VIRY.CZ

Dobrý den,
pokaždé když kliknu na archív stránky v googlu, vyskoší mi následující text:

"Naše systémy zjistily, že vaše počítačová síť je zdrojem neobvyklého provozu. Zkuste prosím požadavek opakovat později. Důvod:

Dela to jen google plug-in mam neco pres mesic novy system a vsiml jsem si ze mam na disku cca o 20Gb dat vic nez bych mel mit a ktere nemuzu nikde najit.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-02-2015 01
Ran by PeterPan (administrator) on PETERPAN-PC on 25-02-2015 22:21:24
Running from C:\Users\PeterPan\Downloads
Loaded Profiles: PeterPan (Available profiles: PeterPan)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIFBE.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
(BitTorrent, Inc.) C:\Users\PeterPan\AppData\Roaming\uTorrent\utorrent.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
(CM&V Hackbart) C:\Program Files (x86)\DVBViewer\dvbviewer.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12343400 2011-12-30] (Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5595336 2014-10-01] (ESET)
HKLM\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [415680 2012-02-05] (Autodesk, Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-29] (Intel Corporation)
HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-25] ()
HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [322744 2012-01-11] (IVT Corporation)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1921191763-1474042573-3876252202-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-1921191763-1474042573-3876252202-1000\...\Run: [EPSON SX110 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFBE.EXE [223232 2008-09-26] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1921191763-1474042573-3876252202-1000\...\Policies\Explorer: []
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2015-01-18] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [Správa překryvné ikony digitálních podpisů AutoCADu ] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll (Autodesk, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\PeterPan\AppData\Roaming\Mozilla\Firefox\Profiles\fusnt186.default
FF Homepage: http://www.seznam.cz
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Element Hiding Helper for Adblock Plus - C:\Users\PeterPan\AppData\Roaming\Mozilla\Firefox\Profiles\fusnt186.default\Extensions\elemhidehelper@adblockplus.org.xpi [2015-01-18]
FF Extension: Amazon.co.uk ContextMenu - C:\Users\PeterPan\AppData\Roaming\Mozilla\Firefox\Profiles\fusnt186.default\Extensions\jid0-7M7pgxf0LwrvFueY9O460M26Zas@jetpack.xpi [2015-02-03]
FF Extension: Amazon Easy Search - C:\Users\PeterPan\AppData\Roaming\Mozilla\Firefox\Profiles\fusnt186.default\Extensions\{d10d0bf7-f5b5-c8b6-a8b2-2b9879e08c5d}.xpi [2015-02-03]
FF Extension: Adblock Plus - C:\Users\PeterPan\AppData\Roaming\Mozilla\Firefox\Profiles\fusnt186.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-01-18]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [19232 2012-01-31] (Autodesk, Inc.)
R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1191120 2012-01-11] (IVT Corporation)
R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [143936 2012-01-11] (IVT Corporation)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1349576 2014-10-01] (ESET)
R2 EPSON_EB_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE [163840 2007-12-17] (SEIKO EPSON CORPORATION) [File not signed]
R2 EPSON_PM_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE [126464 2007-01-11] (SEIKO EPSON CORPORATION) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [34880 2011-08-12] (Ralink Corporation.)
R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23104 2011-08-12] (Ralink Corporation)
R3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [51264 2011-11-23] (Ralink Corporation)
R3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [47808 2011-11-23] (Ralink Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2015-01-30] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [243440 2014-10-10] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [241368 2014-10-10] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [169280 2014-10-10] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [222280 2014-10-10] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44632 2014-10-10] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [63160 2014-10-10] (ESET)
R3 rtbth; C:\Windows\System32\DRIVERS\rtbth.sys [659520 2011-12-07] (Ralink Technology, Corp.)
R3 TBS6991_64; C:\Windows\System32\DRIVERS\TBS6991_64.sys [1942216 2012-12-19] (http://www.tbsdtv.com)
U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [34880 2011-08-12] (Ralink Corporation.)
S3 WINIO; \??\D:\winio.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-25 22:21 - 2015-02-25 22:21 - 00008977 _____ () C:\Users\PeterPan\Downloads\FRST.txt
2015-02-25 22:20 - 2015-02-25 22:21 - 00000000 ____D () C:\FRST
2015-02-25 22:16 - 2015-02-25 22:16 - 02087936 _____ (Farbar) C:\Users\PeterPan\Downloads\FRST64.exe
2015-02-23 21:58 - 2015-02-23 22:00 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2015-02-23 21:58 - 2010-12-27 09:00 - 00080896 _____ () C:\Windows\SysWOW64\ff_vfw.dll
2015-02-23 21:58 - 2010-12-27 09:00 - 00000038 _____ () C:\Windows\avisplitter.ini
2015-02-23 21:58 - 2010-12-10 17:57 - 00000590 _____ () C:\Windows\SysWOW64\ff_vfw.dll.manifest
2015-02-23 21:58 - 2010-12-07 19:40 - 00183808 _____ () C:\Windows\SysWOW64\xvidvfw.dll
2015-02-23 21:58 - 2010-12-07 19:22 - 00810496 _____ () C:\Windows\SysWOW64\xvidcore.dll
2015-02-23 21:58 - 2010-11-03 20:08 - 00237568 _____ (http://www.helixcommunity.org) C:\Windows\SysWOW64\yv12vfw.dll
2015-02-23 21:58 - 2010-03-15 11:31 - 00165376 _____ () C:\Windows\SysWOW64\unrar.dll
2015-02-23 21:58 - 2010-01-17 17:18 - 00151552 _____ (fccHandler) C:\Windows\SysWOW64\ac3acm.acm
2015-02-23 21:58 - 2006-10-18 20:05 - 00232448 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\SysWOW64\mp3fhg.acm
2015-02-23 20:33 - 2015-02-23 20:33 - 19997652 _____ ( ) C:\Users\PeterPan\Downloads\K-Lite_Codec_Pack_670_Mega.exe
2015-02-15 14:57 - 2015-02-15 14:57 - 00057856 ___SH () C:\Users\PeterPan\Thumbs.db
2015-02-15 14:57 - 2015-02-15 14:57 - 00001168 _____ () C:\Users\PeterPan\Desktop\Record – zástupce.lnk
2015-02-14 22:03 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-02-14 22:03 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-02-14 22:03 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-02-14 22:03 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-02-13 17:12 - 2013-01-30 05:30 - 00000000 ____D () C:\Users\PeterPan\Downloads\v2.2.1
2015-02-13 16:50 - 2015-02-13 16:50 - 00000000 ____D () C:\Users\PeterPan\Downloads\TBS1
2015-02-13 16:50 - 2015-02-13 16:50 - 00000000 ____D () C:\Users\PeterPan\Downloads\TBS
2015-02-13 16:50 - 2015-01-23 14:24 - 00000576 _____ () C:\Users\PeterPan\Downloads\Root error
2015-02-13 16:50 - 2015-01-21 20:54 - 00000586 _____ () C:\Users\PeterPan\Downloads\sudo error
2015-02-11 23:10 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-11 23:10 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-11 23:10 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-02-11 23:10 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-11 07:16 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 07:16 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 07:16 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 07:16 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 07:16 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 07:16 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-11 07:16 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 07:16 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-11 07:15 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 07:15 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-11 07:15 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 07:15 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 07:15 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 07:15 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-11 07:15 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 07:15 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 07:15 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-11 07:15 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 07:15 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 07:15 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-11 07:15 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 07:15 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 07:15 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-11 07:15 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-11 07:15 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 07:15 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-02-11 07:15 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 07:15 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 07:15 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-11 07:15 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-11 07:15 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 07:15 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-02-11 07:15 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-02-11 07:15 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-11 07:15 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 07:15 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-11 07:15 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-02-11 07:15 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-02-11 07:15 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-02-11 07:15 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-02-11 07:15 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 07:15 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 07:15 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 07:15 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-11 07:15 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-11 07:15 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 07:15 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-02-11 07:15 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-02-11 07:15 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-02-11 07:15 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-02-11 07:15 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 07:15 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-11 07:15 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-11 07:15 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-02-11 07:15 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-11 07:15 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 07:15 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 07:15 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-11 07:15 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-11 07:15 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-11 07:15 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-11 07:15 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 07:15 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-11 07:15 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-11 07:15 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-11 07:15 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-11 07:15 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-11 07:15 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-02-11 07:15 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-02-11 07:15 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-11 07:15 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-02-11 07:15 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-02-11 07:15 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-02-11 07:15 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-02-11 07:13 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 07:13 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 07:13 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 07:13 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 07:13 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 07:13 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 07:13 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 07:13 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 07:13 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 07:13 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 07:13 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 07:13 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-02-11 07:13 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-02-11 07:13 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-02-11 07:13 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-11 07:13 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-02-11 07:13 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-11 07:13 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 07:13 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 07:13 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 07:12 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-11 07:12 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-02-11 07:12 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 07:12 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-11 07:12 - 2014-10-04 03:10 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-02-11 07:12 - 2014-10-04 02:42 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-02-11 07:12 - 2014-10-04 02:42 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2015-02-11 07:12 - 2014-07-07 03:07 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-02-11 07:12 - 2014-07-07 03:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-02-11 07:12 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-02-11 07:12 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-02-11 07:11 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 07:11 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-02-11 07:11 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-02-11 07:11 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-02-11 07:11 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-11 07:11 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-11 07:11 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-02-11 07:11 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 07:11 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-11 07:10 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-10 20:58 - 2015-02-10 20:58 - 00155021 _____ () C:\Users\PeterPan\Documents\SKULL - plexi update3.dxf
2015-02-10 20:40 - 2015-02-10 20:50 - 00000238 _____ () C:\Users\PeterPan\Documents\plot.log
2015-02-10 18:02 - 2015-02-10 20:33 - 00000852 _____ () C:\Users\PeterPan\Desktop\plot.log
2015-02-10 17:34 - 2015-02-10 17:34 - 00000934 _____ () C:\Users\Public\Desktop\EPSON Scan.lnk
2015-02-10 17:34 - 2015-02-10 17:34 - 00000000 ____D () C:\Program Files (x86)\epson
2015-02-10 17:34 - 2009-05-01 00:00 - 00128392 _____ (Seiko Epson Corporation) C:\Windows\system32\esdevapp.exe
2015-02-10 17:34 - 2009-05-01 00:00 - 00017408 _____ (SEIKO EPSON CORP.) C:\Windows\system32\esxcdev.dll
2015-02-10 17:34 - 2008-11-17 00:00 - 00459776 _____ (Seiko Epson Corporation) C:\Windows\system32\esxwiaud.dll
2015-02-10 17:33 - 2015-02-10 17:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2015-02-10 17:20 - 2015-02-10 17:33 - 00000000 ____D () C:\ProgramData\EPSON
2015-02-10 17:20 - 2008-08-08 02:09 - 00108032 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_ILMFBE.DLL
2015-02-10 17:20 - 2007-12-07 02:01 - 00081408 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_IBCBFBE.DLL
2015-02-10 17:20 - 2007-04-10 01:06 - 00010752 _____ (SEIKO EPSON CORP.) C:\Windows\system32\E_GCINST.DLL
2015-02-10 15:58 - 2015-02-10 15:58 - 00214724 ____N () C:\Users\PeterPan\Desktop\SKULL - plexi.dxf
2015-02-10 15:58 - 2015-02-10 15:58 - 00160062 ____N () C:\Users\PeterPan\Desktop\SKULL - aluminium.dxf
2015-02-10 15:58 - 2015-02-10 15:58 - 00078394 ____N () C:\Users\PeterPan\Desktop\SKULL - plexi.dwg
2015-02-10 15:58 - 2015-02-10 15:58 - 00074772 ____N () C:\Users\PeterPan\Desktop\PC tuning.dwg
2015-02-07 19:09 - 2015-02-07 21:13 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-02-07 19:09 - 2015-02-07 21:10 - 00000000 ____D () C:\ProgramData\Adobe
2015-02-07 19:09 - 2015-02-07 19:09 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-02-07 13:21 - 2015-02-17 21:50 - 00000000 ____D () C:\Users\PeterPan\AppData\Local\cache
2015-02-07 13:12 - 2012-04-24 11:08 - 01867776 _____ () C:\Users\Default\Documents\xf-adsk2013_x64.exe
2015-02-07 13:12 - 2012-04-24 11:08 - 01867776 _____ () C:\Users\Default User\Documents\xf-adsk2013_x64.exe
2015-02-06 16:51 - 2015-02-06 16:52 - 00078887 _____ () C:\Users\PeterPan\Downloads\PC tuning.dxf
2015-02-01 22:33 - 2015-02-07 13:21 - 00000000 ____D () C:\ProgramData\TEMP
2015-02-01 22:31 - 2015-02-03 15:58 - 00000000 ____D () C:\ProgramData\FLEXnet
2015-02-01 22:19 - 2015-02-01 22:19 - 00002069 _____ () C:\Users\Public\Desktop\Inventor Fusion 2013.lnk
2015-02-01 22:18 - 2015-02-17 22:22 - 00000000 ____D () C:\Users\PeterPan\AppData\Local\Autodesk
2015-02-01 22:18 - 2015-02-01 22:18 - 00002194 _____ () C:\Users\Public\Desktop\AutoCAD Mechanical 2013 - Čeština (Czech).lnk
2015-02-01 22:18 - 2015-02-01 22:18 - 00000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2015-02-01 22:18 - 2015-02-01 22:18 - 00000000 ____D () C:\Users\PeterPan\Documents\Inventor Server SDK ACAD 2013
2015-02-01 22:18 - 2015-02-01 22:18 - 00000000 ____D () C:\Program Files\Common Files\Macrovision Shared
2015-02-01 22:17 - 2015-02-01 22:19 - 00000000 ____D () C:\Program Files\Common Files\Autodesk Shared
2015-02-01 22:17 - 2015-02-01 22:19 - 00000000 ____D () C:\Program Files\Autodesk
2015-02-01 22:17 - 2015-02-01 22:17 - 00000000 ____D () C:\Users\Public\Documents\Autodesk
2015-02-01 22:16 - 2015-02-01 22:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2015-02-01 22:16 - 2015-02-01 22:16 - 00000000 ____D () C:\Program Files (x86)\Autodesk
2015-02-01 21:35 - 2015-02-17 22:21 - 00000000 ____D () C:\Users\PeterPan\AppData\Roaming\Autodesk
2015-02-01 21:35 - 2015-02-17 22:21 - 00000000 ____D () C:\ProgramData\Autodesk
2015-02-01 21:29 - 2015-02-01 21:29 - 00000000 ____D () C:\Autodesk
2015-02-01 15:46 - 2015-02-04 22:07 - 00000000 ____D () C:\Users\PeterPan\Desktop\Nová složka
2015-02-01 03:00 - 2015-02-01 03:00 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2015-02-01 03:00 - 2015-02-01 03:00 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2015-01-31 23:16 - 2015-02-01 12:44 - 00000000 ____D () C:\Users\PeterPan\Downloads\AutoCAD Mechanical 2013
2015-01-30 17:00 - 2015-02-01 03:00 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2015-01-30 17:00 - 2015-01-30 17:00 - 00000000 ____D () C:\Windows\PCHEALTH
2015-01-30 17:00 - 2015-01-30 17:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-01-30 17:00 - 2015-01-30 17:00 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio
2015-01-30 16:58 - 2015-02-14 22:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2015-01-30 16:58 - 2015-02-11 22:34 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-01-30 16:58 - 2015-01-30 16:58 - 00000000 __RHD () C:\MSOCache
2015-01-30 16:58 - 2015-01-30 16:58 - 00000000 ____D () C:\Users\PeterPan\AppData\Local\Microsoft Help
2015-01-30 16:58 - 2015-01-30 16:58 - 00000000 ____D () C:\Program Files\Microsoft Office
2015-01-30 16:58 - 2015-01-30 16:58 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8
2015-01-30 16:56 - 2015-01-30 16:57 - 00000000 ____D () C:\Users\PeterPan\AppData\Roaming\DAEMON Tools Lite
2015-01-30 16:56 - 2015-01-30 16:56 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2015-01-30 16:56 - 2015-01-30 16:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2015-01-30 16:56 - 2015-01-30 16:56 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2015-01-30 16:55 - 2015-01-30 16:57 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2015-01-29 21:55 - 2015-01-29 22:00 - 00000000 ____D () C:\Users\PeterPan\Downloads\Microsoft Office 2007 CZ full
2015-01-28 20:40 - 2015-02-25 21:34 - 00000000 ____D () C:\Users\PeterPan\Downloads\Pcb
2015-01-26 18:58 - 2015-02-25 20:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-25 22:18 - 2015-01-18 21:14 - 00000000 ____D () C:\Users\PeterPan\AppData\Roaming\uTorrent
2015-02-25 22:12 - 2015-01-23 19:37 - 00000000 ____D () C:\Users\PeterPan\AppData\Roaming\vlc
2015-02-25 22:12 - 2015-01-22 20:16 - 00000000 ____D () C:\Users\PeterPan\Record
2015-02-25 21:40 - 2015-01-18 13:39 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-25 16:07 - 2009-07-14 05:51 - 00045824 _____ () C:\Windows\setupact.log
2015-02-25 05:49 - 2009-07-14 05:45 - 00028352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-25 05:49 - 2009-07-14 05:45 - 00028352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-25 05:46 - 2009-07-14 16:18 - 00668362 _____ () C:\Windows\system32\perfh005.dat
2015-02-25 05:46 - 2009-07-14 16:18 - 00141022 _____ () C:\Windows\system32\perfc005.dat
2015-02-25 05:46 - 2009-07-14 06:13 - 01582494 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-25 05:43 - 2015-01-17 22:33 - 02020182 _____ () C:\Windows\WindowsUpdate.log
2015-02-25 05:42 - 2015-01-17 23:37 - 00004265 _____ () C:\Windows\SysWOW64\LOCALSERVICE.INI
2015-02-25 05:42 - 2015-01-17 23:37 - 00000043 _____ () C:\Windows\SysWOW64\LOCALDEVICE.INI
2015-02-25 05:42 - 2012-01-12 15:59 - 00000711 _____ () C:\Windows\SysWOW64\bscs.ini
2015-02-25 05:42 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-15 19:36 - 2015-01-23 19:37 - 00000000 ____D () C:\Users\PeterPan\AppData\Roaming\dvdcss
2015-02-15 14:57 - 2015-01-17 22:56 - 00000000 ____D () C:\Users\PeterPan
2015-02-14 22:09 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-02-13 11:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-02-11 23:06 - 2015-01-18 01:06 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-11 23:06 - 2015-01-18 01:06 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-11 23:06 - 2009-07-14 05:45 - 00491280 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-11 23:06 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-02-11 22:33 - 2015-01-18 01:03 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-11 22:32 - 2015-01-18 01:03 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-08 19:40 - 2015-01-18 13:39 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-08 13:47 - 2015-01-18 13:39 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-08 13:47 - 2015-01-18 13:39 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-08 13:47 - 2015-01-18 13:39 - 00000000 ____D () C:\Users\PeterPan\AppData\Local\Adobe
2015-02-07 21:09 - 2015-01-18 13:41 - 00000000 ____D () C:\Users\PeterPan\AppData\Roaming\Adobe
2015-02-01 22:31 - 2015-01-17 23:33 - 00141312 _____ () C:\Users\PeterPan\AppData\Local\GDIPFONTCACHEV1.DAT
2015-02-01 22:16 - 2015-01-22 20:39 - 00010448 _____ () C:\Windows\DirectX.log
2015-02-01 22:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-02-01 08:48 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini
2015-01-31 07:24 - 2015-01-18 22:07 - 00052292 _____ () C:\Windows\PFRO.log
2015-01-30 17:00 - 2009-07-14 16:37 - 00000000 ____D () C:\Windows\ShellNew
2015-01-30 17:00 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2015-01-28 05:50 - 2015-01-18 12:30 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

==================== Files in the root of some directories =======

2015-01-20 18:47 - 2015-01-22 22:07 - 0000626 _____ () C:\Users\PeterPan\AppData\Roaming\All CPU MeterV3_Settings.ini
2015-02-01 22:18 - 2015-02-01 22:18 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

Some content of TEMP:
====================
C:\Users\PeterPan\AppData\Local\Temp\AcDeltree.exe
C:\Users\PeterPan\AppData\Local\Temp\BingBarSetup-Partner.exe
C:\Users\PeterPan\AppData\Local\Temp\InstHelper.exe
C:\Users\PeterPan\AppData\Local\Temp\ose00000.exe
C:\Users\PeterPan\AppData\Local\Temp\Uninstall.exe
C:\Users\PeterPan\AppData\Local\Temp\_is1D5F.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-02-23 09:54

==================== End Of Log ============================

Zdravím, to že tam máš o 20 GB dat více není nic zvláštního, pravděpodobně se jedná o body obnovy.

Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém

Stáhni a ulož na plochu AdwCleaner,

ukonči všechny programy včetně prohlížeče a dvojklikem jej spusť,

objeví se okno kde vlevo nahoře klikni na Scan.

Po dokončení skenu klikni na Clean,

proběhne restart PC kdy dojde ke smazání nepořádku.

Po té mi sem zkopíruj Report.

Nakonec použij Mbam z mého podpisu a dej mi sem z něj log, předem nic nemazat !

# AdwCleaner v4.111 - Logfile created 26/02/2015 at 22:57:06
# Updated 18/02/2015 by Xplode
# Database : 2015-02-18.3 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : PeterPan - PETERPAN-PC
# Running from : C:\Users\PeterPan\Downloads\adwcleaner_4.111.exe
# Option : Cleaning

***** [ Services ] *****

***** [ Files / Folders ] *****

***** [ Scheduled tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17631

-\\ Mozilla Firefox v36.0 (x86 cs)

*************************

AdwCleaner[R0].txt - [763 bytes] - [26/02/2015 22:18:01]
AdwCleaner[S0].txt - [691 bytes] - [26/02/2015 22:57:06]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [749 bytes] ##########

Ještě bych prosil ten Mbam.

log mi nevyskoci, nemuzu ho najit. vse zelene

Vážený kolega promine můj vstup

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 značí, že jsi připojený přes místní síť
kde může být dalších 250 účastníků a některý zavirovaný vytěžuje nepřiměřeně síť
nedokázal to vyřešit ani můj provider - časem to odezní

MBAM má v horní liště "Složka protokolů" kde bys log mohl objevit

cernohous13 na wi-fi na kostele je napojena cela vesnice. Pak je antena pro nasich 6 bytu, prevodnik z 5Ghz je switch pro 6 bytu, kazdy ukoncen routerem. ted uz to kaptchu nechce. tak nevim.

Malwarebytes Anti-Malware
http://www.malwarebytes.org

Scan Date: 1.3.2015
Scan Time: 9:04:57
Logfile: mbam.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2015.03.01.01
Rootkit Database: v2015.02.25.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: PeterPan

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 344210
Time Elapsed: 3 min, 23 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)

(end)

cernohous13 píše:časem to odezní

jamesbond007.cz píše: ted uz to kaptchu nechce. tak nevim.

Pro jistotu ještě mrknem hlouběji do systému.

Stáhni a ulož na plochu ComboFix,

spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.

V případě nejasností je ZDE obrázkový návod.

ComboFix 15-03-01.01 - PeterPan 04.03.2015 22:18:35.1.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.8089.4077 [GMT 1:00]
Spuštěný z: c:\users\PeterPan\Downloads\ComboFix.exe
AV: ESET Smart Security 8.0 *Enabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
FW: ESET Personální firewall *Enabled* {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
SP: ESET Smart Security 8.0 *Enabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý
.
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\msdownld.tmp
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2015-02-04 do 2015-03-04 )))))))))))))))))))))))))))))))
.
.
2015-03-04 21:21 . 2015-03-04 21:21 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-03-03 05:57 . 2015-01-29 09:07 11910896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{792CCB76-AB81-4408-9035-231C84B18EB5}\mpengine.dll
2015-02-26 22:00 . 2015-03-04 21:08 129752 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-02-26 22:00 . 2015-02-26 22:00 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2015-02-26 22:00 . 2015-02-26 22:00 -------- d-----w- c:\programdata\Malwarebytes
2015-02-26 22:00 . 2014-11-21 05:14 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2015-02-26 22:00 . 2014-11-21 05:14 93400 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-02-26 22:00 . 2014-11-21 05:14 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-02-26 21:17 . 2015-02-26 21:57 -------- d-----w- C:\AdwCleaner
2015-02-26 18:30 . 2015-02-26 18:30 -------- d-----w- c:\program files\CCleaner
2015-02-25 21:20 . 2015-02-25 21:21 -------- d-----w- C:\FRST
2015-02-23 20:58 . 2010-03-15 10:31 165376 ----a-w- c:\windows\SysWow64\unrar.dll
2015-02-23 20:58 . 2010-11-03 19:08 237568 ----a-w- c:\windows\SysWow64\yv12vfw.dll
2015-02-23 20:58 . 2010-01-17 16:18 151552 ----a-w- c:\windows\SysWow64\ac3acm.acm
2015-02-23 20:58 . 2006-10-18 19:05 232448 ----a-w- c:\windows\SysWow64\mp3fhg.acm
2015-02-23 20:58 . 2010-12-27 08:00 80896 ----a-w- c:\windows\SysWow64\ff_vfw.dll
2015-02-23 20:58 . 2010-12-07 18:40 183808 ----a-w- c:\windows\SysWow64\xvidvfw.dll
2015-02-23 20:58 . 2010-12-07 18:22 810496 ----a-w- c:\windows\SysWow64\xvidcore.dll
2015-02-23 20:58 . 2015-02-23 21:00 -------- d-----w- c:\program files (x86)\K-Lite Codec Pack
2015-02-14 21:03 . 2015-01-09 03:14 91136 ----a-w- c:\windows\system32\wdi.dll
2015-02-14 21:03 . 2015-01-09 03:14 950272 ----a-w- c:\windows\system32\perftrack.dll
2015-02-14 21:03 . 2015-01-09 03:14 29696 ----a-w- c:\windows\system32\powertracker.dll
2015-02-14 21:03 . 2015-01-09 02:48 76800 ----a-w- c:\windows\SysWow64\wdi.dll
2015-02-11 22:10 . 2015-01-23 04:42 814080 ----a-w- c:\windows\system32\jscript9diag.dll
2015-02-11 22:10 . 2015-01-23 04:41 6041600 ----a-w- c:\windows\system32\jscript9.dll
2015-02-11 22:10 . 2015-01-23 03:43 620032 ----a-w- c:\windows\SysWow64\jscript9diag.dll
2015-02-11 22:10 . 2015-01-23 03:17 4300800 ----a-w- c:\windows\SysWow64\jscript9.dll
2015-02-11 06:16 . 2015-02-04 03:16 609280 ----a-w- c:\windows\system32\generaltel.dll
2015-02-11 06:16 . 2015-02-04 03:16 762368 ----a-w- c:\windows\system32\invagent.dll
2015-02-11 06:16 . 2015-02-04 03:16 414720 ----a-w- c:\windows\system32\devinv.dll
2015-02-11 06:16 . 2015-02-04 03:16 894976 ----a-w- c:\windows\system32\appraiser.dll
2015-02-11 06:16 . 2015-02-04 03:16 227328 ----a-w- c:\windows\system32\aepdu.dll
2015-02-11 06:16 . 2015-02-04 03:16 192000 ----a-w- c:\windows\system32\aepic.dll
2015-02-11 06:16 . 2015-02-04 03:13 1098752 ----a-w- c:\windows\system32\aeinv.dll
2015-02-11 06:16 . 2015-01-27 23:36 1239720 ----a-w- c:\windows\system32\aitstatic.exe
2015-02-11 06:13 . 2015-01-13 03:10 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2015-02-11 06:12 . 2014-12-12 05:31 1480192 ----a-w- c:\windows\system32\crypt32.dll
2015-02-11 06:12 . 2014-12-12 05:07 1174528 ----a-w- c:\windows\SysWow64\crypt32.dll
2015-02-11 06:12 . 2014-07-07 02:07 229376 ----a-w- c:\windows\system32\wintrust.dll
2015-02-11 06:12 . 2014-07-07 02:06 187904 ----a-w- c:\windows\system32\cryptsvc.dll
2015-02-11 06:12 . 2014-07-07 01:40 179200 ----a-w- c:\windows\SysWow64\wintrust.dll
2015-02-11 06:12 . 2014-07-07 01:40 143872 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2015-02-11 06:12 . 2014-11-26 03:53 861696 ----a-w- c:\windows\system32\oleaut32.dll
2015-02-11 06:12 . 2014-11-26 03:32 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
2015-02-11 06:12 . 2014-10-04 02:10 3722752 ----a-w- c:\windows\system32\mstscax.dll
2015-02-11 06:12 . 2014-10-04 01:42 3221504 ----a-w- c:\windows\SysWow64\mstscax.dll
2015-02-11 06:12 . 2014-10-04 01:42 131584 ----a-w- c:\windows\SysWow64\aaclient.dll
2015-02-11 06:11 . 2014-12-08 03:09 406528 ----a-w- c:\windows\system32\scesrv.dll
2015-02-11 06:11 . 2014-12-08 02:46 308224 ----a-w- c:\windows\SysWow64\scesrv.dll
2015-02-11 06:11 . 2015-01-14 06:09 5554112 ----a-w- c:\windows\system32\ntoskrnl.exe
2015-02-11 06:11 . 2015-01-14 05:44 3972544 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2015-02-11 06:11 . 2015-01-14 05:44 3917760 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2015-02-11 06:11 . 2015-01-14 06:05 503808 ----a-w- c:\windows\system32\srcore.dll
2015-02-11 06:11 . 2015-01-14 06:05 50176 ----a-w- c:\windows\system32\srclient.dll
2015-02-11 06:11 . 2015-01-14 06:04 296960 ----a-w- c:\windows\system32\rstrui.exe
2015-02-11 06:11 . 2015-01-14 05:41 43008 ----a-w- c:\windows\SysWow64\srclient.dll
2015-02-11 06:10 . 2015-01-09 02:03 3201536 ----a-w- c:\windows\system32\win32k.sys
2015-02-10 16:34 . 2009-04-30 23:00 17408 ----a-w- c:\windows\system32\esxcdev.dll
2015-02-10 16:34 . 2009-04-30 23:00 128392 ----a-w- c:\windows\system32\esdevapp.exe
2015-02-10 16:34 . 2008-11-16 23:00 459776 ----a-w- c:\windows\system32\esxwiaud.dll
2015-02-10 16:34 . 2015-02-10 16:34 -------- d-----w- c:\program files (x86)\epson
2015-02-10 16:20 . 2008-08-08 01:09 108032 ----a-w- c:\windows\system32\E_ILMFBE.DLL
2015-02-10 16:20 . 2007-12-07 01:01 81408 ----a-w- c:\windows\system32\E_IBCBFBE.DLL
2015-02-10 16:20 . 2007-04-10 00:06 10752 ----a-w- c:\windows\system32\E_GCINST.DLL
2015-02-10 16:20 . 2015-02-10 16:33 -------- d-----w- c:\programdata\EPSON
2015-02-07 18:09 . 2015-02-07 18:09 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2015-02-07 12:21 . 2015-03-01 07:17 -------- d-----w- c:\users\PeterPan\AppData\Local\cache
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-02-11 21:32 . 2015-01-18 00:03 116773704 ----a-w- c:\windows\system32\MRT.exe
2015-02-08 12:47 . 2015-01-18 12:39 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-02-08 12:47 . 2015-01-18 12:39 701616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-01-30 15:56 . 2015-01-30 15:56 283064 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2015-01-18 20:26 . 2015-01-18 20:26 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2015-01-18 20:26 . 2015-01-18 20:26 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2015-01-18 20:26 . 2015-01-18 20:26 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2015-01-18 20:26 . 2015-01-18 20:26 235008 ----a-w- c:\windows\system32\elshyph.dll
2015-01-18 20:26 . 2015-01-18 20:26 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2015-01-18 20:26 . 2015-01-18 20:26 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2015-01-18 20:26 . 2015-01-18 20:26 337408 ----a-w- c:\windows\SysWow64\html.iec
2015-01-18 20:26 . 2015-01-18 20:26 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2015-01-18 20:26 . 2015-01-18 20:26 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2015-01-18 20:26 . 2015-01-18 20:26 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2015-01-18 20:26 . 2015-01-18 20:26 942592 ----a-w- c:\windows\system32\jsIntl.dll
2015-01-18 20:26 . 2015-01-18 20:26 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2015-01-18 20:26 . 2015-01-18 20:26 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2015-01-18 20:26 . 2015-01-18 20:26 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2015-01-18 20:26 . 2015-01-18 20:26 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2015-01-18 20:26 . 2015-01-18 20:26 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2015-01-18 20:26 . 2015-01-18 20:26 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2015-01-18 20:26 . 2015-01-18 20:26 247808 ----a-w- c:\windows\system32\msls31.dll
2015-01-18 20:26 . 2015-01-18 20:26 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2015-01-18 20:26 . 2015-01-18 20:26 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2015-01-18 20:26 . 2015-01-18 20:26 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2015-01-18 20:26 . 2015-01-18 20:26 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2015-01-18 20:26 . 2015-01-18 20:26 81408 ----a-w- c:\windows\system32\icardie.dll
2015-01-18 20:26 . 2015-01-18 20:26 77312 ----a-w- c:\windows\system32\tdc.ocx
2015-01-18 20:26 . 2015-01-18 20:26 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2015-01-18 20:26 . 2015-01-18 20:26 48640 ----a-w- c:\windows\system32\mshtmler.dll
2015-01-18 20:26 . 2015-01-18 20:26 413696 ----a-w- c:\windows\system32\html.iec
2015-01-18 20:26 . 2015-01-18 20:26 30208 ----a-w- c:\windows\system32\licmgr10.dll
2015-01-18 20:26 . 2015-01-18 20:26 243200 ----a-w- c:\windows\system32\webcheck.dll
2015-01-18 20:26 . 2015-01-18 20:26 235520 ----a-w- c:\windows\system32\url.dll
2015-01-18 20:26 . 2015-01-18 20:26 167424 ----a-w- c:\windows\system32\iexpress.exe
2015-01-18 20:26 . 2015-01-18 20:26 143872 ----a-w- c:\windows\system32\wextract.exe
2015-01-18 20:26 . 2015-01-18 20:26 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2015-01-18 20:26 . 2015-01-18 20:26 105984 ----a-w- c:\windows\system32\iesysprep.dll
2015-01-18 20:26 . 2015-01-18 20:26 101376 ----a-w- c:\windows\system32\inseng.dll
2015-01-18 20:26 . 2015-01-18 20:26 774144 ----a-w- c:\windows\system32\jscript.dll
2015-01-18 20:26 . 2015-01-18 20:26 62464 ----a-w- c:\windows\system32\pngfilt.dll
2015-01-18 20:26 . 2015-01-18 20:26 48128 ----a-w- c:\windows\system32\imgutil.dll
2015-01-18 20:26 . 2015-01-18 20:26 147968 ----a-w- c:\windows\system32\occache.dll
2015-01-18 20:26 . 2015-01-18 20:26 13824 ----a-w- c:\windows\system32\mshta.exe
2015-01-18 20:26 . 2015-01-18 20:26 135680 ----a-w- c:\windows\system32\iepeers.dll
2015-01-18 20:22 . 2015-01-18 20:22 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 522752 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2015-01-18 20:22 . 2015-01-18 20:22 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 364544 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2015-01-18 20:22 . 2015-01-18 20:22 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 2560 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 1682432 ----a-w- c:\windows\system32\XpsPrint.dll
2015-01-18 20:22 . 2015-01-18 20:22 1158144 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2015-01-18 20:22 . 2015-01-18 20:22 10752 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 10752 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 1247744 ----a-w- c:\windows\SysWow64\DWrite.dll
2015-01-18 20:22 . 2015-01-18 20:22 648192 ----a-w- c:\windows\system32\d3d10level9.dll
2015-01-18 20:22 . 2015-01-18 20:22 604160 ----a-w- c:\windows\SysWow64\d3d10level9.dll
2015-01-18 20:22 . 2015-01-18 20:22 363008 ----a-w- c:\windows\system32\dxgi.dll
2015-01-18 20:22 . 2015-01-18 20:22 333312 ----a-w- c:\windows\system32\d3d10_1core.dll
2015-01-18 20:22 . 2015-01-18 20:22 296960 ----a-w- c:\windows\system32\d3d10core.dll
2015-01-18 20:22 . 2015-01-18 20:22 293376 ----a-w- c:\windows\SysWow64\dxgi.dll
2015-01-18 20:22 . 2015-01-18 20:22 249856 ----a-w- c:\windows\SysWow64\d3d10_1core.dll
2015-01-18 20:22 . 2015-01-18 20:22 245248 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2015-01-18 20:22 . 2015-01-18 20:22 221184 ----a-w- c:\windows\system32\UIAnimation.dll
2015-01-18 20:22 . 2015-01-18 20:22 220160 ----a-w- c:\windows\SysWow64\d3d10core.dll
2015-01-18 20:22 . 2015-01-18 20:22 207872 ----a-w- c:\windows\SysWow64\WindowsCodecsExt.dll
2015-01-18 20:22 . 2015-01-18 20:22 194560 ----a-w- c:\windows\system32\d3d10_1.dll
2015-01-18 20:22 . 2015-01-18 20:22 187392 ----a-w- c:\windows\SysWow64\UIAnimation.dll
2015-01-18 20:22 . 2015-01-18 20:22 1643520 ----a-w- c:\windows\system32\DWrite.dll
2015-01-18 20:22 . 2015-01-18 20:22 161792 ----a-w- c:\windows\SysWow64\d3d10_1.dll
2015-01-18 20:22 . 2015-01-18 20:22 1238528 ----a-w- c:\windows\system32\d3d10.dll
2015-01-18 20:22 . 2015-01-18 20:22 1175552 ----a-w- c:\windows\system32\FntCache.dll
2015-01-18 20:22 . 2015-01-18 20:22 1080832 ----a-w- c:\windows\SysWow64\d3d10.dll
2015-01-18 12:46 . 2015-01-18 12:46 715038 ----a-w- c:\windows\unins000.exe
2015-01-18 11:28 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2015-01-18 11:28 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2014-12-22 23:41 . 2015-01-17 22:55 298120 ------w- c:\windows\system32\MpSigStub.exe
2014-12-19 03:06 . 2015-01-18 19:36 210432 ----a-w- c:\windows\system32\profsvc.dll
2014-12-19 01:46 . 2015-01-18 19:36 141312 ----a-w- c:\windows\system32\drivers\mrxdav.sys
2014-12-11 17:47 . 2015-01-18 19:37 52736 ----a-w- c:\windows\system32\TSWbPrxy.exe
2014-12-06 04:17 . 2015-01-18 19:36 303616 ----a-w- c:\windows\system32\nlasvc.dll
2014-12-06 03:50 . 2015-01-18 19:36 52224 ----a-w- c:\windows\SysWow64\nlaapi.dll
2014-12-06 03:50 . 2015-01-18 19:36 156672 ----a-w- c:\windows\SysWow64\ncsi.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2014-03-04 3696912]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2015-02-19 7416088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-01-29 291608]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-25 36864]
"BtTray"="c:\program files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe" [2012-01-11 322744]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-12-19 1022152]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer3"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x]
S0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x]
S2 Autodesk Content Service;Autodesk Content Service;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
S3 BtAudioBusSrv;Ralink Bluetooth Audio Bus Service;c:\windows\system32\Drivers\BtAudioBus.sys;c:\windows\SYSNATIVE\Drivers\BtAudioBus.sys [x]
S3 BthL2caScoIfSrv;Bluetooth Profile Interface Driver Service;c:\windows\system32\Drivers\BtL2caScoIf.sys;c:\windows\SYSNATIVE\Drivers\BtL2caScoIf.sys [x]
S3 btUrbFilterDrv;IVT URB Bluetooth Filter Driver Service;c:\windows\system32\Drivers\IvtUrbBtFlt.sys;c:\windows\SYSNATIVE\Drivers\IvtUrbBtFlt.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
S3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
S3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
S3 rtbth;RTBTH Bluetooth Device Driver;c:\windows\system32\DRIVERS\rtbth.sys;c:\windows\SYSNATIVE\DRIVERS\rtbth.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 TBS6991_64;TBS6991 Dual DVBS/S2 service;c:\windows\system32\DRIVERS\TBS6991_64.sys;c:\windows\SYSNATIVE\DRIVERS\TBS6991_64.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - MBAMSWISSARMY
.
Obsah adresáře 'Naplánované úlohy'
.
2015-03-04 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-18 12:47]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-12-30 12343400]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-01-14 170264]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-01-14 398104]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-01-14 440600]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2014-10-01 5595336]
"Autodesk Sync"="c:\program files\Autodesk\Autodesk Sync\AdSync.exe" [2012-02-05 415680]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\PeterPan\AppData\Roaming\Mozilla\Firefox\Profiles\fusnt186.default\
FF - prefs.js: browser.startup.homepage - www.seznam.cz
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_305_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_305_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.16"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2015-03-04 22:22:44
ComboFix-quarantined-files.txt 2015-03-04 21:22
.
Před spuštěním: Volných bajtů: 32 784 183 296
Po spuštění: Volných bajtů: 32 389 070 848
.
- - End Of File - - 58EA12C4081EDD61EE57E8855BDC64C5
A36C5E4F47E84449FF07ED3517B43A31

Jen doladíme

Pokud jsi tak ještě neučinil, přesuň Combofix na plochu

otevři si Poznámkový blok

do něj zkopíruj skript z následujícího okna:

Kód: Vybrat vše

RegLock:: 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

ulož Tebou vytvořený TXT soubor jako CFScript.txt na plochu,

po uložení uchop vytvořený skript levým myšítkem a přesuň ho nad ikonu Combofixu, kde ho upustíš:

Obrázek

Po aplikaci na Tebe vypadne další log, zkopíruj ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou,

v tom případě znovu restartuj a přitom mačkej F8 poté zvol Poslední známou funkční konfiguraci

ComboFix 15-03-01.01 - PeterPan 05.03.2015 17:50:27.2.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.8089.6077 [GMT 1:00]
Spuštěný z: c:\users\PeterPan\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\PeterPan\Desktop\CFScript.txt
AV: ESET Smart Security 8.0 *Enabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
FW: ESET Personální firewall *Enabled* {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
SP: ESET Smart Security 8.0 *Enabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
* Rezidentní štít AV je zapnutý
.
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2015-02-05 do 2015-03-05 )))))))))))))))))))))))))))))))
.
.
2015-03-05 16:53 . 2015-03-05 16:53 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-02-26 22:00 . 2015-02-26 22:00 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2015-02-26 22:00 . 2015-02-26 22:00 -------- d-----w- c:\programdata\Malwarebytes
2015-02-26 22:00 . 2014-11-21 05:14 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2015-02-26 22:00 . 2014-11-21 05:14 93400 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-02-26 22:00 . 2014-11-21 05:14 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-02-26 21:17 . 2015-02-26 21:57 -------- d-----w- C:\AdwCleaner
2015-02-26 18:30 . 2015-02-26 18:30 -------- d-----w- c:\program files\CCleaner
2015-02-25 21:20 . 2015-02-25 21:21 -------- d-----w- C:\FRST
2015-02-23 20:58 . 2010-03-15 10:31 165376 ----a-w- c:\windows\SysWow64\unrar.dll
2015-02-23 20:58 . 2010-11-03 19:08 237568 ----a-w- c:\windows\SysWow64\yv12vfw.dll
2015-02-23 20:58 . 2010-01-17 16:18 151552 ----a-w- c:\windows\SysWow64\ac3acm.acm
2015-02-23 20:58 . 2006-10-18 19:05 232448 ----a-w- c:\windows\SysWow64\mp3fhg.acm
2015-02-23 20:58 . 2010-12-27 08:00 80896 ----a-w- c:\windows\SysWow64\ff_vfw.dll
2015-02-23 20:58 . 2010-12-07 18:40 183808 ----a-w- c:\windows\SysWow64\xvidvfw.dll
2015-02-23 20:58 . 2010-12-07 18:22 810496 ----a-w- c:\windows\SysWow64\xvidcore.dll
2015-02-23 20:58 . 2015-02-23 21:00 -------- d-----w- c:\program files (x86)\K-Lite Codec Pack
2015-02-14 21:03 . 2015-01-09 03:14 91136 ----a-w- c:\windows\system32\wdi.dll
2015-02-14 21:03 . 2015-01-09 03:14 950272 ----a-w- c:\windows\system32\perftrack.dll
2015-02-14 21:03 . 2015-01-09 03:14 29696 ----a-w- c:\windows\system32\powertracker.dll
2015-02-14 21:03 . 2015-01-09 02:48 76800 ----a-w- c:\windows\SysWow64\wdi.dll
2015-02-11 22:10 . 2015-01-23 04:42 814080 ----a-w- c:\windows\system32\jscript9diag.dll
2015-02-11 22:10 . 2015-01-23 04:41 6041600 ----a-w- c:\windows\system32\jscript9.dll
2015-02-11 22:10 . 2015-01-23 03:43 620032 ----a-w- c:\windows\SysWow64\jscript9diag.dll
2015-02-11 22:10 . 2015-01-23 03:17 4300800 ----a-w- c:\windows\SysWow64\jscript9.dll
2015-02-11 06:16 . 2015-02-04 03:16 609280 ----a-w- c:\windows\system32\generaltel.dll
2015-02-11 06:16 . 2015-02-04 03:16 762368 ----a-w- c:\windows\system32\invagent.dll
2015-02-11 06:16 . 2015-02-04 03:16 414720 ----a-w- c:\windows\system32\devinv.dll
2015-02-11 06:16 . 2015-02-04 03:16 894976 ----a-w- c:\windows\system32\appraiser.dll
2015-02-11 06:16 . 2015-02-04 03:16 227328 ----a-w- c:\windows\system32\aepdu.dll
2015-02-11 06:16 . 2015-02-04 03:16 192000 ----a-w- c:\windows\system32\aepic.dll
2015-02-11 06:16 . 2015-02-04 03:13 1098752 ----a-w- c:\windows\system32\aeinv.dll
2015-02-11 06:16 . 2015-01-27 23:36 1239720 ----a-w- c:\windows\system32\aitstatic.exe
2015-02-11 06:13 . 2015-01-13 03:10 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2015-02-11 06:12 . 2014-12-12 05:31 1480192 ----a-w- c:\windows\system32\crypt32.dll
2015-02-11 06:12 . 2014-12-12 05:07 1174528 ----a-w- c:\windows\SysWow64\crypt32.dll
2015-02-11 06:12 . 2014-07-07 02:07 229376 ----a-w- c:\windows\system32\wintrust.dll
2015-02-11 06:12 . 2014-07-07 02:06 187904 ----a-w- c:\windows\system32\cryptsvc.dll
2015-02-11 06:12 . 2014-07-07 01:40 179200 ----a-w- c:\windows\SysWow64\wintrust.dll
2015-02-11 06:12 . 2014-07-07 01:40 143872 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2015-02-11 06:12 . 2014-11-26 03:53 861696 ----a-w- c:\windows\system32\oleaut32.dll
2015-02-11 06:12 . 2014-11-26 03:32 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
2015-02-11 06:12 . 2014-10-04 02:10 3722752 ----a-w- c:\windows\system32\mstscax.dll
2015-02-11 06:12 . 2014-10-04 01:42 3221504 ----a-w- c:\windows\SysWow64\mstscax.dll
2015-02-11 06:12 . 2014-10-04 01:42 131584 ----a-w- c:\windows\SysWow64\aaclient.dll
2015-02-11 06:11 . 2014-12-08 03:09 406528 ----a-w- c:\windows\system32\scesrv.dll
2015-02-11 06:11 . 2014-12-08 02:46 308224 ----a-w- c:\windows\SysWow64\scesrv.dll
2015-02-11 06:11 . 2015-01-14 06:09 5554112 ----a-w- c:\windows\system32\ntoskrnl.exe
2015-02-11 06:11 . 2015-01-14 05:44 3972544 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2015-02-11 06:11 . 2015-01-14 05:44 3917760 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2015-02-11 06:11 . 2015-01-14 06:05 503808 ----a-w- c:\windows\system32\srcore.dll
2015-02-11 06:11 . 2015-01-14 06:05 50176 ----a-w- c:\windows\system32\srclient.dll
2015-02-11 06:11 . 2015-01-14 06:04 296960 ----a-w- c:\windows\system32\rstrui.exe
2015-02-11 06:11 . 2015-01-14 05:41 43008 ----a-w- c:\windows\SysWow64\srclient.dll
2015-02-11 06:10 . 2015-01-09 02:03 3201536 ----a-w- c:\windows\system32\win32k.sys
2015-02-10 16:34 . 2009-04-30 23:00 17408 ----a-w- c:\windows\system32\esxcdev.dll
2015-02-10 16:34 . 2009-04-30 23:00 128392 ----a-w- c:\windows\system32\esdevapp.exe
2015-02-10 16:34 . 2008-11-16 23:00 459776 ----a-w- c:\windows\system32\esxwiaud.dll
2015-02-10 16:34 . 2015-02-10 16:34 -------- d-----w- c:\program files (x86)\epson
2015-02-10 16:20 . 2008-08-08 01:09 108032 ----a-w- c:\windows\system32\E_ILMFBE.DLL
2015-02-10 16:20 . 2007-12-07 01:01 81408 ----a-w- c:\windows\system32\E_IBCBFBE.DLL
2015-02-10 16:20 . 2007-04-10 00:06 10752 ----a-w- c:\windows\system32\E_GCINST.DLL
2015-02-10 16:20 . 2015-02-10 16:33 -------- d-----w- c:\programdata\EPSON
2015-02-07 18:09 . 2015-02-07 18:09 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2015-02-07 12:21 . 2015-03-01 07:17 -------- d-----w- c:\users\PeterPan\AppData\Local\cache
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-02-11 21:32 . 2015-01-18 00:03 116773704 ----a-w- c:\windows\system32\MRT.exe
2015-02-08 12:47 . 2015-01-18 12:39 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-02-08 12:47 . 2015-01-18 12:39 701616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-01-30 15:56 . 2015-01-30 15:56 283064 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2015-01-18 20:26 . 2015-01-18 20:26 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2015-01-18 20:26 . 2015-01-18 20:26 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2015-01-18 20:26 . 2015-01-18 20:26 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2015-01-18 20:26 . 2015-01-18 20:26 235008 ----a-w- c:\windows\system32\elshyph.dll
2015-01-18 20:26 . 2015-01-18 20:26 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2015-01-18 20:26 . 2015-01-18 20:26 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2015-01-18 20:26 . 2015-01-18 20:26 337408 ----a-w- c:\windows\SysWow64\html.iec
2015-01-18 20:26 . 2015-01-18 20:26 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2015-01-18 20:26 . 2015-01-18 20:26 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2015-01-18 20:26 . 2015-01-18 20:26 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2015-01-18 20:26 . 2015-01-18 20:26 942592 ----a-w- c:\windows\system32\jsIntl.dll
2015-01-18 20:26 . 2015-01-18 20:26 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2015-01-18 20:26 . 2015-01-18 20:26 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2015-01-18 20:26 . 2015-01-18 20:26 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2015-01-18 20:26 . 2015-01-18 20:26 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2015-01-18 20:26 . 2015-01-18 20:26 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2015-01-18 20:26 . 2015-01-18 20:26 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2015-01-18 20:26 . 2015-01-18 20:26 247808 ----a-w- c:\windows\system32\msls31.dll
2015-01-18 20:26 . 2015-01-18 20:26 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2015-01-18 20:26 . 2015-01-18 20:26 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2015-01-18 20:26 . 2015-01-18 20:26 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2015-01-18 20:26 . 2015-01-18 20:26 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2015-01-18 20:26 . 2015-01-18 20:26 81408 ----a-w- c:\windows\system32\icardie.dll
2015-01-18 20:26 . 2015-01-18 20:26 77312 ----a-w- c:\windows\system32\tdc.ocx
2015-01-18 20:26 . 2015-01-18 20:26 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2015-01-18 20:26 . 2015-01-18 20:26 48640 ----a-w- c:\windows\system32\mshtmler.dll
2015-01-18 20:26 . 2015-01-18 20:26 413696 ----a-w- c:\windows\system32\html.iec
2015-01-18 20:26 . 2015-01-18 20:26 30208 ----a-w- c:\windows\system32\licmgr10.dll
2015-01-18 20:26 . 2015-01-18 20:26 243200 ----a-w- c:\windows\system32\webcheck.dll
2015-01-18 20:26 . 2015-01-18 20:26 235520 ----a-w- c:\windows\system32\url.dll
2015-01-18 20:26 . 2015-01-18 20:26 167424 ----a-w- c:\windows\system32\iexpress.exe
2015-01-18 20:26 . 2015-01-18 20:26 143872 ----a-w- c:\windows\system32\wextract.exe
2015-01-18 20:26 . 2015-01-18 20:26 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2015-01-18 20:26 . 2015-01-18 20:26 105984 ----a-w- c:\windows\system32\iesysprep.dll
2015-01-18 20:26 . 2015-01-18 20:26 101376 ----a-w- c:\windows\system32\inseng.dll
2015-01-18 20:26 . 2015-01-18 20:26 774144 ----a-w- c:\windows\system32\jscript.dll
2015-01-18 20:26 . 2015-01-18 20:26 62464 ----a-w- c:\windows\system32\pngfilt.dll
2015-01-18 20:26 . 2015-01-18 20:26 48128 ----a-w- c:\windows\system32\imgutil.dll
2015-01-18 20:26 . 2015-01-18 20:26 147968 ----a-w- c:\windows\system32\occache.dll
2015-01-18 20:26 . 2015-01-18 20:26 13824 ----a-w- c:\windows\system32\mshta.exe
2015-01-18 20:26 . 2015-01-18 20:26 135680 ----a-w- c:\windows\system32\iepeers.dll
2015-01-18 20:22 . 2015-01-18 20:22 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 522752 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2015-01-18 20:22 . 2015-01-18 20:22 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 364544 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2015-01-18 20:22 . 2015-01-18 20:22 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 2560 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 1682432 ----a-w- c:\windows\system32\XpsPrint.dll
2015-01-18 20:22 . 2015-01-18 20:22 1158144 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2015-01-18 20:22 . 2015-01-18 20:22 10752 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 10752 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2015-01-18 20:22 . 2015-01-18 20:22 1247744 ----a-w- c:\windows\SysWow64\DWrite.dll
2015-01-18 20:22 . 2015-01-18 20:22 648192 ----a-w- c:\windows\system32\d3d10level9.dll
2015-01-18 20:22 . 2015-01-18 20:22 604160 ----a-w- c:\windows\SysWow64\d3d10level9.dll
2015-01-18 20:22 . 2015-01-18 20:22 363008 ----a-w- c:\windows\system32\dxgi.dll
2015-01-18 20:22 . 2015-01-18 20:22 333312 ----a-w- c:\windows\system32\d3d10_1core.dll
2015-01-18 20:22 . 2015-01-18 20:22 296960 ----a-w- c:\windows\system32\d3d10core.dll
2015-01-18 20:22 . 2015-01-18 20:22 293376 ----a-w- c:\windows\SysWow64\dxgi.dll
2015-01-18 20:22 . 2015-01-18 20:22 249856 ----a-w- c:\windows\SysWow64\d3d10_1core.dll
2015-01-18 20:22 . 2015-01-18 20:22 245248 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2015-01-18 20:22 . 2015-01-18 20:22 221184 ----a-w- c:\windows\system32\UIAnimation.dll
2015-01-18 20:22 . 2015-01-18 20:22 220160 ----a-w- c:\windows\SysWow64\d3d10core.dll
2015-01-18 20:22 . 2015-01-18 20:22 207872 ----a-w- c:\windows\SysWow64\WindowsCodecsExt.dll
2015-01-18 20:22 . 2015-01-18 20:22 194560 ----a-w- c:\windows\system32\d3d10_1.dll
2015-01-18 20:22 . 2015-01-18 20:22 187392 ----a-w- c:\windows\SysWow64\UIAnimation.dll
2015-01-18 20:22 . 2015-01-18 20:22 1643520 ----a-w- c:\windows\system32\DWrite.dll
2015-01-18 20:22 . 2015-01-18 20:22 161792 ----a-w- c:\windows\SysWow64\d3d10_1.dll
2015-01-18 20:22 . 2015-01-18 20:22 1238528 ----a-w- c:\windows\system32\d3d10.dll
2015-01-18 20:22 . 2015-01-18 20:22 1175552 ----a-w- c:\windows\system32\FntCache.dll
2015-01-18 20:22 . 2015-01-18 20:22 1080832 ----a-w- c:\windows\SysWow64\d3d10.dll
2015-01-18 12:46 . 2015-01-18 12:46 715038 ----a-w- c:\windows\unins000.exe
2015-01-18 11:28 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2015-01-18 11:28 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2014-12-22 23:41 . 2015-01-17 22:55 298120 ------w- c:\windows\system32\MpSigStub.exe
2014-12-19 03:06 . 2015-01-18 19:36 210432 ----a-w- c:\windows\system32\profsvc.dll
2014-12-19 01:46 . 2015-01-18 19:36 141312 ----a-w- c:\windows\system32\drivers\mrxdav.sys
2014-12-11 17:47 . 2015-01-18 19:37 52736 ----a-w- c:\windows\system32\TSWbPrxy.exe
2014-12-06 04:17 . 2015-01-18 19:36 303616 ----a-w- c:\windows\system32\nlasvc.dll
2014-12-06 03:50 . 2015-01-18 19:36 52224 ----a-w- c:\windows\SysWow64\nlaapi.dll
2014-12-06 03:50 . 2015-01-18 19:36 156672 ----a-w- c:\windows\SysWow64\ncsi.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2014-03-04 3696912]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2015-02-19 7416088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-01-29 291608]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-25 36864]
"BtTray"="c:\program files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe" [2012-01-11 322744]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-12-19 1022152]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer3"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x]
S0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x]
S2 Autodesk Content Service;Autodesk Content Service;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
S3 BtAudioBusSrv;Ralink Bluetooth Audio Bus Service;c:\windows\system32\Drivers\BtAudioBus.sys;c:\windows\SYSNATIVE\Drivers\BtAudioBus.sys [x]
S3 BthL2caScoIfSrv;Bluetooth Profile Interface Driver Service;c:\windows\system32\Drivers\BtL2caScoIf.sys;c:\windows\SYSNATIVE\Drivers\BtL2caScoIf.sys [x]
S3 btUrbFilterDrv;IVT URB Bluetooth Filter Driver Service;c:\windows\system32\Drivers\IvtUrbBtFlt.sys;c:\windows\SYSNATIVE\Drivers\IvtUrbBtFlt.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
S3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
S3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
S3 rtbth;RTBTH Bluetooth Device Driver;c:\windows\system32\DRIVERS\rtbth.sys;c:\windows\SYSNATIVE\DRIVERS\rtbth.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 TBS6991_64;TBS6991 Dual DVBS/S2 service;c:\windows\system32\DRIVERS\TBS6991_64.sys;c:\windows\SYSNATIVE\DRIVERS\TBS6991_64.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - MBAMSWISSARMY
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2015-03-05 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-18 12:47]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-12-30 12343400]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-01-14 170264]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-01-14 398104]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-01-14 440600]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2014-10-01 5595336]
"Autodesk Sync"="c:\program files\Autodesk\Autodesk Sync\AdSync.exe" [2012-02-05 415680]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\PeterPan\AppData\Roaming\Mozilla\Firefox\Profiles\fusnt186.default\
FF - prefs.js: browser.startup.homepage - www.seznam.cz
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_305_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_305_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.16"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Celkový čas: 2015-03-05 17:54:09
ComboFix-quarantined-files.txt 2015-03-05 16:54
ComboFix2.txt 2015-03-04 21:22
.
Před spuštěním: Volných bajtů: 32 497 422 336
Po spuštění: Volných bajtů: 34 095 128 576
.
- - End Of File - - 7682B12F7638B2C085753840FDC1F747
A36C5E4F47E84449FF07ED3517B43A31

Přes Start >> Spustit zkopíruj do okna:

ComboFix /Uninstall

a stiskni Enter

To odinstaluje ComboFix a smaže s ním související soubory a složky.

Použij T-Cleaner, který smaže případné zbytky po aplikacích které jsme použili.

Jen před jeho stažením a při použití stopni antivir, protože ho muže detekovat jako vir ale není tomu tak.

Pak dej vědět jak se PC chová.

Procesor se zklidnil na 1.5Ghz a zatizeni kolem 5% Pribylo mista na disku a prestal fungovat gadget pocasi (ke sluzbe se nelze pripojit)

Nyni mam na disku navic uz jen 10 Gb (rozdil mezi soucty dat na c a uvnitr vsech slozek v c

jamesbond007.cz píše:............ a prestal fungovat gadget pocasi (ke sluzbe se nelze pripojit)

Zavři gadget, otevři pomocí Poznámkového bloku soubor "Config.xml" v adresáři "C: >> Users >> USERNAME >> AppData >> Local >> Microsoft >> Windows Live >> Services >> Cache" a znovu ho jen ulož bez jakékoliv úpravy.

jamesbond007.cz píše:Nyni mam na disku navic uz jen 10 Gb (rozdil mezi soucty dat na c a uvnitr vsech slozek v c

Já bych se v tom nešťoural a smířil se s tím, že to tak prostě je - Windows

VIRY.CZ

Google captcha error

Google captcha error

Re: Google captcha error

Re: Google captcha error

Re: Google captcha error

Re: Google captcha error

Re: Google captcha error

Re: Google captcha error

Re: Google captcha error

Re: Google captcha error

Re: Google captcha error

Re: Google captcha error

Re: Google captcha error

Re: Google captcha error

Re: Google captcha error

Re: Google captcha error