VIRY.CZ

Dobrý den, potřeboval bych pomoct, vlastním ntb Lenovo thinkpad e530c s OS Windows 8,
Ntb vlastně využívá jen přítelkyně, ale když jsem včera se chtěl podívat na chrome na web tak se nechtěl ani zaboha spustit, a firefox trval snad minutu než se zapnul, také jsem zpozoroval velké zatížení CPU ale jen občas naskočí vytížení Hostitel služby a zatěžuje více jak polovinu CPU a Ram i Disku, také mi zamrzl touchpad ale tlačítka šla jen nereagoval na pohyb prstu, ovladače na touchpad jsou staženy z offic webu přímo pro tento ntb, a celkově je pomalý stiskl jsem CTRL+ALT+DELETE a nedočkal jsem se. snad po 3 minutách.

Zde přikládám log z RSIT
Logfile of random's system information tool 1.10 (written by random/random)
Run by Hrosík at 2014-12-10 22:40:03
Microsoft Windows 8 Pro
System drive C: has 744 GB (78%) free of 953 GB
Total RAM: 3673 MB (68% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:40:07, on 10. 12. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.17148)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\trend micro\Hrosík.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~3\Office14\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: ICQ - {086C8477-4F71-4550-87FB-AF0AE8DF3E98} - C:\Users\Hrosík\AppData\Roaming\ICQM\icq.exe (HKCU)
O9 - Extra 'Tools' menuitem: ICQ - {086C8477-4F71-4550-87FB-AF0AE8DF3E98} - C:\Users\Hrosík\AppData\Roaming\ICQM\icq.exe (HKCU)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O15 - ESC Trusted Zone: http://*.connectify.me
O15 - ESC Trusted Zone: http://*.fastspring.com
O15 - ESC Trusted Zone: http://*.connectify.me (HKLM)
O15 - ESC Trusted Zone: http://*.fastspring.com (HKLM)
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @oem26.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Radio Control Service (BcmBtRSupport) - Unknown owner - C:\Windows\system32\BtwRSupportService.exe (file missing)
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @oem3.inf,%ibm.svcDesc0%;Lenovo PM Service (IBMPMSVC) - Unknown owner - C:\Windows\system32\ibmpmsvc.exe (file missing)
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Update Manager (iumsvc) - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Lenovo Microphone Mute (LENOVO.MICMUTE) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
O23 - Service: LMIGuardianSvc - Unknown owner - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Conexant SmartAudio service (SAService) - Conexant Systems, Inc. - C:\Windows\system32\SAsrv.exe
O23 - Service: ScsiAccess - Unknown owner - C:\Program Files (x86)\Photodex\ProShow Gold\ScsiAccess.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Lenovo Hotkey Client Loader (TPHKLOAD) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10773 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\ibmpmsvc.exe
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
"dwm.exe"
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\igfxCUIService.exe
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\BtwRSupportService.exe
"C:\Program Files (x86)\Bonjour\mDNSResponder.exe"
"C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe"
dashost.exe {66ceceb4-67f5-4bac-a09f7e54efcebdc7}
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\Windows\SysWOW64\SAsrv.exe
"C:\Program Files (x86)\Photodex\ProShow Gold\ScsiAccess.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss ecd4670e-7fea-4e45-8fed-7f96ae6531f2 1
"C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe"
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\Windows\Explorer.EXE
taskhostex.exe
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\LENOVO\HOTKEY\tpnumlkd.exe
C:\PROGRA~1\Lenovo\HOTKEY\MKRMSG.EXE /UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.MediaKey
C:\PROGRA~1\Lenovo\HOTKEY\TPOSD.EXE /UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.OnScreenDisplay
C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE /UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.ShortcutKey
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\system32\AUDIODG.EXE 0xa50
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe6_ Global\UsGthrCtrlFltPipeMssGthrPipe6 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 552 556 564 65536 560
"C:\Users\Hrosík\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Hrosík\AppData\Roaming\Mozilla\Firefox\Profiles\kcki7tqi.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.239 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.25.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.31010.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@photodex.com/PhotodexPresenter]
"Description"=Photodex Presenter Plugin
"Path"=C:\Program Files (x86)\Photodex Presenter\npPxPlay.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.239 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_239.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.31010.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL


C:\Users\Hrosík\AppData\Roaming\Mozilla\Firefox\Profiles\kcki7tqi.default\searchplugins\
google-avast.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-01-21 6723984]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-01-16 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL [2010-01-21 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll [2014-10-27 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL [2010-01-16 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-10-27 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SACpl.exe [2012-06-13 1647616]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2012-06-14 887968]
"ForteConfig"=C:\Program Files\Conexant\ForteConfig\fmapp.exe [2010-10-26 49056]
"LenovoOptMouseUpdate"=C:\Program Files\Lenovo\HOTKEY\extapsup.exe [2013-06-20 255480]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2013-06-06 399856]
"Persistence"=C:\Windows\system32\igfxpers.exe [2013-06-06 442352]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-09-17 2460488]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-09-17 2799784]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2013-09-12 5618456]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2014-11-21 7063832]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\nvinitx.dll C:\Windows\System32\nvinitx.dll C:\Windows\System32\nvinitx.dll,C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2013-05-21 442880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-01-21 6723984]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL [2010-01-21 4222864]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"TaskbarNoNotification"=1
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2014-12-10 22:22:57 ----D---- C:\Windows\LastGood
2014-12-10 19:39:41 ----D---- C:\Users\Hrosík\AppData\Roaming\IDoser
2014-12-10 19:38:42 ----D---- C:\Program Files (x86)\I-Doser Premium
2014-12-10 02:50:10 ----D---- C:\Users\Hrosík\AppData\Roaming\HD Tune Pro
2014-12-10 02:49:30 ----D---- C:\Program Files (x86)\HD Tune Pro
2014-12-10 02:37:20 ----D---- C:\Windows\SYSWOW64\NV
2014-12-10 02:37:20 ----D---- C:\Windows\system32\NV
2014-12-10 02:34:35 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2014-12-10 02:34:35 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2014-12-10 02:34:35 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2014-12-10 02:34:35 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2014-12-10 02:34:35 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2014-12-10 02:34:35 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2014-12-10 02:34:35 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2014-12-10 02:34:35 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2014-12-10 02:34:35 ----A---- C:\Windows\system32\nvwgf2umx.dll
2014-12-10 02:34:35 ----A---- C:\Windows\system32\nvopencl.dll
2014-12-10 02:34:35 ----A---- C:\Windows\system32\nvoglv64.dll
2014-12-10 02:34:35 ----A---- C:\Windows\system32\nvoglshim64.dll
2014-12-10 02:34:35 ----A---- C:\Windows\system32\NvIFR64.dll
2014-12-10 02:34:35 ----A---- C:\Windows\system32\NvFBC64.dll
2014-12-10 02:34:35 ----A---- C:\Windows\system32\nvdispgenco6434475.dll
2014-12-10 02:34:35 ----A---- C:\Windows\system32\nvdispco6434475.dll
2014-12-10 02:34:35 ----A---- C:\Windows\system32\nvd3dumx.dll
2014-12-10 02:34:35 ----A---- C:\Windows\system32\nvcuvid.dll
2014-12-10 02:34:35 ----A---- C:\Windows\system32\nvcuda.dll
2014-12-10 02:34:35 ----A---- C:\Windows\system32\drivers\nvpciflt.sys
2014-12-10 02:34:35 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2014-12-10 02:34:34 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2014-12-10 02:34:34 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2014-12-10 02:34:34 ----A---- C:\Windows\system32\nvcompiler.dll
2014-12-10 02:29:28 ----D---- C:\DRIVERS
2014-12-10 02:25:04 ----D---- C:\ProgramData\ESET
2014-12-10 02:25:04 ----D---- C:\Program Files\ESET
2014-12-09 20:36:42 ----D---- C:\ProgramData\Codemasters
2014-12-09 20:16:36 ----D---- C:\Program Files (x86)\GRID 2
2014-12-09 17:13:53 ----SHD---- C:\$RECYCLE.BIN
2014-12-09 17:13:46 ----D---- C:\Windows\temp
2014-12-09 17:13:45 ----A---- C:\ComboFix.txt
2014-12-09 15:10:42 ----D---- C:\_OTM
2014-12-09 03:31:55 ----A---- C:\ComboFix2.txt
2014-12-09 03:17:31 ----A---- C:\Windows\zip.exe
2014-12-09 03:17:31 ----A---- C:\Windows\SWXCACLS.exe
2014-12-09 03:17:31 ----A---- C:\Windows\SWSC.exe
2014-12-09 03:17:31 ----A---- C:\Windows\SWREG.exe
2014-12-09 03:17:31 ----A---- C:\Windows\sed.exe
2014-12-09 03:17:31 ----A---- C:\Windows\PEV.exe
2014-12-09 03:17:31 ----A---- C:\Windows\NIRCMD.exe
2014-12-09 03:17:31 ----A---- C:\Windows\MBR.exe
2014-12-09 03:17:31 ----A---- C:\Windows\grep.exe
2014-12-09 03:17:22 ----D---- C:\Qoobox
2014-12-09 03:15:44 ----D---- C:\rsit
2014-12-09 03:15:44 ----D---- C:\Program Files\trend micro
2014-12-09 02:29:21 ----D---- C:\Users\Hrosík\AppData\Roaming\TeamViewer
2014-12-09 02:20:35 ----SD---- C:\Windows\SYSWOW64\Microsoft
2014-12-08 23:55:50 ----D---- C:\Users\Hrosík\AppData\Roaming\PC Suite
2014-12-08 23:55:46 ----D---- C:\ProgramData\PC Suite
2014-12-08 23:53:04 ----D---- C:\ProgramData\Nokia
2014-12-08 23:52:35 ----D---- C:\Program Files\DIFX
2014-12-08 23:52:35 ----A---- C:\Windows\system32\drivers\pccsmcfdx64.sys
2014-12-08 23:52:34 ----DC---- C:\Windows\system32\DRVSTORE
2014-12-08 23:52:26 ----D---- C:\Program Files (x86)\PC Connectivity Solution
2014-12-08 23:52:11 ----A---- C:\Windows\system32\nmwcdclsX64.dll
2014-12-08 23:51:00 ----D---- C:\ProgramData\NokiaInstallerCache
2014-12-08 23:51:00 ----D---- C:\Program Files (x86)\Nokia
2014-12-08 22:56:15 ----D---- C:\Windows\cs
2014-12-08 22:54:32 ----D---- C:\Program Files (x86)\Windows Live
2014-12-08 22:53:53 ----A---- C:\Windows\system32\XAudio2_7.dll
2014-12-08 22:53:53 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2014-12-08 22:53:52 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2014-12-08 22:53:52 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2014-12-08 22:53:51 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2014-12-08 22:53:51 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2014-12-08 22:53:50 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2014-12-08 22:53:50 ----A---- C:\Windows\system32\d3dx11_43.dll
2014-12-08 22:53:45 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2014-12-08 22:53:45 ----A---- C:\Windows\system32\d3dx10_42.dll
2014-12-08 15:37:23 ----A---- C:\Windows\SYSWOW64\srvany.exe
2014-12-08 14:56:55 ----D---- C:\Users\Hrosík\AppData\Roaming\Unity
2014-12-07 07:46:28 ----A---- C:\Windows\system32\BtwRSupportService(143).exe
2014-12-06 23:23:29 ----D---- C:\Users\Hrosík\AppData\Roaming\Netscape
2014-12-06 23:23:29 ----D---- C:\Program Files (x86)\Photodex Presenter
2014-12-06 23:23:08 ----D---- C:\Program Files (x86)\Photodex
2014-12-06 23:22:49 ----D---- C:\Users\Hrosík\AppData\Roaming\Photodex
2014-12-06 23:22:49 ----D---- C:\ProgramData\Photodex
2014-12-05 06:53:45 ----D---- C:\Users\Hrosík\AppData\Roaming\ProductData
2014-12-05 06:38:54 ----D---- C:\Users\Hrosík\AppData\Roaming\Apple Computer
2014-12-05 06:38:01 ----D---- C:\ProgramData\ProductData
2014-12-05 06:37:23 ----D---- C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
2014-12-05 06:36:33 ----D---- C:\Users\Hrosík\AppData\Roaming\IObit
2014-12-03 23:17:56 ----D---- C:\ProgramData\Mozilla
2014-12-03 23:17:54 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-12-03 23:17:47 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-12-02 22:29:46 ----A---- C:\Windows\system32\drivers\cnnctfy3.sys
2014-12-01 15:51:16 ----AH---- C:\Windows\system32\drivers\Hamdrv.sys
2014-11-29 00:05:57 ----A---- C:\Windows\SYSWOW64\secman.dll
2014-11-29 00:05:54 ----A---- C:\Windows\SYSWOW64\Redemption.dll
2014-11-29 00:04:33 ----D---- C:\ProgramData\Samsung
2014-11-29 00:04:33 ----D---- C:\Program Files (x86)\Samsung
2014-11-26 12:19:52 ----A---- C:\Windows\system32\AutoUpdate.exe
2014-11-26 12:19:51 ----A---- C:\Windows\system32\NotificationUI.exe
2014-11-23 16:10:53 ----D---- C:\Program Files (x86)\Marvell
2014-11-19 22:03:09 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-11-19 22:03:09 ----A---- C:\Windows\system32\kerberos.dll
2014-11-19 22:03:08 ----A---- C:\Windows\SYSWOW64\pku2u.dll
2014-11-19 22:03:07 ----A---- C:\Windows\system32\pku2u.dll
2014-11-19 21:39:48 ----D---- C:\Program Files (x86)\WinToUSB
2014-11-14 06:03:53 ----A---- C:\Windows\system32\shell32.dll
2014-11-14 06:03:52 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-11-14 06:03:51 ----A---- C:\Windows\SYSWOW64\mfmpeg2srcsnk.dll
2014-11-14 06:03:51 ----A---- C:\Windows\system32\srmclient.dll
2014-11-14 06:03:51 ----A---- C:\Windows\system32\mfmpeg2srcsnk.dll
2014-11-14 06:03:51 ----A---- C:\Windows\system32\dnsapi.dll
2014-11-14 06:03:50 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2014-11-14 06:03:50 ----A---- C:\Windows\system32\VSSVC.exe
2014-11-14 06:03:50 ----A---- C:\Windows\system32\srmscan.dll
2014-11-14 06:03:49 ----A---- C:\Windows\SYSWOW64\srmscan.dll
2014-11-14 06:03:49 ----A---- C:\Windows\SYSWOW64\srmclient.dll
2014-11-14 06:03:49 ----A---- C:\Windows\system32\adrclient.dll
2014-11-14 06:03:48 ----A---- C:\Windows\SYSWOW64\srm.dll
2014-11-14 06:03:48 ----A---- C:\Windows\SYSWOW64\adrclient.dll
2014-11-14 06:03:48 ----A---- C:\Windows\system32\srm.dll
2014-11-14 06:03:48 ----A---- C:\Windows\system32\dnsrslvr.dll
2014-11-14 05:39:31 ----A---- C:\Windows\zoek-delete.exe
2014-11-14 05:19:59 ----D---- C:\zoek_backup
2014-11-13 07:53:56 ----D---- C:\AdwCleaner
2014-11-13 06:41:28 ----D---- C:\Program Files (x86)\Call of Duty - Black Ops 2
2014-11-12 00:04:39 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-11-11 22:05:28 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2014-11-11 22:05:28 ----A---- C:\Windows\system32\oleaut32.dll
2014-11-11 22:05:26 ----A---- C:\Windows\system32\EncDump.dll
2014-11-11 22:05:26 ----A---- C:\Windows\system32\audiosrv.dll
2014-11-11 22:05:26 ----A---- C:\Windows\system32\AUDIOKSE.dll
2014-11-11 22:05:26 ----A---- C:\Windows\system32\AudioEndpointBuilder.dll
2014-11-11 22:05:17 ----A---- C:\Windows\system32\WsmSvc.dll
2014-11-11 22:05:17 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-11-11 22:05:16 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2014-11-11 22:05:16 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2014-11-11 22:05:15 ----A---- C:\Windows\SYSWOW64\WsmWmiPl.dll
2014-11-11 22:05:15 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2014-11-11 22:05:15 ----A---- C:\Windows\system32\WsmWmiPl.dll
2014-11-11 22:05:15 ----A---- C:\Windows\system32\rpchttp.dll
2014-11-11 22:05:14 ----A---- C:\Windows\SYSWOW64\FXSCOMEX.dll
2014-11-11 22:05:14 ----A---- C:\Windows\SYSWOW64\FXSAPI.dll
2014-11-11 22:05:14 ----A---- C:\Windows\system32\FXSCOMEX.dll
2014-11-11 22:05:13 ----A---- C:\Windows\system32\FXSTIFF.dll
2014-11-11 22:05:13 ----A---- C:\Windows\system32\FXST30.dll
2014-11-11 22:05:13 ----A---- C:\Windows\system32\FXSAPI.dll
2014-11-11 22:05:02 ----A---- C:\Windows\system32\drivers\WdFilter.sys
2014-11-11 22:05:02 ----A---- C:\Windows\system32\drivers\WdBoot.sys
2014-11-11 22:04:57 ----A---- C:\Windows\system32\win32k.sys
2014-11-11 22:04:49 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-11-11 22:04:48 ----A---- C:\Windows\system32\msi.dll
2014-11-11 22:04:44 ----A---- C:\Windows\SYSWOW64\twinui.dll
2014-11-11 22:04:43 ----A---- C:\Windows\system32\twinui.dll
2014-11-11 22:04:42 ----A---- C:\Windows\system32\msihnd.dll
2014-11-11 22:04:42 ----A---- C:\Windows\system32\authui.dll
2014-11-11 22:04:41 ----A---- C:\Windows\SYSWOW64\authui.dll
2014-11-11 22:04:40 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2014-11-11 22:04:37 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-11-11 22:04:37 ----A---- C:\Windows\system32\msxml3.dll
2014-11-11 22:04:31 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-11-11 22:04:31 ----A---- C:\Windows\system32\schannel.dll
2014-11-11 22:04:31 ----A---- C:\Windows\system32\ncryptsslp.dll
2014-11-11 22:04:30 ----A---- C:\Windows\SYSWOW64\ncryptsslp.dll
2014-11-11 22:04:24 ----A---- C:\Windows\system32\rdpcorets.dll
2014-11-11 22:04:23 ----A---- C:\Windows\system32\lsasrv.dll
2014-11-11 22:04:22 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2014-11-11 22:04:22 ----A---- C:\Windows\system32\SHCore.dll
2014-11-11 22:04:22 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-11-11 22:04:22 ----A---- C:\Windows\system32\adtschema.dll
2014-11-11 22:04:21 ----A---- C:\Windows\SYSWOW64\SHCore.dll
2014-11-11 22:04:21 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2014-11-11 22:04:21 ----A---- C:\Windows\system32\msaudite.dll
2014-11-11 22:04:18 ----A---- C:\Windows\system32\packager.dll
2014-11-11 22:04:17 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-11-11 22:03:57 ----A---- C:\Windows\system32\mshtml.dll
2014-11-11 22:03:52 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-11-11 22:03:50 ----A---- C:\Windows\system32\ieframe.dll
2014-11-11 22:03:49 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-11-11 22:03:49 ----A---- C:\Windows\system32\wininet.dll
2014-11-11 22:03:49 ----A---- C:\Windows\system32\iertutil.dll
2014-11-11 22:03:48 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-11-11 22:03:48 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-11-11 22:03:48 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-11-11 22:03:48 ----A---- C:\Windows\system32\urlmon.dll
2014-11-11 22:03:46 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-11-11 22:03:46 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-11-11 22:03:46 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2014-11-11 22:03:46 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-11-11 22:03:46 ----A---- C:\Windows\system32\uxtheme.dll
2014-11-11 22:03:46 ----A---- C:\Windows\system32\iesysprep.dll
2014-11-11 22:03:45 ----A---- C:\Windows\SYSWOW64\jscript.dll
2014-11-11 22:03:45 ----A---- C:\Windows\system32\msfeeds.dll
2014-11-11 22:03:45 ----A---- C:\Windows\system32\jscript9.dll
2014-11-11 22:03:45 ----A---- C:\Windows\system32\iedkcs32.dll
2014-11-11 22:03:44 ----A---- C:\Windows\SYSWOW64\UXInit.dll
2014-11-11 22:03:44 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-11-11 22:03:44 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-11-11 22:03:44 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-11-11 22:03:44 ----A---- C:\Windows\system32\msrating.dll
2014-11-11 22:03:44 ----A---- C:\Windows\system32\mshtmled.dll
2014-11-11 22:03:44 ----A---- C:\Windows\system32\jscript.dll
2014-11-11 22:03:44 ----A---- C:\Windows\system32\iernonce.dll
2014-11-11 22:03:44 ----A---- C:\Windows\system32\ie4uinit.exe
2014-11-11 22:03:44 ----A---- C:\Windows\system32\dxtrans.dll
2014-11-11 22:03:43 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-11-11 22:03:43 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-11-11 22:03:43 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-11-11 22:03:43 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-11-11 22:03:43 ----A---- C:\Windows\system32\UXInit.dll
2014-11-11 22:03:43 ----A---- C:\Windows\system32\jsproxy.dll
2014-11-11 22:03:43 ----A---- C:\Windows\system32\iesetup.dll
2014-11-11 22:03:43 ----A---- C:\Windows\system32\dxtmsft.dll
2014-11-11 22:03:42 ----A---- C:\Windows\SYSWOW64\uxtheme.dll

======List of files/folders modified in the last 1 month======

2014-12-10 22:27:59 ----SHD---- C:\System Volume Information
2014-12-10 22:23:07 ----D---- C:\Windows\WinSxS
2014-12-10 22:23:05 ----D---- C:\Windows\CbsTemp
2014-12-10 22:23:04 ----D---- C:\Windows\system32\Tasks
2014-12-10 22:23:00 ----D---- C:\Windows\SysWOW64
2014-12-10 22:22:57 ----D---- C:\Windows\system32\Drivers
2014-12-10 22:22:57 ----D---- C:\Windows\System32
2014-12-10 22:22:57 ----D---- C:\Windows
2014-12-10 22:22:46 ----SHD---- C:\Windows\Installer
2014-12-10 22:22:29 ----D---- C:\ProgramData\Microsoft Help
2014-12-10 22:18:51 ----D---- C:\Windows\system32\MRT
2014-12-10 22:18:45 ----A---- C:\Windows\system32\MRT.exe
2014-12-10 22:16:01 ----SD---- C:\ProgramData\Microsoft
2014-12-10 22:14:55 ----D---- C:\Program Files\Microsoft Silverlight
2014-12-10 22:14:55 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-12-10 22:14:02 ----D---- C:\Windows\system32\sru
2014-12-10 19:38:53 ----D---- C:\Users\Hrosík\AppData\Roaming\uTorrent
2014-12-10 19:38:42 ----RD---- C:\Program Files (x86)
2014-12-10 19:33:22 ----HD---- C:\Program Files\WindowsApps
2014-12-10 19:33:22 ----D---- C:\Windows\AUInstallAgent
2014-12-10 04:43:17 ----D---- C:\Windows\system32\catroot2
2014-12-10 04:42:44 ----D---- C:\Windows\system32\config
2014-12-10 02:37:18 ----D---- C:\ProgramData\NVIDIA
2014-12-10 02:36:00 ----D---- C:\Windows\Inf
2014-12-10 02:35:55 ----D---- C:\Windows\system32\DriverStore
2014-12-10 02:25:04 ----RD---- C:\Program Files
2014-12-10 02:25:04 ----D---- C:\ProgramData
2014-12-09 23:46:13 ----RD---- C:\Users
2014-12-09 23:03:30 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-12-09 20:15:34 ----D---- C:\Users\Hrosík\AppData\Roaming\DAEMON Tools Lite
2014-12-09 17:39:41 ----D---- C:\Windows\SoftwareDistribution
2014-12-09 17:39:19 ----D---- C:\Windows\Prefetch
2014-12-09 17:25:56 ----D---- C:\Windows\debug
2014-12-09 17:11:13 ----A---- C:\Windows\system.ini
2014-12-09 17:09:12 ----D---- C:\Windows\SYSWOW64\drivers
2014-12-09 17:09:12 ----D---- C:\Windows\apppatch
2014-12-09 17:09:11 ----D---- C:\Program Files (x86)\Common Files
2014-12-09 15:44:38 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-12-09 15:09:11 ----D---- C:\Program Files (x86)\IObit
2014-12-09 15:09:09 ----D---- C:\Windows\Tasks
2014-12-09 03:39:09 ----D---- C:\Windows\Microsoft.NET
2014-12-09 03:27:20 ----D---- C:\Windows\system32\drivers\etc
2014-12-09 03:16:58 ----D---- C:\Windows\erdnt
2014-12-09 02:54:10 ----D---- C:\ProgramData\AVAST Software
2014-12-09 02:53:31 ----D---- C:\Windows\system32\catroot
2014-12-09 02:52:55 ----D---- C:\Users\Hrosík\AppData\Roaming\New Version Available
2014-12-09 02:32:18 ----D---- C:\Windows\system32\NDF
2014-12-09 02:29:24 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-12-09 02:29:21 ----RSD---- C:\Windows\Fonts
2014-12-09 02:26:33 ----D---- C:\Users\Hrosík\AppData\Roaming\.minecraft
2014-12-09 02:23:19 ----D---- C:\Windows\Logs
2014-12-08 23:58:33 ----D---- C:\Windows\system32\drivers\UMDF
2014-12-08 23:02:47 ----D---- C:\Users\Hrosík\AppData\Roaming\vlc
2014-12-08 22:56:31 ----RSD---- C:\Windows\assembly
2014-12-08 22:55:30 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-12-08 22:54:51 ----D---- C:\Program Files\Common Files\microsoft shared
2014-12-07 13:48:07 ----D---- C:\Windows\system32\wbem
2014-12-07 13:47:19 ----D---- C:\ProgramData\IObit
2014-12-07 13:46:14 ----D---- C:\Windows\registration
2014-12-07 13:46:04 ----SD---- C:\Users\Hrosík\AppData\Roaming\Microsoft
2014-12-06 23:23:29 ----D---- C:\Users\Hrosík\AppData\Roaming\Mozilla
2014-12-05 08:50:27 ----D---- C:\Users\Hrosík\AppData\Roaming\Notepad++
2014-12-05 07:06:14 ----D---- C:\Windows\Panther
2014-12-03 23:17:09 ----D---- C:\Program Files\CCleaner
2014-11-30 14:43:11 ----D---- C:\Windows\rescache
2014-11-26 14:34:57 ----A---- C:\IFRToolLog.txt
2014-11-19 21:48:45 ----HD---- C:\Windows\system32\GroupPolicy
2014-11-19 21:48:45 ----D---- C:\Windows\SYSWOW64\GroupPolicy
2014-11-14 06:07:01 ----RD---- C:\Windows\ToastData
2014-11-14 05:53:36 ----D---- C:\Program Files (x86)\Virtual Router
2014-11-13 07:05:12 ----D---- C:\Program Files (x86)\Netscape
2014-11-13 01:20:36 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2014-11-13 01:20:36 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2014-11-13 01:20:36 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2014-11-13 01:20:36 ----A---- C:\Windows\system32\nvumdshimx.dll
2014-11-13 01:20:36 ----A---- C:\Windows\system32\nvinitx.dll
2014-11-13 01:20:36 ----A---- C:\Windows\system32\nvapi64.dll
2014-11-12 22:56:45 ----A---- C:\Windows\system32\nvsvc64.dll
2014-11-12 22:56:45 ----A---- C:\Windows\system32\nvcpl.dll
2014-11-12 22:56:42 ----A---- C:\Windows\SYSWOW64\oemdspif.dll
2014-11-12 22:56:42 ----A---- C:\Windows\system32\nvvsvc.exe
2014-11-12 22:56:42 ----A---- C:\Windows\system32\nvsvcr.dll
2014-11-12 22:56:42 ----A---- C:\Windows\system32\nvshext.dll
2014-11-12 22:56:42 ----A---- C:\Windows\system32\nvmctray.dll
2014-11-12 22:56:42 ----A---- C:\Windows\system32\nv3dappshextr.dll
2014-11-12 22:56:42 ----A---- C:\Windows\system32\nv3dappshext.dll
2014-11-12 00:01:00 ----D---- C:\Program Files\Windows Defender
2014-11-12 00:00:59 ----D---- C:\Program Files (x86)\Windows Defender
2014-11-12 00:00:53 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-11-12 00:00:52 ----D---- C:\Windows\system32\cs-CZ
2014-11-12 00:00:46 ----D---- C:\Program Files (x86)\Internet Explorer
2014-11-12 00:00:43 ----D---- C:\Program Files\Internet Explorer

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2014-11-13 31560]
R1 dtsoftbus01;@oem6.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\Windows\System32\drivers\dtsoftbus01.sys [2014-08-13 283064]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-09-17 239320]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-09-17 168256]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [2012-07-26 64000]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2013-09-17 157432]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2014-11-01 43168]
R3 bcbtums;@oem26.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\Windows\system32\drivers\bcbtums.sys [2012-10-02 169240]
R3 BCM43XX;@netbc63a.inf,%BCM43XX_Service_DispName%;Broadcom 802.11 – ovladač síťového adaptéru; C:\Windows\system32\DRIVERS\bcmwl63a.sys [2012-06-02 5139968]
R3 BthEnum;@tdibth.inf,%BthEnum.DisplayName%;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2013-01-09 51712]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\Windows\system32\DRIVERS\BthLEEnum.sys [2012-07-26 202752]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2012-07-26 119808]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2013-01-09 74752]
R3 btwampfl;btwampfl Bluetooth filter driver; \??\C:\Windows\system32\drivers\btwampfl.sys [2013-02-27 165080]
R3 btwaudio;@oem20.inf,%btaudio.SvcDesc%;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2013-02-27 186584]
R3 btwavdt;@oem21.inf,%btwavdt.SVCDESC%;Bluetooth AVDT Service; C:\Windows\System32\drivers\btwavdt.sys [2013-02-27 227032]
R3 btwl2cap;@oem23.inf,%btwl2cap.SVCDESC%;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2012-07-27 40248]
R3 BTWPANFL;BTW PAN filter driver; \??\C:\Windows\system32\drivers\btwpanfl.sys [2013-01-20 44912]
R3 btwrchid;btwrchid; C:\Windows\System32\drivers\btwrchid.sys [2013-02-27 22744]
R3 CnxtHdAudService;@oem7.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT64.sys [2012-09-20 1609376]
R3 IBMPMDRV;IBMPMDRV; C:\Windows\system32\DRIVERS\ibmpmdrv.sys [2014-02-27 57144]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2013-05-21 5359168]
R3 IntcDAud;@oem5.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2013-05-24 342528]
R3 MEIx64;@oem9.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\System32\drivers\HECIx64.sys [2013-05-14 64624]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2014-11-13 13213512]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-09-17 19272]
R3 nvvad_WaveExtensible;@oem18.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-09-04 38048]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2013-03-01 156672]
R3 RSP2STOR;@oem10.inf,%Rts5229%;Realtek PCIE CardReader Driver - P2; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [2012-12-13 288480]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2012-06-02 589824]
R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2013-04-26 33008]
R3 SynTP;@oem2.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2013-04-24 460528]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2013-07-05 210560]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [2012-07-26 17920]
S2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2014-11-01 312480]
S3 aswTap;@oem36.inf,%DeviceDescription%;avast! SecureLine TAP Adapter v3; C:\Windows\system32\DRIVERS\aswTap.sys [2014-11-09 44640]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2013-03-01 1175040]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 Hamachi;LogMeIn Hamachi Virtual Miniport); C:\Windows\system32\DRIVERS\Hamdrv.sys [2014-12-01 45112]
S3 nmwcd;@oem37.inf,%MFG% %SVC%;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2013-01-23 19968]
S3 nmwcdc;@oem42.inf,%MFG% %SVC%;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2013-01-23 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2013-01-23 9216]
S3 usbser;USB Modem Driver; C:\Windows\system32\DRIVERS\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2013-01-23 9216]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 BcmBtRSupport;@oem26.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Radio Control Service; C:\Windows\system32\BtwRSupportService.exe [2012-10-02 2227992]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2013-02-26 959192]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2013-09-12 1337752]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2014-09-17 1148744]
R2 IBMPMSVC;@oem3.inf,%ibm.svcDesc0%;Lenovo PM Service; C:\Windows\system32\ibmpmsvc.exe [2014-02-27 68440]
R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2012-11-15 2468496]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2014-05-20 314696]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-12-10 732160]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2013-05-31 129848]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-05-31 167736]
R2 LENOVO.MICMUTE;Lenovo Microphone Mute; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [2014-04-07 110128]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-05-31 364856]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-09-17 1795912]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-09-17 19439944]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-11-12 934032]
R2 SAService;Conexant SmartAudio service; C:\Windows\system32\SAsrv.exe []
R2 ScsiAccess;ScsiAccess; C:\Program Files (x86)\Photodex\ProShow Gold\ScsiAccess.exe [2014-12-06 186760]
R2 TPHKLOAD;Lenovo Hotkey Client Loader; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [2014-06-10 124400]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S3 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-05-08 65432]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-25 267440]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2013-06-06 279024]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2014-10-05 654848]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2012-07-06 43616]
S3 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-13 116648]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-13 116648]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-08-12 136120]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2012-12-10 803872]
S3 iumsvc;Intel(R) Update Manager; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28 174368]
S3 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe []
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-01-21 30963576]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-11-26 114800]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S4 CxAudMsg;Conexant Audio Message Service; C:\Windows\system32\CxAudMsg64.exe [2012-06-08 201376]

-----------------EOF-----------------

Zdravim

Po pouziti ComboFixu ma RSIT vypovidaci hodnotu nula nula nic, takze tezko rict, zda se k nejakemu vysledku dopracujeme... A protoze jste pri spusteni ComboFixu souhlasil s podminkami uziti, predpokladam, ze jste osoba pro praci s nim vyskolena nebo Vam alespon osoba zkusena asistovala. Poprosim Vas tedy o obsah logu z ComboFixu, pripadne obsah CFScriptu. Take by me zajimal aplikovany skript pro OTM nebo alespon vysledny log.

Vidim pozustatky IObitu... co jste od teto cinske firmy mel/mate nainstalovano a co jste pouzil?

Od kdy tyto problemy pozorujete?

Problém jsem já zpozoroval posledních pár dní, až včera už jsem neměl na to nervy a zkoušel s tím něco dělat, jinak přítelkyně říká že to trvá celkem dlouho i měsíc.

Ano ano s combofixem zkušenosti mám, vím co si můžu a nemůžu dovolit. Od iObitu si přítelkyně stáhla Cleaner, Uninstaller.

Jen problém že jsem projel pc OTC cleanrem ten smazal všechny logy v otm byl script jen pro smazání Tempů nic víc co by zasahovalo nebo změnilo nastavení či systém, mám tedy udělat nový log z CF?

Děkuji za reakci.

V RSIT logu, ktery jste delal pred pulhodinou jeste logy z CF i OTM jsou videt... OTC jste pouzil ted nekdy? Nepamatujete si alespon zhruba obsah pouziteho CFScriptu?

Pustte tedy znovu ComboFix.

Ano hned potém jsem zapnul cleaner, jsem to ale nezmar...

CFScript jsem právě že nedělal ještě jen jsem chtěl zkouknout log, a žádné výmazy tam také nebyly takže jdu udělat nový log.

+ComboFix 14-12-10.03 - Hrosík . 12. 2014 20:25:02.7.2 - x64
Microsoft Windows 8 Pro 6.2.9200.0.1250.420.1029.18.3673.2501 [GMT 1:00]
Spuštěný z: c:\users\Hrosík\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 7.0 *Disabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: ESET NOD32 Antivirus 7.0 *Disabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-11-11 do 2014-12-11 )))))))))))))))))))))))))))))))
.
.
2014-12-11 19:38 . 2014-12-11 19:38 -------- d-----w- c:\users\Hrosík\AppData\Local\temp
2014-12-11 19:38 . 2014-12-11 19:38 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-12-10 21:17 . 2014-10-09 04:00 1484288 ----a-w- c:\windows\system32\VSSVC.exe
2014-12-10 21:17 . 2014-10-09 04:00 69632 ----a-w- c:\windows\system32\vsstrace.dll
2014-12-10 21:17 . 2014-10-09 04:00 1519104 ----a-w- c:\windows\system32\vssapi.dll
2014-12-10 21:17 . 2014-10-09 03:59 52224 ----a-w- c:\windows\SysWow64\vsstrace.dll
2014-12-10 21:17 . 2014-10-09 03:59 1195520 ----a-w- c:\windows\SysWow64\vssapi.dll
2014-12-10 18:39 . 2014-12-10 18:45 -------- d-----w- c:\users\Hrosík\AppData\Roaming\IDoser
2014-12-10 18:38 . 2014-12-10 18:39 -------- d-----w- c:\program files (x86)\I-Doser Premium
2014-12-10 04:05 . 2014-11-21 07:16 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2014-12-10 04:04 . 2014-11-21 08:36 451584 ----a-w- c:\windows\system32\dxtmsft.dll
2014-12-10 04:04 . 2014-11-21 07:16 258048 ----a-w- c:\program files (x86)\Internet Explorer\ieproxy.dll
2014-12-10 04:04 . 2014-11-21 08:36 702976 ----a-w- c:\program files\Internet Explorer\ieproxy.dll
2014-12-10 04:04 . 2014-11-21 08:36 53760 ----a-w- c:\windows\system32\jsproxy.dll
2014-12-10 04:04 . 2014-11-21 08:36 67072 ----a-w- c:\windows\system32\iesetup.dll
2014-12-10 04:04 . 2014-11-21 07:16 61440 ----a-w- c:\windows\SysWow64\iesetup.dll
2014-12-10 04:04 . 2014-11-21 04:30 534528 ----a-w- c:\windows\SysWow64\uxtheme.dll
2014-12-10 04:04 . 2014-11-21 06:54 2706432 ----a-w- c:\windows\SysWow64\mshtml.tlb
2014-12-10 04:04 . 2014-11-21 07:00 2706432 ----a-w- c:\windows\system32\mshtml.tlb
2014-12-10 03:48 . 2014-11-06 06:50 1627648 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-12-10 03:48 . 2014-11-06 05:03 1339392 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2014-12-10 03:15 . 2014-10-30 07:20 1890816 ----a-w- c:\windows\system32\crypt32.dll
2014-12-10 03:15 . 2014-10-30 05:22 1569792 ----a-w- c:\windows\SysWow64\crypt32.dll
2014-12-10 01:50 . 2014-12-10 01:50 -------- d-----w- c:\users\Hrosík\AppData\Roaming\HD Tune Pro
2014-12-10 01:49 . 2014-12-10 01:49 -------- d-----w- c:\program files (x86)\HD Tune Pro
2014-12-10 01:37 . 2014-12-10 01:37 -------- d-----w- c:\windows\SysWow64\NV
2014-12-10 01:37 . 2014-12-10 01:37 -------- d-----w- c:\windows\system32\NV
2014-12-10 01:29 . 2014-12-10 01:29 -------- d-----w- C:\DRIVERS
2014-12-10 01:25 . 2014-12-10 01:25 -------- d-----w- c:\program files\ESET
2014-12-09 22:46 . 2014-12-09 22:46 -------- d-----w- c:\users\HROSK~2
2014-12-09 22:45 . 2014-12-10 01:31 -------- d-----w- c:\users\Hrosík\AppData\Local\CrashDumps
2014-12-09 22:45 . 2014-12-09 22:45 -------- d-----w- c:\users\Hrosík\AppData\Local\SCE
2014-12-09 19:36 . 2014-12-09 19:36 -------- d-----w- c:\programdata\Codemasters
2014-12-09 19:16 . 2014-12-09 19:36 -------- d-----w- c:\program files (x86)\GRID 2
2014-12-09 02:15 . 2014-12-10 21:40 -------- d-----w- c:\program files\trend micro
2014-12-09 02:06 . 2014-11-02 04:20 11632448 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{3B213F98-BCFF-445D-9C97-090847AEDE14}\mpengine.dll
2014-12-09 01:29 . 2014-12-09 01:29 -------- d-----w- c:\users\Hrosík\AppData\Roaming\TeamViewer
2014-12-09 01:20 . 2014-12-09 01:20 -------- d-s---w- c:\windows\SysWow64\Microsoft
2014-12-08 22:55 . 2014-12-08 22:56 -------- d-----w- c:\users\Hrosík\AppData\Local\Nokia
2014-12-08 22:55 . 2014-12-08 23:00 -------- d-----w- c:\users\Hrosík\AppData\Roaming\PC Suite
2014-12-08 22:55 . 2014-12-08 22:58 -------- d-----w- c:\programdata\PC Suite
2014-12-08 22:53 . 2014-12-09 01:27 -------- d-----w- c:\programdata\Nokia
2014-12-08 22:52 . 2014-12-08 22:52 -------- d-----w- c:\program files\DIFX
2014-12-08 22:52 . 2012-10-17 13:53 26112 ----a-w- c:\windows\system32\drivers\pccsmcfdx64.sys
2014-12-08 22:52 . 2014-12-08 22:52 -------- dc----w- c:\windows\system32\DRVSTORE
2014-12-08 22:52 . 2014-12-08 22:52 -------- d-----w- c:\program files (x86)\PC Connectivity Solution
2014-12-08 22:52 . 2013-01-23 09:31 57856 ----a-w- c:\windows\system32\nmwcdclsX64.dll
2014-12-08 22:51 . 2014-12-09 01:27 -------- d-----w- c:\program files (x86)\Nokia
2014-12-08 21:56 . 2014-12-08 21:56 -------- d-----w- c:\windows\cs
2014-12-08 21:54 . 2014-12-08 21:55 -------- d-----w- c:\program files (x86)\Windows Live
2014-12-08 21:53 . 2010-06-02 03:55 77656 ----a-w- c:\windows\system32\XAPOFX1_5.dll
2014-12-08 21:53 . 2010-06-02 03:55 518488 ----a-w- c:\windows\system32\XAudio2_7.dll
2014-12-08 21:53 . 2010-06-02 03:55 74072 ----a-w- c:\windows\SysWow64\XAPOFX1_5.dll
2014-12-08 21:53 . 2010-06-02 03:55 527192 ----a-w- c:\windows\SysWow64\XAudio2_7.dll
2014-12-08 21:53 . 2010-05-26 10:41 2526056 ----a-w- c:\windows\system32\D3DCompiler_43.dll
2014-12-08 21:53 . 2010-05-26 10:41 2106216 ----a-w- c:\windows\SysWow64\D3DCompiler_43.dll
2014-12-08 21:53 . 2010-05-26 10:41 276832 ----a-w- c:\windows\system32\d3dx11_43.dll
2014-12-08 21:53 . 2010-05-26 10:41 248672 ----a-w- c:\windows\SysWow64\d3dx11_43.dll
2014-12-08 21:53 . 2009-09-04 16:29 453456 ----a-w- c:\windows\SysWow64\d3dx10_42.dll
2014-12-08 21:53 . 2009-09-04 16:29 523088 ----a-w- c:\windows\system32\d3dx10_42.dll
2014-12-08 21:51 . 2014-12-08 22:03 -------- d-----w- c:\users\Hrosík\AppData\Local\Windows Live
2014-12-08 21:50 . 2014-12-08 21:50 -------- d-----w- c:\program files (x86)\Common Files\Windows Live
2014-12-08 14:37 . 2014-12-08 14:37 8192 ----a-w- c:\windows\SysWow64\srvany.exe
2014-12-08 13:56 . 2014-12-08 13:56 -------- d-----w- c:\users\Hrosík\AppData\Roaming\Unity
2014-12-07 06:46 . 2014-12-07 06:46 2251992 ----a-w- c:\windows\system32\BtwRSupportService(143).exe
2014-12-06 22:23 . 2014-12-06 22:23 -------- d-----w- c:\program files (x86)\Photodex Presenter
2014-12-06 22:23 . 2014-12-06 22:23 -------- d-----w- c:\users\Hrosík\AppData\Roaming\Netscape
2014-12-06 22:23 . 2014-12-06 22:23 -------- d-----w- c:\program files (x86)\Photodex
2014-12-06 22:22 . 2014-12-06 22:23 -------- d-----w- c:\programdata\Photodex
2014-12-06 22:22 . 2014-12-06 22:22 -------- d-----w- c:\users\Hrosík\AppData\Roaming\Photodex
2014-12-05 05:53 . 2014-12-07 12:46 -------- d-----w- c:\users\Hrosík\AppData\Roaming\ProductData
2014-12-05 05:38 . 2014-12-05 05:38 -------- d-----w- c:\users\Hrosík\AppData\Roaming\Apple Computer
2014-12-05 05:38 . 2014-12-07 12:47 -------- d-----w- c:\programdata\ProductData
2014-12-05 05:37 . 2014-12-05 05:37 -------- d-----w- c:\programdata\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
2014-12-05 05:36 . 2014-12-05 05:36 -------- d-----w- c:\program files (x86)\Common Files\IObit
2014-12-05 05:36 . 2014-12-07 12:46 -------- d-----w- c:\users\Hrosík\AppData\Roaming\IObit
2014-12-03 22:19 . 2014-12-03 22:19 -------- d-----w- c:\users\Hrosík\AppData\Local\Mozilla
2014-12-03 22:17 . 2014-12-03 22:17 -------- d-----w- c:\program files (x86)\Mozilla Maintenance Service
2014-12-02 21:29 . 2014-12-02 21:29 35352 ----a-w- c:\windows\system32\drivers\cnnctfy3.sys
2014-12-01 14:51 . 2014-12-01 14:51 45112 ---ha-w- c:\windows\system32\drivers\Hamdrv.sys
2014-11-28 23:05 . 2014-04-30 18:43 144664 ----a-w- c:\windows\SysWow64\secman.dll
2014-11-28 23:05 . 2014-04-30 18:43 4659712 ----a-w- c:\windows\SysWow64\Redemption.dll
2014-11-28 23:04 . 2014-12-09 01:29 -------- d-----w- c:\program files (x86)\Samsung
2014-11-28 23:04 . 2014-12-09 01:29 -------- d-----w- c:\programdata\Samsung
2014-11-28 23:01 . 2014-11-28 23:01 -------- d-----w- c:\users\Hrosík\AppData\Local\Downloaded Installations
2014-11-26 11:19 . 2014-11-19 07:29 582552 ----a-w- c:\windows\system32\AutoUpdate.exe
2014-11-26 11:19 . 2014-11-19 07:29 462760 ----a-w- c:\windows\system32\NotificationUI.exe
2014-11-23 15:10 . 2014-11-23 15:10 -------- d-----w- c:\program files (x86)\Marvell
2014-11-23 15:04 . 2014-12-02 21:38 17536 ----a-w- c:\programdata\Microsoft\windowssampling\Sqm\Manifest\Sqm3.bin
2014-11-19 21:03 . 2014-11-08 11:21 827904 ----a-w- c:\windows\system32\kerberos.dll
2014-11-19 21:03 . 2014-11-08 06:56 666624 ----a-w- c:\windows\SysWow64\kerberos.dll
2014-11-19 21:03 . 2014-11-08 06:57 187904 ----a-w- c:\windows\SysWow64\pku2u.dll
2014-11-19 21:03 . 2014-11-08 11:22 238080 ----a-w- c:\windows\system32\pku2u.dll
2014-11-13 05:41 . 2014-11-13 05:56 -------- d-----w- c:\program files (x86)\Call of Duty - Black Ops 2
2014-11-11 23:04 . 2014-11-26 21:11 714184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-11-11 23:04 . 2014-11-26 21:11 106440 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-11-11 21:04 . 2014-10-01 23:05 4068864 ----a-w- c:\windows\system32\win32k.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-12-10 21:18 . 2014-08-13 22:27 112710672 ----a-w- c:\windows\system32\MRT.exe
2014-12-09 16:27 . 2014-10-06 12:30 37624 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2014-12-09 14:44 . 2014-09-28 17:33 129752 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-11-21 05:14 . 2014-09-28 17:29 64216 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-11-21 05:14 . 2014-09-28 17:29 93400 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-11-21 05:14 . 2014-09-28 17:29 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-11-13 00:20 . 2014-08-13 22:00 871648 ----a-w- c:\windows\SysWow64\nvumdshim.dll
2014-11-13 00:20 . 2014-08-13 22:00 3262784 ----a-w- c:\windows\system32\nvapi64.dll
2014-11-13 00:20 . 2014-08-13 22:00 16884632 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2014-11-13 00:20 . 2014-08-13 22:00 156840 ----a-w- c:\windows\SysWow64\nvinit.dll
2014-11-13 00:20 . 2013-12-26 17:42 989056 ----a-w- c:\windows\system32\nvumdshimx.dll
2014-11-13 00:20 . 2013-12-26 17:42 174856 ----a-w- c:\windows\system32\nvinitx.dll
2014-11-12 21:56 . 2014-08-13 22:02 6897352 ----a-w- c:\windows\system32\nvcpl.dll
2014-11-12 21:56 . 2014-08-13 22:02 3534152 ----a-w- c:\windows\system32\nvsvc64.dll
2014-11-12 21:56 . 2014-08-13 22:02 934032 ----a-w- c:\windows\system32\nvvsvc.exe
2014-11-12 21:56 . 2014-08-13 22:02 67072 ----a-w- c:\windows\system32\nv3dappshextr.dll
2014-11-12 21:56 . 2014-08-13 22:02 62608 ----a-w- c:\windows\system32\nvshext.dll
2014-11-12 21:56 . 2014-08-13 22:02 625472 ----a-w- c:\windows\SysWow64\oemdspif.dll
2014-11-12 21:56 . 2014-08-13 22:02 386368 ----a-w- c:\windows\system32\nvmctray.dll
2014-11-12 21:56 . 2014-08-13 22:02 2559808 ----a-w- c:\windows\system32\nvsvcr.dll
2014-11-12 21:56 . 2014-08-13 22:02 1092752 ----a-w- c:\windows\system32\nv3dappshext.dll
2014-11-11 10:29 . 2014-08-13 22:02 4100776 ----a-w- c:\windows\system32\nvcoproc.bin
2014-11-08 23:34 . 2014-11-08 23:34 44640 ----a-w- c:\windows\system32\drivers\aswTap.sys
2014-11-01 10:28 . 2014-11-01 10:28 312480 ----a-w- c:\windows\system32\drivers\atksgt.sys
2014-11-01 10:28 . 2014-11-01 10:28 43168 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2014-10-30 11:25 . 2014-08-13 21:09 275080 ------w- c:\windows\system32\MpSigStub.exe
2014-10-30 04:53 . 2014-11-09 15:41 1539272 ----a-w- c:\windows\system32\nvdispgenco6434460.dll
2014-10-30 04:53 . 2014-11-09 15:41 1876296 ----a-w- c:\windows\system32\nvdispco6434460.dll
2014-10-27 21:46 . 2014-10-27 21:46 98216 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-10-22 01:08 . 2014-10-29 13:15 568832 ----a-w- c:\windows\SysWow64\WSShared.dll
2014-10-22 01:08 . 2014-10-29 13:15 124928 ----a-w- c:\windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-22 01:01 . 2014-10-29 13:15 695808 ----a-w- c:\windows\system32\WSShared.dll
2014-10-22 01:01 . 2014-10-29 13:15 198656 ----a-w- c:\windows\system32\Windows.ApplicationModel.Store.dll
2014-10-22 01:01 . 2014-10-29 13:15 163840 ----a-w- c:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-22 01:00 . 2014-10-29 13:15 125952 ----a-w- c:\windows\system32\WinSetupUI.dll
2014-10-16 16:54 . 2014-10-28 17:29 1876296 ----a-w- c:\windows\system32\nvdispco6434448.dll
2014-10-16 16:54 . 2014-10-28 17:29 1539272 ----a-w- c:\windows\system32\nvdispgenco6434448.dll
2014-09-24 23:29 . 2014-11-11 21:04 318976 ----a-w- c:\windows\SysWow64\schannel.dll
2014-09-24 23:01 . 2014-11-11 21:04 414208 ----a-w- c:\windows\system32\schannel.dll
2014-09-17 02:13 . 2014-08-13 22:02 2193560 ----a-w- c:\windows\SysWow64\nvspcap.dll
2014-09-17 02:13 . 2014-08-13 22:02 1291280 ----a-w- c:\windows\SysWow64\nvspbridge.dll
2014-09-17 02:12 . 2014-08-13 22:02 2799784 ----a-w- c:\windows\system32\nvspcap64.dll
2014-09-17 02:12 . 2014-08-13 22:02 1715224 ----a-w- c:\windows\system32\nvspbridge64.dll
2014-09-13 23:48 . 2014-09-20 16:22 1539272 ----a-w- c:\windows\system32\nvdispgenco6434411.dll
2014-09-13 23:48 . 2014-09-20 16:22 1876296 ----a-w- c:\windows\system32\nvdispco6434411.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2014-11-21 7063832]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2014-03-04 3696912]
"icq"="c:\users\Hrosík\AppData\Roaming\ICQM\icq.exe" [2014-08-14 34947592]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"TaskbarNoNotification"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
R3 aswTap;avast! SecureLine TAP Adapter v3;c:\windows\system32\DRIVERS\aswTap.sys;c:\windows\SYSNATIVE\DRIVERS\aswTap.sys [x]
R3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface;c:\program files\Intel\iCLS Client\SocketHeciServer.exe;c:\program files\Intel\iCLS Client\SocketHeciServer.exe [x]
R3 iumsvc;Intel(R) Update Manager;c:\program files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe;c:\program files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [x]
R3 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
R3 vmicheartbeat;Služba prezenčního signálu technologie Hyper-V;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
R3 WUDFWpdMtp;WUDFWpdMtp;c:\windows\system32\DRIVERS\WUDFRd.sys;c:\windows\SYSNATIVE\DRIVERS\WUDFRd.sys [x]
R3 xusb22;Služba ovladače bezdrátového přijímače Xbox 360, 22;c:\windows\System32\drivers\xusb22.sys;c:\windows\SYSNATIVE\drivers\xusb22.sys [x]
R4 CxAudMsg;Conexant Audio Message Service;c:\windows\system32\CxAudMsg64.exe;c:\windows\SYSNATIVE\CxAudMsg64.exe [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\System32\drivers\dtsoftbus01.sys;c:\windows\SYSNATIVE\drivers\dtsoftbus01.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S2 BcmBtRSupport;Bluetooth Radio Control Service;c:\windows\system32\BtwRSupportService.exe;c:\windows\SYSNATIVE\BtwRSupportService.exe [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [x]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfpr.sys [x]
S2 GfExperienceService;NVIDIA GeForce Experience Service;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [x]
S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [x]
S2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service;c:\windows\system32\igfxCUIService.exe;c:\windows\SYSNATIVE\igfxCUIService.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 LENOVO.MICMUTE;Lenovo Microphone Mute;c:\program files\LENOVO\HOTKEY\MICMUTE.exe;c:\program files\LENOVO\HOTKEY\MICMUTE.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 SAService;Conexant SmartAudio service;c:\windows\system32\SAsrv.exe;c:\windows\SYSNATIVE\SAsrv.exe [x]
S2 TPHKLOAD;Lenovo Hotkey Client Loader;c:\program files\LENOVO\HOTKEY\TPHKLOAD.exe;c:\program files\LENOVO\HOTKEY\TPHKLOAD.exe [x]
S3 bcbtums;Bluetooth RAM Firmware Download USB Filter;c:\windows\system32\drivers\bcbtums.sys;c:\windows\SYSNATIVE\drivers\bcbtums.sys [x]
S3 BthLEEnum;Ovladač úspory energie technologie Bluetooth;c:\windows\system32\DRIVERS\BthLEEnum.sys;c:\windows\SYSNATIVE\DRIVERS\BthLEEnum.sys [x]
S3 btwampfl;btwampfl Bluetooth filter driver;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
S3 BTWPANFL;BTW PAN filter driver;c:\windows\system32\drivers\btwpanfl.sys;c:\windows\SYSNATIVE\drivers\btwpanfl.sys [x]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RSP2STOR;Realtek PCIE CardReader Driver - P2;c:\windows\system32\DRIVERS\RtsP2Stor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsP2Stor.sys [x]
S3 RTL8168;Realtek 8168 NT Driver;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]
S3 SmbDrvI;SmbDrvI;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\DRIVERS\Smb_driver_Intel.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-11-27 13:57 1087304 ----a-w- c:\program files (x86)\Google\Chrome\Application\39.0.2171.71\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-12-09 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-08-13 21:39]
.
2014-12-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-08-13 20:38]
.
2014-12-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-08-13 20:38]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmartAudio"="c:\program files\CONEXANT\SAII\SACpl.exe" [2012-06-13 1647616]
"cAudioFilterAgent"="c:\program files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe" [2012-06-14 887968]
"ForteConfig"="c:\program files\Conexant\ForteConfig\fmapp.exe" [2010-10-26 49056]
"LenovoOptMouseUpdate"="c:\program files\Lenovo\HOTKEY\extapsup.exe" [2013-06-20 255480]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-06-06 399856]
"Persistence"="c:\windows\system32\igfxpers.exe" [2013-06-06 442352]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-09-17 2460488]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-09-17 2799784]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2013-09-12 5618456]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll c:\windows\System32\nvinitx.dll c:\windows\System32\nvinitx.dll c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~3\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~2\MICROS~3\Office14\ONBttnIE.dll/105
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
TCP: DhcpNameServer = 192.168.10.254
FF - ProfilePath - c:\users\Hrosík\AppData\Roaming\Mozilla\Firefox\Profiles\kcki7tqi.default\
FF - prefs.js: browser.search.defaulturl - hxxps://www.google.com/search/?trackid=sp-006
FF - prefs.js: browser.search.selectedEngine - Google
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
BHO-{10921475-03CE-4E04-90CE-E2E7EF20C814} - (no file)
ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
AddRemove-MyFreeCodec - c:\program files (x86)\MyFree Codec\1.0b beta\uninstall.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-1880616068-2142377461-1790115224-1001CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\Software\Win7zip]
@Denied: (A B 2 3) (Everyone)
"Uuid"=hex:ce,68,e1,7c,d2,f9,91,40,91,db,21,ee,fe,65,ed,47
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
@SACL=(02 0000)
.
Celkový čas: 2014-12-11 21:04:47
ComboFix-quarantined-files.txt 2014-12-11 20:04
.
Před spuštěním: 779 945 820 160 bytes free
Po spuštění: 779 895 492 608 bytes free
.
- - End Of File - - 5BFC97098E44F61C6FAF3259D3483BA6
A36C5E4F47E84449FF07ED3517B43A31

Po aplikovani CFScriptu prosim dejte vedet, zda se stav nejak zlepsil

Presunte ComboFix do korenoveho adresare disku (aby byl CF v umisteni C:\ComboFix.exe).

• Otevrete Poznamkovy blok (Start -> Spustit -> notepad)
• zkopirujte do nej skript nize a ulozte take do korenoveho adresare disku jako CFScript (Typ souboru: Textovy dokument)

  Kód: Vybrat vše

  KillAll::
  
  Registry::
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "CCleaner Monitoring"=-
  "DAEMON Tools Lite"=-
  
  DDS::
  Trusted Zone: clonewarsadventures.com
  Trusted Zone: freerealms.com
  Trusted Zone: soe.com
  Trusted Zone: sony.com
  
  File::
  c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
  c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
  
  RegLock::
  [HKEY_USERS\S-1-5-21-1880616068-2142377461-1790115224-1001CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\Software\Win7zip]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0000\AllUserSettings]
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0001\AllUserSettings]
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0002\AllUserSettings]
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
  
  ClearJavaCache::
  
  Reboot::

• Tento CFScript.txt chytte, doslova pretahnete nad ikonu ComboFixu a pustte.
  
• Po restartu na Vas vyskoci log, jehoz obsah mi vlozte do dalsi odpovedi.

Pokud vyskoci hlaska "Pokus pouzit neplatnou operaci na klic registru, ktery je oznacen pro odstraneni", tak jen restartujte PC - registr se da do kupy - jedna se o vnitrni chybu, kterou zpusobuje CF a autor ji zatim neumi bohuzel opravit

Muze se stat, ze po aplikaci skriptu nenabehnou Windows. V tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

Pc pořád stejný

ComboFix 14-12-10.03 - Hrosík . 12. 2014 23:50:49.8.2 - x64
Microsoft Windows 8 Pro 6.2.9200.0.1250.420.1029.18.3673.2387 [GMT 1:00]
Spuštěný z: c:\users\HrosÝk\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\HrosÝk\Desktop\CFScript.txt
AV: ESET NOD32 Antivirus 7.0 *Enabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: ESET NOD32 Antivirus 7.0 *Enabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
* Rezidentní štít AV je zapnutý
.
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-11-12 do 2014-12-12 )))))))))))))))))))))))))))))))
.
.
2014-12-12 23:06 . 2014-12-12 23:06 -------- d-----w- c:\users\Public\AppData\Local\temp
2014-12-12 23:06 . 2014-12-12 23:06 -------- d-----w- c:\users\Hrosík\AppData\Local\temp
2014-12-12 23:06 . 2014-12-12 23:06 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-12-12 22:50 . 2014-12-12 22:50 -------- d-----w- c:\users\Hrosík\AppData\Local\ESET
2014-12-10 21:17 . 2014-10-09 04:00 1484288 ----a-w- c:\windows\system32\VSSVC.exe
2014-12-10 21:17 . 2014-10-09 04:00 69632 ----a-w- c:\windows\system32\vsstrace.dll
2014-12-10 21:17 . 2014-10-09 04:00 1519104 ----a-w- c:\windows\system32\vssapi.dll
2014-12-10 21:17 . 2014-10-09 03:59 52224 ----a-w- c:\windows\SysWow64\vsstrace.dll
2014-12-10 21:17 . 2014-10-09 03:59 1195520 ----a-w- c:\windows\SysWow64\vssapi.dll
2014-12-10 18:39 . 2014-12-10 18:45 -------- d-----w- c:\users\Hrosík\AppData\Roaming\IDoser
2014-12-10 18:38 . 2014-12-10 18:39 -------- d-----w- c:\program files (x86)\I-Doser Premium
2014-12-10 04:05 . 2014-11-21 07:16 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2014-12-10 04:04 . 2014-11-21 08:36 451584 ----a-w- c:\windows\system32\dxtmsft.dll
2014-12-10 04:04 . 2014-11-21 07:16 258048 ----a-w- c:\program files (x86)\Internet Explorer\ieproxy.dll
2014-12-10 04:04 . 2014-11-21 08:36 702976 ----a-w- c:\program files\Internet Explorer\ieproxy.dll
2014-12-10 04:04 . 2014-11-21 08:36 53760 ----a-w- c:\windows\system32\jsproxy.dll
2014-12-10 04:04 . 2014-11-21 08:36 67072 ----a-w- c:\windows\system32\iesetup.dll
2014-12-10 04:04 . 2014-11-21 07:16 61440 ----a-w- c:\windows\SysWow64\iesetup.dll
2014-12-10 04:04 . 2014-11-21 04:30 534528 ----a-w- c:\windows\SysWow64\uxtheme.dll
2014-12-10 04:04 . 2014-11-21 06:54 2706432 ----a-w- c:\windows\SysWow64\mshtml.tlb
2014-12-10 04:04 . 2014-11-21 07:00 2706432 ----a-w- c:\windows\system32\mshtml.tlb
2014-12-10 03:48 . 2014-11-06 06:50 1627648 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-12-10 03:48 . 2014-11-06 05:03 1339392 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2014-12-10 03:15 . 2014-10-30 07:20 1890816 ----a-w- c:\windows\system32\crypt32.dll
2014-12-10 03:15 . 2014-10-30 05:22 1569792 ----a-w- c:\windows\SysWow64\crypt32.dll
2014-12-10 01:50 . 2014-12-10 01:50 -------- d-----w- c:\users\Hrosík\AppData\Roaming\HD Tune Pro
2014-12-10 01:49 . 2014-12-10 01:49 -------- d-----w- c:\program files (x86)\HD Tune Pro
2014-12-10 01:37 . 2014-12-10 01:37 -------- d-----w- c:\windows\SysWow64\NV
2014-12-10 01:37 . 2014-12-10 01:37 -------- d-----w- c:\windows\system32\NV
2014-12-10 01:29 . 2014-12-10 01:29 -------- d-----w- C:\DRIVERS
2014-12-10 01:25 . 2014-12-10 01:25 -------- d-----w- c:\program files\ESET
2014-12-09 22:46 . 2014-12-09 22:46 -------- d-----w- c:\users\HROSK~2
2014-12-09 22:45 . 2014-12-10 01:31 -------- d-----w- c:\users\Hrosík\AppData\Local\CrashDumps
2014-12-09 22:45 . 2014-12-09 22:45 -------- d-----w- c:\users\Hrosík\AppData\Local\SCE
2014-12-09 19:36 . 2014-12-09 19:36 -------- d-----w- c:\programdata\Codemasters
2014-12-09 19:16 . 2014-12-09 19:36 -------- d-----w- c:\program files (x86)\GRID 2
2014-12-09 02:15 . 2014-12-10 21:40 -------- d-----w- c:\program files\trend micro
2014-12-09 02:06 . 2014-11-02 04:20 11632448 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{3B213F98-BCFF-445D-9C97-090847AEDE14}\mpengine.dll
2014-12-09 01:29 . 2014-12-09 01:29 -------- d-----w- c:\users\Hrosík\AppData\Roaming\TeamViewer
2014-12-09 01:20 . 2014-12-09 01:20 -------- d-s---w- c:\windows\SysWow64\Microsoft
2014-12-08 22:55 . 2014-12-08 22:56 -------- d-----w- c:\users\Hrosík\AppData\Local\Nokia
2014-12-08 22:55 . 2014-12-08 23:00 -------- d-----w- c:\users\Hrosík\AppData\Roaming\PC Suite
2014-12-08 22:55 . 2014-12-08 22:58 -------- d-----w- c:\programdata\PC Suite
2014-12-08 22:53 . 2014-12-09 01:27 -------- d-----w- c:\programdata\Nokia
2014-12-08 22:52 . 2014-12-08 22:52 -------- d-----w- c:\program files\DIFX
2014-12-08 22:52 . 2012-10-17 13:53 26112 ----a-w- c:\windows\system32\drivers\pccsmcfdx64.sys
2014-12-08 22:52 . 2014-12-08 22:52 -------- dc----w- c:\windows\system32\DRVSTORE
2014-12-08 22:52 . 2014-12-08 22:52 -------- d-----w- c:\program files (x86)\PC Connectivity Solution
2014-12-08 22:52 . 2013-01-23 09:31 57856 ----a-w- c:\windows\system32\nmwcdclsX64.dll
2014-12-08 22:51 . 2014-12-09 01:27 -------- d-----w- c:\program files (x86)\Nokia
2014-12-08 21:56 . 2014-12-08 21:56 -------- d-----w- c:\windows\cs
2014-12-08 21:54 . 2014-12-08 21:55 -------- d-----w- c:\program files (x86)\Windows Live
2014-12-08 21:53 . 2010-06-02 03:55 77656 ----a-w- c:\windows\system32\XAPOFX1_5.dll
2014-12-08 21:53 . 2010-06-02 03:55 518488 ----a-w- c:\windows\system32\XAudio2_7.dll
2014-12-08 21:53 . 2010-06-02 03:55 74072 ----a-w- c:\windows\SysWow64\XAPOFX1_5.dll
2014-12-08 21:53 . 2010-06-02 03:55 527192 ----a-w- c:\windows\SysWow64\XAudio2_7.dll
2014-12-08 21:53 . 2010-05-26 10:41 2526056 ----a-w- c:\windows\system32\D3DCompiler_43.dll
2014-12-08 21:53 . 2010-05-26 10:41 2106216 ----a-w- c:\windows\SysWow64\D3DCompiler_43.dll
2014-12-08 21:53 . 2010-05-26 10:41 276832 ----a-w- c:\windows\system32\d3dx11_43.dll
2014-12-08 21:53 . 2010-05-26 10:41 248672 ----a-w- c:\windows\SysWow64\d3dx11_43.dll
2014-12-08 21:53 . 2009-09-04 16:29 453456 ----a-w- c:\windows\SysWow64\d3dx10_42.dll
2014-12-08 21:53 . 2009-09-04 16:29 523088 ----a-w- c:\windows\system32\d3dx10_42.dll
2014-12-08 21:51 . 2014-12-08 22:03 -------- d-----w- c:\users\Hrosík\AppData\Local\Windows Live
2014-12-08 21:50 . 2014-12-08 21:50 -------- d-----w- c:\program files (x86)\Common Files\Windows Live
2014-12-08 14:37 . 2014-12-08 14:37 8192 ----a-w- c:\windows\SysWow64\srvany.exe
2014-12-08 13:56 . 2014-12-08 13:56 -------- d-----w- c:\users\Hrosík\AppData\Roaming\Unity
2014-12-07 06:46 . 2014-12-07 06:46 2251992 ----a-w- c:\windows\system32\BtwRSupportService(143).exe
2014-12-06 22:23 . 2014-12-06 22:23 -------- d-----w- c:\program files (x86)\Photodex Presenter
2014-12-06 22:23 . 2014-12-06 22:23 -------- d-----w- c:\users\Hrosík\AppData\Roaming\Netscape
2014-12-06 22:23 . 2014-12-06 22:23 -------- d-----w- c:\program files (x86)\Photodex
2014-12-06 22:22 . 2014-12-06 22:23 -------- d-----w- c:\programdata\Photodex
2014-12-06 22:22 . 2014-12-06 22:22 -------- d-----w- c:\users\Hrosík\AppData\Roaming\Photodex
2014-12-05 05:53 . 2014-12-07 12:46 -------- d-----w- c:\users\Hrosík\AppData\Roaming\ProductData
2014-12-05 05:38 . 2014-12-05 05:38 -------- d-----w- c:\users\Hrosík\AppData\Roaming\Apple Computer
2014-12-05 05:38 . 2014-12-07 12:47 -------- d-----w- c:\programdata\ProductData
2014-12-05 05:37 . 2014-12-05 05:37 -------- d-----w- c:\programdata\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
2014-12-05 05:36 . 2014-12-05 05:36 -------- d-----w- c:\program files (x86)\Common Files\IObit
2014-12-05 05:36 . 2014-12-07 12:46 -------- d-----w- c:\users\Hrosík\AppData\Roaming\IObit
2014-12-03 22:19 . 2014-12-03 22:19 -------- d-----w- c:\users\Hrosík\AppData\Local\Mozilla
2014-12-03 22:17 . 2014-12-03 22:17 -------- d-----w- c:\program files (x86)\Mozilla Maintenance Service
2014-12-02 21:29 . 2014-12-02 21:29 35352 ----a-w- c:\windows\system32\drivers\cnnctfy3.sys
2014-12-01 14:51 . 2014-12-01 14:51 45112 ---ha-w- c:\windows\system32\drivers\Hamdrv.sys
2014-11-28 23:05 . 2014-04-30 18:43 144664 ----a-w- c:\windows\SysWow64\secman.dll
2014-11-28 23:05 . 2014-04-30 18:43 4659712 ----a-w- c:\windows\SysWow64\Redemption.dll
2014-11-28 23:04 . 2014-12-09 01:29 -------- d-----w- c:\program files (x86)\Samsung
2014-11-28 23:04 . 2014-12-09 01:29 -------- d-----w- c:\programdata\Samsung
2014-11-28 23:01 . 2014-11-28 23:01 -------- d-----w- c:\users\Hrosík\AppData\Local\Downloaded Installations
2014-11-26 11:19 . 2014-11-19 07:29 582552 ----a-w- c:\windows\system32\AutoUpdate.exe
2014-11-26 11:19 . 2014-11-19 07:29 462760 ----a-w- c:\windows\system32\NotificationUI.exe
2014-11-23 15:10 . 2014-11-23 15:10 -------- d-----w- c:\program files (x86)\Marvell
2014-11-23 15:04 . 2014-12-02 21:38 17536 ----a-w- c:\programdata\Microsoft\windowssampling\Sqm\Manifest\Sqm3.bin
2014-11-19 21:03 . 2014-11-08 11:21 827904 ----a-w- c:\windows\system32\kerberos.dll
2014-11-19 21:03 . 2014-11-08 06:56 666624 ----a-w- c:\windows\SysWow64\kerberos.dll
2014-11-19 21:03 . 2014-11-08 06:57 187904 ----a-w- c:\windows\SysWow64\pku2u.dll
2014-11-19 21:03 . 2014-11-08 11:22 238080 ----a-w- c:\windows\system32\pku2u.dll
2014-11-19 20:39 . 2014-12-09 01:28 -------- d-----w- c:\program files (x86)\WinToUSB
2014-11-14 04:39 . 2014-11-14 04:19 24064 ----a-w- c:\windows\zoek-delete.exe
2014-11-14 04:19 . 2014-11-14 04:36 -------- d-----w- C:\zoek_backup
2014-11-13 06:53 . 2014-12-09 14:28 -------- d-----w- C:\AdwCleaner
2014-11-13 05:41 . 2014-11-13 05:56 -------- d-----w- c:\program files (x86)\Call of Duty - Black Ops 2
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-12-10 21:18 . 2014-08-13 22:27 112710672 ----a-w- c:\windows\system32\MRT.exe
2014-12-09 16:27 . 2014-10-06 12:30 37624 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2014-12-09 14:44 . 2014-09-28 17:33 129752 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-11-26 21:11 . 2014-11-11 23:04 714184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-11-26 21:11 . 2014-11-11 23:04 106440 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-11-21 05:14 . 2014-09-28 17:29 64216 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-11-21 05:14 . 2014-09-28 17:29 93400 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-11-21 05:14 . 2014-09-28 17:29 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-11-13 00:20 . 2014-08-13 22:00 871648 ----a-w- c:\windows\SysWow64\nvumdshim.dll
2014-11-13 00:20 . 2014-08-13 22:00 3262784 ----a-w- c:\windows\system32\nvapi64.dll
2014-11-13 00:20 . 2014-08-13 22:00 16884632 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2014-11-13 00:20 . 2014-08-13 22:00 156840 ----a-w- c:\windows\SysWow64\nvinit.dll
2014-11-13 00:20 . 2013-12-26 17:42 989056 ----a-w- c:\windows\system32\nvumdshimx.dll
2014-11-13 00:20 . 2013-12-26 17:42 174856 ----a-w- c:\windows\system32\nvinitx.dll
2014-11-12 21:56 . 2014-08-13 22:02 6897352 ----a-w- c:\windows\system32\nvcpl.dll
2014-11-12 21:56 . 2014-08-13 22:02 3534152 ----a-w- c:\windows\system32\nvsvc64.dll
2014-11-12 21:56 . 2014-08-13 22:02 934032 ----a-w- c:\windows\system32\nvvsvc.exe
2014-11-12 21:56 . 2014-08-13 22:02 67072 ----a-w- c:\windows\system32\nv3dappshextr.dll
2014-11-12 21:56 . 2014-08-13 22:02 62608 ----a-w- c:\windows\system32\nvshext.dll
2014-11-12 21:56 . 2014-08-13 22:02 625472 ----a-w- c:\windows\SysWow64\oemdspif.dll
2014-11-12 21:56 . 2014-08-13 22:02 386368 ----a-w- c:\windows\system32\nvmctray.dll
2014-11-12 21:56 . 2014-08-13 22:02 2559808 ----a-w- c:\windows\system32\nvsvcr.dll
2014-11-12 21:56 . 2014-08-13 22:02 1092752 ----a-w- c:\windows\system32\nv3dappshext.dll
2014-11-11 10:29 . 2014-08-13 22:02 4100776 ----a-w- c:\windows\system32\nvcoproc.bin
2014-11-08 23:34 . 2014-11-08 23:34 44640 ----a-w- c:\windows\system32\drivers\aswTap.sys
2014-11-01 10:28 . 2014-11-01 10:28 312480 ----a-w- c:\windows\system32\drivers\atksgt.sys
2014-11-01 10:28 . 2014-11-01 10:28 43168 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2014-10-30 11:25 . 2014-08-13 21:09 275080 ------w- c:\windows\system32\MpSigStub.exe
2014-10-30 04:53 . 2014-11-09 15:41 1539272 ----a-w- c:\windows\system32\nvdispgenco6434460.dll
2014-10-30 04:53 . 2014-11-09 15:41 1876296 ----a-w- c:\windows\system32\nvdispco6434460.dll
2014-10-27 21:46 . 2014-10-27 21:46 98216 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-10-23 12:47 . 2014-11-11 21:04 79872 ----a-w- c:\windows\system32\packager.dll
2014-10-23 11:04 . 2014-11-11 21:04 68096 ----a-w- c:\windows\SysWow64\packager.dll
2014-10-22 01:08 . 2014-10-29 13:15 568832 ----a-w- c:\windows\SysWow64\WSShared.dll
2014-10-22 01:08 . 2014-10-29 13:15 124928 ----a-w- c:\windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-22 01:01 . 2014-10-29 13:15 695808 ----a-w- c:\windows\system32\WSShared.dll
2014-10-22 01:01 . 2014-10-29 13:15 198656 ----a-w- c:\windows\system32\Windows.ApplicationModel.Store.dll
2014-10-22 01:01 . 2014-10-29 13:15 163840 ----a-w- c:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-22 01:00 . 2014-10-29 13:15 125952 ----a-w- c:\windows\system32\WinSetupUI.dll
2014-10-18 08:44 . 2014-11-11 21:05 778240 ----a-w- c:\windows\system32\oleaut32.dll
2014-10-18 07:05 . 2014-11-11 21:05 567808 ----a-w- c:\windows\SysWow64\oleaut32.dll
2014-10-16 16:54 . 2014-10-28 17:29 1876296 ----a-w- c:\windows\system32\nvdispco6434448.dll
2014-10-16 16:54 . 2014-10-28 17:29 1539272 ----a-w- c:\windows\system32\nvdispgenco6434448.dll
2014-10-11 08:35 . 2014-11-11 21:04 171840 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2014-10-11 07:45 . 2014-11-11 21:04 10115072 ----a-w- c:\windows\system32\twinui.dll
2014-10-11 07:44 . 2014-11-11 21:04 588288 ----a-w- c:\windows\system32\SHCore.dll
2014-10-11 07:44 . 2014-11-11 21:04 3248640 ----a-w- c:\windows\system32\rdpcorets.dll
2014-10-11 07:44 . 2014-11-11 21:04 2885632 ----a-w- c:\windows\system32\msi.dll
2014-10-11 07:44 . 2014-11-11 21:04 393216 ----a-w- c:\windows\system32\msihnd.dll
2014-10-11 07:43 . 2014-11-11 21:04 1281536 ----a-w- c:\windows\system32\lsasrv.dll
2014-10-11 07:43 . 2014-11-11 21:04 2307072 ----a-w- c:\windows\system32\authui.dll
2014-10-11 05:58 . 2014-11-11 21:04 8858624 ----a-w- c:\windows\SysWow64\twinui.dll
2014-10-11 05:57 . 2014-11-11 21:04 452608 ----a-w- c:\windows\SysWow64\SHCore.dll
2014-10-11 05:57 . 2014-11-11 21:04 2416640 ----a-w- c:\windows\SysWow64\msi.dll
2014-10-11 05:57 . 2014-11-11 21:04 295424 ----a-w- c:\windows\SysWow64\msihnd.dll
2014-10-11 05:56 . 2014-11-11 21:04 2037760 ----a-w- c:\windows\SysWow64\authui.dll
2014-10-11 05:41 . 2014-11-11 21:04 146944 ----a-w- c:\windows\system32\msaudite.dll
2014-10-11 05:41 . 2014-11-11 21:04 713728 ----a-w- c:\windows\system32\adtschema.dll
2014-10-11 05:05 . 2014-11-11 21:04 146944 ----a-w- c:\windows\SysWow64\msaudite.dll
2014-10-11 05:04 . 2014-11-11 21:04 713728 ----a-w- c:\windows\SysWow64\adtschema.dll
2014-10-03 01:21 . 2014-11-11 21:05 522728 ----a-w- c:\windows\system32\AUDIOKSE.dll
2014-10-02 22:29 . 2014-11-11 21:05 267264 ----a-w- c:\windows\system32\EncDump.dll
2014-10-02 22:29 . 2014-11-11 21:05 783872 ----a-w- c:\windows\system32\audiosrv.dll
2014-10-02 22:29 . 2014-11-11 21:05 169472 ----a-w- c:\windows\system32\AudioEndpointBuilder.dll
2014-10-01 23:05 . 2014-11-11 21:04 4068864 ----a-w- c:\windows\system32\win32k.sys
2014-09-24 23:29 . 2014-11-11 21:04 318976 ----a-w- c:\windows\SysWow64\schannel.dll
2014-09-24 23:29 . 2014-11-11 21:04 72192 ----a-w- c:\windows\SysWow64\ncryptsslp.dll
2014-09-24 23:01 . 2014-11-11 21:04 414208 ----a-w- c:\windows\system32\schannel.dll
2014-09-24 23:01 . 2014-11-11 21:04 86528 ----a-w- c:\windows\system32\ncryptsslp.dll
2014-09-22 05:53 . 2014-11-11 21:05 35320 ----a-w- c:\windows\system32\drivers\WdBoot.sys
2014-09-17 02:13 . 2014-08-13 22:02 2193560 ----a-w- c:\windows\SysWow64\nvspcap.dll
2014-09-17 02:13 . 2014-08-13 22:02 1291280 ----a-w- c:\windows\SysWow64\nvspbridge.dll
2014-09-17 02:12 . 2014-08-13 22:02 2799784 ----a-w- c:\windows\system32\nvspcap64.dll
2014-09-17 02:12 . 2014-08-13 22:02 1715224 ----a-w- c:\windows\system32\nvspbridge64.dll
2014-09-13 23:48 . 2014-09-20 16:22 1539272 ----a-w- c:\windows\system32\nvdispgenco6434411.dll
2014-09-13 23:48 . 2014-09-20 16:22 1876296 ----a-w- c:\windows\system32\nvdispco6434411.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2014-11-21 7063832]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2014-03-04 3696912]
"icq"="c:\users\Hrosík\AppData\Roaming\ICQM\icq.exe" [2014-08-14 34947592]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"TaskbarNoNotification"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
R3 aswTap;avast! SecureLine TAP Adapter v3;c:\windows\system32\DRIVERS\aswTap.sys;c:\windows\SYSNATIVE\DRIVERS\aswTap.sys [x]
R3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface;c:\program files\Intel\iCLS Client\SocketHeciServer.exe;c:\program files\Intel\iCLS Client\SocketHeciServer.exe [x]
R3 iumsvc;Intel(R) Update Manager;c:\program files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe;c:\program files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [x]
R3 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
R3 vmicheartbeat;Služba prezenčního signálu technologie Hyper-V;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
R3 WUDFWpdMtp;WUDFWpdMtp;c:\windows\system32\DRIVERS\WUDFRd.sys;c:\windows\SYSNATIVE\DRIVERS\WUDFRd.sys [x]
R3 xusb22;Služba ovladače bezdrátového přijímače Xbox 360, 22;c:\windows\System32\drivers\xusb22.sys;c:\windows\SYSNATIVE\drivers\xusb22.sys [x]
R4 CxAudMsg;Conexant Audio Message Service;c:\windows\system32\CxAudMsg64.exe;c:\windows\SYSNATIVE\CxAudMsg64.exe [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\System32\drivers\dtsoftbus01.sys;c:\windows\SYSNATIVE\drivers\dtsoftbus01.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S2 BcmBtRSupport;Bluetooth Radio Control Service;c:\windows\system32\BtwRSupportService.exe;c:\windows\SYSNATIVE\BtwRSupportService.exe [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [x]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfpr.sys [x]
S2 GfExperienceService;NVIDIA GeForce Experience Service;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [x]
S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [x]
S2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service;c:\windows\system32\igfxCUIService.exe;c:\windows\SYSNATIVE\igfxCUIService.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 LENOVO.MICMUTE;Lenovo Microphone Mute;c:\program files\LENOVO\HOTKEY\MICMUTE.exe;c:\program files\LENOVO\HOTKEY\MICMUTE.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 SAService;Conexant SmartAudio service;c:\windows\system32\SAsrv.exe;c:\windows\SYSNATIVE\SAsrv.exe [x]
S2 TPHKLOAD;Lenovo Hotkey Client Loader;c:\program files\LENOVO\HOTKEY\TPHKLOAD.exe;c:\program files\LENOVO\HOTKEY\TPHKLOAD.exe [x]
S3 bcbtums;Bluetooth RAM Firmware Download USB Filter;c:\windows\system32\drivers\bcbtums.sys;c:\windows\SYSNATIVE\drivers\bcbtums.sys [x]
S3 BthLEEnum;Ovladač úspory energie technologie Bluetooth;c:\windows\system32\DRIVERS\BthLEEnum.sys;c:\windows\SYSNATIVE\DRIVERS\BthLEEnum.sys [x]
S3 btwampfl;btwampfl Bluetooth filter driver;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
S3 BTWPANFL;BTW PAN filter driver;c:\windows\system32\drivers\btwpanfl.sys;c:\windows\SYSNATIVE\drivers\btwpanfl.sys [x]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RSP2STOR;Realtek PCIE CardReader Driver - P2;c:\windows\system32\DRIVERS\RtsP2Stor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsP2Stor.sys [x]
S3 RTL8168;Realtek 8168 NT Driver;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]
S3 SmbDrvI;SmbDrvI;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\DRIVERS\Smb_driver_Intel.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-11-27 13:57 1087304 ----a-w- c:\program files (x86)\Google\Chrome\Application\39.0.2171.71\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-12-09 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-08-13 21:39]
.
2014-12-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-08-13 20:38]
.
2014-12-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-08-13 20:38]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmartAudio"="c:\program files\CONEXANT\SAII\SACpl.exe" [2012-06-13 1647616]
"cAudioFilterAgent"="c:\program files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe" [2012-06-14 887968]
"ForteConfig"="c:\program files\Conexant\ForteConfig\fmapp.exe" [2010-10-26 49056]
"LenovoOptMouseUpdate"="c:\program files\Lenovo\HOTKEY\extapsup.exe" [2013-06-20 255480]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-06-06 399856]
"Persistence"="c:\windows\system32\igfxpers.exe" [2013-06-06 442352]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-09-17 2460488]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-09-17 2799784]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2013-09-12 5618456]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll c:\windows\System32\nvinitx.dll c:\windows\System32\nvinitx.dll c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~3\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~2\MICROS~3\Office14\ONBttnIE.dll/105
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
TCP: DhcpNameServer = 192.168.10.254
FF - ProfilePath - c:\users\Hrosík\AppData\Roaming\Mozilla\Firefox\Profiles\kcki7tqi.default\
FF - prefs.js: browser.search.defaulturl - hxxps://www.google.com/search/?trackid=sp-006
FF - prefs.js: browser.search.selectedEngine - Google
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
BHO-{10921475-03CE-4E04-90CE-E2E7EF20C814} - (no file)
ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-1880616068-2142377461-1790115224-1001CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\Software\Win7zip]
@Denied: (A B 2 3) (Everyone)
"Uuid"=hex:ce,68,e1,7c,d2,f9,91,40,91,db,21,ee,fe,65,ed,47
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
@SACL=(02 0000)
.
Celkový čas: 2014-12-13 00:35:23
ComboFix-quarantined-files.txt 2014-12-12 23:35
ComboFix2.txt 2014-12-11 20:05
.
Před spuštěním: 781 423 611 904 bytes free
Po spuštění: 781 364 834 304 bytes free
.
- - End Of File - - A729BE0A9B19FA02403D1ACDA5786B6C
A36C5E4F47E84449FF07ED3517B43A31

CFScript se neaplikoval... precte si prosim znovu pozorne predesly prispevek... ComboFix.exe i CFScript musi byt v korenovem adresari (primo v C:\ ).

ComboFix 14-12-10.03 - Hrosík . 12. 2014 3:02.9.2 - x64
Microsoft Windows 8 Pro 6.2.9200.0.1250.420.1029.18.3673.2132 [GMT 1:00]
Spuštěný z: C:\ComboFix.exe
Použité ovládací přepínače :: C:\CFScript.txt
AV: ESET NOD32 Antivirus 7.0 *Enabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: ESET NOD32 Antivirus 7.0 *Enabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý
.
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-11-13 do 2014-12-13 )))))))))))))))))))))))))))))))
.
.
2014-12-13 02:17 . 2014-12-13 02:23 -------- d-----w- c:\users\Hrosík\AppData\Local\temp
2014-12-13 02:17 . 2014-12-13 02:17 -------- d-----w- c:\users\Public\AppData\Local\temp
2014-12-13 02:17 . 2014-12-13 02:17 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-12-12 22:50 . 2014-12-12 22:50 -------- d-----w- c:\users\Hrosík\AppData\Local\ESET
2014-12-10 21:17 . 2014-10-09 04:00 1484288 ----a-w- c:\windows\system32\VSSVC.exe
2014-12-10 21:17 . 2014-10-09 04:00 69632 ----a-w- c:\windows\system32\vsstrace.dll
2014-12-10 21:17 . 2014-10-09 04:00 1519104 ----a-w- c:\windows\system32\vssapi.dll
2014-12-10 21:17 . 2014-10-09 03:59 52224 ----a-w- c:\windows\SysWow64\vsstrace.dll
2014-12-10 21:17 . 2014-10-09 03:59 1195520 ----a-w- c:\windows\SysWow64\vssapi.dll
2014-12-10 18:39 . 2014-12-10 18:45 -------- d-----w- c:\users\Hrosík\AppData\Roaming\IDoser
2014-12-10 18:38 . 2014-12-10 18:39 -------- d-----w- c:\program files (x86)\I-Doser Premium
2014-12-10 04:05 . 2014-11-21 07:16 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2014-12-10 04:04 . 2014-11-21 08:36 451584 ----a-w- c:\windows\system32\dxtmsft.dll
2014-12-10 04:04 . 2014-11-21 07:16 258048 ----a-w- c:\program files (x86)\Internet Explorer\ieproxy.dll
2014-12-10 04:04 . 2014-11-21 08:36 702976 ----a-w- c:\program files\Internet Explorer\ieproxy.dll
2014-12-10 04:04 . 2014-11-21 08:36 53760 ----a-w- c:\windows\system32\jsproxy.dll
2014-12-10 04:04 . 2014-11-21 08:36 67072 ----a-w- c:\windows\system32\iesetup.dll
2014-12-10 04:04 . 2014-11-21 07:16 61440 ----a-w- c:\windows\SysWow64\iesetup.dll
2014-12-10 04:04 . 2014-11-21 04:30 534528 ----a-w- c:\windows\SysWow64\uxtheme.dll
2014-12-10 04:04 . 2014-11-21 06:54 2706432 ----a-w- c:\windows\SysWow64\mshtml.tlb
2014-12-10 04:04 . 2014-11-21 07:00 2706432 ----a-w- c:\windows\system32\mshtml.tlb
2014-12-10 03:48 . 2014-11-06 06:50 1627648 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-12-10 03:48 . 2014-11-06 05:03 1339392 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2014-12-10 03:15 . 2014-10-30 07:20 1890816 ----a-w- c:\windows\system32\crypt32.dll
2014-12-10 03:15 . 2014-10-30 05:22 1569792 ----a-w- c:\windows\SysWow64\crypt32.dll
2014-12-10 01:50 . 2014-12-10 01:50 -------- d-----w- c:\users\Hrosík\AppData\Roaming\HD Tune Pro
2014-12-10 01:49 . 2014-12-10 01:49 -------- d-----w- c:\program files (x86)\HD Tune Pro
2014-12-10 01:37 . 2014-12-10 01:37 -------- d-----w- c:\windows\SysWow64\NV
2014-12-10 01:37 . 2014-12-10 01:37 -------- d-----w- c:\windows\system32\NV
2014-12-10 01:29 . 2014-12-10 01:29 -------- d-----w- C:\DRIVERS
2014-12-10 01:25 . 2014-12-10 01:25 -------- d-----w- c:\program files\ESET
2014-12-09 22:46 . 2014-12-09 22:46 -------- d-----w- c:\users\HROSK~2
2014-12-09 22:45 . 2014-12-10 01:31 -------- d-----w- c:\users\Hrosík\AppData\Local\CrashDumps
2014-12-09 22:45 . 2014-12-09 22:45 -------- d-----w- c:\users\Hrosík\AppData\Local\SCE
2014-12-09 19:36 . 2014-12-09 19:36 -------- d-----w- c:\programdata\Codemasters
2014-12-09 19:16 . 2014-12-09 19:36 -------- d-----w- c:\program files (x86)\GRID 2
2014-12-09 02:15 . 2014-12-10 21:40 -------- d-----w- c:\program files\trend micro
2014-12-09 02:06 . 2014-11-02 04:20 11632448 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{3B213F98-BCFF-445D-9C97-090847AEDE14}\mpengine.dll
2014-12-09 01:29 . 2014-12-09 01:29 -------- d-----w- c:\users\Hrosík\AppData\Roaming\TeamViewer
2014-12-09 01:20 . 2014-12-09 01:20 -------- d-s---w- c:\windows\SysWow64\Microsoft
2014-12-08 22:55 . 2014-12-08 22:56 -------- d-----w- c:\users\Hrosík\AppData\Local\Nokia
2014-12-08 22:55 . 2014-12-08 23:00 -------- d-----w- c:\users\Hrosík\AppData\Roaming\PC Suite
2014-12-08 22:55 . 2014-12-08 22:58 -------- d-----w- c:\programdata\PC Suite
2014-12-08 22:53 . 2014-12-09 01:27 -------- d-----w- c:\programdata\Nokia
2014-12-08 22:52 . 2014-12-08 22:52 -------- d-----w- c:\program files\DIFX
2014-12-08 22:52 . 2012-10-17 13:53 26112 ----a-w- c:\windows\system32\drivers\pccsmcfdx64.sys
2014-12-08 22:52 . 2014-12-08 22:52 -------- dc----w- c:\windows\system32\DRVSTORE
2014-12-08 22:52 . 2014-12-08 22:52 -------- d-----w- c:\program files (x86)\PC Connectivity Solution
2014-12-08 22:52 . 2013-01-23 09:31 57856 ----a-w- c:\windows\system32\nmwcdclsX64.dll
2014-12-08 22:51 . 2014-12-09 01:27 -------- d-----w- c:\program files (x86)\Nokia
2014-12-08 21:56 . 2014-12-08 21:56 -------- d-----w- c:\windows\cs
2014-12-08 21:54 . 2014-12-08 21:55 -------- d-----w- c:\program files (x86)\Windows Live
2014-12-08 21:53 . 2010-06-02 03:55 77656 ----a-w- c:\windows\system32\XAPOFX1_5.dll
2014-12-08 21:53 . 2010-06-02 03:55 518488 ----a-w- c:\windows\system32\XAudio2_7.dll
2014-12-08 21:53 . 2010-06-02 03:55 74072 ----a-w- c:\windows\SysWow64\XAPOFX1_5.dll
2014-12-08 21:53 . 2010-06-02 03:55 527192 ----a-w- c:\windows\SysWow64\XAudio2_7.dll
2014-12-08 21:53 . 2010-05-26 10:41 2526056 ----a-w- c:\windows\system32\D3DCompiler_43.dll
2014-12-08 21:53 . 2010-05-26 10:41 2106216 ----a-w- c:\windows\SysWow64\D3DCompiler_43.dll
2014-12-08 21:53 . 2010-05-26 10:41 276832 ----a-w- c:\windows\system32\d3dx11_43.dll
2014-12-08 21:53 . 2010-05-26 10:41 248672 ----a-w- c:\windows\SysWow64\d3dx11_43.dll
2014-12-08 21:53 . 2009-09-04 16:29 453456 ----a-w- c:\windows\SysWow64\d3dx10_42.dll
2014-12-08 21:53 . 2009-09-04 16:29 523088 ----a-w- c:\windows\system32\d3dx10_42.dll
2014-12-08 21:51 . 2014-12-08 22:03 -------- d-----w- c:\users\Hrosík\AppData\Local\Windows Live
2014-12-08 21:50 . 2014-12-08 21:50 -------- d-----w- c:\program files (x86)\Common Files\Windows Live
2014-12-08 14:37 . 2014-12-08 14:37 8192 ----a-w- c:\windows\SysWow64\srvany.exe
2014-12-08 13:56 . 2014-12-08 13:56 -------- d-----w- c:\users\Hrosík\AppData\Roaming\Unity
2014-12-07 06:46 . 2014-12-07 06:46 2251992 ----a-w- c:\windows\system32\BtwRSupportService(143).exe
2014-12-06 22:23 . 2014-12-06 22:23 -------- d-----w- c:\program files (x86)\Photodex Presenter
2014-12-06 22:23 . 2014-12-06 22:23 -------- d-----w- c:\users\Hrosík\AppData\Roaming\Netscape
2014-12-06 22:23 . 2014-12-06 22:23 -------- d-----w- c:\program files (x86)\Photodex
2014-12-06 22:22 . 2014-12-06 22:23 -------- d-----w- c:\programdata\Photodex
2014-12-06 22:22 . 2014-12-06 22:22 -------- d-----w- c:\users\Hrosík\AppData\Roaming\Photodex
2014-12-05 05:53 . 2014-12-07 12:46 -------- d-----w- c:\users\Hrosík\AppData\Roaming\ProductData
2014-12-05 05:38 . 2014-12-05 05:38 -------- d-----w- c:\users\Hrosík\AppData\Roaming\Apple Computer
2014-12-05 05:38 . 2014-12-07 12:47 -------- d-----w- c:\programdata\ProductData
2014-12-05 05:37 . 2014-12-05 05:37 -------- d-----w- c:\programdata\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
2014-12-05 05:36 . 2014-12-05 05:36 -------- d-----w- c:\program files (x86)\Common Files\IObit
2014-12-05 05:36 . 2014-12-07 12:46 -------- d-----w- c:\users\Hrosík\AppData\Roaming\IObit
2014-12-03 22:19 . 2014-12-03 22:19 -------- d-----w- c:\users\Hrosík\AppData\Local\Mozilla
2014-12-03 22:17 . 2014-12-03 22:17 -------- d-----w- c:\program files (x86)\Mozilla Maintenance Service
2014-12-02 21:29 . 2014-12-02 21:29 35352 ----a-w- c:\windows\system32\drivers\cnnctfy3.sys
2014-12-01 14:51 . 2014-12-01 14:51 45112 ---ha-w- c:\windows\system32\drivers\Hamdrv.sys
2014-11-28 23:05 . 2014-04-30 18:43 144664 ----a-w- c:\windows\SysWow64\secman.dll
2014-11-28 23:05 . 2014-04-30 18:43 4659712 ----a-w- c:\windows\SysWow64\Redemption.dll
2014-11-28 23:04 . 2014-12-09 01:29 -------- d-----w- c:\program files (x86)\Samsung
2014-11-28 23:04 . 2014-12-09 01:29 -------- d-----w- c:\programdata\Samsung
2014-11-28 23:01 . 2014-11-28 23:01 -------- d-----w- c:\users\Hrosík\AppData\Local\Downloaded Installations
2014-11-26 11:19 . 2014-11-19 07:29 582552 ----a-w- c:\windows\system32\AutoUpdate.exe
2014-11-26 11:19 . 2014-11-19 07:29 462760 ----a-w- c:\windows\system32\NotificationUI.exe
2014-11-23 15:10 . 2014-11-23 15:10 -------- d-----w- c:\program files (x86)\Marvell
2014-11-23 15:04 . 2014-12-02 21:38 17536 ----a-w- c:\programdata\Microsoft\windowssampling\Sqm\Manifest\Sqm3.bin
2014-11-19 21:03 . 2014-11-08 11:21 827904 ----a-w- c:\windows\system32\kerberos.dll
2014-11-19 21:03 . 2014-11-08 06:56 666624 ----a-w- c:\windows\SysWow64\kerberos.dll
2014-11-19 21:03 . 2014-11-08 06:57 187904 ----a-w- c:\windows\SysWow64\pku2u.dll
2014-11-19 21:03 . 2014-11-08 11:22 238080 ----a-w- c:\windows\system32\pku2u.dll
2014-11-19 20:39 . 2014-12-09 01:28 -------- d-----w- c:\program files (x86)\WinToUSB
2014-11-14 04:39 . 2014-11-14 04:19 24064 ----a-w- c:\windows\zoek-delete.exe
2014-11-14 04:19 . 2014-11-14 04:36 -------- d-----w- C:\zoek_backup
2014-11-13 06:53 . 2014-12-09 14:28 -------- d-----w- C:\AdwCleaner
2014-11-13 05:41 . 2014-11-13 05:56 -------- d-----w- c:\program files (x86)\Call of Duty - Black Ops 2
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-12-10 21:18 . 2014-08-13 22:27 112710672 ----a-w- c:\windows\system32\MRT.exe
2014-12-09 16:27 . 2014-10-06 12:30 37624 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2014-12-09 14:44 . 2014-09-28 17:33 129752 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-11-26 21:11 . 2014-11-11 23:04 714184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-11-26 21:11 . 2014-11-11 23:04 106440 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-11-21 05:14 . 2014-09-28 17:29 64216 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-11-21 05:14 . 2014-09-28 17:29 93400 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-11-21 05:14 . 2014-09-28 17:29 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-11-13 00:20 . 2014-08-13 22:00 871648 ----a-w- c:\windows\SysWow64\nvumdshim.dll
2014-11-13 00:20 . 2014-08-13 22:00 3262784 ----a-w- c:\windows\system32\nvapi64.dll
2014-11-13 00:20 . 2014-08-13 22:00 16884632 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2014-11-13 00:20 . 2014-08-13 22:00 156840 ----a-w- c:\windows\SysWow64\nvinit.dll
2014-11-13 00:20 . 2013-12-26 17:42 989056 ----a-w- c:\windows\system32\nvumdshimx.dll
2014-11-13 00:20 . 2013-12-26 17:42 174856 ----a-w- c:\windows\system32\nvinitx.dll
2014-11-12 21:56 . 2014-08-13 22:02 6897352 ----a-w- c:\windows\system32\nvcpl.dll
2014-11-12 21:56 . 2014-08-13 22:02 3534152 ----a-w- c:\windows\system32\nvsvc64.dll
2014-11-12 21:56 . 2014-08-13 22:02 934032 ----a-w- c:\windows\system32\nvvsvc.exe
2014-11-12 21:56 . 2014-08-13 22:02 67072 ----a-w- c:\windows\system32\nv3dappshextr.dll
2014-11-12 21:56 . 2014-08-13 22:02 62608 ----a-w- c:\windows\system32\nvshext.dll
2014-11-12 21:56 . 2014-08-13 22:02 625472 ----a-w- c:\windows\SysWow64\oemdspif.dll
2014-11-12 21:56 . 2014-08-13 22:02 386368 ----a-w- c:\windows\system32\nvmctray.dll
2014-11-12 21:56 . 2014-08-13 22:02 2559808 ----a-w- c:\windows\system32\nvsvcr.dll
2014-11-12 21:56 . 2014-08-13 22:02 1092752 ----a-w- c:\windows\system32\nv3dappshext.dll
2014-11-11 10:29 . 2014-08-13 22:02 4100776 ----a-w- c:\windows\system32\nvcoproc.bin
2014-11-08 23:34 . 2014-11-08 23:34 44640 ----a-w- c:\windows\system32\drivers\aswTap.sys
2014-11-01 10:28 . 2014-11-01 10:28 312480 ----a-w- c:\windows\system32\drivers\atksgt.sys
2014-11-01 10:28 . 2014-11-01 10:28 43168 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2014-10-30 11:25 . 2014-08-13 21:09 275080 ------w- c:\windows\system32\MpSigStub.exe
2014-10-30 04:53 . 2014-11-09 15:41 1539272 ----a-w- c:\windows\system32\nvdispgenco6434460.dll
2014-10-30 04:53 . 2014-11-09 15:41 1876296 ----a-w- c:\windows\system32\nvdispco6434460.dll
2014-10-27 21:46 . 2014-10-27 21:46 98216 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-10-23 12:47 . 2014-11-11 21:04 79872 ----a-w- c:\windows\system32\packager.dll
2014-10-23 11:04 . 2014-11-11 21:04 68096 ----a-w- c:\windows\SysWow64\packager.dll
2014-10-22 01:08 . 2014-10-29 13:15 568832 ----a-w- c:\windows\SysWow64\WSShared.dll
2014-10-22 01:08 . 2014-10-29 13:15 124928 ----a-w- c:\windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-22 01:01 . 2014-10-29 13:15 695808 ----a-w- c:\windows\system32\WSShared.dll
2014-10-22 01:01 . 2014-10-29 13:15 198656 ----a-w- c:\windows\system32\Windows.ApplicationModel.Store.dll
2014-10-22 01:01 . 2014-10-29 13:15 163840 ----a-w- c:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-22 01:00 . 2014-10-29 13:15 125952 ----a-w- c:\windows\system32\WinSetupUI.dll
2014-10-18 08:44 . 2014-11-11 21:05 778240 ----a-w- c:\windows\system32\oleaut32.dll
2014-10-18 07:05 . 2014-11-11 21:05 567808 ----a-w- c:\windows\SysWow64\oleaut32.dll
2014-10-16 16:54 . 2014-10-28 17:29 1876296 ----a-w- c:\windows\system32\nvdispco6434448.dll
2014-10-16 16:54 . 2014-10-28 17:29 1539272 ----a-w- c:\windows\system32\nvdispgenco6434448.dll
2014-10-11 08:35 . 2014-11-11 21:04 171840 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2014-10-11 07:45 . 2014-11-11 21:04 10115072 ----a-w- c:\windows\system32\twinui.dll
2014-10-11 07:44 . 2014-11-11 21:04 588288 ----a-w- c:\windows\system32\SHCore.dll
2014-10-11 07:44 . 2014-11-11 21:04 3248640 ----a-w- c:\windows\system32\rdpcorets.dll
2014-10-11 07:44 . 2014-11-11 21:04 2885632 ----a-w- c:\windows\system32\msi.dll
2014-10-11 07:44 . 2014-11-11 21:04 393216 ----a-w- c:\windows\system32\msihnd.dll
2014-10-11 07:43 . 2014-11-11 21:04 1281536 ----a-w- c:\windows\system32\lsasrv.dll
2014-10-11 07:43 . 2014-11-11 21:04 2307072 ----a-w- c:\windows\system32\authui.dll
2014-10-11 05:58 . 2014-11-11 21:04 8858624 ----a-w- c:\windows\SysWow64\twinui.dll
2014-10-11 05:57 . 2014-11-11 21:04 452608 ----a-w- c:\windows\SysWow64\SHCore.dll
2014-10-11 05:57 . 2014-11-11 21:04 2416640 ----a-w- c:\windows\SysWow64\msi.dll
2014-10-11 05:57 . 2014-11-11 21:04 295424 ----a-w- c:\windows\SysWow64\msihnd.dll
2014-10-11 05:56 . 2014-11-11 21:04 2037760 ----a-w- c:\windows\SysWow64\authui.dll
2014-10-11 05:41 . 2014-11-11 21:04 146944 ----a-w- c:\windows\system32\msaudite.dll
2014-10-11 05:41 . 2014-11-11 21:04 713728 ----a-w- c:\windows\system32\adtschema.dll
2014-10-11 05:05 . 2014-11-11 21:04 146944 ----a-w- c:\windows\SysWow64\msaudite.dll
2014-10-11 05:04 . 2014-11-11 21:04 713728 ----a-w- c:\windows\SysWow64\adtschema.dll
2014-10-03 01:21 . 2014-11-11 21:05 522728 ----a-w- c:\windows\system32\AUDIOKSE.dll
2014-10-02 22:29 . 2014-11-11 21:05 267264 ----a-w- c:\windows\system32\EncDump.dll
2014-10-02 22:29 . 2014-11-11 21:05 783872 ----a-w- c:\windows\system32\audiosrv.dll
2014-10-02 22:29 . 2014-11-11 21:05 169472 ----a-w- c:\windows\system32\AudioEndpointBuilder.dll
2014-10-01 23:05 . 2014-11-11 21:04 4068864 ----a-w- c:\windows\system32\win32k.sys
2014-09-24 23:29 . 2014-11-11 21:04 318976 ----a-w- c:\windows\SysWow64\schannel.dll
2014-09-24 23:29 . 2014-11-11 21:04 72192 ----a-w- c:\windows\SysWow64\ncryptsslp.dll
2014-09-24 23:01 . 2014-11-11 21:04 414208 ----a-w- c:\windows\system32\schannel.dll
2014-09-24 23:01 . 2014-11-11 21:04 86528 ----a-w- c:\windows\system32\ncryptsslp.dll
2014-09-22 05:53 . 2014-11-11 21:05 35320 ----a-w- c:\windows\system32\drivers\WdBoot.sys
2014-09-17 02:13 . 2014-08-13 22:02 2193560 ----a-w- c:\windows\SysWow64\nvspcap.dll
2014-09-17 02:13 . 2014-08-13 22:02 1291280 ----a-w- c:\windows\SysWow64\nvspbridge.dll
2014-09-17 02:12 . 2014-08-13 22:02 2799784 ----a-w- c:\windows\system32\nvspcap64.dll
2014-09-17 02:12 . 2014-08-13 22:02 1715224 ----a-w- c:\windows\system32\nvspbridge64.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"icq"="c:\users\Hrosík\AppData\Roaming\ICQM\icq.exe" [2014-08-14 34947592]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"TaskbarNoNotification"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
R3 aswTap;avast! SecureLine TAP Adapter v3;c:\windows\system32\DRIVERS\aswTap.sys;c:\windows\SYSNATIVE\DRIVERS\aswTap.sys [x]
R3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface;c:\program files\Intel\iCLS Client\SocketHeciServer.exe;c:\program files\Intel\iCLS Client\SocketHeciServer.exe [x]
R3 iumsvc;Intel(R) Update Manager;c:\program files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe;c:\program files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [x]
R3 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
R3 vmicheartbeat;Služba prezenčního signálu technologie Hyper-V;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
R3 WUDFWpdMtp;WUDFWpdMtp;c:\windows\system32\DRIVERS\WUDFRd.sys;c:\windows\SYSNATIVE\DRIVERS\WUDFRd.sys [x]
R3 xusb22;Služba ovladače bezdrátového přijímače Xbox 360, 22;c:\windows\System32\drivers\xusb22.sys;c:\windows\SYSNATIVE\drivers\xusb22.sys [x]
R4 CxAudMsg;Conexant Audio Message Service;c:\windows\system32\CxAudMsg64.exe;c:\windows\SYSNATIVE\CxAudMsg64.exe [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\System32\drivers\dtsoftbus01.sys;c:\windows\SYSNATIVE\drivers\dtsoftbus01.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S2 BcmBtRSupport;Bluetooth Radio Control Service;c:\windows\system32\BtwRSupportService.exe;c:\windows\SYSNATIVE\BtwRSupportService.exe [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [x]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfpr.sys [x]
S2 GfExperienceService;NVIDIA GeForce Experience Service;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [x]
S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [x]
S2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service;c:\windows\system32\igfxCUIService.exe;c:\windows\SYSNATIVE\igfxCUIService.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 LENOVO.MICMUTE;Lenovo Microphone Mute;c:\program files\LENOVO\HOTKEY\MICMUTE.exe;c:\program files\LENOVO\HOTKEY\MICMUTE.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 SAService;Conexant SmartAudio service;c:\windows\system32\SAsrv.exe;c:\windows\SYSNATIVE\SAsrv.exe [x]
S2 TPHKLOAD;Lenovo Hotkey Client Loader;c:\program files\LENOVO\HOTKEY\TPHKLOAD.exe;c:\program files\LENOVO\HOTKEY\TPHKLOAD.exe [x]
S3 bcbtums;Bluetooth RAM Firmware Download USB Filter;c:\windows\system32\drivers\bcbtums.sys;c:\windows\SYSNATIVE\drivers\bcbtums.sys [x]
S3 BthLEEnum;Ovladač úspory energie technologie Bluetooth;c:\windows\system32\DRIVERS\BthLEEnum.sys;c:\windows\SYSNATIVE\DRIVERS\BthLEEnum.sys [x]
S3 btwampfl;btwampfl Bluetooth filter driver;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
S3 BTWPANFL;BTW PAN filter driver;c:\windows\system32\drivers\btwpanfl.sys;c:\windows\SYSNATIVE\drivers\btwpanfl.sys [x]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RSP2STOR;Realtek PCIE CardReader Driver - P2;c:\windows\system32\DRIVERS\RtsP2Stor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsP2Stor.sys [x]
S3 RTL8168;Realtek 8168 NT Driver;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]
S3 SmbDrvI;SmbDrvI;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\DRIVERS\Smb_driver_Intel.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-11-27 13:57 1087304 ----a-w- c:\program files (x86)\Google\Chrome\Application\39.0.2171.71\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-12-09 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-08-13 21:39]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmartAudio"="c:\program files\CONEXANT\SAII\SACpl.exe" [2012-06-13 1647616]
"cAudioFilterAgent"="c:\program files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe" [2012-06-14 887968]
"ForteConfig"="c:\program files\Conexant\ForteConfig\fmapp.exe" [2010-10-26 49056]
"LenovoOptMouseUpdate"="c:\program files\Lenovo\HOTKEY\extapsup.exe" [2013-06-20 255480]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-06-06 399856]
"Persistence"="c:\windows\system32\igfxpers.exe" [2013-06-06 442352]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-09-17 2460488]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-09-17 2799784]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2013-09-12 5618456]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll c:\windows\System32\nvinitx.dll c:\windows\System32\nvinitx.dll c:\windows\System32\nvinitx.dll c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~3\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~2\MICROS~3\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.10.254
FF - ProfilePath - c:\users\Hrosík\AppData\Roaming\Mozilla\Firefox\Profiles\kcki7tqi.default\
FF - prefs.js: browser.search.defaulturl - hxxps://www.google.com/search/?trackid=sp-006
FF - prefs.js: browser.search.selectedEngine - Google
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
BHO-{10921475-03CE-4E04-90CE-E2E7EF20C814} - (no file)
ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-1880616068-2142377461-1790115224-1001CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\Software\Win7zip]
@Denied: (A B 2 3) (Everyone)
"Uuid"=hex:ce,68,e1,7c,d2,f9,91,40,91,db,21,ee,fe,65,ed,47
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Bonjour\mDNSResponder.exe
c:\windows\SysWOW64\SAsrv.exe
c:\program files (x86)\Photodex\ProShow Gold\ScsiAccess.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Celkový čas: 2014-12-13 03:47:20 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-12-13 02:47
ComboFix2.txt 2014-12-12 23:35
ComboFix3.txt 2014-12-11 20:05
.
Před spuštěním: 781 346 328 576 bytes free
Po spuštění: 781 449 359 360 bytes free
.
- - End Of File - - 022FC863BEA4E6EA17064E0F22A91140
A36C5E4F47E84449FF07ED3517B43A31

• Stahnete Crystal Disk Info (CDI) http://sourceforge.jp/frs/redir.php?m=j ... o6_2_1.zip
• v archivu spustte soubor DiskInfo.exe
• ve spustenem programu kliknete nahore na Upravy -> Kopirovat (log mate nyni zkopirovany ve schrance)
• log vlozte do dalsi odpovedi (Ctrl + V)

Jaky je stav HDD po pouziti HD Tune? Popiste pripadne vlozte screen.

V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/

• ukoncete vsechny programy
• kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
• kliknete na Scan, pote na Clean
• po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

Hdtune - tak po kontrole byly všechna políčka zelená bez problém

----------------------------------------------------------------------------
CrystalDiskInfo 6.2.2 (C) 2008-2014 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 8 Pro [6.2 Build 9200] (x64)
Date : 2014/12/13 15:09:31

-- Controller Map ----------------------------------------------------------
+ Standardní řadič SATA AHCI [ATA]
- WDC WD10JPVT-08A1YT2
- HL-DT-ST DVDRAM GT50N
- Řadič prostorů úložišť [SCSI]

-- Disk List ---------------------------------------------------------------
(1) WDC WD10JPVT-08A1YT2 : 1000,2 GB [0/0/0, pd1] - wd

----------------------------------------------------------------------------
(1) WDC WD10JPVT-08A1YT2
----------------------------------------------------------------------------
Model : WDC WD10JPVT-08A1YT2
Firmware : 01.01A01
Serial Number : WD-WXB1A2302741
Disk Size : 1000,2 GB (8,4/137,4/1000,2/1000,2)
Buffer Size : 8192 KB
Queue Depth : 32
# of Sectors : 1953525168
Rotation Rate : 5400 RPM
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ----
Transfer Mode : SATA/300 | SATA/300
Power On Hours : 4041 hod.
Power On Count : 2131 krát
Temperature : 36 C (96 F)
Health Status : Dobrý
Features : S.M.A.R.T., APM, 48bit LBA, NCQ
APM Level : 0060h [ON]
AAM Level : ----

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 200 200 _51 000000000000 Počet chyb čtení
03 191 184 _21 000000000599 Čas na roztočení ploten
04 _81 _81 __0 000000004CAB Počet spuštění/zastavení
05 200 200 140 000000000000 Počet přemapovaných sektorů
07 200 200 _51 000000000000 Počet chybných hledání
09 _95 _95 __0 000000000FC9 Hodin v činnosti
0A 100 100 __0 000000000000 Počet opakovaných pokusů o roztočení ploten
0B 100 100 __0 000000000000 Počet pokusů o překalibrování
0C _98 _98 __0 000000000853 Počet cyklů zapnutí zařízení
C0 200 200 __0 000000000043 Počet vypnutí disku
C1 186 186 __0 00000000AC40 Počet cyklů načítání/vymazání
C2 111 _90 __0 000000000024 Teplota
C4 200 200 __0 000000000000 Počet udalostí s číslem realokování sektorů
C5 200 200 __0 000000000000 Počet podezřelých sektorů
C6 100 253 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
C8 200 200 __0 000000000000 Počet chyb při zápisu sektorů
F0 _95 _95 __0 000000000ED4 Čas nastavování hlaviček - v hodinách

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 427A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2057 442D 5758 4231 4132 3330 3237 3431
020: 0000 4000 0000 3031 2E30 3141 3031 5744 4320 5744
030: 3130 4A50 5654 2D30 3841 3159 5432 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4000 0000 0000 0007 3FFF 0010 003F FC10 00FB 0100
060: FFFF 0FFF 0000 0107 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 1F06 0004 004C 0040
080: 01FE 0000 346B 7D09 6123 3469 BC09 6123 007F 005C
090: 005C 0060 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 6DB0 7470 0000 0000 0000 0000 6003 0000 5001 4EE6
110: 034F 6E28 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 0400
130: 0001 0000 0000 16E8 0000 0000 0000 0000 0000 0000
140: 0000 0000 0004 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 70B5 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 1518 0000 0000
220: 0000 0000 103E 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 1000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 3DA5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 2F 00 C8 C8 00 00 00 00 00 00 00 03 27
010: 00 BF B8 99 05 00 00 00 00 00 04 32 00 51 51 AB
020: 4C 00 00 00 00 00 05 33 00 C8 C8 00 00 00 00 00
030: 00 00 07 2F 00 C8 C8 00 00 00 00 00 00 00 09 32
040: 00 5F 5F C9 0F 00 00 00 00 00 0A 32 00 64 64 00
050: 00 00 00 00 00 00 0B 32 00 64 64 00 00 00 00 00
060: 00 00 0C 32 00 62 62 53 08 00 00 00 00 00 C0 32
070: 00 C8 C8 43 00 00 00 00 00 00 C1 32 00 BA BA 40
080: AC 00 00 00 00 00 C2 22 00 6F 5A 24 00 00 00 00
090: 00 00 C4 32 00 C8 C8 00 00 00 00 00 00 00 C5 32
0A0: 00 C8 C8 00 00 00 00 00 00 00 C6 30 00 64 FD 00
0B0: 00 00 00 00 00 00 C7 32 00 C8 C8 00 00 00 00 00
0C0: 00 00 C8 08 00 C8 C8 00 00 00 00 00 00 00 F0 32
0D0: 00 5F 5F D4 0E 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 8C 46 01 7B
170: 03 00 01 00 02 C5 05 00 00 00 00 00 00 00 00 00
180: 00 00 01 04 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 42

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 33 C8 C8 C8 C8 00 00 00 00 00 00 03 15
010: 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00
020: 00 00 00 00 00 00 05 8C 00 00 00 00 00 00 00 00
030: 00 00 07 33 C8 C8 C8 C8 00 00 00 00 00 00 09 00
040: 00 00 00 00 00 00 00 00 00 00 0A 00 00 00 00 00
050: 00 00 00 00 00 00 0B 00 00 00 00 00 00 00 00 00
060: 00 00 0C 00 00 00 00 00 00 00 00 00 00 00 C0 00
070: 00 00 00 00 00 00 00 00 00 00 C1 00 00 00 00 00
080: 00 00 00 00 00 00 C2 00 00 00 00 00 00 00 00 00
090: 00 00 C4 00 00 00 00 00 00 00 00 00 00 00 C5 00
0A0: 00 00 00 00 00 00 00 00 00 00 C6 00 00 00 00 00
0B0: 00 00 00 00 00 00 C7 00 00 00 00 00 00 00 00 00
0C0: 00 00 C8 00 C8 C8 C8 C8 00 00 00 00 00 00 F0 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3A

# AdwCleaner v4.105 - Report created 13/12/2014 at 15:11:48
# Updated 08/12/2014 by Xplode
# Database : 2014-12-13.3 [Live]
# Operating System : Windows 8 Pro (64 bits)
# Username : Hrosík - HROŠÍK
# Running from : C:\Users\Hrosík\Desktop\adwcleaner_4.105.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\Users\Hrosík\AppData\Roaming\Mozilla\Firefox\Profiles\kcki7tqi.default\invalidprefs.js

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.17183


-\\ Mozilla Firefox v34.0.5 (x86 cs)


-\\ Google Chrome v39.0.2171.71

[C:\Users\Hrosík\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://www1.delta-search.com/?q={searchTerms}&affID=119816&babsrc=SP_ss&mntrId=E0B2A0F3C17BB6E1
[C:\Users\Hrosík\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://www1.delta-search.com/?q={searchTerms}&affID=119816&babsrc=SP_ss&mntrId=E0B2A0F3C17BB6E1
[C:\Users\Hrosík\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}

*************************


########## EOF - C:\AdwCleaner\AdwCleaner.txt - [1690 octets] ##########

• Prejmenujte ComboFix na Uninstall a spustte jako spravce
• ComboFix se odinstaluje.

Ulozte na plochu zoek.exe http://hijackthis.nl/smeenk/zoek.htm

• spustte jako spravce
• do velkeho okna zkopirujte script uvedeny nize
• kliknete na Run script
• po restartu na Vas vyskoci log (pripadne jej najdete v C:\zoek-results.log) - vlozte mi jej do pristi odpovedi

  Kód: Vybrat vše

  autoclean;
  emptyclsid;
  iedefaults;
  FFdefaults;
  CHRdefaults;
  emptyalltemp;
  resethosts;

Když jsem dal odinstalovat CF napsalo že volsnap.sys je infikovaný