32 ----A---- C:\Windows\system32\mshtmled.dll
2014-11-12 16:47:32 ----A---- C:\Windows\system32\jscript9diag.dll
2014-11-12 16:47:32 ----A---- C:\Windows\system32\jscript9.dll
2014-11-12 16:47:31 ----A---- C:\Windows\system32\wininet.dll
2014-11-12 16:47:31 ----A---- C:\Windows\system32\vbscript.dll
2014-11-12 16:47:31 ----A---- C:\Windows\system32\msrating.dll
2014-11-12 16:47:31 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-11-12 16:47:30 ----A---- C:\Windows\system32\mshtml.dll
2014-11-12 16:46:54 ----A---- C:\Windows\system32\termsrv.dll
2014-11-12 16:46:54 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-11-12 16:46:54 ----A---- C:\Windows\system32\adtschema.dll
2014-11-12 16:46:53 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-11-12 16:46:53 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-11-12 16:46:53 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2014-11-12 16:46:53 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2014-11-12 16:46:53 ----A---- C:\Windows\system32\msaudite.dll
2014-11-12 16:46:53 ----A---- C:\Windows\system32\lsasrv.dll
2014-11-12 16:41:57 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-11-12 16:41:57 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-11-12 16:41:57 ----A---- C:\Windows\system32\msxml3r.dll
2014-11-12 16:41:57 ----A---- C:\Windows\system32\msxml3.dll
2014-11-12 16:41:56 ----A---- C:\Windows\SYSWOW64\IMJP10K.DLL
2014-11-12 16:41:56 ----A---- C:\Windows\system32\IMJP10K.DLL
2014-11-12 16:41:55 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2014-11-12 16:41:55 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2014-11-12 16:41:55 ----A---- C:\Windows\system32\EncDump.dll
2014-11-12 16:41:55 ----A---- C:\Windows\system32\audiosrv.dll
2014-11-12 16:41:55 ----A---- C:\Windows\system32\AudioSes.dll
2014-11-12 16:41:55 ----A---- C:\Windows\system32\AUDIOKSE.dll
2014-11-12 16:41:55 ----A---- C:\Windows\system32\AudioEng.dll
2014-11-12 16:41:54 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2014-11-12 16:41:52 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-11-12 16:41:52 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-11-12 16:41:52 ----A---- C:\Windows\system32\schannel.dll
2014-11-12 16:41:52 ----A---- C:\Windows\system32\ncrypt.dll
2014-11-12 16:41:51 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-11-12 16:41:51 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-11-12 16:41:51 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-11-12 16:41:51 ----A---- C:\Windows\system32\wdigest.dll
2014-11-12 16:41:51 ----A---- C:\Windows\system32\TSpkg.dll
2014-11-12 16:41:51 ----A---- C:\Windows\system32\msv1_0.dll
2014-11-12 16:41:51 ----A---- C:\Windows\system32\credssp.dll
2014-11-12 16:41:50 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-11-12 16:41:45 ----A---- C:\Windows\system32\packager.dll
2014-11-12 16:41:44 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-11-12 16:41:43 ----A---- C:\Windows\system32\win32k.sys
2014-11-12 16:41:42 ----A---- C:\Windows\system32\msi.dll
2014-11-12 16:41:41 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-11-12 16:41:26 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2014-11-12 16:41:26 ----A---- C:\Windows\system32\oleaut32.dll
2014-11-09 15:03:01 ----D---- C:\2-click run
2014-11-09 15:02:48 ----D---- C:\Program Files (x86)\Euro Truck Simulator 2

======List of files/folders modified in the last 1 month======

2014-12-01 21:53:59 ----D---- C:\Program Files\trend micro
2014-12-01 21:53:58 ----D---- C:\Windows\Temp
2014-12-01 21:52:19 ----D---- C:\Windows\system32\config
2014-12-01 21:52:16 ----D---- C:\Windows\inf
2014-12-01 21:50:39 ----A---- C:\Windows\SYSWOW64\log.txt
2014-12-01 21:50:38 ----D---- C:\Windows\system32\catroot2
2014-12-01 21:50:30 ----D---- C:\Program Files (x86)
2014-12-01 21:50:28 ----D---- C:\Windows
2014-12-01 21:50:19 ----D---- C:\ProgramData
2014-12-01 21:50:18 ----D---- C:\Windows\SysWOW64
2014-12-01 21:49:38 ----AD---- C:\ProgramData\Temp
2014-12-01 21:48:26 ----SHD---- C:\Windows\Installer
2014-12-01 21:47:51 ----SHD---- C:\System Volume Information
2014-12-01 18:10:52 ----RSD---- C:\Windows\Fonts
2014-12-01 14:53:44 ----D---- C:\Windows\SoftwareDistribution
2014-12-01 14:51:28 ----D---- C:\Windows\Prefetch
2014-11-30 00:28:44 ----D---- C:\Windows\System32
2014-11-30 00:14:34 ----D---- C:\Windows\system32\drivers
2014-11-30 00:11:37 ----D---- C:\Windows\system32\Tasks
2014-11-29 22:18:41 ----D---- C:\Users\Viktor\AppData\Roaming\vlc
2014-11-25 23:08:11 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-11-25 21:52:24 ----SD---- C:\Users\Viktor\AppData\Roaming\Microsoft
2014-11-24 21:30:11 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-11-24 15:29:32 ----D---- C:\Windows\system32\catroot
2014-11-24 15:29:30 ----D---- C:\Windows\system32\DriverStore
2014-11-24 15:28:56 ----D---- C:\Program Files
2014-11-24 15:28:43 ----D---- C:\SwSetup
2014-11-24 15:22:26 ----D---- C:\Program Files (x86)\Opera
2014-11-24 15:00:45 ----D---- C:\Windows\system32\wdi
2014-11-23 13:54:09 ----D---- C:\Windows\rescache
2014-11-21 13:45:46 ----D---- C:\Windows\debug
2014-11-19 17:21:13 ----D---- C:\Windows\winsxs
2014-11-17 14:19:05 ----D---- C:\ProgramData\Microsoft Help
2014-11-17 00:03:49 ----D---- C:\Windows\system32\NDF
2014-11-15 14:44:01 ----D---- C:\Windows\Tasks
2014-11-14 18:06:25 ----D---- C:\Windows\Microsoft.NET
2014-11-14 16:59:52 ----RSD---- C:\Windows\assembly
2014-11-13 22:15:22 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-11-13 22:15:22 ----D---- C:\Windows\system32\cs-CZ
2014-11-13 22:15:21 ----D---- C:\Windows\SYSWOW64\en-US
2014-11-13 22:15:21 ----D---- C:\Windows\system32\en-US
2014-11-13 22:15:21 ----D---- C:\Program Files\Internet Explorer
2014-11-13 22:15:20 ----D---- C:\Program Files (x86)\Internet Explorer
2014-11-13 19:08:25 ----D---- C:\Windows\system32\MRT
2014-11-13 19:05:04 ----A---- C:\Windows\system32\MRT.exe
2014-11-09 17:03:07 ----D---- C:\Users\Viktor\AppData\Roaming\BitComet
2014-11-09 15:02:44 ----D---- C:\Program Files (x86)\Common Files
2014-11-09 14:28:30 ----D---- C:\BitCometDownloads
2014-11-04 14:30:58 ----N---- C:\Windows\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-30 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-30 267632]
R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2009-07-08 30008]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-04-13 540696]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-30 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-30 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-30 436624]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-30 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-30 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-30 116728]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2014-07-15 314016]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2014-07-15 43680]
R3 Accelerometer;HP Accelerometer; C:\Windows\system32\DRIVERS\Accelerometer.sys [2009-07-08 41272]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-04-06 11174400]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-04-06 343040]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-02-23 95760]
R3 clwvd;HP Webcam Splitter; C:\Windows\system32\DRIVERS\clwvd.sys [2010-06-24 32880]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-05-03 283064]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-05-01 56344]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2009-10-26 151936]
R3 intelkmd;intelkmd; C:\Windows\system32\DRIVERS\igdpmd64.sys [2010-07-27 10610400]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2012-12-06 2350176]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2010-07-22 515584]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-10-14 396848]
R3 WinUSB;WinUSB Service; C:\Windows\system32\DRIVERS\WinUSB.sys [2010-11-20 41984]
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 125456]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 BTMCOM;Bluetooth Serial Port; C:\Windows\System32\Drivers\btmcom.sys [2010-04-09 52736]
S3 BTMUSB;Motorola Bluetooth Radio Service; C:\Windows\System32\Drivers\btmusb.sys [2010-06-29 3232768]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2010-07-27 10610400]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-01-11 232992]
S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-03-05 346144]
S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S4 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2014-11-30 271752]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdAppMgrSvc;Autodesk Application Manager Service; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [2014-06-21 596360]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-04-06 236544]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-30 50344]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files\Motorola\Bluetooth\obexsrv.exe [2010-05-20 677128]
R2 DpHost;@C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128; C:\Program Files\DigitalPersona\Bin\DpHostW.exe [2010-04-23 445192]
R2 ezSharedSvc;Easybits Services for Windows; C:\Windows\syswow64\ezSharedSvcHost.exe [2010-04-23 514232]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2010-06-25 92216]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2009-07-08 30520]
R2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2010-06-29 27192]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2010-06-16 73728]
R2 mitsijm2015;Autodesk Simulation Moldflow MITSI 2015 Job Manager; C:\Program Files\Autodesk\Inventor 2015\Moldflow\bin\mitsijm.exe [2013-10-11 968480]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-07-20 935208]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2014-08-21 75064]
R2 PnkBstrB;PnkBstrB; C:\Windows\syswow64\PnkBstrB.exe [2014-08-26 214520]
R2 simptcp;@%SystemRoot%\system32\simptcp.dll,-200; C:\Windows\System32\tcpsvcs.exe [2009-07-14 10240]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2010-07-22 263168]
R2 vcsFPService;Validity VCS Fingerprint Service; C:\Windows\system32\vcsFPService.exe [2010-02-23 2192176]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2014-11-30 4012248]
R3 Bluetooth Device Manager;Bluetooth Device Manager; C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe [2010-06-29 4181256]
R3 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files\Motorola\Bluetooth\audiosrv.exe [2010-05-20 1096968]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2014-07-14 1357104]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2010-06-25 665656]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-14 116648]
S2 HP Wireless Assistant Service;HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2010-06-18 103992]
S2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-05-01 325656]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-05-01 2533400]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-25 267440]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-09-16 647680]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-14 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-06 114688]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-04-23 572096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-05-23 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119556
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Vir - web?

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F8A6CAA2-533D-4AED-9E05-8EB19A4021AB}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5974A72-C81C-4DC3-BE77-A8A7BBC8864E}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Pheliox
Návštěvník
Návštěvník
Příspěvky: 85
Registrován: 06 srp 2012 11:28

Re: Vir - web?

#7 Příspěvek od Pheliox »

All processes killed
========== FILES ==========
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F8A6CAA2-533D-4AED-9E05-8EB19A4021AB}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F8A6CAA2-533D-4AED-9E05-8EB19A4021AB}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5974A72-C81C-4DC3-BE77-A8A7BBC8864E}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D5974A72-C81C-4DC3-BE77-A8A7BBC8864E}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}\ not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User

User: Public
->Temp folder emptied: 0 bytes

User: Viktor
->Temp folder emptied: 4104496 bytes
->Temporary Internet Files folder emptied: 759633 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 1638 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 20333 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33298 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33030 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 5,00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Public

User: Viktor
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 12022014_210745

Files moved on Reboot...
C:\Users\Viktor\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Viktor\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
File move failed. C:\Windows\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...


Logfile of random's system information tool 1.10 (written by random/random)
Run by Viktor at 2014-12-02 21:11:44
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 194 GB (43%) free of 456 GB
Total RAM: 3894 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:11:50, on 2.12.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17420)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Hewlett-Packard\Media\Webcam\YCMMirage.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera_crashreporter.exe
C:\Program Files\Motorola\Bluetooth\btplayerctrl.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Clover\clover.exe
C:\Program Files\trend micro\Viktor.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [ADSKAppManager] "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
O4 - HKUS\S-1-5-18\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-137 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-137 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Autodesk Application Manager Service (AdAppMgrSvc) - Autodesk Inc. - C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: Bluetooth Device Manager - Motorola, Inc. - C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe
O23 - Service: Bluetooth Media Service - Motorola, Inc. - C:\Program Files\Motorola\Bluetooth\audiosrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola, Inc. - C:\Program Files\Motorola\Bluetooth\obexsrv.exe
O23 - Service: @C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\Windows\System32\ezSharedSvcHost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Wireless Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: HPWMISVC - Unknown owner - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Autodesk Simulation Moldflow MITSI 2015 Job Manager (mitsijm2015) - Autodesk, Inc. - C:\Program Files\Autodesk\Inventor 2015\Moldflow\bin\mitsijm.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12138 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
winlogon.exe
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"

C:\Windows\system32\Hpservice.exe
C:\Windows\system32\vcsFPService.exe
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
atieclxx
taskeng.exe {66442D5A-F073-4671-BD20-AFCDD8721952}
C:\Windows\System32\spoolsv.exe
"C:\Program Files\DigitalPersona\Bin\DpHostW.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\IDT\WDM\AESTSr64.exe"
"taskhost.exe"
"C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe"
"C:\Windows\system32\Dwm.exe"
taskeng.exe {999C6DC9-AE8A-4C8E-9216-2B8A7135302F}
C:\Windows\SysWOW64\ezSharedSvcHost.exe
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe"
"C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"
"C:\Program Files\Autodesk\Inventor 2015\Moldflow\bin\mitsijm.exe"
"C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
C:\Windows\System32\tcpsvcs.exe
"C:\Program Files (x86)\Hewlett-Packard\Media\Webcam\YCMMirage.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Motorola\Bluetooth\obexsrv.exe"
WLIDSvcM.exe 3112
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe"
"C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe"
C:\Windows\system32\svchost.exe -k WbioSvcGroup
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe /Embedding
ngservice.exe pipeserver
"C:\Windows\notepad.exe" C:\_OTM\MovedFiles\12022014_210745.log
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\System32\rundll32.exe" "C:\Program Files\Motorola\Bluetooth\btmshell.dll",TrayApp
"C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" /background
"C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe" 120 C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe /hidden
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\Motorola\Bluetooth\audiosrv.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --ran-launcher /crash-reporter-parent-id=5460
"C:\Program Files\Motorola\Bluetooth\btplayerctrl.exe" -Embedding
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --type=gpu-process --channel="5460.0.1210323245\389439822" --enable-proprietary-media-types-playback --crash-reporter-pid=5544 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,17,39 --disable-accelerated-video-decode --gpu-vendor-id=0x1002 --gpu-device-id=0x68c1 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=8.961.0.0 --enable-proprietary-media-types-playback --crash-reporter-pid=5544 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=5544 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="5460.2.1774777355\387822441" /prefetch:673131151
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=5544 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="5460.3.759723561\491831950" /prefetch:673131151
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=5544 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="5460.4.1647124904\1267705789" /prefetch:673131151
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=5544 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="5460.6.1249757735\555008804" /prefetch:673131151
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=5544 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="5460.10.1421648619\448346769" /prefetch:673131151
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=5544 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="5460.11.1075023597\35672191" /prefetch:673131151
"C:\Program Files (x86)\Opera\26.0.1656.24\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=5544 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="5460.12.1940369326\192941879" /prefetch:673131151
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\Windows\explorer.exe /factory,{ceff45ee-c862-41de-aee2-a022c81eda92} -Embedding
"C:\Program Files (x86)\Clover\clover.exe"
"C:\Users\Viktor\Downloads\RSITx64.exe"
"C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-08-04 553896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-11-30 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-08-04 211880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F8A6CAA2-533D-4AED-9E05-8EB19A4021AB}]
ExplorerWatcher Class - C:\Program Files (x86)\Clover\TabHelper64.dll [2014-01-23 201216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-30 586968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-10-14 2837288]
"BTMTrayAgent"=C:\Program Files\Motorola\Bluetooth\btmshell.dll [2010-06-10 24783624]
"SmartMenu"=C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [2010-01-20 611896]
"HPWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe [2010-06-18 8192]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-07-27 161304]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-07-27 386584]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-07-27 415256]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2010-07-22 487424]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"Autodesk Sync"=C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [2014-08-28 1235336]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HP Quick Launch"=C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [2010-06-29 602168]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-04-06 641664]
"ADSKAppManager"=C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [2014-06-21 488328]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-11-30 5226600]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-07-27 271360]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=DPPassFilter
scecli

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DpHost]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"EnableShellExecuteHooks"=1
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2014-12-02 21:07:45 ----D---- C:\_OTM
2014-12-01 21:50:28 ----A---- C:\Windows\_MSRSTRT.EXE
2014-12-01 21:37:04 ----D---- C:\AdwCleaner
2014-12-01 14:55:40 ----D---- C:\rsit
2014-11-30 00:17:17 ----D---- C:\Windows\SYSWOW64\vbox
2014-11-30 00:17:17 ----D---- C:\Windows\system32\vbox
2014-11-30 00:11:31 ----A---- C:\Windows\system32\aswBoot.exe
2014-11-30 00:11:27 ----A---- C:\Windows\avastSS.scr
2014-11-28 19:41:53 ----D---- C:\Program Files (x86)\Bang
2014-11-24 15:29:02 ----A---- C:\Windows\system32\drivers\stwrt64.sys
2014-11-24 15:29:01 ----N---- C:\Windows\system32\stapi64.dll
2014-11-24 15:29:01 ----A---- C:\Windows\system32\stcplx64.dll
2014-11-24 15:29:01 ----A---- C:\Windows\system32\stapo64.dll
2014-11-24 15:28:56 ----D---- C:\Program Files\IDT
2014-11-18 20:35:29 ----A---- C:\Windows\SYSWOW64\pku2u.dll
2014-11-18 20:35:29 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-11-18 20:35:29 ----A---- C:\Windows\system32\pku2u.dll
2014-11-18 20:35:29 ----A---- C:\Windows\system32\kerberos.dll
2014-11-12 16:47:42 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-11-12 16:47:42 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-11-12 16:47:41 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-11-12 16:47:41 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-11-12 16:47:41 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-11-12 16:47:41 ----A---- C:\Windows\system32\iernonce.dll
2014-11-12 16:47:41 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-11-12 16:47:41 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-11-12 16:47:41 ----A---- C:\Windows\system32\ie4uinit.exe
2014-11-12 16:47:40 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-11-12 16:47:40 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-11-12 16:47:40 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-11-12 16:47:40 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-11-12 16:47:40 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 16:47:39 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-11-12 16:47:39 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-11-12 16:47:39 ----A---- C:\Windows\system32\iedkcs32.dll
2014-11-12 16:47:38 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-11-12 16:47:38 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-11-12 16:47:38 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-11-12 16:47:38 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-11-12 16:47:38 ----A---- C:\Windows\system32\urlmon.dll
2014-11-12 16:47:38 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 16:47:37 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-11-12 16:47:37 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-11-12 16:47:37 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-11-12 16:47:37 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 16:47:37 ----A---- C:\Windows\system32\msfeeds.dll
2014-11-12 16:47:37 ----A---- C:\Windows\system32\dxtrans.dll
2014-11-12 16:47:36 ----A---- C:\Windows\system32\iesetup.dll
2014-11-12 16:47:36 ----A---- C:\Windows\system32\ieapfltr.dll
2014-11-12 16:47:35 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-11-12 16:47:35 ----A---- C:\Windows\system32\iertutil.dll
2014-11-12 16:47:34 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-11-12 16:47:34 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-11-12 16:47:34 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-11-12 16:47:34 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-11-12 16:47:34 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-11-12 16:47:34 ----A---- C:\Windows\system32\jsproxy.dll
2014-11-12 16:47:34 ----A---- C:\Windows\system32\ieUnatt.exe
2014-11-12 16:47:33 ----A---- C:\Windows\system32\ieui.dll
2014-11-12 16:47:33 ----A---- C:\Windows\system32\ieframe.dll
2014-11-12 16:47:33 ----A---- C:\Windows\system32\dxtmsft.dll
2014-11-12 16:47:32 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-11-12 16:47:32 ----A---- C:\Windows\system32\mshtmled.dll
2014-11-12 16:47:32 ----A---- C:\Windows\system32\jscript9diag.dll
2014-11-12 16:47:32 ----A---- C:\Windows\system32\jscript9.dll
2014-11-12 16:47:31 ----A---- C:\Windows\system32\wininet.dll
2014-11-12 16:47:31 ----A---- C:\Windows\system32\vbscript.dll
2014-11-12 16:47:31 ----A---- C:\Windows\system32\msrating.dll
2014-11-12 16:47:31 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-11-12 16:47:30 ----A---- C:\Windows\system32\mshtml.dll
2014-11-12 16:46:54 ----A---- C:\Windows\system32\termsrv.dll
2014-11-12 16:46:54 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-11-12 16:46:54 ----A---- C:\Windows\system32\adtschema.dll
2014-11-12 16:46:53 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-11-12 16:46:53 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-11-12 16:46:53 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2014-11-12 16:46:53 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2014-11-12 16:46:53 ----A---- C:\Windows\system32\msaudite.dll
2014-11-12 16:46:53 ----A---- C:\Windows\system32\lsasrv.dll
2014-11-12 16:41:57 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-11-12 16:41:57 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-11-12 16:41:57 ----A---- C:\Windows\system32\msxml3r.dll
2014-11-12 16:41:57 ----A---- C:\Windows\system32\msxml3.dll
2014-11-12 16:41:56 ----A---- C:\Windows\SYSWOW64\IMJP10K.DLL
2014-11-12 16:41:56 ----A---- C:\Windows\system32\IMJP10K.DLL
2014-11-12 16:41:55 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2014-11-12 16:41:55 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2014-11-12 16:41:55 ----A---- C:\Windows\system32\EncDump.dll
2014-11-12 16:41:55 ----A---- C:\Windows\system32\audiosrv.dll
2014-11-12 16:41:55 ----A---- C:\Windows\system32\AudioSes.dll
2014-11-12 16:41:55 ----A---- C:\Windows\system32\AUDIOKSE.dll
2014-11-12 16:41:55 ----A---- C:\Windows\system32\AudioEng.dll
2014-11-12 16:41:54 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2014-11-12 16:41:52 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-11-12 16:41:52 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-11-12 16:41:52 ----A---- C:\Windows\system32\schannel.dll
2014-11-12 16:41:52 ----A---- C:\Windows\system32\ncrypt.dll
2014-11-12 16:41:51 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-11-12 16:41:51 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-11-12 16:41:51 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-11-12 16:41:51 ----A---- C:\Windows\system32\wdigest.dll
2014-11-12 16:41:51 ----A---- C:\Windows\system32\TSpkg.dll
2014-11-12 16:41:51 ----A---- C:\Windows\system32\msv1_0.dll
2014-11-12 16:41:51 ----A---- C:\Windows\system32\credssp.dll
2014-11-12 16:41:50 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-11-12 16:41:45 ----A---- C:\Windows\system32\packager.dll
2014-11-12 16:41:44 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-11-12 16:41:43 ----A---- C:\Windows\system32\win32k.sys
2014-11-12 16:41:42 ----A---- C:\Windows\system32\msi.dll
2014-11-12 16:41:41 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-11-12 16:41:26 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2014-11-12 16:41:26 ----A---- C:\Windows\system32\oleaut32.dll
2014-11-09 15:03:01 ----D---- C:\2-click run
2014-11-09 15:02:48 ----D---- C:\Program Files (x86)\Euro Truck Simulator 2

======List of files/folders modified in the last 1 month======

2014-12-02 21:11:52 ----A---- C:\Windows\SYSWOW64\log.txt
2014-12-02 21:11:48 ----D---- C:\Program Files\trend micro
2014-12-02 21:11:45 ----D---- C:\Windows\Temp
2014-12-02 21:09:46 ----D---- C:\Windows\system32\config
2014-12-02 21:07:54 ----D---- C:\Windows
2014-12-02 21:07:45 ----D---- C:\Windows\Tasks
2014-12-02 20:25:00 ----SHD---- C:\System Volume Information
2014-12-01 21:52:16 ----D---- C:\Windows\inf
2014-12-01 21:50:38 ----D---- C:\Windows\system32\catroot2
2014-12-01 21:50:30 ----D---- C:\Program Files (x86)
2014-12-01 21:50:19 ----D---- C:\ProgramData
2014-12-01 21:50:18 ----D---- C:\Windows\SysWOW64
2014-12-01 21:49:38 ----AD---- C:\ProgramData\Temp
2014-12-01 21:48:26 ----SHD---- C:\Windows\Installer
2014-12-01 18:10:52 ----RSD---- C:\Windows\Fonts
2014-12-01 14:53:44 ----D---- C:\Windows\SoftwareDistribution
2014-12-01 14:51:28 ----D---- C:\Windows\Prefetch
2014-11-30 00:28:44 ----D---- C:\Windows\System32
2014-11-30 00:14:34 ----D---- C:\Windows\system32\drivers
2014-11-30 00:11:37 ----D---- C:\Windows\system32\Tasks
2014-11-29 22:18:41 ----D---- C:\Users\Viktor\AppData\Roaming\vlc
2014-11-25 23:08:11 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-11-25 21:52:24 ----SD---- C:\Users\Viktor\AppData\Roaming\Microsoft
2014-11-24 21:30:11 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-11-24 15:29:32 ----D---- C:\Windows\system32\catroot
2014-11-24 15:29:30 ----D---- C:\Windows\system32\DriverStore
2014-11-24 15:28:56 ----D---- C:\Program Files
2014-11-24 15:28:43 ----D---- C:\SwSetup
2014-11-24 15:22:26 ----D---- C:\Program Files (x86)\Opera
2014-11-24 15:00:45 ----D---- C:\Windows\system32\wdi
2014-11-23 13:54:09 ----D---- C:\Windows\rescache
2014-11-21 13:45:46 ----D---- C:\Windows\debug
2014-11-19 17:21:13 ----D---- C:\Windows\winsxs
2014-11-17 14:19:05 ----D---- C:\ProgramData\Microsoft Help
2014-11-17 00:03:49 ----D---- C:\Windows\system32\NDF
2014-11-14 18:06:25 ----D---- C:\Windows\Microsoft.NET
2014-11-14 16:59:52 ----RSD---- C:\Windows\assembly
2014-11-13 22:15:22 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-11-13 22:15:22 ----D---- C:\Windows\system32\cs-CZ
2014-11-13 22:15:21 ----D---- C:\Windows\SYSWOW64\en-US
2014-11-13 22:15:21 ----D---- C:\Windows\system32\en-US
2014-11-13 22:15:21 ----D---- C:\Program Files\Internet Explorer
2014-11-13 22:15:20 ----D---- C:\Program Files (x86)\Internet Explorer
2014-11-13 19:08:25 ----D---- C:\Windows\system32\MRT
2014-11-13 19:05:04 ----A---- C:\Windows\system32\MRT.exe
2014-11-09 17:03:07 ----D---- C:\Users\Viktor\AppData\Roaming\BitComet
2014-11-09 15:02:44 ----D---- C:\Program Files (x86)\Common Files
2014-11-09 14:28:30 ----D---- C:\BitCometDownloads
2014-11-04 14:30:58 ----N---- C:\Windows\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-30 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-30 267632]
R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2009-07-08 30008]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-04-13 540696]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-30 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-30 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-30 436624]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-30 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-30 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-30 116728]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2014-07-15 314016]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2014-07-15 43680]
R3 Accelerometer;HP Accelerometer; C:\Windows\system32\DRIVERS\Accelerometer.sys [2009-07-08 41272]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-04-06 11174400]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-04-06 343040]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-02-23 95760]
R3 clwvd;HP Webcam Splitter; C:\Windows\system32\DRIVERS\clwvd.sys [2010-06-24 32880]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-05-03 283064]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-05-01 56344]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2009-10-26 151936]
R3 intelkmd;intelkmd; C:\Windows\system32\DRIVERS\igdpmd64.sys [2010-07-27 10610400]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2012-12-06 2350176]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2010-07-22 515584]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-10-14 396848]
R3 WinUSB;WinUSB Service; C:\Windows\system32\DRIVERS\WinUSB.sys [2010-11-20 41984]
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 125456]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 BTMCOM;Bluetooth Serial Port; C:\Windows\System32\Drivers\btmcom.sys [2010-04-09 52736]
S3 BTMUSB;Motorola Bluetooth Radio Service; C:\Windows\System32\Drivers\btmusb.sys [2010-06-29 3232768]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2010-07-27 10610400]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-01-11 232992]
S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-03-05 346144]
S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S4 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2014-11-30 271752]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdAppMgrSvc;Autodesk Application Manager Service; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [2014-06-21 596360]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-04-06 236544]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-30 50344]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files\Motorola\Bluetooth\obexsrv.exe [2010-05-20 677128]
R2 DpHost;@C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128; C:\Program Files\DigitalPersona\Bin\DpHostW.exe [2010-04-23 445192]
R2 ezSharedSvc;Easybits Services for Windows; C:\Windows\syswow64\ezSharedSvcHost.exe [2010-04-23 514232]
R2 HP Wireless Assistant Service;HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2010-06-18 103992]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2010-06-25 92216]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2009-07-08 30520]
R2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2010-06-29 27192]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2010-06-16 73728]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-05-01 325656]
R2 mitsijm2015;Autodesk Simulation Moldflow MITSI 2015 Job Manager; C:\Program Files\Autodesk\Inventor 2015\Moldflow\bin\mitsijm.exe [2013-10-11 968480]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-07-20 935208]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2014-08-21 75064]
R2 PnkBstrB;PnkBstrB; C:\Windows\syswow64\PnkBstrB.exe [2014-08-26 214520]
R2 simptcp;@%SystemRoot%\system32\simptcp.dll,-200; C:\Windows\System32\tcpsvcs.exe [2009-07-14 10240]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2010-07-22 263168]
R2 vcsFPService;Validity VCS Fingerprint Service; C:\Windows\system32\vcsFPService.exe [2010-02-23 2192176]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2014-11-30 4012248]
R3 Bluetooth Device Manager;Bluetooth Device Manager; C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe [2010-06-29 4181256]
R3 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files\Motorola\Bluetooth\audiosrv.exe [2010-05-20 1096968]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2014-07-14 1357104]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2010-06-25 665656]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-14 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-05-01 2533400]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-25 267440]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-09-16 647680]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-14 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-06 114688]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-04-23 572096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-05-23 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119556
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Vir - web?

#8 Příspěvek od Rudy »

Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Pheliox
Návštěvník
Návštěvník
Příspěvky: 85
Registrován: 06 srp 2012 11:28

Re: Vir - web?

#9 Příspěvek od Pheliox »

Ano, díky vypadá to o poznání lépe.

Až začnu vydělávat, tak se s vámi vyrovnám. Zatím děkuji pouze slovně.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119556
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Vir - web?

#10 Příspěvek od Rudy »

Rádo se stalo! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Pheliox
Návštěvník
Návštěvník
Příspěvky: 85
Registrován: 06 srp 2012 11:28

Re: Vir - web?

#11 Příspěvek od Pheliox »

Tak se omlouvám, ale neuplynul ani den a mám tu další potíže s nějakým malvare, všude na mě skáčou reklamy a nové listy s reklamními stránkami. Stahoval jsem nějaké aplikace do mobilu a asi tam byl nějaký přílepek :-(
Nevím, jestli to nesouvisí s nejnovější aktualizací avast, protože dříve hodně věcí zastavil a teď už podruhé zklamal.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Viktor at 2014-12-03 20:56:39
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 187 GB (41%) free of 456 GB
Total RAM: 3894 MB (29% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:56:45, on 3.12.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17420)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Motorola\Bluetooth\btplayerctrl.exe
C:\Program Files (x86)\Hewlett-Packard\Media\Webcam\YCMMirage.exe
C:\Program Files (x86)\Clover\clover.exe
C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.32\opera_crashreporter.exe
C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\trend micro\Viktor.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [ADSKAppManager] "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
O4 - HKUS\S-1-5-18\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-137 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-137 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Autodesk Application Manager Service (AdAppMgrSvc) - Autodesk Inc. - C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: Bluetooth Device Manager - Motorola, Inc. - C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe
O23 - Service: Bluetooth Media Service - Motorola, Inc. - C:\Program Files\Motorola\Bluetooth\audiosrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola, Inc. - C:\Program Files\Motorola\Bluetooth\obexsrv.exe
O23 - Service: @C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\Windows\System32\ezSharedSvcHost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: globalUpdate Update Service (globalUpdatem) (globalUpdatem) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Wireless Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: HPWMISVC - Unknown owner - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Autodesk Simulation Moldflow MITSI 2015 Job Manager (mitsijm2015) - Autodesk, Inc. - C:\Program Files\Autodesk\Inventor 2015\Moldflow\bin\mitsijm.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12364 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"

C:\Windows\system32\Hpservice.exe
C:\Windows\system32\vcsFPService.exe
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
atieclxx
taskeng.exe {4CA47CE2-ACED-4DEF-91DE-5AC6CBF64578}
C:\Windows\System32\spoolsv.exe
"C:\Program Files\DigitalPersona\Bin\DpHostW.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\IDT\WDM\AESTSr64.exe"
"C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe"
C:\Windows\SysWOW64\ezSharedSvcHost.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe"
"C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"
"C:\Program Files\Autodesk\Inventor 2015\Moldflow\bin\mitsijm.exe"
"C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
C:\Windows\System32\tcpsvcs.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files\Motorola\Bluetooth\obexsrv.exe"
WLIDSvcM.exe 2492
"C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe"
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\vssvc.exe
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\svchost.exe -k swprv
taskeng.exe {5B1F8E72-AC66-4B00-9659-F900C7C3937A}
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\System32\rundll32.exe" "C:\Program Files\Motorola\Bluetooth\btmshell.dll",TrayApp
"C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" /background
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Motorola\Bluetooth\audiosrv.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\Motorola\Bluetooth\btplayerctrl.exe" -Embedding
"C:\Program Files (x86)\Hewlett-Packard\Media\Webcam\YCMMirage.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\explorer.exe /factory,{ceff45ee-c862-41de-aee2-a022c81eda92} -Embedding
"C:\Program Files (x86)\Clover\clover.exe"
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe" --ran-launcher /crash-reporter-parent-id=1032
"C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe" --type=gpu-process --channel="1032.0.405529281\831359961" --enable-proprietary-media-types-playback --crash-reporter-pid=2584 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,17,39 --disable-accelerated-video-decode --gpu-vendor-id=0x1002 --gpu-device-id=0x68c1 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=8.961.0.0 --enable-proprietary-media-types-playback --crash-reporter-pid=2584 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=2584 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="1032.2.1578060773\1652008150" /prefetch:673131151
"C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=2584 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="1032.3.176658699\353465560" /prefetch:673131151
"C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=2584 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="1032.4.1609030959\239626508" /prefetch:673131151
"C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=2584 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="1032.5.2041692760\1157315141" /prefetch:673131151
"C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=2584 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="1032.7.1591175866\69710912" /prefetch:673131151
"C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=2584 --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="1032.10.1412140029\1307344455" /prefetch:673131151
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe" --type=plugin --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll" --disable-direct-npapi-requests --lang=cs --channel="1032.12.834620869\1135028035" --enable-proprietary-media-types-playback --crash-reporter-pid=2584 /prefetch:-390060480
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe" /hidden
C:\Windows\system32\sppsvc.exe
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe" "<hpNotification><Toast><Title>HP Wireless Assistant</Title><Text>Combo: On</Text><IconPath>C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WA_tray_32_on.ico</IconPath><ID>1218286627</ID><Path>C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe</Path><Parameters></Parameters></Toast></hpNotification>"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe"
ngservice.exe pipeserver
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Users\Viktor\Downloads\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\ded9f4af-719e-4103-8f20-0a18c207faf1-1.job - C:\Program Files (x86)\Shopp_Upe_1.8\Shopp_Upe_1.8-codedownloader.exe /rawdata=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
C:\Windows\tasks\ded9f4af-719e-4103-8f20-0a18c207faf1-11.job - C:\Program Files (x86)\Shopp_Upe_1.8\ded9f4af-719e-4103-8f20-0a18c207faf1-11.exe /rawdata=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
C:\Windows\tasks\ded9f4af-719e-4103-8f20-0a18c207faf1-2.job - C:\Program Files (x86)\Shopp_Upe_1.8\ded9f4af-719e-4103-8f20-0a18c207faf1-2.exe /rawdata=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
C:\Windows\tasks\ded9f4af-719e-4103-8f20-0a18c207faf1-4.job - C:\Program Files (x86)\Shopp_Upe_1.8\ded9f4af-719e-4103-8f20-0a18c207faf1-4.exe /rawdata=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
C:\Windows\tasks\ded9f4af-719e-4103-8f20-0a18c207faf1-5.job - C:\Program Files (x86)\Shopp_Upe_1.8\ded9f4af-719e-4103-8f20-0a18c207faf1-5.exe /rawdata=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
C:\Windows\tasks\ded9f4af-719e-4103-8f20-0a18c207faf1-5_user.job - C:\Program Files (x86)\Shopp_Upe_1.8\ded9f4af-719e-4103-8f20-0a18c207faf1-5.exe /rawdata=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
C:\Windows\tasks\ded9f4af-719e-4103-8f20-0a18c207faf1-6.job - C:\Program Files (x86)\Shopp_Upe_1.8\ded9f4af-719e-4103-8f20-0a18c207faf1-6.exe /rawdata=k5F/DSWCiSOOFXOJg0kbXv43dSHr7o8mA5wvEJMPC73lc39YZGCZ7bL8IK+c5LnHAzOIWO0Ub2nfMqkuso58FAx4XR+LE3to/XUQT1gart8tc1LW4scx7zRjFR2naFGu+h0fzg52d/G8KsNaeHJm+XN08tM/moAdk3OkoMzvme2JZQDgX8nkotU1vPP049Z2eouNH7bKNRbHD1m3ZXJ5lsZZZ6JbC/eQxG5Le15NKToU3m7lJu28frACY/38sUf7GYQkdYCh841AhIm34px21PqVWv3hPDcQlRc9/TghMNcEEWhHSzYgnq27h767RfY/jvEdInEXeJ9FoQ1n/yVyEb8blXZUHR7PjApfFzkL3+aD+EiiiUNiTWG1DMReIFoTev64MGOvjm8hrXLfVSXrwcc/oBrZBiRh2cfYHQ7voh4j0VTDjbEjCl3lUwZKdwivwz5XGKw7ZRBvHz636LI8XCGHnHl7LBTkpp9EvTeHdt4lVCucsNrCwmIbvd1QVbUfojBedf4wB/tg/cMyRnywroEAXSFtSRsWXXnHyqUNFHbcQjy68McpwH+5zL6ge+55gxfdQMYTbSAwwuaNCX4JhGIothIdoOS4nf62rF6ru/n5MS3kd/HEJU+gfnGUWKkBKOfs0qCcTg8TeEEdRwqrxIqAXsnSMwlnLQAnsYbDhB2vE6JAf7skHo56raYRDZwZUIAcck8niyDrWgoclwY5bvNTueu8BQGTuMemEnXE0HINPg+BlLa7U117doKZtw42JTlga+NP8AmAAHvmu2SCIREq6ZyOe/H5nzber3VRPlSrqBO3Dc3Gme8jd8RTp7FgkK4N98kW5ThWO2UwmP+xOrJtK2JMVBVtafBiqzvjfcJ5m14V3yCGmilDVoniiwpAEUQJ2DlNvz/dgXm0z8RlrEonPrJhn5Awye55lHiShQcYBs0Bp1Oaptv8UTkIO9AGrnTJN3R9REcOzuyvO37ypQ3+D8RQflx7XMXwNxjSUfoFNkoD6nULvQwI2nnRnvduJifIC2VCdaQo3p14BV1ZVG6QpZeMI4ivL1520j1MtEnhWpyaAPtyrotnpdacbz97aVep1MeahMmdgq8HHN9sekrbcEggnaCaiRCIHNPOHofQKY0xjbbJ0B8eeUfCFvkR8BJO8jwTfkzfqZ8IzKjkkOhZS/1NTLkObkh7RJqK/hGnpKQ6ziKZwvFW/yik2s+0jC0NQmbrp2QW/Hs3q2hqUgZSY8kNjiIVKFZ+QgY28TjU9GZ4NKwko14211OexZSgvKzViY5Wtk5/O3RDvpFzrafMLvdSVC4Ajifz3Wg/O8pJizxOvY3Y89OmC7Ipw0o9W5LoJZiSz4jQYk8AdferhyVSlISesoOfgFQvsTWsgqhWXqED0p2pne+CuXuub3hymy4kceADY7+Kokcig9T+FKoXUoZq5as77inQMmy/RpFB7W2W9APb5hAsn6LyYalzbNJr8rFUu0R4wflMc/T/y2ivuKgI2Xvy3Qc4yez/F/ZM4+bVk51IaV2wJ+0ksc4clXRY+ieNiH8iUXyOiaUOqYAZgSCRf/ty+Kr3JfCvjZ8C7x9O8RTv+7n2C9C4asu+RXB7y00X4SfUEX9nHYJLeYaVD61RRAM7Nja/WeGrU2ofU8Fx1fysTYkxGc3v3zOl7WYtL4irXuqElI7MO+rO09Ji3wPR8+Spwasex4ib54sg5A17qC+Br3Bfo9ZusAaubqU04AC+MdYeRW5DdaaBvcPrk5So1UYBoJZo4trwhnIKD7OsRx8OwFHr9zfMSXmukLEteG8AGOrJlhtd9rn816gomEU9fi/XeEoyBoeR8YhPrZMYShbGZ8qfZEQlAkbbzkwXrbNmKbPrGpx+v3TkXK+XXipPEatsnE/1ergdPFa7HVVBwtkvrGGf/f1pQ3YFUPmWrgS3AvoRT6V4N0DgYoABmeIfRI+y20bbQG+Wt/7/UKmT6xni2wJzrukOJAXWKUrjUELnc8UsZ001IjgPMdVKOZ6Gz+Pm7UdI6tkGRjZwPtIo/cFlX08YsZTBL1koIMay4UqCckzjDZ9VGxjCqbnd6qVZqnFSrUCDsdGVEPfZszH0PfP20wsrHof+Amn9k6lKFd04Ieb/wFMt4LZp4ciht67wLY5lnO09rxUjeD7H3Dgzl41EreLJ2Vr449ge4QBhlFXc0PK+zA0FjKYfbop0ayUYU/FItooO3kbo44GWR3E2FC+pfA5X0M1FsUutxJyo1CjtWbddMURB98rn2YOcGLWxopNsVqtmFxGFlZVpoMWR8+c9zXobZAqLCKa/g2NVlyJHsLoajol4w0m2wQ0Dnh21Wz0809WFxmJCw7H0Y/O3rLY/ZHRJSmMmU+hIL7GYiEFNF7fphIRWjXn6E5cBj0gRAx3qH2eUNQNGi6xjQO3bj1Inww0XyarDN/EQy0A0OXuq9H2R4A2HWrZ5nDMHZi/Vsvujg5/K+E3ERQ62LSgrp/4pxeFqTn5WWd2dN/AEzSDYLcDroyVTSxCM1JHSfvoXEJfISTb+giMXDPkPoP/reiVJltv9Cbr8SZmZ
C:\Windows\tasks\ded9f4af-719e-4103-8f20-0a18c207faf1-7.job - C:\Program Files (x86)\Shopp_Upe_1.8\ded9f4af-719e-4103-8f20-0a18c207faf1-7.exe /rawdata=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
C:\Windows\tasks\globalUpdateUpdateTaskMachineCore.job - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /c
C:\Windows\tasks\globalUpdateUpdateTaskMachineUA.job - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-08-04 553896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-11-30 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-08-04 211880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F8A6CAA2-533D-4AED-9E05-8EB19A4021AB}]
ExplorerWatcher Class - C:\Program Files (x86)\Clover\TabHelper64.dll [2014-01-23 201216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-30 586968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-10-14 2837288]
"BTMTrayAgent"=C:\Program Files\Motorola\Bluetooth\btmshell.dll [2010-06-10 24783624]
"SmartMenu"=C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [2010-01-20 611896]
"HPWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe [2010-06-18 8192]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-07-27 161304]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-07-27 386584]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-07-27 415256]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2010-07-22 487424]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"Autodesk Sync"=C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [2014-08-28 1235336]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HP Quick Launch"=C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [2010-06-29 602168]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-04-06 641664]
"ADSKAppManager"=C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [2014-06-21 488328]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-11-30 5226600]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-07-27 271360]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=DPPassFilter
scecli

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DpHost]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"EnableShellExecuteHooks"=1
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2014-12-03 20:54:38 ----A---- C:\Windows\system32\aswBoot.exe
2014-12-03 20:30:21 ----D---- C:\rsit
2014-12-03 20:13:18 ----D---- C:\Users\Viktor\AppData\Roaming\IObit
2014-12-02 22:40:20 ----D---- C:\Program Files (x86)\18b5aca2-4656-4b08-8cb9-936827fd9f40
2014-12-02 22:40:15 ----D---- C:\Program Files (x86)\globalUpdate
2014-12-02 22:38:37 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-12-01 21:50:28 ----A---- C:\Windows\_MSRSTRT.EXE
2014-12-01 21:37:04 ----D---- C:\AdwCleaner
2014-11-30 00:17:17 ----D---- C:\Windows\SYSWOW64\vbox
2014-11-30 00:17:17 ----D---- C:\Windows\system32\vbox
2014-11-30 00:11:27 ----A---- C:\Windows\avastSS.scr
2014-11-28 19:41:53 ----D---- C:\Program Files (x86)\Bang
2014-11-24 15:29:02 ----A---- C:\Windows\system32\drivers\stwrt64.sys
2014-11-24 15:29:01 ----N---- C:\Windows\system32\stapi64.dll
2014-11-24 15:29:01 ----A---- C:\Windows\system32\stcplx64.dll
2014-11-24 15:29:01 ----A---- C:\Windows\system32\stapo64.dll
2014-11-24 15:28:56 ----D---- C:\Program Files\IDT
2014-11-18 20:35:29 ----A---- C:\Windows\SYSWOW64\pku2u.dll
2014-11-18 20:35:29 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-11-18 20:35:29 ----A---- C:\Windows\system32\pku2u.dll
2014-11-18 20:35:29 ----A---- C:\Windows\system32\kerberos.dll
2014-11-12 16:47:42 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-11-12 16:47:42 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-11-12 16:47:41 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-11-12 16:47:41 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-11-12 16:47:41 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-11-12 16:47:41 ----A---- C:\Windows\system32\iernonce.dll
2014-11-12 16:47:41 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-11-12 16:47:41 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-11-12 16:47:41 ----A---- C:\Windows\system32\ie4uinit.exe
2014-11-12 16:47:40 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-11-12 16:47:40 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-11-12 16:47:40 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-11-12 16:47:40 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-11-12 16:47:40 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 16:47:39 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-11-12 16:47:39 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-11-12 16:47:39 ----A---- C:\Windows\system32\iedkcs32.dll
2014-11-12 16:47:38 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-11-12 16:47:38 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-11-12 16:47:38 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-11-12 16:47:38 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-11-12 16:47:38 ----A---- C:\Windows\system32\urlmon.dll
2014-11-12 16:47:38 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 16:47:37 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-11-12 16:47:37 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-11-12 16:47:37 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-11-12 16:47:37 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 16:47:37 ----A---- C:\Windows\system32\msfeeds.dll
2014-11-12 16:47:37 ----A---- C:\Windows\system32\dxtrans.dll
2014-11-12 16:47:36 ----A---- C:\Windows\system32\iesetup.dll
2014-11-12 16:47:36 ----A---- C:\Windows\system32\ieapfltr.dll
2014-11-12 16:47:35 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-11-12 16:47:35 ----A---- C:\Windows\system32\iertutil.dll
2014-11-12 16:47:34 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-11-12 16:47:34 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-11-12 16:47:34 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-11-12 16:47:34 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-11-12 16:47:34 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-11-12 16:47:34 ----A---- C:\Windows\system32\jsproxy.dll
2014-11-12 16:47:34 ----A---- C:\Windows\system32\ieUnatt.exe
2014-11-12 16:47:33 ----A---- C:\Windows\system32\ieui.dll
2014-11-12 16:47:33 ----A---- C:\Windows\system32\ieframe.dll
2014-11-12 16:47:33 ----A---- C:\Windows\system32\dxtmsft.dll
2014-11-12 16:47:32 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-11-12 16:47:32 ----A---- C:\Windows\system32\mshtmled.dll
2014-11-12 16:47:32 ----A---- C:\Windows\system32\jscript9diag.dll
2014-11-12 16:47:32 ----A---- C:\Windows\system32\jscript9.dll
2014-11-12 16:47:31 ----A---- C:\Windows\system32\wininet.dll
2014-11-12 16:47:31 ----A---- C:\Windows\system32\vbscript.dll
2014-11-12 16:47:31 ----A---- C:\Windows\system32\msrating.dll
2014-11-12 16:47:31 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-11-12 16:47:30 ----A---- C:\Windows\system32\mshtml.dll
2014-11-12 16:46:54 ----A---- C:\Windows\system32\termsrv.dll
2014-11-12 16:46:54 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-11-12 16:46:54 ----A---- C:\Windows\system32\adtschema.dll
2014-11-12 16:46:53 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-11-12 16:46:53 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-11-12 16:46:53 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2014-11-12 16:46:53 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2014-11-12 16:46:53 ----A---- C:\Windows\system32\msaudite.dll
2014-11-12 16:46:53 ----A---- C:\Windows\system32\lsasrv.dll
2014-11-12 16:41:57 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-11-12 16:41:57 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-11-12 16:41:57 ----A---- C:\Windows\system32\msxml3r.dll
2014-11-12 16:41:57 ----A---- C:\Windows\system32\msxml3.dll
2014-11-12 16:41:56 ----A---- C:\Windows\SYSWOW64\IMJP10K.DLL
2014-11-12 16:41:56 ----A---- C:\Windows\system32\IMJP10K.DLL
2014-11-12 16:41:55 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2014-11-12 16:41:55 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2014-11-12 16:41:55 ----A---- C:\Windows\system32\EncDump.dll
2014-11-12 16:41:55 ----A---- C:\Windows\system32\audiosrv.dll
2014-11-12 16:41:55 ----A---- C:\Windows\system32\AudioSes.dll
2014-11-12 16:41:55 ----A---- C:\Windows\system32\AUDIOKSE.dll
2014-11-12 16:41:55 ----A---- C:\Windows\system32\AudioEng.dll
2014-11-12 16:41:54 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2014-11-12 16:41:52 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-11-12 16:41:52 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-11-12 16:41:52 ----A---- C:\Windows\system32\schannel.dll
2014-11-12 16:41:52 ----A---- C:\Windows\system32\ncrypt.dll
2014-11-12 16:41:51 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-11-12 16:41:51 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-11-12 16:41:51 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-11-12 16:41:51 ----A---- C:\Windows\system32\wdigest.dll
2014-11-12 16:41:51 ----A---- C:\Windows\system32\TSpkg.dll
2014-11-12 16:41:51 ----A---- C:\Windows\system32\msv1_0.dll
2014-11-12 16:41:51 ----A---- C:\Windows\system32\credssp.dll
2014-11-12 16:41:50 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-11-12 16:41:45 ----A---- C:\Windows\system32\packager.dll
2014-11-12 16:41:44 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-11-12 16:41:43 ----A---- C:\Windows\system32\win32k.sys
2014-11-12 16:41:42 ----A---- C:\Windows\system32\msi.dll
2014-11-12 16:41:41 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-11-12 16:41:26 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2014-11-12 16:41:26 ----A---- C:\Windows\system32\oleaut32.dll
2014-11-09 15:03:01 ----D---- C:\2-click run
2014-11-09 15:02:48 ----D---- C:\Program Files (x86)\Euro Truck Simulator 2

======List of files/folders modified in the last 1 month======

2014-12-03 20:56:43 ----D---- C:\Program Files\trend micro
2014-12-03 20:56:26 ----D---- C:\Windows\Temp
2014-12-03 20:55:04 ----D---- C:\Windows\Prefetch
2014-12-03 20:54:46 ----D---- C:\Windows\system32\Tasks
2014-12-03 20:54:38 ----D---- C:\Windows\System32
2014-12-03 20:54:36 ----D---- C:\Windows
2014-12-03 20:53:47 ----A---- C:\Windows\SYSWOW64\log.txt
2014-12-03 20:53:40 ----SHD---- C:\System Volume Information
2014-12-03 20:51:33 ----D---- C:\Windows\system32\config
2014-12-03 20:51:30 ----D---- C:\Windows\system32\drivers
2014-12-03 20:46:41 ----D---- C:\Windows\Tasks
2014-12-03 20:46:41 ----D---- C:\Windows\system32\wfp
2014-12-03 20:46:41 ----D---- C:\ProgramData\FLEXnet
2014-12-03 20:46:39 ----D---- C:\Windows\system32\wbem
2014-12-03 20:46:06 ----D---- C:\Windows\SysWOW64
2014-12-03 20:46:06 ----D---- C:\Windows\system32\DriverStore
2014-12-03 20:46:06 ----D---- C:\Windows\system32\catroot2
2014-12-03 20:46:05 ----D---- C:\Windows\system32\drivers\etc
2014-12-03 20:46:05 ----D---- C:\Windows\system32\CodeIntegrity
2014-12-03 20:46:04 ----D---- C:\Windows\AppCompat
2014-12-03 20:46:03 ----D---- C:\Users\Viktor\AppData\Roaming\Autodesk
2014-12-03 20:46:01 ----D---- C:\ProgramData\Microsoft Help
2014-12-03 20:46:01 ----D---- C:\ProgramData\IObit
2014-12-03 20:46:00 ----D---- C:\Program Files (x86)\Opera
2014-12-03 20:45:59 ----D---- C:\Windows\registration
2014-12-03 20:45:59 ----D---- C:\Program Files (x86)\AGEIA Technologies
2014-12-03 20:45:59 ----D---- C:\Program Files (x86)
2014-12-03 20:45:47 ----SD---- C:\ProgramData\Microsoft
2014-12-03 20:45:41 ----D---- C:\Program Files (x86)\IObit
2014-12-03 20:39:51 ----D---- C:\Users\Viktor\AppData\Roaming\Macromedia
2014-12-02 23:31:54 ----D---- C:\Windows\inf
2014-12-02 22:40:24 ----SHD---- C:\Windows\Installer
2014-12-01 21:50:19 ----D---- C:\ProgramData
2014-12-01 21:49:38 ----AD---- C:\ProgramData\Temp
2014-12-01 18:10:52 ----RSD---- C:\Windows\Fonts
2014-12-01 14:53:44 ----D---- C:\Windows\SoftwareDistribution
2014-11-29 22:18:41 ----D---- C:\Users\Viktor\AppData\Roaming\vlc
2014-11-25 23:08:11 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-11-25 21:52:24 ----SD---- C:\Users\Viktor\AppData\Roaming\Microsoft
2014-11-24 21:30:11 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-11-24 15:29:32 ----D---- C:\Windows\system32\catroot
2014-11-24 15:28:56 ----D---- C:\Program Files
2014-11-24 15:28:43 ----D---- C:\SwSetup
2014-11-24 15:00:45 ----D---- C:\Windows\system32\wdi
2014-11-23 13:54:09 ----D---- C:\Windows\rescache
2014-11-21 13:45:46 ----D---- C:\Windows\debug
2014-11-19 17:21:13 ----D---- C:\Windows\winsxs
2014-11-17 00:03:49 ----D---- C:\Windows\system32\NDF
2014-11-14 18:06:25 ----D---- C:\Windows\Microsoft.NET
2014-11-14 16:59:52 ----RSD---- C:\Windows\assembly
2014-11-13 22:15:22 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-11-13 22:15:22 ----D---- C:\Windows\system32\cs-CZ
2014-11-13 22:15:21 ----D---- C:\Windows\SYSWOW64\en-US
2014-11-13 22:15:21 ----D---- C:\Windows\system32\en-US
2014-11-13 22:15:21 ----D---- C:\Program Files\Internet Explorer
2014-11-13 22:15:20 ----D---- C:\Program Files (x86)\Internet Explorer
2014-11-13 19:08:25 ----D---- C:\Windows\system32\MRT
2014-11-13 19:05:04 ----A---- C:\Windows\system32\MRT.exe
2014-11-09 17:03:07 ----D---- C:\Users\Viktor\AppData\Roaming\BitComet
2014-11-09 15:02:44 ----D---- C:\Program Files (x86)\Common Files
2014-11-09 14:28:30 ----D---- C:\BitCometDownloads
2014-11-04 14:30:58 ----A---- C:\Windows\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-30 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-30 267632]
R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2009-07-08 30008]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-04-13 540696]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-30 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-30 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-30 436624]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-30 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-30 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-30 116728]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2014-07-15 314016]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2014-07-15 43680]
R3 Accelerometer;HP Accelerometer; C:\Windows\system32\DRIVERS\Accelerometer.sys [2009-07-08 41272]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-04-06 11174400]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-04-06 343040]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-02-23 95760]
R3 clwvd;HP Webcam Splitter; C:\Windows\system32\DRIVERS\clwvd.sys [2010-06-24 32880]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-05-03 283064]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-05-01 56344]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2009-10-26 151936]
R3 intelkmd;intelkmd; C:\Windows\system32\DRIVERS\igdpmd64.sys [2010-07-27 10610400]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2012-12-06 2350176]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2010-07-22 515584]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-10-14 396848]
R3 WinUSB;WinUSB Service; C:\Windows\system32\DRIVERS\WinUSB.sys [2010-11-20 41984]
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 125456]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 BTMCOM;Bluetooth Serial Port; C:\Windows\System32\Drivers\btmcom.sys [2010-04-09 52736]
S3 BTMUSB;Motorola Bluetooth Radio Service; C:\Windows\System32\Drivers\btmusb.sys [2010-06-29 3232768]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2010-07-27 10610400]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-01-11 232992]
S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-03-05 346144]
S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S4 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2014-11-30 271752]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdAppMgrSvc;Autodesk Application Manager Service; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [2014-06-21 596360]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-04-06 236544]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-30 50344]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files\Motorola\Bluetooth\obexsrv.exe [2010-05-20 677128]
R2 DpHost;@C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128; C:\Program Files\DigitalPersona\Bin\DpHostW.exe [2010-04-23 445192]
R2 ezSharedSvc;Easybits Services for Windows; C:\Windows\syswow64\ezSharedSvcHost.exe [2010-04-23 514232]
R2 HP Wireless Assistant Service;HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2010-06-18 103992]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2010-06-25 92216]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2009-07-08 30520]
R2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2010-06-29 27192]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2010-06-16 73728]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-05-01 325656]
R2 mitsijm2015;Autodesk Simulation Moldflow MITSI 2015 Job Manager; C:\Program Files\Autodesk\Inventor 2015\Moldflow\bin\mitsijm.exe [2013-10-11 968480]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-07-20 935208]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2014-08-21 75064]
R2 PnkBstrB;PnkBstrB; C:\Windows\syswow64\PnkBstrB.exe [2014-08-26 214520]
R2 simptcp;@%SystemRoot%\system32\simptcp.dll,-200; C:\Windows\System32\tcpsvcs.exe [2009-07-14 10240]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2010-07-22 263168]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-05-01 2533400]
R2 vcsFPService;Validity VCS Fingerprint Service; C:\Windows\system32\vcsFPService.exe [2010-02-23 2192176]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2014-11-30 4012248]
R3 Bluetooth Device Manager;Bluetooth Device Manager; C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe [2010-06-29 4181256]
R3 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files\Motorola\Bluetooth\audiosrv.exe [2010-05-20 1096968]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2014-07-14 1357104]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2010-06-25 665656]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 globalUpdate;globalUpdate Update Service (globalUpdate); C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-12-02 68608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-14 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-25 267440]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-09-16 647680]
S3 globalUpdatem;globalUpdate Update Service (globalUpdatem); C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-12-02 68608]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-14 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-06 114688]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-04-23 572096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-05-23 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119556
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Vir - web?

#12 Příspěvek od Rudy »

Udělejte sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Pheliox
Návštěvník
Návštěvník
Příspěvky: 85
Registrován: 06 srp 2012 11:28

Re: Vir - web?

#13 Příspěvek od Pheliox »

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 3.12.2014
Scan Time: 21:45:31
Logfile: logg.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2014.12.03.11
Rootkit Database: v2014.12.03.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Viktor

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 351859
Time Elapsed: 14 min, 0 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 28
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\23586, , [3c3ba5b9c6b62412f9386513778c09f7],
PUP.Optional.ShopUp.A, HKLM\SOFTWARE\WOW6432NODE\Shopp_Upe_1.8, , [502760fe9edec2740d3d73db57ac45bb],
PUP.Optional.ShopUp.A, HKLM\SOFTWARE\WOW6432NODE\Shopp_Upe_1.8-nv, , [6d0a6fefa8d46dc9371327275ba89d63],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE, , [babdd18d39435cda3b17a7b6768ddc24],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\23586, , [3542342a6319ac8a69c8a8d0bf4443bd],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=10, , [d7a0f569e19b4de9a7ccf2cb3fc5659b],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=4, , [4d2a540a146891a5c0b4e1dc3fc5bd43],
PUP.Optional.ShopUp.A, HKU\S-1-5-21-1561321214-363482093-3159618459-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Shopp_Upe_1.8-nv, , [8fe867f7027ad75f62e791bd6e957a86],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1561321214-363482093-3159618459-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [9fd829350973b0863283921c5fa552ae],
PUP.Optional.ShopUp.A, HKU\S-1-5-21-1561321214-363482093-3159618459-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Shopp_Upe_1.8, , [e4938cd277052f074602a7a7956ea060],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1561321214-363482093-3159618459-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\23586, , [6c0b0b53a8d4b87e69bdeb664ab9b14f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1561321214-363482093-3159618459-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Winportal, , [e0978ad4b6c6ab8bbee1581e7a89c040],
PUP.Optional.GlobalUpdate.T, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdate, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdatem, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickCtrl.10, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.OneClickCtrl.10, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.Update3WebControl.4, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.Update3WebControl.4, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}, , [12651c42c7b567cff9f439f36d960df3],

Registry Values: 1
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE|path, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, , [babdd18d39435cda3b17a7b6768ddc24]

Registry Data: 0
(No malicious items detected)

Folders: 10
PUP.Optional.ToolBarbInstaller.A, C:\Users\Viktor\AppData\Local\Temp\mt_ffx\Bechiro S.L, , [720582dc3c40d165c1cc47d2bd46738d],
PUP.Optional.ToolBarbInstaller.A, C:\Users\Viktor\AppData\Local\Temp\mt_ffx\Bechiro S.L\smartbar, , [720582dc3c40d165c1cc47d2bd46738d],
PUP.Optional.ToolBarbInstaller.A, C:\Users\Viktor\AppData\Local\Temp\mt_ffx\Bechiro S.L\smartbar\1.8.8.12, , [720582dc3c40d165c1cc47d2bd46738d],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Download, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Install, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline\{188EBBE7-89A7-4AD3-A8CE-AED24BCE640D}, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.A, C:\Users\Viktor\AppData\Local\Temp\comh.163721, , [ef8898c6f686a393f5143df026dd639d],

Files: 48
PUP.Optional.Nova.A, C:\Program Files (x86)\18b5aca2-4656-4b08-8cb9-936827fd9f40\205cd1b0-024e-45a2-b58b-8abf7a3e5122.dll, , [6a0ded7173093df9933fc1264eb33cc4],
PUP.Optional.Nova.A, C:\Program Files (x86)\AGEIA Technologies\0bdab47f-7611-410f-8f33-94c706fdd63d.dll, , [12651945fc80e4525e743daa53aec13f],
PUP.Optional.CrossRider.A, C:\Users\Viktor\AppData\Local\Temp\n6949\ShopUp-ENInstaller.exe, , [4433ee707efef5410c9ffbe19b66817f],
PUP.Optional.SmartBar, C:\Users\Viktor\AppData\Local\Temp\n6949\smartbar_2501-73d63cb7.exe, , [5522e6786a1249ed4a9b30f624ddb749],
PUP.Optional.CrossRider.A, C:\Users\Viktor\AppData\Local\Temp\n7080\ShopUp-ENInstaller.exe, , [0f6874ea5626082ea5065b81d031619f],
PUP.Optional.SmartBar, C:\Users\Viktor\AppData\Local\Temp\n7080\smartbar_2501-73d63cb7.exe, , [d2a58dd1fd7f43f393520a1c19e828d8],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\ded9f4af-719e-4103-8f20-0a18c207faf1-1, , [b7c09ec0126af34373da7ce17e85b44c],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\ded9f4af-719e-4103-8f20-0a18c207faf1-11, , [6a0dfa64ceae96a070dd0954877c8878],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\ded9f4af-719e-4103-8f20-0a18c207faf1-2, , [fe79d08e5e1ec571034ade7f05feac54],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\ded9f4af-719e-4103-8f20-0a18c207faf1-4, , [b0c7134b82faf64064e9d08d8e75619f],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\ded9f4af-719e-4103-8f20-0a18c207faf1-5, , [7601d9850676ba7ca9a4c49918eb817f],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\ded9f4af-719e-4103-8f20-0a18c207faf1-5_user, , [db9c1c42700c5ed8480516478f746c94],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\ded9f4af-719e-4103-8f20-0a18c207faf1-6, , [d6a1f767710b74c295b8f76658ab20e0],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\ded9f4af-719e-4103-8f20-0a18c207faf1-7, , [15620d510577ff37ada0b1acce359f61],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\ded9f4af-719e-4103-8f20-0a18c207faf1-1.job, , [7ff8540ae59766d0a864a8135da7b24e],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\ded9f4af-719e-4103-8f20-0a18c207faf1-11.job, , [106716480b7145f127e53c7fef154ab6],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\ded9f4af-719e-4103-8f20-0a18c207faf1-2.job, , [c6b1bea0de9eda5c0705457644c052ae],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\ded9f4af-719e-4103-8f20-0a18c207faf1-4.job, , [f97e045a3547f640da3212a98084ea16],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\ded9f4af-719e-4103-8f20-0a18c207faf1-5.job, , [c1b63e20c2ba48eea16bd9e28a7a669a],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\ded9f4af-719e-4103-8f20-0a18c207faf1-5_user.job, , [02755905c8b46bcb47c55c5f6b994eb2],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\ded9f4af-719e-4103-8f20-0a18c207faf1-6.job, , [23540c52f488b680977533880004e31d],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\ded9f4af-719e-4103-8f20-0a18c207faf1-7.job, , [de9986d838443df9f9134675f014b24e],
PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job, , [e1966fef205c7abc5cc64c6f55af639d],
PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore, , [beb966f8df9d2d090e1511aac53f51af],
PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job, , [e394e876a2daf640b17319a27b890ef2],
PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA, , [3344540ac2bae650a67fa91222e244bc],
PUP.Optional.ToolBarbInstaller.A, C:\Users\Viktor\AppData\Local\Temp\mt_ffx\Bechiro S.L\smartbar\1.8.8.12\smartbar.xpi, , [720582dc3c40d165c1cc47d2bd46738d],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleCrashHandler.exe, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdate.exe, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateBroker.exe, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateHelper.msi, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateOnDemand.exe, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdate.dll, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdateres_en.dll, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psmachine.dll, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psuser.dll, , [12651c42c7b567cff9f439f36d960df3],
PUP.Optional.GlobalUpdate.A, C:\Users\Viktor\AppData\Local\Temp\comh.163721\GoogleCrashHandler.exe, , [ef8898c6f686a393f5143df026dd639d],
PUP.Optional.GlobalUpdate.A, C:\Users\Viktor\AppData\Local\Temp\comh.163721\GoogleUpdate.exe, , [ef8898c6f686a393f5143df026dd639d],
PUP.Optional.GlobalUpdate.A, C:\Users\Viktor\AppData\Local\Temp\comh.163721\GoogleUpdateBroker.exe, , [ef8898c6f686a393f5143df026dd639d],
PUP.Optional.GlobalUpdate.A, C:\Users\Viktor\AppData\Local\Temp\comh.163721\GoogleUpdateHelper.msi, , [ef8898c6f686a393f5143df026dd639d],
PUP.Optional.GlobalUpdate.A, C:\Users\Viktor\AppData\Local\Temp\comh.163721\GoogleUpdateOnDemand.exe, , [ef8898c6f686a393f5143df026dd639d],
PUP.Optional.GlobalUpdate.A, C:\Users\Viktor\AppData\Local\Temp\comh.163721\goopdate.dll, , [ef8898c6f686a393f5143df026dd639d],
PUP.Optional.GlobalUpdate.A, C:\Users\Viktor\AppData\Local\Temp\comh.163721\goopdateres_en.dll, , [ef8898c6f686a393f5143df026dd639d],
PUP.Optional.GlobalUpdate.A, C:\Users\Viktor\AppData\Local\Temp\comh.163721\npGoogleUpdate4.dll, , [ef8898c6f686a393f5143df026dd639d],
PUP.Optional.GlobalUpdate.A, C:\Users\Viktor\AppData\Local\Temp\comh.163721\psmachine.dll, , [ef8898c6f686a393f5143df026dd639d],
PUP.Optional.GlobalUpdate.A, C:\Users\Viktor\AppData\Local\Temp\comh.163721\psuser.dll, , [ef8898c6f686a393f5143df026dd639d],

Physical Sectors: 0
(No malicious items detected)


(end)
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119556
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Vir - web?

#14 Příspěvek od Rudy »

Vše, co MBAM nalezl, smažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Pheliox
Návštěvník
Návštěvník
Příspěvky: 85
Registrován: 06 srp 2012 11:28

Re: Vir - web?

#15 Příspěvek od Pheliox »

Ok, smazal jsem to, ale pořád jsou podtržené části textu a vyskakuje nějaký shopp_upe.
Teď jsem ho našel v doplňcích opery a odinstaloval, tak to otestuju.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“