VIRY.CZ

Dobrý den,
prosím o kontrolu logu, stává se čím dál častěji že vypadne internet a poznám to nejčastěji podle odpojeného skype. Když změřím rychlost tak je vše v pořádku. http://www.speedtest.net/my-result/4154770345

Logfile of random's system information tool 1.10 (written by random/random)
Run by Petr at 2015-02-19 13:46:19
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 14 GB (14%) free of 100 GB
Total RAM: 8191 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:46:20, on 19.2.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17631)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\ConMet\ConMet.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
C:\Program Files (x86)\APC\APC PowerChute Personal Edition\apcsystray.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
D:\Program Files (x86)\VLC\vlc.exe
D:\Denisa\LOL\RADS\system\rads_user_kernel.exe
D:\Denisa\LOL\RADS\projects\lol_launcher\releases\0.0.0.237\deploy\LoLLauncher.exe
D:\Denisa\LOL\RADS\projects\lol_patcher\releases\0.0.0.21\deploy\LoLPatcher.exe
D:\Denisa\LOL\RADS\projects\lol_air_client\releases\0.0.1.129\deploy\LolClient.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\Petr.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [NBAgent] "D:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [ConMet] C:\Program Files (x86)\ConMet\ConMet.exe
O4 - Global Startup: APC UPS Status.lnk = ?
O4 - Global Startup: Secunia PSI Tray.lnk = C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com/v7/ ... 8893321921
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: APC UPS Service - American Power Conversion Corporation - C:\Program Files (x86)\APC\APC PowerChute Personal Edition\mainserv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: COMODO Internet Security Helper Service (CmdAgent) - COMODO - D:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - D:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Secunia PSI Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\PSIA.exe
O23 - Service: Secunia Update Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\sua.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\Windows\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10321 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
winlogon.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"D:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Windows\system32\Dwm.exe"
"taskhost.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
taskeng.exe {5B9A05C1-91DC-4660-84A3-EF67EACF956F}
"D:\Program Files\COMODO\COMODO Internet Security\cistray.exe"
"C:\Program Files (x86)\APC\APC PowerChute Personal Edition\mainserv.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\Secunia\PSI\PSIA.exe" --start-service
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss eccb626f-8c95-462e-b10f-516976846c55 1
\??\C:\Windows\system32\conhost.exe "977889400831016573-296154252662149114-1169003678447288307-1265733298-1954069373
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "1210937079-459218475-1122178673498593337-16232842451377395764-1245777799-386700384
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
C:\Windows\system32\viakaraokesrv.exe
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2640
"C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe"
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
"D:\Program Files\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files (x86)\ConMet\ConMet.exe"
"C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Secunia\PSI\psi_tray.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
ngservice.exe pipeserver
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\APC\APC PowerChute Personal Edition\apcsystray.exe"
"D:\Program Files\COMODO\COMODO Internet Security\cis.exe" --alertsUI
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3568.0.449305594\1525681800" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,18,39,47 --gpu-vendor-id=0x10de --gpu-device-id=0x1244 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.4752 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group2 pct:10b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/MaterialDesignNTP/Enabled/NewProfileManagement/NewAvatarMenu/OmniboxBundledExperimentV1/StandardR4/PasswordGeneration/Disabled/QUIC/ControlForLargePopulation/RememberCertificateErrorDecisions/Default/SPDY/Spdy4Enabled-default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/group_01/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="3568.1.1205628936\317819146" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="3568.6.851657919\680397597" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --ignored=" --type=renderer " /prefetch:-632637702

"D:\Program Files (x86)\VLC\vlc.exe" --started-from-file "D:\Seriály\Hra o trůny\2. série\03 Co je mrtvé, nemůže nikdy zemřít.avi"
"D:\Denisa\LOL\RADS\system\rads_user_kernel.exe" updateandrun lol_launcher LoLLauncher.exe
LoLLauncher.exe
D:/Denisa/LOL/RADS/projects/lol_patcher/releases/0.0.0.21/deploy/LoLPatcher.exe
D:/Denisa/LOL/RADS/projects/lol_air_client/releases/0.0.1.129/deploy//LolClient.exe -runtime .\ -nodebug META-INF\AIR\application.xml .\ -- 8393
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Program Files (x86)\Windows Live\Mail\wlmail.exe"
"C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe" -Embedding
"C:\Program Files\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:6220 CREDAT:267521 /prefetch:2
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\taskmgr.exe" /4
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-3916526061-3565650022-3371009464-100121_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-3916526061-3565650022-3371009464-100121 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Windows\system32\SearchFilterHost.exe" 0 832 836 844 65536 840
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\8b3usp8o.default

prefs.js - "browser.search.useDBForOrder" - true

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.4.0]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.5]
"Description"=VLC Multimedia Plugin
"Path"=D:\Program Files (x86)\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=D:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.31.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.31.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll [2013-11-28 209504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28 551848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28 212904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2013-11-28 176736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2013-11-28 6126680]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2013-11-28 4438104]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-12-13 2824504]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-12-23 2531472]
"COMODO Internet Security"=D:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2015-01-30 1297624]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-02-02 7404312]
"ConMet"=C:\Program Files (x86)\ConMet\ConMet.exe [2013-12-27 4483584]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2011-06-24 5199984]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-01-27 5227112]
"StartCCC"=C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [2014-12-24 767176]
"NBAgent"=D:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [2015-02-12 1234216]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
APC UPS Status.lnk - C:\Program Files (x86)\APC\APC PowerChute Personal Edition\Display.exe
Secunia PSI Tray.lnk - C:\Program Files (x86)\Secunia\PSI\psi_tray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2015-02-19 13:43:56 ----D---- C:\rsit
2015-02-12 10:17:58 ----D---- C:\AdwCleaner
2015-02-12 10:17:14 ----A---- C:\RSITx64.exe
2015-02-12 10:16:50 ----A---- C:\adwcleaner_4.110.exe
2015-02-12 09:47:48 ----D---- C:\Program Files (x86)\Nero
2015-02-12 09:02:43 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-02-12 09:00:14 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2015-02-12 09:00:14 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-02-12 09:00:14 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-02-12 09:00:14 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2015-02-12 09:00:14 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-02-12 09:00:14 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-02-12 09:00:14 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-02-12 09:00:14 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-02-12 09:00:14 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-02-12 09:00:14 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-02-12 09:00:14 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-02-12 09:00:14 ----A---- C:\Windows\system32\nvumdshimx.dll
2015-02-12 09:00:14 ----A---- C:\Windows\system32\nvopencl.dll
2015-02-12 09:00:14 ----A---- C:\Windows\system32\nvoglv64.dll
2015-02-12 09:00:14 ----A---- C:\Windows\system32\nvoglshim64.dll
2015-02-12 09:00:14 ----A---- C:\Windows\system32\nvinitx.dll
2015-02-12 09:00:14 ----A---- C:\Windows\system32\NvIFR64.dll
2015-02-12 09:00:14 ----A---- C:\Windows\system32\NvFBC64.dll
2015-02-12 09:00:14 ----A---- C:\Windows\system32\nvdispgenco6434752.dll
2015-02-12 09:00:14 ----A---- C:\Windows\system32\nvdispco6434752.dll
2015-02-12 09:00:14 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-02-12 09:00:14 ----A---- C:\Windows\system32\nvcuvid.dll
2015-02-12 09:00:14 ----A---- C:\Windows\system32\nvcuda.dll
2015-02-12 09:00:14 ----A---- C:\Windows\system32\nvcompiler.dll
2015-02-12 09:00:14 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-02-12 08:30:14 ----A---- C:\ProgramData\cis97EB.exe
2015-02-11 10:59:15 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 11.0
2015-02-11 10:58:42 ----D---- C:\Program Files (x86)\Microsoft SDKs
2015-02-11 10:45:01 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-02-11 10:45:01 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-02-11 10:45:01 ----A---- C:\Windows\system32\jscript9.dll
2015-02-11 10:45:00 ----A---- C:\Windows\system32\jscript9diag.dll
2015-02-11 07:55:51 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-02-11 07:55:51 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-02-11 07:55:51 ----A---- C:\Windows\system32\schannel.dll
2015-02-11 07:55:51 ----A---- C:\Windows\system32\kerberos.dll
2015-02-11 07:55:50 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-02-11 07:55:50 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-02-11 07:55:50 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-02-11 07:55:50 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-02-11 07:55:50 ----A---- C:\Windows\system32\wdigest.dll
2015-02-11 07:55:50 ----A---- C:\Windows\system32\TSpkg.dll
2015-02-11 07:55:50 ----A---- C:\Windows\system32\ncrypt.dll
2015-02-11 07:55:50 ----A---- C:\Windows\system32\msv1_0.dll
2015-02-11 07:55:50 ----A---- C:\Windows\system32\credssp.dll
2015-02-11 07:55:49 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-02-11 07:55:38 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-02-11 07:55:38 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-02-11 07:55:38 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-02-11 07:55:38 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-02-11 07:55:38 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-02-11 07:55:38 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-02-11 07:55:37 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-02-11 07:55:37 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-02-11 07:55:37 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-02-11 07:55:37 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-02-11 07:55:37 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-02-11 07:55:37 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 07:55:37 ----A---- C:\Windows\system32\iernonce.dll
2015-02-11 07:55:37 ----A---- C:\Windows\system32\ie4uinit.exe
2015-02-11 07:55:36 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-02-11 07:55:35 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-02-11 07:55:35 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-02-11 07:55:35 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-02-11 07:55:35 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-02-11 07:55:35 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-02-11 07:55:35 ----A---- C:\Windows\system32\urlmon.dll
2015-02-11 07:55:35 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 07:55:35 ----A---- C:\Windows\system32\iedkcs32.dll
2015-02-11 07:55:34 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-02-11 07:55:34 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-02-11 07:55:34 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-02-11 07:55:34 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 07:55:34 ----A---- C:\Windows\system32\msfeeds.dll
2015-02-11 07:55:34 ----A---- C:\Windows\system32\dxtrans.dll
2015-02-11 07:55:33 ----A---- C:\Windows\system32\iesetup.dll
2015-02-11 07:55:33 ----A---- C:\Windows\system32\ieapfltr.dll
2015-02-11 07:55:32 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-02-11 07:55:32 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-02-11 07:55:32 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-02-11 07:55:32 ----A---- C:\Windows\system32\iertutil.dll
2015-02-11 07:55:31 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-02-11 07:55:31 ----A---- C:\Windows\system32\jsproxy.dll
2015-02-11 07:55:31 ----A---- C:\Windows\system32\ieUnatt.exe
2015-02-11 07:55:31 ----A---- C:\Windows\system32\ieui.dll
2015-02-11 07:55:31 ----A---- C:\Windows\system32\dxtmsft.dll
2015-02-11 07:55:30 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-02-11 07:55:30 ----A---- C:\Windows\system32\mshtmled.dll
2015-02-11 07:55:30 ----A---- C:\Windows\system32\ieframe.dll
2015-02-11 07:55:29 ----A---- C:\Windows\system32\wininet.dll
2015-02-11 07:55:29 ----A---- C:\Windows\system32\vbscript.dll
2015-02-11 07:55:29 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-02-11 07:55:28 ----A---- C:\Windows\system32\msrating.dll
2015-02-11 07:55:28 ----A---- C:\Windows\system32\mshtml.dll
2015-02-11 07:55:14 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2015-02-11 07:55:14 ----A---- C:\Windows\system32\oleaut32.dll
2015-02-11 07:55:12 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2015-02-11 07:55:12 ----A---- C:\Windows\system32\scesrv.dll
2015-02-11 07:55:09 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-02-11 07:55:08 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-02-11 07:55:08 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-02-11 07:55:07 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-02-11 07:55:07 ----A---- C:\Windows\system32\srcore.dll
2015-02-11 07:55:07 ----A---- C:\Windows\system32\srclient.dll
2015-02-11 07:55:07 ----A---- C:\Windows\system32\rstrui.exe
2015-02-11 07:54:49 ----A---- C:\Windows\system32\win32k.sys
2015-02-11 07:54:39 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2015-02-11 07:54:39 ----A---- C:\Windows\system32\crypt32.dll
2015-02-11 07:53:47 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-02-11 07:53:47 ----A---- C:\Windows\system32\lsasrv.dll
2015-02-11 07:53:47 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-02-11 07:53:47 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-02-11 07:53:47 ----A---- C:\Windows\system32\drivers\cng.sys
2015-02-11 07:53:47 ----A---- C:\Windows\system32\adtschema.dll
2015-02-11 07:53:46 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-02-11 07:53:46 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-02-11 07:53:46 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-02-11 07:53:46 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-02-11 07:53:46 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-02-11 07:53:46 ----A---- C:\Windows\system32\sspisrv.dll
2015-02-11 07:53:46 ----A---- C:\Windows\system32\sspicli.dll
2015-02-11 07:53:46 ----A---- C:\Windows\system32\secur32.dll
2015-02-11 07:53:46 ----A---- C:\Windows\system32\msobjs.dll
2015-02-11 07:53:46 ----A---- C:\Windows\system32\msaudite.dll
2015-02-11 07:53:46 ----A---- C:\Windows\system32\lsass.exe
2015-02-11 07:53:46 ----A---- C:\Windows\system32\auditpol.exe
2015-02-11 07:53:35 ----A---- C:\Windows\SYSWOW64\wdi.dll
2015-02-11 07:53:35 ----A---- C:\Windows\system32\wdi.dll
2015-02-11 07:53:35 ----A---- C:\Windows\system32\powertracker.dll
2015-02-11 07:53:35 ----A---- C:\Windows\system32\perftrack.dll
2015-02-11 07:53:34 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-02-11 07:53:34 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-02-03 18:21:47 ----HD---- C:\VTRoot
2015-02-03 18:21:44 ----A---- C:\Windows\system32\drivers\fvstore.dat
2015-01-30 12:27:58 ----A---- C:\Windows\system32\drivers\inspect.sys
2015-01-30 12:27:58 ----A---- C:\Windows\system32\drivers\cmdhlp.sys
2015-01-30 12:27:58 ----A---- C:\Windows\system32\drivers\cmdguard.sys
2015-01-30 12:27:58 ----A---- C:\Windows\system32\drivers\cmderd.sys
2015-01-30 12:27:48 ----A---- C:\Windows\system32\cmdcsr.dll
2015-01-30 12:27:46 ----A---- C:\Windows\SYSWOW64\guard32.dll
2015-01-30 12:27:46 ----A---- C:\Windows\system32\guard64.dll
2015-01-30 12:27:42 ----A---- C:\Windows\system32\cmdvrt64.dll
2015-01-30 12:27:40 ----A---- C:\Windows\system32\cmdkbd64.dll
2015-01-30 12:27:36 ----A---- C:\Windows\SYSWOW64\cmdvrt32.dll
2015-01-30 12:27:36 ----A---- C:\Windows\SYSWOW64\cmdkbd32.dll
2015-01-29 15:59:23 ----A---- C:\ProgramData\defraggler_list.txt
2015-01-26 19:27:30 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-01-24 18:00:41 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2015-01-24 18:00:40 ----A---- C:\Windows\system32\nvdispgenco6434725.dll
2015-01-24 18:00:40 ----A---- C:\Windows\system32\nvdispco6434725.dll
2015-01-24 17:15:54 ----D---- C:\ProgramData\Shared Space
2015-01-24 17:15:14 ----D---- C:\ProgramData\Comodo Downloader
2015-01-24 17:14:08 ----D---- C:\ProgramData\Comodo

======List of files/folders modified in the last 1 month======

2015-02-19 13:46:20 ----D---- C:\Program Files\trend micro
2015-02-19 13:46:15 ----D---- C:\ProgramData\ConMet
2015-02-19 13:43:58 ----D---- C:\Windows\temp
2015-02-19 13:40:57 ----D---- C:\Users\Petr\AppData\Roaming\Skype
2015-02-19 10:02:23 ----D---- C:\Windows\system32\config
2015-02-19 09:49:12 ----D---- C:\Users\Petr\AppData\Roaming\ConMet
2015-02-19 09:48:09 ----D---- C:\ProgramData\NVIDIA
2015-02-19 02:52:34 ----D---- C:\Users\Petr\AppData\Roaming\vlc
2015-02-17 21:13:36 ----D---- C:\Windows\System32
2015-02-17 21:13:36 ----D---- C:\Windows\inf
2015-02-17 21:13:36 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-02-17 01:12:31 ----D---- C:\Windows\system32\catroot2
2015-02-12 10:11:21 ----SHD---- C:\Windows\Installer
2015-02-12 10:09:32 ----D---- C:\Users\Petr\AppData\Roaming\Nero
2015-02-12 10:02:40 ----SHD---- C:\System Volume Information
2015-02-12 10:00:17 ----D---- C:\Windows
2015-02-12 09:59:00 ----D---- C:\Windows\SysWOW64
2015-02-12 09:57:39 ----RSD---- C:\Windows\assembly
2015-02-12 09:57:10 ----D---- C:\Windows\winsxs
2015-02-12 09:47:48 ----RD---- C:\Program Files (x86)
2015-02-12 09:02:41 ----D---- C:\Windows\system32\DriverStore
2015-02-12 09:02:00 ----A---- C:\Windows\system32\nvvsvc.exe
2015-02-12 09:01:31 ----D---- C:\Windows\system32\drivers
2015-02-12 09:01:14 ----A---- C:\Windows\system32\nvapi64.dll
2015-02-12 09:01:12 ----A---- C:\Windows\system32\nvwgf2umx.dll
2015-02-12 09:01:10 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2015-02-12 09:01:07 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2015-02-12 08:40:30 ----D---- C:\Windows\system32\Tasks
2015-02-12 08:30:14 ----D---- C:\ProgramData
2015-02-11 20:49:40 ----D---- C:\Users\Petr\AppData\Roaming\TeamViewer
2015-02-11 11:22:06 ----D---- C:\Windows\Microsoft.NET
2015-02-11 10:58:40 ----D---- C:\ProgramData\Package Cache
2015-02-11 10:45:58 ----D---- C:\Windows\SYSWOW64\en-US
2015-02-11 10:45:58 ----D---- C:\Windows\system32\en-US
2015-02-11 08:09:58 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-02-11 08:09:58 ----D---- C:\Windows\system32\cs-CZ
2015-02-11 08:09:58 ----D---- C:\Program Files\Internet Explorer
2015-02-11 08:09:57 ----D---- C:\Windows\tracing
2015-02-11 08:09:57 ----D---- C:\Program Files (x86)\Internet Explorer
2015-02-11 08:09:56 ----D---- C:\Windows\PolicyDefinitions
2015-02-11 08:06:03 ----D---- C:\ProgramData\Microsoft Help
2015-02-11 08:05:02 ----RD---- C:\Users
2015-02-11 08:03:58 ----D---- C:\Windows\system32\MRT
2015-02-11 07:58:28 ----D---- C:\Windows\debug
2015-02-11 07:58:23 ----A---- C:\Windows\system32\MRT.exe
2015-02-09 13:13:30 ----D---- C:\Users\Petr\AppData\Roaming\DAEMON Tools Lite
2015-02-09 09:59:25 ----D---- C:\Program Files (x86)\TeamViewer
2015-02-06 22:07:47 ----D---- C:\Windows\Tasks
2015-02-06 13:43:22 ----D---- C:\Program Files (x86)\Microsoft Office
2015-02-06 13:43:21 ----A---- C:\Windows\win.ini
2015-02-06 13:31:36 ----SD---- C:\Users\Petr\AppData\Roaming\Microsoft
2015-02-05 20:07:04 ----A---- C:\Windows\system32\nvcpl.dll
2015-02-05 20:07:03 ----A---- C:\Windows\system32\nvsvc64.dll
2015-02-05 20:07:00 ----A---- C:\Windows\system32\nvsvcr.dll
2015-02-05 20:07:00 ----A---- C:\Windows\system32\nvshext.dll
2015-02-05 20:06:59 ----A---- C:\Windows\system32\nvmctray.dll
2015-02-05 15:29:10 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-02-04 16:59:49 ----D---- C:\ProgramData\CanonIJPLM
2015-02-02 20:46:03 ----D---- C:\Program Files\CCleaner
2015-01-29 07:49:10 ----D---- C:\Windows\Prefetch
2015-01-29 07:44:52 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-28 10:28:00 ----D---- C:\Program Files (x86)\Common Files
2015-01-28 10:27:28 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2015-01-28 10:27:20 ----D---- C:\Program Files\Java
2015-01-24 16:58:22 ----D---- C:\Program Files
2015-01-24 16:58:08 ----D---- C:\Program Files (x86)\Canon
2015-01-24 12:35:11 ----D---- C:\Windows\system32\NDF

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-12 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-12 267632]
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie64.sys [2010-06-16 16440]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-12 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-22 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-12 436624]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2015-01-30 20184]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\system32\DRIVERS\cmdguard.sys [2015-01-30 792648]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2015-01-30 45880]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-05-07 283064]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2015-01-30 104608]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R2 AODDriver4.3;AODDriver4.3; \??\C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [2014-02-11 59616]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-12 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-12 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-12 116728]
R2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2014-11-12 271752]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2011-08-11 104560]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2014-12-23 195728]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-12-13 19600]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-12-23 38032]
R3 PSI;PSI; C:\Windows\system32\DRIVERS\psi_mf_amd64.sys [2013-12-06 18456]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2010-11-28 44672]
R3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2011-06-14 2159728]
S2 AODDriver4.01;AODDriver4.01; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys []
S3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
S3 NTIOLib_1_0_C;NTIOLib_1_0_C; \??\F:\NTIOLib_X64.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 127488]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 18944]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 161280]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;YunOS USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [2014-12-24 344064]
R2 APC UPS Service;APC UPS Service; C:\Program Files (x86)\APC\APC PowerChute Personal Edition\mainserv.exe [2004-07-21 176241]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-12 50344]
R2 CmdAgent;COMODO Internet Security Helper Service; D:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2015-01-30 7618952]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2014-12-23 1148560]
R2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [2012-03-28 140456]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-12-23 1701520]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-12-23 19823248]
R2 NVSvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-02-12 935056]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2014-06-04 76888]
R2 Secunia PSI Agent;Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [2013-12-06 1229528]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-02-12 410952]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-02-09 5429520]
R2 VIAKaraokeService;VIA Karaoke digital mixer Service; C:\Windows\system32\viakaraokesrv.exe [2011-06-14 27760]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2014-11-12 4012248]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-01-13 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2015-01-13 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-27 116648]
S2 Secunia Update Agent;Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [2013-12-06 662232]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05 267440]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 cmdvirth;COMODO Virtual Service Manager; D:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2015-01-30 2265304]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-27 116648]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-02-11 114688]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-01-27 114800]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-12-27 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-01-13 50864]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-01-13 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-01-13 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-01-13 139944]

-----------------EOF-----------------

Zdravím, nic špatného tam nevidím jen něco stopnem.

Přes Start >> Všechny programy >> Příslušenství >> Spustit >> napiš - services.msc >> Enter. Najdi službu :

Služba Google Update (gupdate)
Služba Google Update (gupdatem)

dvojklikem se otevře karta kde nejprve službu zastav tlačítkem Zastavit u položky Typ spouštění vyber Zakázáno a klik na OK.


V Plánovači úloh zakaž Google Update bude to tam několikrát.


No a teď k problému, máš možnost zkusit zda ten net padá na jiném PC, tabletu, telefonu ?

V mezičase restartuj modem - na minutku či dvě jej odpoj z elektřiny.

Zkontroluj všechny síťové kabely vedoucí do modemu a PC zda jsou v pořádku a docvaknuté.

Jinak Skype je pěkný žrout internetu.

Na jiném pc to nepadá ani na mobilu, skype je sice žrout ale ty data co mi sem tečou to snad ani ten skype nemůže ovlivnit, si myslím.

PredyP píše:.......... skype je sice žrout ale ty data co mi sem tečou to snad ani ten skype nemůže ovlivnit, si myslím.

To by ses divil, máme 30Mb lajnu a když si syn pustí Skype a k tomu WOT nebo jinou onlajnovku - které si tolika dat neukrojí, tak má dcera na noťasu smůlu.

PredyP píše:Na jiném pc to nepadá ani na mobilu, ............

Aha že by nějaká ukrytá mrška, pokud jsou kabely a router v pořádku mrknem hlouběji.


Stáhni a ulož na plochu ComboFix,

spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.


V případě nejasností je ZDE obrázkový návod.

ComboFix 15-02-16.01 - Petr 20.02.2015 15:37:08.1.2 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.8191.6204 [GMT 1:00]
Spuštěný z: c:\users\Petr\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
FW: COMODO Firewall *Disabled* {C8870897-C358-086B-2944-184866CC6D0A}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Comodo Defense+ *Disabled/Updated* {4BDD6856-AF0D-06BD-38AB-8A0FE39860CC}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\cis97EB.exe
c:\users\Petr\AppData\Roaming\Microsoft\Windows\Recent\Skvělá domácí paštika z bůčku a jater recept - Chytrá žena.url
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2015-01-20 do 2015-02-20 )))))))))))))))))))))))))))))))
.
.
2015-02-20 14:48 . 2015-02-20 14:48 -------- d-----w- c:\users\Public\AppData\Local\temp
2015-02-19 12:43 . 2015-02-19 12:44 -------- d-----w- C:\rsit
2015-02-12 09:17 . 2015-02-12 09:19 -------- d-----w- C:\AdwCleaner
2015-02-12 09:17 . 2015-02-12 09:17 1222144 ----a-w- C:\RSITx64.exe
2015-02-12 09:16 . 2015-02-12 09:16 2112512 ----a-w- C:\adwcleaner_4.110.exe
2015-02-12 08:47 . 2015-02-12 08:47 -------- d-----w- c:\program files (x86)\Nero
2015-02-12 08:02 . 2015-02-12 08:02 621384 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2015-02-11 09:59 . 2015-02-11 09:59 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 11.0
2015-02-11 09:58 . 2015-02-11 09:58 -------- d-----w- c:\program files (x86)\Microsoft SDKs
2015-02-11 09:45 . 2015-02-11 09:45 620032 ----a-w- c:\windows\SysWow64\jscript9diag.dll
2015-02-11 09:45 . 2015-02-11 09:45 6041600 ----a-w- c:\windows\system32\jscript9.dll
2015-02-11 09:45 . 2015-02-11 09:45 4300800 ----a-w- c:\windows\SysWow64\jscript9.dll
2015-02-11 09:45 . 2015-02-11 09:45 814080 ----a-w- c:\windows\system32\jscript9diag.dll
2015-02-11 07:05 . 2015-02-11 07:05 -------- d-----w- c:\users\Default
2015-02-11 06:54 . 2015-02-11 06:54 3201536 ----a-w- c:\windows\system32\win32k.sys
2015-02-11 06:54 . 2015-02-11 06:54 1480192 ----a-w- c:\windows\system32\crypt32.dll
2015-02-11 06:54 . 2015-02-11 06:54 1174528 ----a-w- c:\windows\SysWow64\crypt32.dll
2015-02-03 17:21 . 2015-02-03 17:21 -------- d-----w- C:\VTRoot
2015-01-30 11:27 . 2015-01-30 11:27 792648 ----a-w- c:\windows\system32\drivers\cmdguard.sys
2015-01-30 11:27 . 2015-01-30 11:27 45880 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2015-01-30 11:27 . 2015-01-30 11:27 20184 ----a-w- c:\windows\system32\drivers\cmderd.sys
2015-01-30 11:27 . 2015-01-30 11:27 104608 ----a-w- c:\windows\system32\drivers\inspect.sys
2015-01-30 11:27 . 2015-01-30 11:27 40736 ----a-w- c:\windows\system32\cmdcsr.dll
2015-01-30 11:27 . 2015-01-30 11:27 481576 ----a-w- c:\windows\system32\guard64.dll
2015-01-30 11:27 . 2015-01-30 11:27 386768 ----a-w- c:\windows\SysWow64\guard32.dll
2015-01-30 11:27 . 2015-01-30 11:27 354520 ----a-w- c:\windows\system32\cmdvrt64.dll
2015-01-30 11:27 . 2015-01-30 11:27 45784 ----a-w- c:\windows\system32\cmdkbd64.dll
2015-01-30 11:27 . 2015-01-30 11:27 40664 ----a-w- c:\windows\SysWow64\cmdkbd32.dll
2015-01-30 11:27 . 2015-01-30 11:27 286424 ----a-w- c:\windows\SysWow64\cmdvrt32.dll
2015-01-28 09:28 . 2015-01-28 09:28 -------- d-----w- c:\program files (x86)\Common Files\Java
2015-01-26 10:07 . 2015-01-26 10:07 119808 ----a-r- c:\users\Petr\AppData\Roaming\Microsoft\Installer\{CCF298AF-9CE1-4B26-B251-486E98A34789}\icons.exe
2015-01-24 17:00 . 2015-01-24 17:03 1540240 ----a-w- c:\windows\system32\nvhdagenco6420103.dll
2015-01-24 17:00 . 2015-01-24 17:01 1895240 ----a-w- c:\windows\system32\nvdispco6434725.dll
2015-01-24 17:00 . 2015-01-24 17:01 1556808 ----a-w- c:\windows\system32\nvdispgenco6434725.dll
2015-01-24 16:15 . 2015-01-24 16:15 -------- d-----w- c:\programdata\Shared Space
2015-01-24 16:15 . 2015-01-24 16:15 -------- d-----w- c:\programdata\Comodo Downloader
2015-01-24 16:14 . 2015-02-12 07:40 -------- d-----w- c:\programdata\Comodo
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-02-12 08:02 . 2011-03-23 23:53 935056 ----a-w- c:\windows\system32\nvvsvc.exe
2015-02-12 08:01 . 2013-12-27 14:56 3299512 ----a-w- c:\windows\system32\nvapi64.dll
2015-02-12 08:01 . 2013-12-27 14:57 18575880 ----a-w- c:\windows\system32\nvwgf2umx.dll
2015-02-12 08:01 . 2014-12-23 18:20 16017040 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
2015-02-12 08:01 . 2013-10-27 08:12 14119744 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2015-02-11 06:58 . 2013-12-27 15:20 116773704 ----a-w- c:\windows\system32\MRT.exe
2015-02-05 19:07 . 2011-03-23 23:53 6861128 ----a-w- c:\windows\system32\nvcpl.dll
2015-02-05 19:07 . 2011-03-23 23:52 3517584 ----a-w- c:\windows\system32\nvsvc64.dll
2015-02-05 19:07 . 2011-03-23 23:53 62792 ----a-w- c:\windows\system32\nvshext.dll
2015-02-05 19:07 . 2011-03-23 23:53 2558792 ----a-w- c:\windows\system32\nvsvcr.dll
2015-02-05 19:06 . 2011-03-23 23:53 385168 ----a-w- c:\windows\system32\nvmctray.dll
2015-02-05 14:29 . 2013-12-27 19:54 701616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-02-05 14:29 . 2013-12-27 19:54 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-02-05 12:50 . 2013-12-27 16:40 4236870 ----a-w- c:\windows\system32\nvcoproc.bin
2015-01-28 09:27 . 2014-09-10 17:43 111016 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2015-01-13 21:28 . 2015-01-13 21:28 141312 ----a-w- c:\windows\system32\drivers\mrxdav.sys
2014-12-23 18:22 . 2014-12-23 18:20 30536 ----a-w- c:\windows\system32\nvhdap64.dll
2014-12-23 18:22 . 2014-12-23 18:20 195728 ----a-w- c:\windows\system32\drivers\nvhda64v.sys
2014-12-23 18:22 . 2014-12-23 18:20 1540240 ----a-w- c:\windows\system32\nvhdagenco64.dll
2014-12-23 18:21 . 2014-12-23 18:20 1895056 ----a-w- c:\windows\system32\nvdispco6434709.dll
2014-12-23 18:21 . 2014-12-23 18:20 1556624 ----a-w- c:\windows\system32\nvdispgenco6434709.dll
2014-12-23 17:30 . 2014-12-23 17:30 38032 ----a-w- c:\windows\system32\drivers\nvvad64v.sys
2014-12-23 17:30 . 2014-12-23 17:30 32400 ----a-w- c:\windows\SysWow64\nvaudcap32v.dll
2014-12-23 17:30 . 2013-12-27 21:47 35472 ----a-w- c:\windows\system32\nvaudcap64v.dll
2014-12-19 03:06 . 2015-01-13 21:28 210432 ----a-w- c:\windows\system32\profsvc.dll
2014-12-18 09:02 . 2013-06-20 09:42 140456 ----a-w- c:\windows\SysWow64\MicrosoftUpdateCatalogWebControl.dll
2014-12-16 08:21 . 2013-12-27 15:17 275080 ------w- c:\windows\system32\MpSigStub.exe
2014-12-13 00:12 . 2014-06-04 21:19 1291464 ----a-w- c:\windows\SysWow64\nvspbridge.dll
2014-12-13 00:12 . 2013-12-27 21:50 2210040 ----a-w- c:\windows\SysWow64\nvspcap.dll
2014-12-13 00:12 . 2014-06-04 21:19 1715224 ----a-w- c:\windows\system32\nvspbridge64.dll
2014-12-13 00:12 . 2013-12-27 21:50 2824504 ----a-w- c:\windows\system32\nvspcap64.dll
2014-12-11 17:47 . 2015-01-13 21:28 87040 ----a-w- c:\windows\system32\TSWbPrxy.exe
2014-12-06 04:17 . 2015-01-13 21:28 303616 ----a-w- c:\windows\system32\nlasvc.dll
2014-12-06 03:50 . 2015-01-13 21:28 52224 ----a-w- c:\windows\SysWow64\nlaapi.dll
2014-12-06 03:50 . 2015-01-13 21:28 156672 ----a-w- c:\windows\SysWow64\ncsi.dll
2014-12-02 10:26 . 2014-12-23 19:06 11870360 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{6D360C70-5B21-49C3-A531-1493463E8B3C}\mpengine.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2015-02-02 7404312]
"ConMet"="c:\program files (x86)\ConMet\ConMet.exe" [2013-12-27 4483584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"="c:\program files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" [2011-06-24 5199984]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2015-01-27 5227112]
"StartCCC"="c:\program files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2014-12-24 767176]
"NBAgent"="d:\program files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" [2015-02-12 1234216]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
APC UPS Status.lnk - c:\program files (x86)\APC\APC PowerChute Personal Edition\Display.exe [2014-8-14 221295]
Secunia PSI Tray.lnk - c:\program files (x86)\Secunia\PSI\psi_tray.exe [2013-12-6 565464]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
R2 AODDriver4.01;AODDriver4.01;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 Secunia Update Agent;Secunia Update Agent;c:\program files (x86)\Secunia\PSI\sua.exe;c:\program files (x86)\Secunia\PSI\sua.exe [x]
R3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
R3 cmdvirth;COMODO Virtual Service Manager;d:\program files\COMODO\COMODO Internet Security\cmdvirth.exe;d:\program files\COMODO\COMODO Internet Security\cmdvirth.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 NTIOLib_1_0_C;NTIOLib_1_0_C;f:\ntiolib_x64.sys;f:\NTIOLib_X64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys;c:\windows\SYSNATIVE\DRIVERS\ss_bbus.sys [x]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ss_bmdfl.sys [x]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ss_bmdm.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S1 cmderd;COMODO Internet Security Eradication Driver;c:\windows\system32\DRIVERS\cmderd.sys;c:\windows\SYSNATIVE\DRIVERS\cmderd.sys [x]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys;c:\windows\SYSNATIVE\DRIVERS\cmdguard.sys [x]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys;c:\windows\SYSNATIVE\DRIVERS\cmdhlp.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [x]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\AMD\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AODDriver4.3;AODDriver4.3;c:\program files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 GfExperienceService;NVIDIA GeForce Experience Service;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 Secunia PSI Agent;Secunia PSI Agent;c:\program files (x86)\Secunia\PSI\PSIA.exe;c:\program files (x86)\Secunia\PSI\PSIA.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 VBoxAswDrv;VBoxAsw Support Driver;c:\program files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys;c:\program files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [x]
S2 VIAKaraokeService;VIA Karaoke digital mixer Service;c:\windows\system32\viakaraokesrv.exe;c:\windows\SYSNATIVE\viakaraokesrv.exe [x]
S3 AvastVBoxSvc;AvastVBox COM Service;c:\program files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe;c:\program files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf_amd64.sys;c:\windows\SYSNATIVE\DRIVERS\psi_mf_amd64.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys;c:\windows\SYSNATIVE\drivers\viahduaa.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-02-06 21:13 1086280 ----a-w- c:\program files (x86)\Google\Chrome\Application\40.0.2214.111\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2015-02-20 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-27 14:29]
.
2015-02-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-12-27 16:29]
.
2015-02-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-12-27 16:29]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-11-12 17:42 860984 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-12-13 2824504]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-12-23 2531472]
"COMODO Internet Security"="d:\program files\COMODO\COMODO Internet Security\cistray.exe" [2015-01-30 1297624]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.seznam.cz/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~3\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.2
FF - ProfilePath - c:\users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\8b3usp8o.default\
FF - prefs.js: browser.search.selectedEngine -
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-PunkBusterSvc - g:\program files\origin\Battlefield 3\pbsvc.exe
AddRemove-The Elder Scrolls V Skyrim - Legendary Edition_is1 - g:\program files (x86)\Bethesda Softworks\The Elder Scrolls V Skyrim - Legendary Edition\unins000.exe
AddRemove-Thief_is1 - g:\program files\Thief\unins000.exe
AddRemove-{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1 - g:\denisa\WOT\unins000.exe
AddRemove-{959CF39B-F3FA-4A80-AECF-8AF6BA639276}_is1 - g:\games\Assassin's Creed IV - Black Flag\Uninstall\unins000.exe
AddRemove-UnityWebPlayer - c:\users\Petr\AppData\Local\Unity\WebPlayer\Uninstall.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_305_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_305_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.16"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\COMODO\CIS\Installer\Sym_Cam\CIS]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CmdAgent\Mode\Configurations]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,59,00,53,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CmdAgent\Mode\Data]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CmdAgent\Mode\Options]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\Cam]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\Firewall Pro]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,59,00,53,00,\
.
Celkový čas: 2015-02-20 15:54:22
ComboFix-quarantined-files.txt 2015-02-20 14:54
.
Před spuštěním: Volných bajtů: 29 555 179 520
Po spuštění: Volných bajtů: 31 878 914 048
.
- - End Of File - - 678A168DE16EE9D56042C2449D824C2C
A36C5E4F47E84449FF07ED3517B43A31

Skvělá paštika a nějaký nepořádek smazán, zbytek v pořádku.

Přes Start >> Spustit zkopíruj do okna:

ComboFix /Uninstall

a stiskni Enter

To odinstaluje ComboFix a smaže s ním související soubory a složky.


Použij T-Cleaner, který smaže případné zbytky po aplikacích které jsme použili.

Jen před jeho stažením a při použití stopni antivir, protože ho muže detekovat jako vir ale není tomu tak.


Trvale deaktivuj Windows Defender a pak dej vědět jak se PC chová.

Defender jsem měl vypnutý, paštika je výborná dělal jsem ji minulí týden

Uvidíme jak pc bude šlapat kdyby něco tak se zase ozvu.

Moc děkuji za pomoc

Není vůbec zač a