Vyskakuje mi na plochu okno stahování

[lybbor]

Dobrý den. Už tři dny mám problém že mi pořád na plochu vyskakuje okno ze soubory které prý stahuju od internet explorer. tento prohlížeč ale vůbec nepoužívám. Taky mi pořád cvaká zvuk jak při přepínaní oken ale nic nedělám. Posílám ke kontrole log. Děkuji za komtrolu.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Tatik at 2015-01-11 20:51:55
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 250 GB (52%) free of 477 GB
Total RAM: 2814 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:51:55, on 11.1.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.17183)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Windows\PixArt\PAC207\Monitor.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Windows\WindowsMobile\wmdcBase.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Users\Tatik\AppData\Local\Temp\DarkMiner2.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wuauclt.exe
C:\Users\Tatik\Desktop\RSIT.exe
C:\Program Files\trend micro\Tatik.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com/?gd=&ctid=CT3 ... BD1E&SSPV=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE -startup
O4 - HKLM\..\Run: [Monitor] C:\Windows\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Windows Mobile-based device management] %WINDIR%\WindowsMobile\wmdcBase.exe
O4 - HKLM\..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Samsung Link] "C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe"
O4 - HKLM\..\Run: [DarkMiner2] C:\Users\Tatik\AppData\Local\Temp\DarkMiner2.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (no file)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AllShare Framework DMS - Samsung - C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Apache2.4 - Apache Software Foundation - C:\xampp\apache\bin\httpd.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: PasswordBox - PasswordBox, Inc. - C:\Program Files\PasswordBox\pbbtnService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Samsung Link Service - Copyright 2013 SAMSUNG - C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer\TeamViewer_Service.exe

--
End of file - 6949 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\FLV Player Addon-chromeinstaller.job - C:\Program Files\FLV Player Addon\FLV Player Addon-chromeinstaller.exe /rawdata=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
C:\Windows\tasks\FLV Player Addon-codedownloader.job - C:\Program Files\FLV Player Addon\FLV Player Addon-codedownloader.exe /reinstallapp /runfrom=task /agentregpath='FLV Player Addon' /appid=52466 /srcid='001188' /subid='0' /zdata='flvplayer' /bic=7B2431A2083C408CA91FB727511BBF3AIE /verifier=c5b9d0d654570033b111905f3fff0880 /installerversion=1_34_3_6 /installerfullversion=1.34.3.6 /installationtime=1394536073 /statsdomain=http://stats.srvstatsdata.com /errorsdomain=http://errors.srvstatsdata.com /codedownloaddomain=http://app-static.crossrider.com /defbro=ff /allusers /autoupdateulr='http://update.srvstatsdata.com/ie_code_ ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\FLV Player Addon-enabler.job - C:\Program Files\FLV Player Addon\FLV Player Addon-enabler.exe /enablebho /agentregpath='FLV Player Addon' /appid=52466 /srcid='001188' /subid='0' /zdata='flvplayer' /bic=7B2431A2083C408CA91FB727511BBF3AIE /verifier=c5b9d0d654570033b111905f3fff0880 /installerversion=1_34_3_6 /installationtime=1394536073 /statsdomain=http://stats.srvstatsdata.com /errorsdomain=http://errors.srvstatsdata.com /bhoguid=11111111-1111-1111-1111-110511241166 /defbro=ff /allusers /autoupdateulr='http://update.srvstatsdata.com/ie_enabl ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\FLV Player Addon-firefoxinstaller.job - C:\Program Files\FLV Player Addon\FLV Player Addon-firefoxinstaller.exe /installxpi /agentregpath='FLV Player Addon' /extensionfilepath='C:\Program Files\FLV Player Addon\52466.xpi' /appid=52466 /srcid='001188' /subid='0' /zdata='flvplayer' /bic=7B2431A2083C408CA91FB727511BBF3AIE /verifier=c5b9d0d654570033b111905f3fff0880 /installerversion=1_34_3_6 /installerfullversion=1.34.3.6 /installationtime=1394536073 /statsdomain=http://stats.srvstatsdata.com /errorsdomain=http://errors.srvstatsdata.com /waitforbrowser=300 /extensionid=dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com /extensionversion=0.94 /prefsbranch=adc59fc105a264311af8dbf9b600a7b9c080e29b99bee4caab38c4958c5aa2376com52466 /updateurl=https://w9u6a2p6.ssl.hwcdn.net/plugin/f ... /52466.rdf /extensionname='FLV Player Addon' /extensiondesc='I am FLV Player extension' /publishername='Nero' /defbro=ff /allusers /allprofiles /checkfflist /autoupdateulr='http://update.srvstatsdata.com/ff_agent ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\FLV Player Addon-updater.job - C:\Program Files\FLV Player Addon\FLV Player Addon-updater.exe /runupdater /agentregpath='FLV Player Addon' /appid=52466 /srcid='001188' /subid='0' /zdata='flvplayer' /bic=7B2431A2083C408CA91FB727511BBF3AIE /verifier=c5b9d0d654570033b111905f3fff0880 /installerversion=1_34_3_6 /installationtime=1394536073 /statsdomain=http://stats.srvstatsdata.com /errorsdomain=http://errors.srvstatsdata.com /geoserviceurl=http://ipgeoapi.com/ /updatejsondomain=http://update.srvstatsdata.com /updaterversion=2 /monetizationdomain=http://stats.mstatsserv.com /autoupdateulr='http://update.srvstatsdata.com/updater_ ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Tatik\AppData\Roaming\Mozilla\Firefox\Profiles\054uirn0.default

prefs.js - "browser.search.suggest.enabled" - false
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "keyword.URL" - "https://www.google.com/search"

"firefox@passwordbox.com"=C:\Program Files\PasswordBox\Firefox
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.246 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_246.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.25.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.12.709]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.709]
"Description"=6.0.12.709
"Path"=C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
nppdf32.dll
nppl3260.dll
nprpjplug.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Users\Tatik\AppData\Roaming\Mozilla\Firefox\Profiles\054uirn0.default\extensions\
2020Player_IKEA@2020Technologies.com

C:\Users\Tatik\AppData\Roaming\Mozilla\Firefox\Profiles\054uirn0.default\searchplugins\
privitize.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-11-24 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"PWRISOVM.EXE"=C:\Program Files\PowerISO\PWRISOVM.EXE [2013-04-15 337432]
"Monitor"=C:\Windows\PixArt\PAC207\Monitor.exe [2006-11-03 319488]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"Windows Mobile-based device management"=C:\Windows\WindowsMobile\wmdcBase.exe [2007-05-31 648072]
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2010-06-14 153672]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2012-06-11 10996368]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-03-02 98304]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-07-30 4085896]
"Samsung Link"=C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe [2014-12-16 575328]
"DarkMiner2"=C:\Users\Tatik\AppData\Local\Temp\DarkMiner2.exe [2015-01-10 38912]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM"=C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [2006-05-16 213936]

C:\Users\Tatik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rjatydimofu.exe]
"Debugger="tasklist.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"msacm.l3pacm"=l3codecp.acm
"msacm.aacacm"=AACACM.acm
"msacm.lameacm"=lameACM.acm
"msacm.ac3acm"=ac3acm.acm
"VIDC.LAGS"=lagarith.dll
"msacm.ac3filter"=ac3filter.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.DIVX"=divx.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"VIDC.FFDS"=ff_vfw.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-01-11 20:49:33 ----D---- C:\Program Files\trend micro
2015-01-11 20:49:32 ----D---- C:\rsit
2015-01-11 12:42:46 ----D---- C:\Users\Tatik\AppData\Roaming\Seznam.cz
2015-01-09 22:23:26 ----D---- C:\Users\Tatik\AppData\Roaming\InstallShield
2015-01-09 21:56:18 ----A---- C:\Windows\Sof2.INI
2014-12-30 21:42:17 ----D---- C:\Windows\system32\appraiser
2014-12-30 21:40:42 ----A---- C:\Windows\system32\mfps.dll
2014-12-30 21:40:42 ----A---- C:\Windows\system32\mfpmp.exe
2014-12-30 21:40:42 ----A---- C:\Windows\system32\mferror.dll
2014-12-30 21:40:42 ----A---- C:\Windows\system32\mf.dll
2014-12-30 21:40:41 ----A---- C:\Windows\system32\rrinstaller.exe
2014-12-30 21:35:48 ----A---- C:\Windows\system32\mshtml.dll
2014-12-30 21:35:46 ----A---- C:\Windows\system32\wininet.dll
2014-12-30 21:35:46 ----A---- C:\Windows\system32\ieframe.dll
2014-12-30 21:35:45 ----A---- C:\Windows\system32\vbscript.dll
2014-12-30 21:35:45 ----A---- C:\Windows\system32\urlmon.dll
2014-12-30 21:35:45 ----A---- C:\Windows\system32\iesysprep.dll
2014-12-30 21:35:45 ----A---- C:\Windows\system32\iertutil.dll
2014-12-30 21:35:44 ----A---- C:\Windows\system32\msrating.dll
2014-12-30 21:35:44 ----A---- C:\Windows\system32\mshtmled.dll
2014-12-30 21:35:44 ----A---- C:\Windows\system32\msfeeds.dll
2014-12-30 21:35:44 ----A---- C:\Windows\system32\jscript9.dll
2014-12-30 21:35:44 ----A---- C:\Windows\system32\jscript.dll
2014-12-30 21:35:44 ----A---- C:\Windows\system32\ieui.dll
2014-12-30 21:35:44 ----A---- C:\Windows\system32\iernonce.dll
2014-12-30 21:35:44 ----A---- C:\Windows\system32\iedkcs32.dll
2014-12-30 21:35:44 ----A---- C:\Windows\system32\ie4uinit.exe
2014-12-30 21:35:44 ----A---- C:\Windows\system32\dxtrans.dll
2014-12-30 21:35:44 ----A---- C:\Windows\system32\dxtmsft.dll
2014-12-30 21:35:43 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2014-12-30 21:35:43 ----A---- C:\Windows\system32\jsproxy.dll
2014-12-30 21:35:43 ----A---- C:\Windows\system32\iesetup.dll
2014-12-30 21:35:41 ----A---- C:\Windows\system32\drivers\tdx.sys
2014-12-30 21:35:30 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-12-30 21:35:28 ----A---- C:\Windows\system32\charmap.exe
2014-12-30 21:35:27 ----A---- C:\Windows\system32\tzres.dll
2014-12-30 21:35:25 ----A---- C:\Windows\system32\appraiser.dll
2014-12-30 21:35:25 ----A---- C:\Windows\system32\aitstatic.exe
2014-12-30 21:35:25 ----A---- C:\Windows\system32\aepic.dll
2014-12-30 21:35:24 ----A---- C:\Windows\system32\invagent.dll
2014-12-30 21:35:24 ----A---- C:\Windows\system32\devinv.dll
2014-12-30 21:35:24 ----A---- C:\Windows\system32\aeinv.dll
2014-12-30 21:35:23 ----A---- C:\Windows\system32\generaltel.dll
2014-12-30 21:35:23 ----A---- C:\Windows\system32\aepdu.dll
2014-12-30 21:34:00 ----A---- C:\Windows\system32\WsmWmiPl.dll
2014-12-30 21:34:00 ----A---- C:\Windows\system32\WsmSvc.dll
2014-12-30 21:34:00 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-30 21:34:00 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
2014-12-30 21:33:59 ----A---- C:\Windows\system32\WsmAuto.dll
2014-12-30 21:28:28 ----D---- C:\Users\Tatik\AppData\Roaming\Profiles
2014-12-30 21:28:28 ----D---- C:\Users\Tatik\AppData\Roaming\Crash Reports
2014-12-30 21:28:28 ----A---- C:\Users\Tatik\AppData\Roaming\profiles.ini
2014-12-20 22:37:37 ----A---- C:\Windows\system32\javaws.exe
2014-12-20 22:37:37 ----A---- C:\Windows\system32\javaw.exe
2014-12-20 22:37:37 ----A---- C:\Windows\system32\java.exe
2014-12-17 11:26:12 ----SHD---- C:\found.006
2014-12-15 19:58:22 ----D---- C:\Users\Tatik\AppData\Roaming\Seznam Browser

======List of files/folders modified in the last 1 month======

2015-01-11 20:51:55 ----D---- C:\Windows\Temp
2015-01-11 20:49:33 ----D---- C:\Program Files
2015-01-11 19:56:15 ----D---- C:\Users\Tatik\AppData\Roaming\TS3Client
2015-01-11 19:16:19 ----D---- C:\Windows\system32\config
2015-01-11 19:15:35 ----HD---- C:\ProgramData
2015-01-11 19:14:51 ----D---- C:\Moje downloady
2015-01-11 19:10:53 ----D---- C:\Windows\Tasks
2015-01-11 19:08:44 ----D---- C:\Windows\Prefetch
2015-01-11 19:08:42 ----D---- C:\Windows\system32\Tasks
2015-01-11 17:26:02 ----D---- C:\Windows
2015-01-11 17:09:07 ----D---- C:\Users\Tatik\AppData\Roaming\uTorrent
2015-01-11 16:39:44 ----D---- C:\Users\Tatik\AppData\Roaming\vlc
2015-01-11 16:38:12 ----D---- C:\Program Files\Mozilla Thunderbird
2015-01-11 16:31:26 ----SHD---- C:\Windows\Installer
2015-01-11 16:31:16 ----SHD---- C:\System Volume Information
2015-01-11 16:26:13 ----D---- C:\Program Files\FileZilla FTP Client
2015-01-11 16:04:34 ----D---- C:\Program Files\Common Files\InstallShield
2015-01-11 12:51:49 ----D---- C:\Windows\SoftwareDistribution
2015-01-11 12:51:19 ----D---- C:\Users\Tatik\AppData\Roaming\Media Player Classic
2015-01-11 12:51:13 ----D---- C:\Windows\Panther
2015-01-11 12:51:13 ----D---- C:\Windows\Minidump
2015-01-11 12:51:13 ----D---- C:\Windows\inf
2015-01-11 12:51:13 ----D---- C:\Windows\debug
2015-01-09 22:26:28 ----RSD---- C:\Windows\assembly
2015-01-09 22:24:28 ----D---- C:\Windows\System32
2015-01-09 22:24:17 ----D---- C:\Windows\Downloaded Program Files
2015-01-09 10:58:52 ----D---- C:\Windows\system32\NDF
2015-01-09 09:43:59 ----D---- C:\Windows\system32\catroot2
2014-12-31 10:44:15 ----D---- C:\Windows\rescache
2014-12-30 22:08:16 ----A---- C:\Windows\VehVwr.INI
2014-12-30 21:44:57 ----D---- C:\Windows\winsxs
2014-12-30 21:42:17 ----SD---- C:\Windows\system32\CompatTel
2014-12-30 21:42:17 ----SD---- C:\ProgramData\Microsoft
2014-12-30 21:42:17 ----D---- C:\Windows\system32\drivers
2014-12-30 21:42:17 ----D---- C:\Windows\system32\cs-CZ
2014-12-30 21:42:17 ----D---- C:\Windows\AppCompat
2014-12-30 21:42:17 ----D---- C:\Program Files\Internet Explorer
2014-12-30 21:40:49 ----D---- C:\Windows\system32\catroot
2014-12-30 21:39:49 ----D---- C:\Windows\system32\MRT
2014-12-30 21:36:44 ----A---- C:\Windows\system32\MRT.exe
2014-12-28 19:48:36 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-12-23 12:43:35 ----D---- C:\Program Files\TeamViewer
2014-12-23 12:42:58 ----RSD---- C:\Windows\Fonts
2014-12-23 12:42:57 ----D---- C:\Users\Tatik\AppData\Roaming\TeamViewer
2014-12-20 23:01:39 ----D---- C:\Program Files\rFactor
2014-12-20 22:37:41 ----D---- C:\Program Files\Mozilla Firefox
2014-12-20 22:37:20 ----D---- C:\Program Files\Java

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-07-23 49944]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-07-23 192352]
R0 BTHidMgr;Bluetooth HID Manager Service; C:\Windows\System32\Drivers\BTHidMgr.sys [2005-04-30 28271]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-07-23 81768]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-21 779536]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-07-23 414520]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2013-04-15 113608]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-07-23 24184]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-07-23 67824]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-01-28 100352]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 4994560]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2012-06-19 3240400]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2011-06-10 394856]
R3 usbscan;Ovladač skeneru USB; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 36352]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2010-04-27 22856]
R3 WmFilter;Logitech Gaming HID Filter Driver; C:\Windows\system32\drivers\WmFilter.sys [2007-09-14 29976]
R3 WmHidLo;Logitech Gaming USB Filter Driver; C:\Windows\system32\drivers\WmHidLo.sys [2007-09-14 29208]
R3 WmXlCore;Logitech Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [2010-04-27 66632]
S2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-07-23 71944]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 amdiox86;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox86.sys []
S3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 4994560]
S3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-07-04 290304]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2013-09-24 77312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BlueletAudio;Bluetooth Audio Service; C:\Windows\system32\DRIVERS\blueletaudio.sys [2005-05-31 20480]
S3 BT;Bluetooth PAN Network Adapter; C:\Windows\system32\DRIVERS\btnetdrv.sys [2005-04-30 10804]
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\Windows\System32\Drivers\btcusb.sys [2005-05-31 23000]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
S3 BTHidEnum;Bluetooth HID Enumerator; C:\Windows\system32\DRIVERS\vbtenum.sys [2005-04-30 11860]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 dgderdrv;dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys []
S3 EagleXNt;EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys []
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys []
S3 PAC207;SoC PC-Camera; C:\Windows\system32\DRIVERS\PFC027.SYS [2006-12-05 507136]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2009-07-14 8192]
S3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIV.sys [2012-06-05 204432]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 15872]
S3 VComm;Virtual Serial port driver; C:\Windows\system32\DRIVERS\VComm.sys [2004-10-19 61312]
S3 VcommMgr;Bluetooth VComm Manager Service; C:\Windows\System32\Drivers\VcommMgr.sys [2005-03-25 82148]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WINUSB;Ovladač WinUsb; C:\Windows\system32\DRIVERS\WinUSB.SYS [2010-11-20 35968]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [2010-04-27 15048]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 AllShare Framework DMS;AllShare Framework DMS; C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe [2013-12-21 401800]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-08-18 176128]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-07-23 50344]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2014-08-03 66872]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 TeamViewer;TeamViewer 10; C:\Program Files\TeamViewer\TeamViewer_Service.exe [2014-12-15 5426448]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S2 Apache2.4;Apache2.4; C:\xampp\apache\bin\httpd.exe [2013-02-23 22016]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-03-17 116648]
S2 PasswordBox;PasswordBox; C:\Program Files\PasswordBox\pbbtnService.exe [2014-05-14 67584]
S2 Samsung Link Service;Samsung Link Service; C:\Program Files\Samsung\Samsung Link\Samsung Link.exe [2014-12-16 581984]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2013-09-27 72704]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-10 267440]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-03-17 116648]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-12-09 114800]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-09-27 1343400]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

[Rudy]

Zdravím!
Spusťte nejprve tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

[lybbor]

Tak jsem to asi trochu moc pos.
Tady je log ale až druhý ten první jsem omylem resetoval PC Zatím ale okno nevyskočilo a i ten zvuk zmyzel.

# AdwCleaner v4.107 - Report created 11/01/2015 at 22:07:22
# Updated 07/01/2015 by Xplode
# Database : 2015-01-11.2 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (32 bits)
# Username : Tatik - TATIK-PC
# Running from : C:\Users\Tatik\Desktop\adwcleaner_4.107.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.17183


-\\ Mozilla Firefox v34.0.5 (x86 cs)

[054uirn0.default\prefs.js] - Line Deleted : user_pref("extensions.adc59fc105a264311af8dbf9b600a7b9c080e29b99bee4caab38c4958c5aa2376com52466.52466.internaldb.Resources_meta.value", "%7B%22iframe.html%22%3A%7B%22id%22%3A538570%2C%22ver%22%3A18%2C[...]
[054uirn0.default\prefs.js] - Line Deleted : user_pref("extensions.adc59fc105a264311af8dbf9b600a7b9c080e29b99bee4caab38c4958c5aa2376com52466.52466.internaldb.Resources_resource_538570.value", "%22%3Chtml%20style%3D%5C%22width%3A854px%3Bheigth%3A[...]
[054uirn0.default\prefs.js] - Line Deleted : user_pref("extensions.crossrider.bic", "1450a3b8f3101cb98d758243b4afbb51");

-\\ Google Chrome v


*************************

AdwCleaner[R3].txt - [2532 octets] - [11/01/2015 21:59:49]
AdwCleaner[R4].txt - [1495 octets] - [11/01/2015 22:05:48]
AdwCleaner[S2].txt - [2656 octets] - [11/01/2015 22:02:26]
AdwCleaner[S3].txt - [1449 octets] - [11/01/2015 22:07:22]

########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [1509 octets] ##########

[lybbor]

Ted jsem na C našel ten prvmí log

# AdwCleaner v4.107 - Report created 11/01/2015 at 22:02:26
# Updated 07/01/2015 by Xplode
# Database : 2015-01-11.2 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (32 bits)
# Username : Tatik - TATIK-PC
# Running from : C:\Users\Tatik\Desktop\adwcleaner_4.107.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\drivergenius
Folder Deleted : C:\Users\Tatik\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Tatik\AppData\Roaming\Solvusoft
Folder Deleted : C:\Users\Tatik\Documents\Updater
Folder Deleted : C:\Users\Tatik\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
Folder Deleted : C:\Users\Tatik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia
File Deleted : C:\Windows\system32\roboot.exe
File Deleted : C:\Users\Tatik\AppData\Roaming\Mozilla\Firefox\Profiles\054uirn0.default\user.js

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A8BC70B7-8593-45B7-A3BD-C5D63C339609}
Key Deleted : HKCU\Software\AVG Secure Search
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\InstallCore

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.17183


-\\ Mozilla Firefox v34.0.5 (x86 cs)

[054uirn0.default\prefs.js] - Line Deleted : user_pref("extensions.adc59fc105a264311af8dbf9b600a7b9c080e29b99bee4caab38c4958c5aa2376com52466.52466.internaldb.Resources_meta.value", "%7B%22iframe.html%22%3A%7B%22id%22%3A538570%2C%22ver%22%3A18%2C[...]
[054uirn0.default\prefs.js] - Line Deleted : user_pref("extensions.adc59fc105a264311af8dbf9b600a7b9c080e29b99bee4caab38c4958c5aa2376com52466.52466.internaldb.Resources_resource_538570.value", "%22%3Chtml%20style%3D%5C%22width%3A854px%3Bheigth%3A[...]
[054uirn0.default\prefs.js] - Line Deleted : user_pref("extensions.crossrider.bic", "1450a3b8f3101cb98d758243b4afbb51");

-\\ Google Chrome v

[C:\Users\Tatik\AppData\Local\Google\Chrome\User Data\Default\preferences] - Deleted [Extension] : apdfllckaahabafndbhieahigkjlhalf
[C:\Users\Tatik\AppData\Local\Google\Chrome\User Data\Default\preferences] - Deleted [Extension] : pjkljhegncpnkpknbcohdijeoejaedia

*************************

AdwCleaner[R3].txt - [2532 octets] - [11/01/2015 21:59:49]
AdwCleaner[S2].txt - [2516 octets] - [11/01/2015 22:02:26]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [2576 octets] ##########

[Rudy]

Dejte nový log RSIT.

[lybbor]

Tady je.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Tatik at 2015-01-12 16:44:13
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 251 GB (53%) free of 477 GB
Total RAM: 2814 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:44:20, on 12.1.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.17183)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Windows\PixArt\PAC207\Monitor.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Windows\WindowsMobile\wmdcBase.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\wuauclt.exe
C:\Users\Tatik\Desktop\RSIT.exe
C:\Program Files\trend micro\Tatik.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE -startup
O4 - HKLM\..\Run: [Monitor] C:\Windows\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Windows Mobile-based device management] %WINDIR%\WindowsMobile\wmdcBase.exe
O4 - HKLM\..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Samsung Link] "C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe"
O4 - HKLM\..\RunOnce: [20150107] C:\Program Files\AVAST Software\Avast\setup\emupdate\a3df229e-b74c-4e45-bd30-da477589cf92.exe /check
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (no file)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AllShare Framework DMS - Samsung - C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Apache2.4 - Apache Software Foundation - C:\xampp\apache\bin\httpd.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: PasswordBox - PasswordBox, Inc. - C:\Program Files\PasswordBox\pbbtnService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Samsung Link Service - Copyright 2013 SAMSUNG - C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer\TeamViewer_Service.exe

--
End of file - 6237 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Tatik\AppData\Roaming\Mozilla\Firefox\Profiles\054uirn0.default

prefs.js - "browser.search.suggest.enabled" - false
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "keyword.URL" - "https://www.google.com/search"

"firefox@passwordbox.com"=C:\Program Files\PasswordBox\Firefox
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.246 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_246.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.25.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.12.709]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.709]
"Description"=6.0.12.709
"Path"=C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
nppdf32.dll
nppl3260.dll
nprpjplug.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Users\Tatik\AppData\Roaming\Mozilla\Firefox\Profiles\054uirn0.default\extensions\
2020Player_IKEA@2020Technologies.com

C:\Users\Tatik\AppData\Roaming\Mozilla\Firefox\Profiles\054uirn0.default\searchplugins\
privitize.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-11-24 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"PWRISOVM.EXE"=C:\Program Files\PowerISO\PWRISOVM.EXE [2013-04-15 337432]
"Monitor"=C:\Windows\PixArt\PAC207\Monitor.exe [2006-11-03 319488]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"Windows Mobile-based device management"=C:\Windows\WindowsMobile\wmdcBase.exe [2007-05-31 648072]
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2010-06-14 153672]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2012-06-11 10996368]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-03-02 98304]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-07-30 4085896]
"Samsung Link"=C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe [2014-12-16 575328]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"20150107"=C:\Program Files\AVAST Software\Avast\setup\emupdate\a3df229e-b74c-4e45-bd30-da477589cf92.exe [2015-01-12 183232]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM"=C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [2006-05-16 213936]

C:\Users\Tatik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"msacm.l3pacm"=l3codecp.acm
"msacm.aacacm"=AACACM.acm
"msacm.lameacm"=lameACM.acm
"msacm.ac3acm"=ac3acm.acm
"VIDC.LAGS"=lagarith.dll
"msacm.ac3filter"=ac3filter.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.DIVX"=divx.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"VIDC.FFDS"=ff_vfw.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2015-01-11 21:59:29 ----D---- C:\AdwCleaner
2015-01-11 21:52:36 ----SHD---- C:\$RECYCLE.BIN
2015-01-11 21:52:30 ----A---- C:\ComboFix.txt
2015-01-11 21:41:24 ----A---- C:\Windows\zip.exe
2015-01-11 21:41:24 ----A---- C:\Windows\SWSC.exe
2015-01-11 21:41:24 ----A---- C:\Windows\SWREG.exe
2015-01-11 21:41:24 ----A---- C:\Windows\sed.exe
2015-01-11 21:41:24 ----A---- C:\Windows\PEV.exe
2015-01-11 21:41:24 ----A---- C:\Windows\NIRCMD.exe
2015-01-11 21:41:24 ----A---- C:\Windows\MBR.exe
2015-01-11 21:41:24 ----A---- C:\Windows\grep.exe
2015-01-11 21:41:15 ----D---- C:\Qoobox
2015-01-11 21:40:46 ----D---- C:\Windows\erdnt
2015-01-11 20:49:33 ----D---- C:\Program Files\trend micro
2015-01-11 20:49:32 ----D---- C:\rsit
2015-01-11 12:42:46 ----D---- C:\Users\Tatik\AppData\Roaming\Seznam.cz
2015-01-09 22:23:26 ----D---- C:\Users\Tatik\AppData\Roaming\InstallShield
2015-01-09 21:56:18 ----A---- C:\Windows\Sof2.INI
2014-12-30 21:42:17 ----D---- C:\Windows\system32\appraiser
2014-12-30 21:40:42 ----A---- C:\Windows\system32\mfps.dll
2014-12-30 21:40:42 ----A---- C:\Windows\system32\mfpmp.exe
2014-12-30 21:40:42 ----A---- C:\Windows\system32\mferror.dll
2014-12-30 21:40:42 ----A---- C:\Windows\system32\mf.dll
2014-12-30 21:40:41 ----A---- C:\Windows\system32\rrinstaller.exe
2014-12-30 21:35:48 ----A---- C:\Windows\system32\mshtml.dll
2014-12-30 21:35:46 ----A---- C:\Windows\system32\wininet.dll
2014-12-30 21:35:46 ----A---- C:\Windows\system32\ieframe.dll
2014-12-30 21:35:45 ----A---- C:\Windows\system32\vbscript.dll
2014-12-30 21:35:45 ----A---- C:\Windows\system32\urlmon.dll
2014-12-30 21:35:45 ----A---- C:\Windows\system32\iesysprep.dll
2014-12-30 21:35:45 ----A---- C:\Windows\system32\iertutil.dll
2014-12-30 21:35:44 ----A---- C:\Windows\system32\msrating.dll
2014-12-30 21:35:44 ----A---- C:\Windows\system32\mshtmled.dll
2014-12-30 21:35:44 ----A---- C:\Windows\system32\msfeeds.dll
2014-12-30 21:35:44 ----A---- C:\Windows\system32\jscript9.dll
2014-12-30 21:35:44 ----A---- C:\Windows\system32\jscript.dll
2014-12-30 21:35:44 ----A---- C:\Windows\system32\ieui.dll
2014-12-30 21:35:44 ----A---- C:\Windows\system32\iernonce.dll
2014-12-30 21:35:44 ----A---- C:\Windows\system32\iedkcs32.dll
2014-12-30 21:35:44 ----A---- C:\Windows\system32\ie4uinit.exe
2014-12-30 21:35:44 ----A---- C:\Windows\system32\dxtrans.dll
2014-12-30 21:35:44 ----A---- C:\Windows\system32\dxtmsft.dll
2014-12-30 21:35:43 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2014-12-30 21:35:43 ----A---- C:\Windows\system32\jsproxy.dll
2014-12-30 21:35:43 ----A---- C:\Windows\system32\iesetup.dll
2014-12-30 21:35:41 ----A---- C:\Windows\system32\drivers\tdx.sys
2014-12-30 21:35:30 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-12-30 21:35:28 ----A---- C:\Windows\system32\charmap.exe
2014-12-30 21:35:27 ----A---- C:\Windows\system32\tzres.dll
2014-12-30 21:35:25 ----A---- C:\Windows\system32\appraiser.dll
2014-12-30 21:35:25 ----A---- C:\Windows\system32\aitstatic.exe
2014-12-30 21:35:25 ----A---- C:\Windows\system32\aepic.dll
2014-12-30 21:35:24 ----A---- C:\Windows\system32\invagent.dll
2014-12-30 21:35:24 ----A---- C:\Windows\system32\devinv.dll
2014-12-30 21:35:24 ----A---- C:\Windows\system32\aeinv.dll
2014-12-30 21:35:23 ----A---- C:\Windows\system32\generaltel.dll
2014-12-30 21:35:23 ----A---- C:\Windows\system32\aepdu.dll
2014-12-30 21:34:00 ----A---- C:\Windows\system32\WsmWmiPl.dll
2014-12-30 21:34:00 ----A---- C:\Windows\system32\WsmSvc.dll
2014-12-30 21:34:00 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-30 21:34:00 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
2014-12-30 21:33:59 ----A---- C:\Windows\system32\WsmAuto.dll
2014-12-30 21:28:28 ----D---- C:\Users\Tatik\AppData\Roaming\Profiles
2014-12-30 21:28:28 ----D---- C:\Users\Tatik\AppData\Roaming\Crash Reports
2014-12-30 21:28:28 ----A---- C:\Users\Tatik\AppData\Roaming\profiles.ini
2014-12-20 22:37:37 ----A---- C:\Windows\system32\javaws.exe
2014-12-20 22:37:37 ----A---- C:\Windows\system32\javaw.exe
2014-12-20 22:37:37 ----A---- C:\Windows\system32\java.exe
2014-12-17 11:26:12 ----D---- C:\found.006
2014-12-15 19:58:22 ----D---- C:\Users\Tatik\AppData\Roaming\Seznam Browser

======List of files/folders modified in the last 1 month======

2015-01-12 16:44:20 ----D---- C:\Windows\Prefetch
2015-01-12 16:44:14 ----D---- C:\Windows\Temp
2015-01-12 15:42:20 ----D---- C:\Windows\system32\config
2015-01-11 22:02:28 ----D---- C:\Windows\System32
2015-01-11 22:02:27 ----D---- C:\ProgramData
2015-01-11 21:55:09 ----D---- C:\Windows
2015-01-11 21:51:47 ----D---- C:\Windows\system32\Tasks
2015-01-11 21:51:45 ----D---- C:\Windows\Tasks
2015-01-11 21:50:35 ----A---- C:\Windows\system.ini
2015-01-11 21:50:28 ----D---- C:\Windows\system32\drivers\etc
2015-01-11 21:46:45 ----D---- C:\Windows\system32\drivers
2015-01-11 21:46:45 ----D---- C:\Windows\AppPatch
2015-01-11 21:46:43 ----D---- C:\Program Files\Common Files
2015-01-11 21:31:09 ----D---- C:\Windows\inf
2015-01-11 21:05:33 ----D---- C:\Users\Tatik\AppData\Roaming\vlc
2015-01-11 21:03:48 ----D---- C:\Program Files\Mozilla Thunderbird
2015-01-11 20:49:33 ----D---- C:\Program Files
2015-01-11 19:56:15 ----D---- C:\Users\Tatik\AppData\Roaming\TS3Client
2015-01-11 19:14:51 ----D---- C:\Moje downloady
2015-01-11 17:09:07 ----D---- C:\Users\Tatik\AppData\Roaming\uTorrent
2015-01-11 16:31:26 ----SHD---- C:\Windows\Installer
2015-01-11 16:31:16 ----SHD---- C:\System Volume Information
2015-01-11 16:26:13 ----D---- C:\Program Files\FileZilla FTP Client
2015-01-11 16:04:34 ----D---- C:\Program Files\Common Files\InstallShield
2015-01-11 12:51:49 ----D---- C:\Windows\SoftwareDistribution
2015-01-11 12:51:19 ----D---- C:\Users\Tatik\AppData\Roaming\Media Player Classic
2015-01-11 12:51:13 ----D---- C:\Windows\Panther
2015-01-11 12:51:13 ----D---- C:\Windows\Minidump
2015-01-11 12:51:13 ----D---- C:\Windows\debug
2015-01-09 22:26:28 ----RSD---- C:\Windows\assembly
2015-01-09 22:24:17 ----D---- C:\Windows\Downloaded Program Files
2015-01-09 10:58:52 ----D---- C:\Windows\system32\NDF
2015-01-09 09:43:59 ----D---- C:\Windows\system32\catroot2
2014-12-31 10:44:15 ----D---- C:\Windows\rescache
2014-12-30 22:08:16 ----A---- C:\Windows\VehVwr.INI
2014-12-30 21:44:57 ----D---- C:\Windows\winsxs
2014-12-30 21:42:17 ----SD---- C:\Windows\system32\CompatTel
2014-12-30 21:42:17 ----SD---- C:\ProgramData\Microsoft
2014-12-30 21:42:17 ----D---- C:\Windows\system32\cs-CZ
2014-12-30 21:42:17 ----D---- C:\Windows\AppCompat
2014-12-30 21:42:17 ----D---- C:\Program Files\Internet Explorer
2014-12-30 21:40:49 ----D---- C:\Windows\system32\catroot
2014-12-30 21:39:49 ----D---- C:\Windows\system32\MRT
2014-12-30 21:36:44 ----A---- C:\Windows\system32\MRT.exe
2014-12-28 19:48:36 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-12-23 12:43:35 ----D---- C:\Program Files\TeamViewer
2014-12-23 12:42:58 ----RSD---- C:\Windows\Fonts
2014-12-23 12:42:57 ----D---- C:\Users\Tatik\AppData\Roaming\TeamViewer
2014-12-20 23:01:39 ----D---- C:\Program Files\rFactor
2014-12-20 22:37:41 ----D---- C:\Program Files\Mozilla Firefox
2014-12-20 22:37:20 ----D---- C:\Program Files\Java

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-07-23 49944]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-07-23 192352]
R0 BTHidMgr;Bluetooth HID Manager Service; C:\Windows\System32\Drivers\BTHidMgr.sys [2005-04-30 28271]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-07-23 81768]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-21 779536]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-07-23 414520]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2013-04-15 113608]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-07-23 24184]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-07-23 67824]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-01-28 100352]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 4994560]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2012-06-19 3240400]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2011-06-10 394856]
R3 usbscan;Ovladač skeneru USB; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 36352]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2010-04-27 22856]
R3 WmFilter;Logitech Gaming HID Filter Driver; C:\Windows\system32\drivers\WmFilter.sys [2007-09-14 29976]
R3 WmHidLo;Logitech Gaming USB Filter Driver; C:\Windows\system32\drivers\WmHidLo.sys [2007-09-14 29208]
R3 WmXlCore;Logitech Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [2010-04-27 66632]
S2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-07-23 71944]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 amdiox86;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox86.sys []
S3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 4994560]
S3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-07-04 290304]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2013-09-24 77312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BlueletAudio;Bluetooth Audio Service; C:\Windows\system32\DRIVERS\blueletaudio.sys [2005-05-31 20480]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]
S3 BT;Bluetooth PAN Network Adapter; C:\Windows\system32\DRIVERS\btnetdrv.sys [2005-04-30 10804]
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\Windows\System32\Drivers\btcusb.sys [2005-05-31 23000]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
S3 BTHidEnum;Bluetooth HID Enumerator; C:\Windows\system32\DRIVERS\vbtenum.sys [2005-04-30 11860]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 catchme;catchme; \??\C:\Users\Tatik\AppData\Local\Temp\catchme.sys []
S3 dgderdrv;dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys []
S3 EagleXNt;EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys []
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys []
S3 PAC207;SoC PC-Camera; C:\Windows\system32\DRIVERS\PFC027.SYS [2006-12-05 507136]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2009-07-14 8192]
S3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIV.sys [2012-06-05 204432]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 15872]
S3 VComm;Virtual Serial port driver; C:\Windows\system32\DRIVERS\VComm.sys [2004-10-19 61312]
S3 VcommMgr;Bluetooth VComm Manager Service; C:\Windows\System32\Drivers\VcommMgr.sys [2005-03-25 82148]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WINUSB;Ovladač WinUsb; C:\Windows\system32\DRIVERS\WinUSB.SYS [2010-11-20 35968]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [2010-04-27 15048]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 AllShare Framework DMS;AllShare Framework DMS; C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe [2013-12-21 401800]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-08-18 176128]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-07-23 50344]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2014-08-03 66872]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Samsung Link Service;Samsung Link Service; C:\Program Files\Samsung\Samsung Link\Samsung Link.exe [2014-12-16 581984]
R2 TeamViewer;TeamViewer 10; C:\Program Files\TeamViewer\TeamViewer_Service.exe [2014-12-15 5426448]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S2 Apache2.4;Apache2.4; C:\xampp\apache\bin\httpd.exe [2013-02-23 22016]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-03-17 116648]
S2 PasswordBox;PasswordBox; C:\Program Files\PasswordBox\pbbtnService.exe [2014-05-14 67584]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2013-09-27 72704]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-10 267440]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-03-17 116648]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-12-09 114800]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-09-27 1343400]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

[Rudy]

Já jsem vám doporučil spustit Combofix? Je vidět, že jste nečetl pravidla: http://forum.viry.cz/viewtopic.php?f=12&t=5601 (bod 3) tím mi naboural celou koncepci čištění. Od tohoto okmžiku si pomozte sám. A není to poprvé, co jste to udělal.

[lybbor]

Ano, máte pravdu, spustil. Snad si teda pomohu sám. Děkuji.

[Rudy]

Není zač.