Nemůžu nikam kliknout

Zpráva

Kolikokoli · #1 Příspěvek od **Kolikokoli** » 27 pro 2014 11:56

Mám notebook a Win 8.1. Poslední dobou mi ale trochu zlobí. Jednou za čas se jakoby "zasekne" plocha nebo jak to říct. Nemůžu na nic kliknout (ale pomocí klávesnice to jde). Když si otevřu složku nebo správce úloh (musím klávesovými zkratkami, protože nejde pravý ani levý (dvoj)klik), tak opět v nich můžu operovat jen šipkami a tabem atd. (prostě klávesnicí). Když na nějaký soubor ve složce nebo na nějaký program třeba v tom správci úloh kliknu myší, tak "hlavička" zešedne (asi jako když máte otevřené dvě složky a překliknete na tu druhou, tak ta první je jakoby "neaktivní" - na pozadí). Vůbec nechápu, proč to dělá. Nemůžu na nic kliknout ani v metru (ale opět - přes klávesnici se do něj dostanu). Zajímavé, že v prohlížeči můžu klikat jakkoli, ten ovlivněn není. Není to chyba myši (dělá to i touchpad). Procházela jsem notebook několikrát různými antispyware programy i antivirem. Nic, co by tohle způsobovalo, se nenašlo. Tak fakt nevím

.
Zkoušela jsem restartovat a žádná změna (jen se mi po spuštění objevilo, že jsou dostupné nové aktualizace - nemůže to být tím? Když mi to udělalo minule, tak to taky bylo nějak s příchodem nových aktualizací). Ono mi přijde, jako kdyby bylo otevřené nějaké vyskakovací okno (typu "uložit jako"), které právě "brání" v tom, abych klikla někam jinam. Jenže nic otevřené není, tak to nechápu.

#2 Příspěvek od **Márty84** » 27 pro 2014 12:16

Zdravim

Vyzkousejte, jestli to dela i v nouzovem rezimu.

Dejte log z RSIT, pripadne RSITx64 (pokud mate 64bit system) http://forum.viry.cz/viewtopic.php?f=30&t=130787

#3 Příspěvek od **Pavuk29** » 27 pro 2014 14:11

4Marty:
Ako som aktualizoval na 8.1 mne to robi nieco podobne. Ja uz som si na to tak zvykol, ze uz nespustam potom nic cez explorer/prieskumnik, ale rovno cez Total commander alebo prikazovy riadok

Jediny rozdiel vidim v tom, ze mne po restarte znova vsetko ide (detto ked odstrelim explorer.exe - znova nabehne, sice zmizne polka ikon z listy, ale system ide dalej). Aplikacie, ktore uz bezali, aj tie, ktore spustam alternativnym sposobom, sa spravaju normalne.
ALT+TAB je spravidla do restartu nefunkcny. Niekedy nie je ani mozne korektne vyvolat vypnutie PC, ale cez Process Explorer (ktory u mna bezi vzdy) sa restartne korektne.
Na cistych osmickach som sa s tymto nestretol, po aktualizacii na 8.1 bezna vec, ale priznaky nie vzdy presne rovnake. U mna s tym nie je problem, ja automaticky preradim na iny sposob ovladania pocitaca a neberiem to ako nejaky vazny problem, lebo mi je to fuk.

#4 Příspěvek od **Márty84** » 27 pro 2014 15:14

No jo, ale normalni to neni, mi to treba nedela a to se mi taky notas nedobrovolne aktualizoval na 8.1 . A navic kdyz to nedela porad, ale jednou za cas, mohl by to mit na svedomi i nejaky ten nechteny navstevnik

Procistime a uvidime. Bud to prestane, nebo ne a v tom pripade je to proste systemem

Kolikokoli · #5 Příspěvek od **Kolikokoli** » 27 pro 2014 17:39

No... takže... udělalo to opět při stejných podmínkách - po restartu PC se objevilo, že mám nové aktualizace a po nainstalování a restartování už to jde v pohodě. Předtím mi to taky tuším dělalo před instalací (resp. po automatickém stáhnutí) aktualizací.

Tady je ten log

Kód: Vybrat vše

Logfile of random's system information tool 1.10 (written by random/random)
Run by Kolikokoli at 2014-12-27 17:09:39
Microsoft Windows 8.1 
System drive C: has 160 GB (17%) free of 944 GB
Total RAM: 8073 MB (76% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:34:19, on 27. 12. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files (x86)\Postimage\postimage.exe
C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Kolikokoli.exe
C:\Program Files (x86)\Dell Backup and Recovery\COMPONENTS\DBRUPDATE\DBRUPD.EXE
C:\Program Files (x86)\Dell Backup and Recovery\TOASTER.EXE
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_235.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_235.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com/?pc=DCJB
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystart.com/?pr=vmn&id=mystarttb&v=5_4&ent=hp_5224&src=5224
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~2\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Kristýna\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [Zoner Photo Studio Service 16] "C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXEC:\Program Files\Zoner\Photo Studio 16\Program32\ZPSService.exe"
O4 - HKCU\..\Run: [Postimage] C:\Program Files (x86)\Postimage\postimage.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [HydraVisionDesktopManager] "C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
O4 - HKCU\..\Run: [Spotify] "C:\Users\Kristýna\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE"
O4 - HKCU\..\Run: [DellSystemDetect] C:\Users\Kristýna\AppData\Local\Apps\2.0\2TA2MNX7.HAC\TVMR96NC.1N8\dell..tion_e30b47f5d4a30e9e_0005.000c_1df9a4898fae00de\DellSystemDetect.exe
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe"
O4 - Startup: MagicDisc.lnk = C:\Program Files (x86)\MagicDisc\MagicDisc.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.dell.com
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AtherosSvc - Windows (R) Win 7 DDK provider - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Dell Digital Delivery Service (DellDigitalDelivery) - Dell Products, LP. - c:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Foxit Cloud Safe Update Service (FoxitCloudUpdateService) - Foxit Software Inc. - C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - c:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - CyberLink - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks SAS - C:\Program Files (x86)\Dell Backup and Recovery\sftservice.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10683 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
"dwm.exe"
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\igfxCUIService.exe
atieclxx
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SENDINPUT
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE"
"C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe"
"C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe"
"c:\Program Files\Intel\iCLS Client\HeciServer.exe"

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
taskhostex.exe 
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" 
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE" 
"C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe" 
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\ActivateDesktop.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX4P1
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /IM
"C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe" 
"C:\Program Files\Dell\QuickSet\quickset.exe" 
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonControl.exe" /notportable
"C:\Program Files (x86)\Postimage\postimage.exe" 
"C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe" 
"C:\Users\Kristýna\AppData\Local\Apps\2.0\2TA2MNX7.HAC\TVMR96NC.1N8\dell..tion_e30b47f5d4a30e9e_0005.000c_1df9a4898fae00de\DellSystemDetect.exe" 
HydraDM64.exe -h:66110 "Maximalizovat na celou plochu" "Maximalizovat k rohům okna" "Obnovit pracovní plochu"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" 
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"c:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-e27530b5-2f61-43d7-9118-f077e5703526 -SystemEventPortName:HostProcess-6ce22a13-8b63-4767-8bdc-cfeb53b9274d -IoCancelEventPortName:HostProcess-0636befd-f800-4081-b1b4-ebc95eef66df -NonStateChangingEventPortName:HostProcess-4ebb48aa-6653-43c8-81be-3ae004305794 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:0f4ce076-3965-4a02-bdb2-2a28cdae2283 -DeviceGroupId:WpdFsGroup
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" 
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe" -startup
"C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe"
"C:\Program Files (x86)\Dell Backup and Recovery\sftservice.exe"
"C:\Users\Kristýna\Downloads\RSITx64.exe" 
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Dell Backup and Recovery\COMPONENTS\DBRUPDATE\DBRUPD.EXE" 
"C:\Program Files (x86)\Dell Backup and Recovery\TOASTER.EXE" C:\Users\Kristýna
C:\Windows\sysWOW64\wbem\wmiprvse.exe -Embedding
"C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRCrawler.exe"
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=2772.15dd7580.518914886 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 2772 "\\.\pipe\gecko-crash-server-pipe.2772" plugin
"C:\Windows\SYSTEM32\Macromed\Flash\FlashPlayerPlugin_16_0_0_235.exe" --proxy-stub-channel=Flash464.654A5348.23989 --host-broker-channel=Flash464.654A5348.31177 --host-pid=464 --host-npapi-version=27 --plugin-path="C:\Windows\SYSTEM32\Macromed\Flash\NPSWF32_16_0_0_235.dll"
"C:\Windows\SYSTEM32\Macromed\Flash\FlashPlayerPlugin_16_0_0_235.exe" --channel=4520.00F8F4EC.43160733 --proxy-stub-channel=Flash464.654A5348.23989 --plugin-path="C:\Windows\SYSTEM32\Macromed\Flash\NPSWF32_16_0_0_235.dll" --host-npapi-version=27 --type=renderer


======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe  
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe  /c 
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe  /ua /installsource scheduler 

=========Mozilla firefox=========

ProfilePath - C:\Users\Kristýna\AppData\Roaming\Mozilla\Firefox\Profiles\txttzxlv.default

prefs.js - "browser.search.useDBForOrder" -  true
prefs.js - "browser.startup.homepage" -  "google.com"
prefs.js - "keyword.URL" -  "http://www.mystart.com/results.php?pr=vmn&id=mystarttb&v=5_4&ent=bs____campaignID___&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.235 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.71.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.71.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.31211.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.235 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL


C:\Program Files (x86)\Mozilla Firefox\plugins\
npMeetingJoinPluginOC.dll

C:\Users\Kristýna\AppData\Roaming\Mozilla\Firefox\Profiles\txttzxlv.default\extensions\
cs@dictionaries.addons.mozilla.org
{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-11-12 218784]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-10-25 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~2\Office15\GROOVEEX.DLL [2014-11-12 1729744]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-10-25 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2013-08-20 7202520]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-08-07 1321688]
"RtHDVBg_PushButton"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-08-07 1321688]
"QuickSet"=c:\Program Files\Dell\QuickSet\QuickSet.exe [2013-06-03 5762408]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-08-07 36352]
"XMouseButtonControl"=C:\Program Files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonControl.exe [2014-10-01 1232528]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2014-10-03 457616]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe [2013-10-29 132736]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"Spotify Web Helper"=C:\Users\Kristýna\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2014-12-14 1676344]
"Zoner Photo Studio Service 16"=C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [2013-09-27 801816]
"Postimage"=C:\Program Files (x86)\Postimage\postimage.exe [2013-07-21 16306936]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2014-12-20 7780120]
"HydraVisionDesktopManager"=C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [2014-04-17 1967616]
"Spotify"=C:\Users\Kristýna\AppData\Roaming\Spotify\spotify.exe [2014-12-14 6737976]
"Zoner Photo Studio Autoupdate"=C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE [2013-09-27 801816]
"DellSystemDetect"=C:\Users\Kristýna\AppData\Local\Apps\2.0\2TA2MNX7.HAC\TVMR96NC.1N8\dell..tion_e30b47f5d4a30e9e_0005.000c_1df9a4898fae00de\DellSystemDetect.exe [2014-11-02 264488]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IMSS"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [2013-12-11 134616]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-09-26 271744]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2013-10-02 766208]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe [2013-10-29 132736]

C:\Users\Kristýna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MagicDisc.lnk - C:\Program Files (x86)\MagicDisc\MagicDisc.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
igfxdev.dll []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"PromptOnSecureDesktop"=0
"DisableCAD"=1
"DisableTaskMgr"=0
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"midi3"=wdmaud.drv
"msacm.l3codecp"=l3codecp.acm
"VIDC.FPS1"=frapsv64.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-12-27 17:09:40 ----D---- C:\Program Files\trend micro
2014-12-27 17:09:39 ----D---- C:\rsit
2014-12-26 14:47:20 ----D---- C:\Users\Kristýna\AppData\Roaming\cYo
2014-12-26 14:29:29 ----D---- C:\Program Files\ComicRack
2014-12-24 21:15:36 ----D---- C:\Users\Kristýna\AppData\Roaming\GHISLER
2014-12-24 21:15:36 ----D---- C:\totalcmd
2014-12-24 12:24:03 ----D---- C:\Windows\LastGood.Tmp
2014-12-23 23:45:40 ----D---- C:\Users\Kristýna\AppData\Roaming\Unity
2014-12-22 11:36:02 ----D---- C:\Program Files (x86)\VideoLAN
2014-12-21 11:06:02 ----A---- C:\Windows\system32\drivers\tap0901.sys
2014-12-21 11:05:41 ----D---- C:\ProgramData\Microsoft Toolkit
2014-12-20 20:07:59 ----D---- C:\Program Files (x86)\UTF8_convert
2014-12-20 18:56:03 ----D---- C:\Program Files\KMSpico
2014-12-20 18:22:15 ----D---- C:\Program Files (x86)\Google
2014-12-19 21:09:38 ----A---- C:\Windows\system32\shell32.dll
2014-12-19 21:09:32 ----A---- C:\Windows\system32\Windows.UI.Xaml.dll
2014-12-19 21:09:27 ----A---- C:\Windows\system32\SyncEngine.dll
2014-12-19 21:09:23 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-12-19 21:09:21 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.dll
2014-12-19 21:09:20 ----A---- C:\Windows\SYSWOW64\msctf.dll
2014-12-19 21:09:20 ----A---- C:\Windows\system32\wuaueng.dll
2014-12-19 21:09:20 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-12-19 21:09:20 ----A---- C:\Windows\system32\msctf.dll
2014-12-19 21:09:20 ----A---- C:\Windows\system32\drivers\netio.sys
2014-12-19 21:09:19 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2014-12-19 21:09:19 ----A---- C:\Windows\SYSWOW64\untfs.dll
2014-12-19 21:09:19 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL
2014-12-19 21:09:19 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2014-12-19 21:09:19 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2014-12-19 21:09:19 ----A---- C:\Windows\SYSWOW64\mfmp4srcsnk.dll
2014-12-19 21:09:19 ----A---- C:\Windows\SYSWOW64\MFMediaEngine.dll
2014-12-19 21:09:19 ----A---- C:\Windows\system32\wuauclt.exe
2014-12-19 21:09:19 ----A---- C:\Windows\system32\WSDMon.dll
2014-12-19 21:09:19 ----A---- C:\Windows\system32\WSDApi.dll
2014-12-19 21:09:19 ----A---- C:\Windows\system32\WinSCard.dll
2014-12-19 21:09:19 ----A---- C:\Windows\system32\vpnike.dll
2014-12-19 21:09:19 ----A---- C:\Windows\system32\untfs.dll
2014-12-19 21:09:19 ----A---- C:\Windows\system32\spoolsv.exe
2014-12-19 21:09:19 ----A---- C:\Windows\system32\SkyDrive.exe
2014-12-19 21:09:19 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2014-12-19 21:09:19 ----A---- C:\Windows\system32\ntdll.dll
2014-12-19 21:09:19 ----A---- C:\Windows\system32\mfplat.dll
2014-12-19 21:09:19 ----A---- C:\Windows\system32\mfmp4srcsnk.dll
2014-12-19 21:09:19 ----A---- C:\Windows\system32\MFMediaEngine.dll
2014-12-19 21:09:19 ----A---- C:\Windows\system32\IKEEXT.DLL
2014-12-19 21:09:19 ----A---- C:\Windows\system32\drivers\wfplwfs.sys
2014-12-19 21:09:19 ----A---- C:\Windows\system32\drivers\wanarp.sys
2014-12-19 21:09:19 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2014-12-19 21:09:19 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-12-19 21:09:19 ----A---- C:\Windows\system32\drivers\sdbus.sys
2014-12-19 21:09:19 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2014-12-19 21:09:19 ----A---- C:\Windows\system32\drivers\pdc.sys
2014-12-19 21:09:19 ----A---- C:\Windows\system32\drivers\mouclass.sys
2014-12-19 21:09:19 ----A---- C:\Windows\system32\drivers\kbdclass.sys
2014-12-19 21:09:19 ----A---- C:\Windows\system32\drivers\intelpep.sys
2014-12-19 21:09:19 ----A---- C:\Windows\system32\drivers\i8042prt.sys
2014-12-19 21:09:19 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2014-12-19 21:09:19 ----A---- C:\Windows\system32\drivers\dumpsd.sys
2014-12-19 21:09:19 ----A---- C:\Windows\system32\drivers\dam.sys
2014-12-19 21:09:19 ----A---- C:\Windows\system32\dnsrslvr.dll
2014-12-19 21:09:19 ----A---- C:\Windows\system32\AppxAllUserStore.dll
2014-12-19 21:09:18 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2014-12-19 21:09:18 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2014-12-19 21:09:18 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2014-12-19 21:09:18 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2014-12-19 21:09:18 ----A---- C:\Windows\SYSWOW64\vsstrace.dll
2014-12-19 21:09:18 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2014-12-19 21:09:18 ----A---- C:\Windows\SYSWOW64\rasser.dll
2014-12-19 21:09:18 ----A---- C:\Windows\SYSWOW64\rasmxs.dll
2014-12-19 21:09:18 ----A---- C:\Windows\SYSWOW64\rasdiag.dll
2014-12-19 21:09:18 ----A---- C:\Windows\SYSWOW64\rascfg.dll
2014-12-19 21:09:18 ----A---- C:\Windows\SYSWOW64\rasapi32.dll
2014-12-19 21:09:18 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2014-12-19 21:09:18 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2014-12-19 21:09:18 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2014-12-19 21:09:18 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2014-12-19 21:09:18 ----A---- C:\Windows\SYSWOW64\DevicePairing.dll
2014-12-19 21:09:18 ----A---- C:\Windows\SYSWOW64\AppxAllUserStore.dll
2014-12-19 21:09:18 ----A---- C:\Windows\system32\wuwebv.dll
2014-12-19 21:09:18 ----A---- C:\Windows\system32\WUSettingsProvider.dll
2014-12-19 21:09:18 ----A---- C:\Windows\system32\wudriver.dll
2014-12-19 21:09:18 ----A---- C:\Windows\system32\wucltux.dll
2014-12-19 21:09:18 ----A---- C:\Windows\system32\wuapi.dll
2014-12-19 21:09:18 ----A---- C:\Windows\system32\wow64.dll
2014-12-19 21:09:18 ----A---- C:\Windows\system32\VSSVC.exe
2014-12-19 21:09:18 ----A---- C:\Windows\system32\vsstrace.dll
2014-12-19 21:09:18 ----A---- C:\Windows\system32\vssapi.dll
2014-12-19 21:09:18 ----A---- C:\Windows\system32\SkyDriveTelemetry.dll
2014-12-19 21:09:18 ----A---- C:\Windows\system32\rasser.dll
2014-12-19 21:09:18 ----A---- C:\Windows\system32\rasmxs.dll
2014-12-19 21:09:18 ----A---- C:\Windows\system32\rasdiag.dll
2014-12-19 21:09:18 ----A---- C:\Windows\system32\rascfg.dll
2014-12-19 21:09:18 ----A---- C:\Windows\system32\rasapi32.dll
2014-12-19 21:09:18 ----A---- C:\Windows\system32\QSHVHOST.DLL
2014-12-19 21:09:18 ----A---- C:\Windows\system32\nshwfp.dll
2014-12-19 21:09:18 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2014-12-19 21:09:18 ----A---- C:\Windows\system32\drivers\sermouse.sys
2014-12-19 21:09:18 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2014-12-19 21:09:18 ----A---- C:\Windows\system32\drivers\ndistapi.sys
2014-12-19 21:09:18 ----A---- C:\Windows\system32\drivers\mouhid.sys
2014-12-19 21:09:18 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2014-12-19 21:09:18 ----A---- C:\Windows\system32\drivers\agilevpn.sys
2014-12-19 21:09:18 ----A---- C:\Windows\system32\dnsapi.dll
2014-12-19 21:09:18 ----A---- C:\Windows\system32\DevicePairing.dll
2014-12-19 21:09:18 ----A---- C:\Windows\system32\BFE.DLL
2014-12-19 21:09:18 ----A---- C:\Windows\splwow64.exe
2014-12-19 21:09:17 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2014-12-19 21:09:17 ----A---- C:\Windows\SYSWOW64\wow32.dll
2014-12-19 21:09:17 ----A---- C:\Windows\SYSWOW64\user.exe
2014-12-19 21:09:17 ----A---- C:\Windows\SYSWOW64\setup16.exe
2014-12-19 21:09:17 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2014-12-19 21:09:17 ----A---- C:\Windows\SYSWOW64\instnm.exe
2014-12-19 21:09:17 ----A---- C:\Windows\SYSWOW64\eventcls.dll
2014-12-19 21:09:17 ----A---- C:\Windows\system32\wuapp.exe
2014-12-19 21:09:17 ----A---- C:\Windows\system32\wow64cpu.dll
2014-12-19 21:09:17 ----A---- C:\Windows\system32\ntvdm64.dll
2014-12-19 21:09:17 ----A---- C:\Windows\system32\eventcls.dll
2014-12-19 21:09:09 ----A---- C:\Windows\SYSWOW64\MrmCoreR.dll
2014-12-19 21:09:09 ----A---- C:\Windows\system32\SystemSettingsDatabase.dll
2014-12-19 21:09:09 ----A---- C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2014-12-19 21:09:09 ----A---- C:\Windows\system32\SystemSettingsAdminFlows.exe
2014-12-19 21:09:09 ----A---- C:\Windows\system32\SettingsHandlers.dll
2014-12-19 21:09:09 ----A---- C:\Windows\system32\MrmCoreR.dll
2014-12-19 21:09:09 ----A---- C:\Windows\system32\MDMAgent.exe
2014-12-19 21:09:08 ----A---- C:\Windows\system32\SystemSettings.Handlers.dll
2014-12-19 20:33:12 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2014-12-19 20:33:12 ----A---- C:\Windows\system32\poqexec.exe
2014-12-13 17:21:11 ----A---- C:\Windows\system32\unrar64.dll
2014-12-13 17:21:08 ----D---- C:\Program Files (x86)\K-Lite Codec Pack
2014-12-10 00:55:10 ----A---- C:\Windows\SYSWOW64\DeviceSetupStatusProvider.dll
2014-12-10 00:55:10 ----A---- C:\Windows\system32\DeviceSetupStatusProvider.dll
2014-12-10 00:54:59 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2014-12-10 00:54:59 ----A---- C:\Windows\system32\crypt32.dll
2014-12-10 00:43:48 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-12-10 00:43:48 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-12-10 00:43:09 ----A---- C:\Windows\system32\mshtml.dll
2014-12-10 00:43:08 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-12-10 00:43:06 ----A---- C:\Windows\system32\ieframe.dll
2014-12-10 00:43:04 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-12-10 00:43:01 ----A---- C:\Windows\system32\jscript9.dll
2014-12-10 00:42:58 ----A---- C:\Windows\system32\wininet.dll
2014-12-10 00:42:57 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-12-10 00:42:57 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-12-10 00:42:57 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-12-10 00:42:57 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-12-10 00:42:57 ----A---- C:\Windows\system32\urlmon.dll
2014-12-10 00:42:57 ----A---- C:\Windows\system32\iertutil.dll
2014-12-10 00:42:56 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-12-10 00:42:56 ----A---- C:\Windows\system32\ieapfltr.dll
2014-12-10 00:42:55 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-12-10 00:42:55 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-12-10 00:42:55 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-12-10 00:42:55 ----A---- C:\Windows\system32\vbscript.dll
2014-12-10 00:42:55 ----A---- C:\Windows\system32\msfeeds.dll
2014-12-10 00:42:55 ----A---- C:\Windows\system32\iepeers.dll
2014-12-10 00:42:55 ----A---- C:\Windows\system32\iedkcs32.dll
2014-12-10 00:42:55 ----A---- C:\Windows\system32\ie4uinit.exe
2014-12-10 00:42:54 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2014-12-10 00:42:54 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-12-10 00:42:54 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-12-10 00:42:54 ----A---- C:\Windows\SYSWOW64\jscript.dll
2014-12-10 00:42:54 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2014-12-10 00:42:54 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2014-12-10 00:42:54 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-12-10 00:42:54 ----A---- C:\Windows\system32\webcheck.dll
2014-12-10 00:42:54 ----A---- C:\Windows\system32\mshtmled.dll
2014-12-10 00:42:54 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-12-10 00:42:54 ----A---- C:\Windows\system32\jscript.dll
2014-12-10 00:42:54 ----A---- C:\Windows\system32\inetcomm.dll
2014-12-10 00:42:54 ----A---- C:\Windows\system32\dxtrans.dll
2014-12-01 21:47:10 ----D---- C:\Program Files (x86)\Mozilla Firefox

======List of files/folders modified in the last 1 month======

2014-12-27 17:11:03 ----D---- C:\ProgramData\softthinks
2014-12-27 17:10:50 ----D---- C:\Program Files (x86)\Dell Backup and Recovery
2014-12-27 17:10:42 ----D---- C:\Windows\Prefetch
2014-12-27 17:09:40 ----RD---- C:\Program Files
2014-12-27 17:06:19 ----RD---- C:\Windows\System32
2014-12-27 17:06:19 ----D---- C:\Windows\Inf
2014-12-27 17:06:19 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-12-27 17:03:26 ----D---- C:\Windows\Temp
2014-12-27 17:02:14 ----D---- C:\Windows\system32\sru
2014-12-27 12:40:26 ----SHD---- C:\Windows\Installer
2014-12-27 12:40:12 ----SHD---- C:\System Volume Information
2014-12-27 12:06:43 ----D---- C:\Windows\system32\drivers
2014-12-27 11:49:42 ----D---- C:\Users\Kristýna\AppData\Roaming\Atheros
2014-12-27 11:48:47 ----D---- C:\Windows
2014-12-27 10:32:22 ----D---- C:\Users\Kristýna\AppData\Roaming\Spotify
2014-12-27 10:25:26 ----D---- C:\Windows\Microsoft.NET
2014-12-26 22:18:00 ----D---- C:\Users\Kristýna\AppData\Roaming\vlc
2014-12-26 18:14:29 ----D---- C:\Users\Kristýna\AppData\Roaming\uTorrent
2014-12-26 12:03:52 ----D---- C:\Windows\AppReadiness
2014-12-24 12:25:05 ----D---- C:\Windows\ModemLogs
2014-12-24 12:24:03 ----D---- C:\ProgramData\Atheros
2014-12-22 13:38:01 ----D---- C:\Windows\rescache
2014-12-22 11:36:02 ----RD---- C:\Program Files (x86)
2014-12-22 10:42:30 ----D---- C:\Windows\system32\config
2014-12-21 21:44:20 ----D---- C:\Windows\debug
2014-12-21 21:26:18 ----D---- C:\Windows\system32\wbem
2014-12-21 21:20:38 ----D---- C:\Windows\WinSxS
2014-12-21 21:14:05 ----RD---- C:\Windows\ImmersiveControlPanel
2014-12-21 21:14:05 ----D---- C:\Windows\SysWOW64
2014-12-21 21:14:05 ----D---- C:\Windows\system32\en-US
2014-12-21 21:14:05 ----D---- C:\Windows\system32\cs-CZ
2014-12-21 21:14:04 ----RD---- C:\Windows\ToastData
2014-12-21 21:14:03 ----D---- C:\Windows\SYSWOW64\setup
2014-12-21 21:14:02 ----D---- C:\Windows\system32\setup
2014-12-21 21:14:01 ----D---- C:\Windows\apppatch
2014-12-21 21:13:55 ----D---- C:\Windows\system32\DriverStore
2014-12-21 11:05:41 ----HD---- C:\ProgramData
2014-12-21 11:01:23 ----D---- C:\Windows\system32\Tasks
2014-12-21 10:45:05 ----D---- C:\Windows\Logs
2014-12-21 10:39:53 ----D---- C:\ProgramData\PCDr
2014-12-21 10:19:09 ----D---- C:\Windows\CbsTemp
2014-12-20 22:29:32 ----D---- C:\Windows\SoftwareDistribution
2014-12-20 19:28:02 ----D---- C:\Program Files\CCleaner
2014-12-20 19:14:14 ----D---- C:\Program Files\SUPERAntiSpyware
2014-12-20 19:12:30 ----D---- C:\Users\Kristýna\AppData\Roaming\DAEMON Tools Lite
2014-12-20 18:22:16 ----D---- C:\Windows\Tasks
2014-12-19 21:08:50 ----D---- C:\Windows\system32\catroot2
2014-12-19 21:08:12 ----A---- C:\Windows\system32\wuaext.dll
2014-12-19 21:08:11 ----A---- C:\Windows\system32\wups.dll
2014-12-19 21:08:10 ----A---- C:\Windows\system32\wups2.dll
2014-12-19 21:07:50 ----A---- C:\Windows\SYSWOW64\wups.dll
2014-12-19 20:56:38 ----D---- C:\Program Files\Microsoft Silverlight
2014-12-19 20:56:37 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-12-18 19:54:57 ----HD---- C:\Program Files\WindowsApps
2014-12-13 17:21:32 ----D---- C:\Users\Kristýna\AppData\Roaming\Mozilla
2014-12-13 13:07:47 ----RSD---- C:\Windows\assembly
2014-12-13 13:05:11 ----D---- C:\ProgramData\Microsoft Help
2014-12-10 12:49:26 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-12-10 12:47:40 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-12-10 12:47:40 ----D---- C:\Windows\system32\sr-Latn-RS
2014-12-10 12:47:40 ----D---- C:\Windows\system32\sr-Latn-CS
2014-12-10 12:47:40 ----D---- C:\Windows\PolicyDefinitions
2014-12-10 12:47:40 ----D---- C:\Program Files\Internet Explorer
2014-12-10 12:47:40 ----D---- C:\Program Files (x86)\Internet Explorer
2014-12-10 11:01:13 ----D---- C:\Windows\system32\MRT
2014-12-10 10:59:25 ----A---- C:\Windows\system32\MRT.exe
2014-12-10 10:50:11 ----SD---- C:\ProgramData\Microsoft
2014-12-02 15:10:22 ----A---- C:\Windows\SYSWOW64\unrar.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amdkmpfd;@oem184.inf,%AMDKMPFD_svcdesc%;AMD PCI Root Bus Lower Filter; C:\Windows\System32\drivers\amdkmpfd.sys [2013-05-22 36096]
R0 iaStorA;iaStorA; C:\Windows\System32\drivers\iaStorA.sys [2013-08-02 644968]
R1 CLVirtualDrive;CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [2013-03-05 91712]
R1 dtsoftbus01;@oem192.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\Windows\System32\drivers\dtsoftbus01.sys [2014-08-22 283064]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-10-03 12762624]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-10-03 619008]
R3 athr;@oem55.inf,%ATHR.Service.DispName%;Dell Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athwbx.sys [2013-10-18 3858944]
R3 BTATH_BUS;@oem186.inf,%BTATH_BUS.SVCDESC%;Qualcomm Atheros Bluetooth Bus; C:\Windows\System32\drivers\btath_bus.sys [2013-10-29 34384]
R3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2013-10-29 596168]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2014-10-29 81920]
R3 DellRbtn;@oem57.inf,%DellRbtn%;Airplane Mode Switch; C:\Windows\System32\drivers\DellRbtn.sys [2013-01-25 10752]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2014-10-03 4753336]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2013-08-21 3591000]
R3 iwdbus;@oem86.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\Windows\System32\drivers\iwdbus.sys [2014-09-19 27000]
R3 MEIx64;@oem179.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\System32\drivers\TeeDriverx64.sys [2013-12-11 100312]
R3 RSUSBVSTOR;@oem59.inf,%RSUSBVSTOR.SvcDesc%;RtsUVStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUVStor.sys [2013-11-02 330456]
R3 RTL8168;@oem58.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2013-06-22 816344]
R3 SmbDrvI;SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [2013-09-06 34544]
R3 SynTP;@oem54.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\Windows\System32\drivers\SynTP.sys [2013-09-06 531184]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2014-06-21 212736]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S3 AthBTPort;@oem189.inf,%BTHSUPPORT.SvcDesc%;Qualcomm Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2013-10-29 89800]
S3 BTATH_A2DP;@oem188.inf,%BTATH_A2DP.SvcDesc%;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2013-10-29 338120]
S3 btath_avdt;@oem188.inf,%btath_avdt.SvcDesc%;Qualcomm Atheros Bluetooth AVDT Service; C:\Windows\system32\drivers\btath_avdt.sys [2013-10-29 116424]
S3 BTATH_HCRP;@oem191.inf,%BTATH_HCRP.SvcDesc%;Bluetooth HCRP Server driver; C:\Windows\System32\drivers\btath_hcrp.sys [2013-10-29 179432]
S3 BTATH_LWFLT;@oem193.inf,%BTATH_LWFLT%;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2013-10-29 77464]
S3 BTATH_RCP;@oem195.inf,%BTATH_RCP%;Bluetooth AVRCP Device; C:\Windows\System32\drivers\btath_rcp.sys [2013-10-29 137928]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\Windows\System32\drivers\BthEnum.sys [2014-10-29 53248]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\Windows\system32\DRIVERS\BthLEEnum.sys [2014-04-30 226304]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\Windows\System32\drivers\bthpan.sys [2014-07-24 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2014-10-29 1198080]
S3 dot4;@oem104.inf,%Dot4_Name%;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2012-10-19 151968]
S3 Dot4Print;@oem109.inf,%Dot4Print_Name%;Print Class Driver for IEEE-1284.4; C:\Windows\System32\drivers\Dot4Prt.sys [2012-10-19 27040]
S3 dot4usb;@oem104.inf,%DOT4USB_NAME%;Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2012-10-19 49056]
S3 intaud_WaveExtensible;@oem81.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2014-09-19 38264]
S3 IntcDAud;@oem180.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2013-10-01 449528]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\System32\drivers\rfcomm.sys [2014-04-30 167424]
S3 SmbDrv;SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [2013-09-06 30448]
S3 tap0901;@oem136.inf,%DeviceDescription%;TAP-Windows Adapter V9; C:\Windows\system32\DRIVERS\tap0901.sys [2013-08-22 40664]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-08-22 44544]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2014-07-23 172344]
R2 AERTFilters;Andrea RT Filters Service; C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe [2009-11-18 98208]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-10-03 239616]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [2013-10-29 317568]
R2 DellDigitalDelivery;Dell Digital Delivery Service; c:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe [2014-01-13 198664]
R2 FoxitCloudUpdateService;Foxit Cloud Safe Update Service; C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [2014-10-28 244448]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-08-07 15720]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2014-10-03 329104]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-08-27 747520]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-12-11 169432]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-12-11 390616]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2013-07-30 253776]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2013-06-19 246488]
R2 SftService;SoftThinks Agent Service; C:\Program Files (x86)\Dell Backup and Recovery\sftservice.exe [2014-09-18 1924328]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-23 43696]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-20 107912]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-19 267440]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2014-10-03 279952]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-20 107912]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-08-27 828376]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-12-01 114800]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-12-08 178760]

-----------------EOF-----------------

#6 Příspěvek od **Márty84** » 27 pro 2014 18:47

To je dobre, ze uz to bezi

Ale neco tam vidim, tak to trosku procistime.

Nedavejte prosim logy do Code, spatne se to cte.

Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Clean
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.

Kolikokoli · #7 Příspěvek od **Kolikokoli** » 27 pro 2014 19:38

# AdwCleaner v4.106 - Report created 27/12/2014 at 19:35:21
# Updated 21/12/2014 by Xplode
# Database : 2014-12-21.4 [Live]
# Operating System : Windows 8.1 (64 bits)
# Username : Kolikokoli - PIMPALA
# Running from : C:\Users\Kristýna\Downloads\adwcleaner_4.106.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\Users\Kristýna\AppData\Roaming\Mozilla\Firefox\Profiles\txttzxlv.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
File Deleted : C:\Program Files\Uninstall.exe

***** [ Scheduled Tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CCB24E92-62C4-4C53-95D2-65F9EED476BC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62155D33-3CE2-401E-8967-5A270628A3D5}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62155D33-3CE2-401E-8967-5A270628A3D5}

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v34.0 (x86 cs)

[txttzxlv.default\prefs.js] - Line Deleted : user_pref("browser.search.selectedEngine", "Search The Web");
[txttzxlv.default\prefs.js] - Line Deleted : user_pref("keyword.URL", "hxxp://www.mystart.com/results.php?pr=vmn&id=m ... gnID___&q=");

-\\ Google Chrome v39.0.2171.95

[C:\Users\Kristýna\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}
[C:\Users\Kristýna\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://wiki.qip.ru/index.php?title=%D0%A1%D0%BB%D1%83%D0%B6%D0%B5%D0%B1%D0%BD%D0%B0%D1%8F:Search&search={searchTerms}
[C:\Users\Kristýna\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://websearch.broadcom.com/search?q={searchTerms}
[C:\Users\Kristýna\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}

*************************

AdwCleaner[R0].txt - [2723 octets] - [27/12/2014 18:59:12]
AdwCleaner[R1].txt - [2783 octets] - [27/12/2014 19:12:17]
AdwCleaner[S0].txt - [2448 octets] - [27/12/2014 19:35:21]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2508 octets] ##########

#8 Příspěvek od **Márty84** » 27 pro 2014 19:42

Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu http://forum.viry.cz/viewtopic.php?f=29&t=137928 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

Kolikokoli · #9 Příspěvek od **Kolikokoli** » 27 pro 2014 20:41

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 27. 12. 2014
Scan Time: 20:07:27
Logfile: jjj.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2014.12.27.06
Rootkit Database: v2014.12.23.02
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: Kolikokoli

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 371211
Time Elapsed: 11 min, 35 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 1
PUP.Optional.MyStartTB.A, C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\mystarttb.xml, , [61715b0c0577a88e771d425e5ba8c13f],

Physical Sectors: 0
(No malicious items detected)

(end)

#10 Příspěvek od **Márty84** » 27 pro 2014 22:16

To sice nebylo podle navodu, ale budiz

Nalez hodte do karanteny, pak muzete MBAM odinstalovat.

Dejte log podle tohoto navodu http://forum.viry.cz/viewtopic.php?f=13&t=133100

18.1. pro neaktivitu

http://forum.viry.cz/viewtopic.php?f=12&t=123975

VIRY.CZ

Nemůžu nikam kliknout

Nemůžu nikam kliknout

Re: Nemůžu nikam kliknout

Re: Nemůžu nikam kliknout

Re: Nemůžu nikam kliknout

Re: Nemůžu nikam kliknout

Re: Nemůžu nikam kliknout

Re: Nemůžu nikam kliknout

Re: Nemůžu nikam kliknout

Re: Nemůžu nikam kliknout

Re: Nemůžu nikam kliknout