VIRY.CZ

Dobrý den, chtěl bych vás požádat zda byste mi mohli pomoci vyřešit problém.
Posledních cca. 14 dní, mi nejdou téměř sledovat žádné on-line seriály (k angličtině).
Všechno to padá nebo se to vůbec nenačte.
Na jiných PC (v práci) to funguje.
Také jsem si všiml, že na serverech s webkamerou, se kamera načítá neuvěřitelně dlouho.
Při stahování čehokoliv z netu (i free věci), se stahování v půlce přeruší, s tím že se stala chyba sítě.
Internet je vcelku zasekanej, už neběhá rychle jako dřív (jak upload tak download).
Odinstaloval jsem a nainstaloval znovu prohlížeč Chrome - problém přetrvává.
ESET mi nic nenašel, čištění disku proběhlo v pořádku, na disku mnoho věcí nemám a přiznám se, že mám ještě stále kopii win7 (64-bit).
Předem mnohokrát děkuji za pomoc a váš čas.
Pěkný den, Marek


Logfile of random's system information tool 1.10 (written by random/random)
Run by 1 at 2015-03-04 02:07:43
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 738 GB (77%) free of 954 GB
Total RAM: 3990 MB (43% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:07:45, on 4.3.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17631)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Program Files\trend micro\1.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: DVDVideoSoft.WebPageAdjuster - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O4 - HKLM\..\Run: [mncrrhyaSrv] C:\Windows\system32\mncrrhya.vbe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre1.8.0_31\bin\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Network Server.lnk = C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do Microsoft Excelu - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
O8 - Extra context menu item: Od&eslat do OneNotu - res://C:\PROGRA~1\MICROS~2\Office15\ONBttnIE.dll/105
O8 - Extra context menu item: Otevřít obrázek v aplikaci &Microsoft PhotoDraw - res://C:\PROGRA~2\MICROS~1\Office\1029\phdintl.dll/phdContext.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O9 - Extra 'Tools' menuitem: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9365 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe"
C:\Windows\system32\igfxCUIService.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"taskhost.exe"
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\sppsvc.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\system32\Dwm.exe"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\Explorer.EXE
igfxEM.exe
igfxHK.exe
igfxTray.exe
"C:\Windows\System32\rundll32.exe" sbavmon.dll,SBAVMonitor
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\system32\wuauclt.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="352.0.1559344771\1643876122" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,18,39 --gpu-vendor-id=0x8086 --gpu-device-id=0x0152 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3621 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group4 pct:10d stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/MaterialDesignNTP/Enabled/NewProfileManagement/NewAvatarMenu/OmniboxBundledExperimentV1/NewSuggestType_A7_Stable_R2/PasswordGeneration/Disabled/QUIC/Disabled/RememberCertificateErrorDecisions/OneDay/SPDY/Spdy4Enabled-default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_66/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="352.3.403576530\595705220" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group4 pct:10d stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GCM/Enabled/GoogleNow/Enable/MaterialDesignNTP/Enabled/NewProfileManagement/NewAvatarMenu/OmniboxBundledExperimentV1/NewSuggestType_A7_Stable_R2/PasswordGeneration/Disabled/QUIC/Disabled/RememberCertificateErrorDecisions/OneDay/SPDY/Spdy4Enabled-default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_66/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="352.4.1776934437\2119388624" /prefetch:673131151
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE" /e
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group4 pct:10d stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GCM/Enabled/GoogleNow/Enable/MaterialDesignNTP/Enabled/NewProfileManagement/NewAvatarMenu/OmniboxBundledExperimentV1/NewSuggestType_A7_Stable_R2/PasswordGeneration/Disabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/QUIC/Disabled/RememberCertificateErrorDecisions/OneDay/SPDY/Spdy4Enabled-default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_66/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="352.110.288488519\1115488709" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group4 pct:10d stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GCM/Enabled/GoogleNow/Enable/MaterialDesignNTP/Enabled/NewProfileManagement/NewAvatarMenu/OmniboxBundledExperimentV1/NewSuggestType_A7_Stable_R2/PasswordGeneration/Disabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/QUIC/Disabled/RememberCertificateErrorDecisions/OneDay/SPDY/Spdy4Enabled-default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_66/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="352.112.659773643\2097838647" /prefetch:673131151
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe"
taskhost.exe $(Arg0)

"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe15_ Global\UsGthrCtrlFltPipeMssGthrPipe15 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
"C:\Users\1\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineUA1d0530a81e8f96f.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\1\AppData\Roaming\Mozilla\Firefox\Profiles\rcp66st5.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.31.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.31.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
DVDVideoSoft IE Extension - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll [2014-11-20 357376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
DVDVideoSoft IE Extension - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll [2014-11-22 323752]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Creative SB Monitoring Utility"=RunDll32 sbavmon.dll,SBAVMonitor []
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2014-10-01 5595336]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeBridge"= []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"mncrrhyaSrv"=C:\Windows\system32\mncrrhya.vbe []
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-10-02 421888]
"SunJavaUpdateSched"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\jusched.exe []
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma Loader.lnk - C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
Network Server.lnk - C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"midi3"=wdmaud.drv
"wave3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2015-03-04 02:07:43 ----D---- C:\rsit
2015-03-02 10:44:13 ----D---- C:\Program Files (x86)\Microsoft Works
2015-03-02 10:43:54 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2015-03-02 10:43:25 ----D---- C:\Windows\PCHEALTH
2015-03-02 10:41:10 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2015-03-02 10:39:18 ----RHD---- C:\MSOCache
2015-02-28 05:00:09 ----D---- C:\ProgramData\Sun
2015-02-28 05:00:04 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2015-02-28 04:59:17 ----D---- C:\ProgramData\Oracle
2015-02-27 18:58:21 ----SHD---- C:\Config.Msi
2015-02-27 07:24:25 ----D---- C:\Users\1\AppData\Roaming\Mozilla
2015-02-27 07:24:18 ----D---- C:\ProgramData\Mozilla
2015-02-27 07:24:17 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-02-12 16:55:44 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-02-12 16:55:44 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-02-12 16:55:43 ----A---- C:\Windows\system32\jscript9diag.dll
2015-02-12 16:55:43 ----A---- C:\Windows\system32\jscript9.dll
2015-02-11 09:30:54 ----D---- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-02-11 09:26:43 ----D---- C:\Program Files (x86)\QuickTime
2015-02-11 03:31:04 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-02-11 03:31:04 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-02-11 03:31:04 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-02-11 03:31:04 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-02-11 03:31:04 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-02-11 03:31:04 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-02-11 03:31:04 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-02-11 03:31:04 ----A---- C:\Windows\system32\wdigest.dll
2015-02-11 03:31:04 ----A---- C:\Windows\system32\TSpkg.dll
2015-02-11 03:31:04 ----A---- C:\Windows\system32\schannel.dll
2015-02-11 03:31:04 ----A---- C:\Windows\system32\ncrypt.dll
2015-02-11 03:31:04 ----A---- C:\Windows\system32\msv1_0.dll
2015-02-11 03:31:04 ----A---- C:\Windows\system32\kerberos.dll
2015-02-11 03:31:04 ----A---- C:\Windows\system32\credssp.dll
2015-02-11 03:30:59 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-02-11 03:30:59 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-02-11 03:30:59 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-02-11 03:30:59 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-02-11 03:30:59 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-02-11 03:30:59 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-02-11 03:30:59 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-02-11 03:30:59 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-02-11 03:30:59 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-02-11 03:30:59 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-02-11 03:30:59 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 03:30:59 ----A---- C:\Windows\system32\iernonce.dll
2015-02-11 03:30:59 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-02-11 03:30:59 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-02-11 03:30:59 ----A---- C:\Windows\system32\ie4uinit.exe
2015-02-11 03:30:58 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-02-11 03:30:58 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-02-11 03:30:58 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-02-11 03:30:58 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-02-11 03:30:58 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-02-11 03:30:58 ----A---- C:\Windows\system32\urlmon.dll
2015-02-11 03:30:58 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 03:30:58 ----A---- C:\Windows\system32\iedkcs32.dll
2015-02-11 03:30:57 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-02-11 03:30:57 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-02-11 03:30:57 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-02-11 03:30:57 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 03:30:57 ----A---- C:\Windows\system32\msfeeds.dll
2015-02-11 03:30:57 ----A---- C:\Windows\system32\iesetup.dll
2015-02-11 03:30:57 ----A---- C:\Windows\system32\ieapfltr.dll
2015-02-11 03:30:57 ----A---- C:\Windows\system32\dxtrans.dll
2015-02-11 03:30:56 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-02-11 03:30:56 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-02-11 03:30:56 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-02-11 03:30:56 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-02-11 03:30:56 ----A---- C:\Windows\system32\jsproxy.dll
2015-02-11 03:30:56 ----A---- C:\Windows\system32\ieUnatt.exe
2015-02-11 03:30:56 ----A---- C:\Windows\system32\iertutil.dll
2015-02-11 03:30:55 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-02-11 03:30:55 ----A---- C:\Windows\system32\mshtmled.dll
2015-02-11 03:30:55 ----A---- C:\Windows\system32\ieui.dll
2015-02-11 03:30:55 ----A---- C:\Windows\system32\ieframe.dll
2015-02-11 03:30:55 ----A---- C:\Windows\system32\dxtmsft.dll
2015-02-11 03:30:54 ----A---- C:\Windows\system32\wininet.dll
2015-02-11 03:30:54 ----A---- C:\Windows\system32\vbscript.dll
2015-02-11 03:30:54 ----A---- C:\Windows\system32\msrating.dll
2015-02-11 03:30:54 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-02-11 03:30:53 ----A---- C:\Windows\system32\mshtml.dll
2015-02-11 03:30:47 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-02-11 03:30:47 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-02-11 03:30:43 ----A---- C:\Windows\system32\lsasrv.dll
2015-02-11 03:30:43 ----A---- C:\Windows\system32\drivers\cng.sys
2015-02-11 03:30:42 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-02-11 03:30:42 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-02-11 03:30:42 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-02-11 03:30:42 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-02-11 03:30:42 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-02-11 03:30:42 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-02-11 03:30:42 ----A---- C:\Windows\system32\sspisrv.dll
2015-02-11 03:30:42 ----A---- C:\Windows\system32\sspicli.dll
2015-02-11 03:30:42 ----A---- C:\Windows\system32\secur32.dll
2015-02-11 03:30:42 ----A---- C:\Windows\system32\msobjs.dll
2015-02-11 03:30:42 ----A---- C:\Windows\system32\msaudite.dll
2015-02-11 03:30:42 ----A---- C:\Windows\system32\lsass.exe
2015-02-11 03:30:42 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-02-11 03:30:42 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-02-11 03:30:42 ----A---- C:\Windows\system32\auditpol.exe
2015-02-11 03:30:42 ----A---- C:\Windows\system32\adtschema.dll
2015-02-11 03:30:32 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2015-02-11 03:30:32 ----A---- C:\Windows\system32\scesrv.dll
2015-02-11 03:30:30 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-02-11 03:30:29 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-02-11 03:30:29 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-02-11 03:30:29 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-02-11 03:30:29 ----A---- C:\Windows\system32\srcore.dll
2015-02-11 03:30:29 ----A---- C:\Windows\system32\srclient.dll
2015-02-11 03:30:29 ----A---- C:\Windows\system32\rstrui.exe
2015-02-11 03:30:19 ----A---- C:\Windows\system32\win32k.sys
2015-02-06 16:23:17 ----D---- C:\ProgramData\Native Instruments

======List of files/folders modified in the last 1 month======

2015-03-04 02:07:45 ----D---- C:\Windows\Prefetch
2015-03-04 02:07:44 ----D---- C:\Windows\temp
2015-03-04 02:07:44 ----D---- C:\Program Files\trend micro
2015-03-03 21:38:52 ----D---- C:\Windows\winsxs
2015-03-03 21:24:50 ----D---- C:\Windows\system32\config
2015-03-03 09:56:07 ----D---- C:\Windows\System32
2015-03-03 09:56:07 ----D---- C:\Windows\inf
2015-03-03 09:56:07 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-03-03 09:52:20 ----D---- C:\Windows\system32\Tasks
2015-03-03 09:51:20 ----D---- C:\ProgramData
2015-03-03 09:51:20 ----D---- C:\Program Files\WinRAR
2015-03-03 03:05:07 ----SHD---- C:\Windows\Installer
2015-03-03 03:05:07 ----D---- C:\ProgramData\Microsoft Help
2015-03-03 03:03:32 ----RSD---- C:\Windows\assembly
2015-03-03 03:02:54 ----RSD---- C:\Windows\Fonts
2015-03-03 03:01:41 ----A---- C:\Windows\win.ini
2015-03-03 03:00:27 ----SHD---- C:\System Volume Information
2015-03-02 10:44:13 ----RD---- C:\Program Files (x86)
2015-03-02 10:44:13 ----D---- C:\Windows\SysWOW64
2015-03-02 10:44:02 ----D---- C:\Program Files (x86)\MSBuild
2015-03-02 10:43:58 ----D---- C:\Program Files (x86)\Microsoft Office
2015-03-02 10:43:52 ----D---- C:\Program Files (x86)\Common Files
2015-03-02 10:43:48 ----D---- C:\Windows\ShellNew
2015-03-02 10:43:25 ----SD---- C:\ProgramData\Microsoft
2015-03-02 10:43:25 ----D---- C:\Windows
2015-03-02 10:43:25 ----D---- C:\Program Files (x86)\Microsoft.NET
2015-03-02 10:42:20 ----HD---- C:\Program Files\Common Files\Microsoft Shared
2015-03-02 10:41:17 ----D---- C:\Program Files\Microsoft Office
2015-02-28 05:02:29 ----D---- C:\Program Files (x86)\Java
2015-02-28 04:59:20 ----A---- C:\Windows\SYSWOW64\javaws.exe
2015-02-28 04:59:20 ----A---- C:\Windows\SYSWOW64\javaw.exe
2015-02-28 04:59:20 ----A---- C:\Windows\SYSWOW64\java.exe
2015-02-28 04:56:28 ----D---- C:\Program Files (x86)\Google
2015-02-28 04:56:18 ----D---- C:\Windows\Tasks
2015-02-27 19:03:25 ----RD---- C:\Program Files
2015-02-27 19:02:56 ----D---- C:\Program Files\Common Files\Apple
2015-02-27 19:02:55 ----DC---- C:\Windows\system32\DRVSTORE
2015-02-27 19:02:55 ----D---- C:\Windows\system32\drivers
2015-02-27 18:51:30 ----D---- C:\Program Files\Native Instruments
2015-02-27 18:51:25 ----D---- C:\Windows\system32\DriverStore
2015-02-27 18:51:25 ----D---- C:\Windows\system32\catroot
2015-02-27 18:47:16 ----D---- C:\Users\1\AppData\Roaming\Software Informer
2015-02-20 20:36:53 ----D---- C:\Users\1\AppData\Roaming\Adobe
2015-02-20 20:36:53 ----D---- C:\ProgramData\Adobe
2015-02-13 04:05:26 ----D---- C:\Windows\rescache
2015-02-13 03:15:56 ----D---- C:\Windows\SYSWOW64\en-US
2015-02-13 03:15:56 ----D---- C:\Windows\system32\en-US
2015-02-12 08:44:02 ----D---- C:\Windows\system32\NDF
2015-02-12 03:22:48 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-02-12 03:22:48 ----D---- C:\Windows\system32\cs-CZ
2015-02-12 03:22:48 ----D---- C:\Program Files\Internet Explorer
2015-02-12 03:22:48 ----D---- C:\Program Files (x86)\Internet Explorer
2015-02-12 03:05:00 ----D---- C:\Windows\system32\MRT
2015-02-12 03:02:16 ----A---- C:\Windows\system32\MRT.exe
2015-02-11 09:30:48 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2015-02-11 03:29:48 ----D---- C:\Windows\system32\catroot2
2015-02-06 17:48:08 ----D---- C:\Users\1\AppData\Roaming\MPC

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2014-10-10 63160]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2014-10-10 243440]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2014-10-10 169280]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2014-10-10 44632]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2014-10-10 222280]
R2 WIBUKEY;WIBU-KEY Kernel Driver; C:\Windows\SYSTEM32\DRIVERS\WibuKey64.sys [2009-12-03 103224]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2014-05-20 3791872]
R3 ksaud;Creative USB Audio Driver; C:\Windows\system32\drivers\ksaud.sys [2011-07-06 1148288]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2013-09-16 99288]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-09-29 646248]
S3 a4djavs;Audio 4 DJ WDM Audio; C:\Windows\System32\Drivers\a4djavs.sys [2012-12-18 359784]
S3 a4djusb_svc;Audio 4 DJ; C:\Windows\System32\Drivers\a4djusb.sys [2012-12-18 99688]
S3 AKAI_ACV1_MIDI;Ploytec MIDI driver for Akai MPC Studio; C:\Windows\system32\drivers\akaiacv1m.sys [2012-10-15 55104]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-01-19 77128]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 CTAudSvcService;Creative Audio Service; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [2010-02-12 286720]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2014-10-01 1349576]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2014-05-20 314696]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-08-27 747520]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-09-16 169432]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-09-16 390616]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-28 107848]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2014-05-20 278344]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2014-06-17 79360]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-28 107848]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-01-12 114688]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-08-27 828376]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-06-15 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

ahoj,
1. spust regedit - nechaj vyhladat klucove slovo mncrrhyaSrv - najdene nechaj zmazat - nic ine
2. restart PC a kontrola s MBAM

Děkuji za zprávu,
postupoval jsem dle návodu.
Problém stále přetrvává.

ak MBAM nieco nasiel vloz log
vycisti PC s ADWCleanerom - log vloz

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 5.3.2015
Scan Time: 8:22:51
Logfile: log MBAM.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2015.03.05.01
Rootkit Database: v2015.02.25.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: 1

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 358828
Time Elapsed: 7 min, 24 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 6
PUP.Optional.DefaultSearch, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}, , [5d8857ead3b7ba7ce9f90129df26718f],
PUP.Optional.SystemK.A, HKLM\SOFTWARE\WOW6432NODE\SystemK, , [6f76f44d503a43f3755d378ecf3409f7],
PUP.Optional.DefaultSearch, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}, , [d70e8eb38ffb1323b72ba88257ae6c94],
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\WOW6432NODE\SYSTEMK\General, , [588d96abc0caa195fad2a240669dce32],
PUP.Optional.DVDVideoSoftTB.A, HKU\S-1-5-21-1117010101-3544123735-585248775-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\nikpibnbobmbdbheedjfogjlikpgpnhp, , [20c5eb565931f93d1b78e7d5d72c38c8],
PUP.Optional.DefaultSearch, HKU\S-1-5-21-1117010101-3544123735-585248775-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}, , [3fa6e8598dfd33038d562208d332fa06],

Registry Values: 3
PUP.Optional.DefaultSearch, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}|DisplayName, default-search.net, , [5d8857ead3b7ba7ce9f90129df26718f]
PUP.Optional.DefaultSearch, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}|DisplayName, default-search.net, , [d70e8eb38ffb1323b72ba88257ae6c94]
PUP.Optional.DefaultSearch, HKU\S-1-5-21-1117010101-3544123735-585248775-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}|DisplayName, default-search.net, , [3fa6e8598dfd33038d562208d332fa06]

Registry Data: 0
(No malicious items detected)

Folders: 8
PUP.Optional.OpenCandy, C:\Users\1\AppData\Roaming\OpenCandy, , [0cd93a075d2d57df10a63431cc37ae52],
PUP.Optional.OpenCandy, C:\Users\1\AppData\Roaming\OpenCandy\49F6C0395EB24AF9A8EA58B407DA73AC, , [0cd93a075d2d57df10a63431cc37ae52],
PUP.Optional.OpenCandy, C:\Users\1\AppData\Roaming\OpenCandy\B405071B036D41AFBC87627ECB9AC5A0, , [0cd93a075d2d57df10a63431cc37ae52],
PUP.Optional.OpenCandy, C:\Users\1\AppData\Roaming\OpenCandy\CA8692110905469D8E1E60B1A4AF5C5A, , [0cd93a075d2d57df10a63431cc37ae52],
PUP.Optional.OpenCandy, C:\Users\1\AppData\Roaming\OpenCandy\DE21B417A14742AD85B27D1E59414EB7, , [0cd93a075d2d57df10a63431cc37ae52],
PUP.Optional.OpenCandy, C:\Users\1\AppData\Roaming\OpenCandy\E344345D8ECE4FA8B7A76BF5AD9CC378, , [0cd93a075d2d57df10a63431cc37ae52],
Trojan.Agent.BCM, C:\Windows\inf\mncblnydy, , [34b10938d5b5ac8a3faeb8af0cf7da26],
Trojan.Agent.BCM, C:\Windows\inf\mncblnydy\bitstreams, , [34b10938d5b5ac8a3faeb8af0cf7da26],

Files: 22
PUP.Optional.Linkey.A, C:\Users\1\AppData\Roaming\OpenCandy\CA8692110905469D8E1E60B1A4AF5C5A\Linkey_p1v5-703.exe, , [c91cbb862d5d0a2c90df723f56ab0bf5],
PUP.Optional.Bitcoin, C:\Windows\SysWOW64\acumncrrhya.exe, , [dc094bf6ed9d87af5e970244e51df30d],
Trojan.BitMiner, C:\Windows\SysWOW64\dcgmncrrhya.exe, , [30b56ad7a7e366d05b95560120e2ab55],
PUP.BitCoinMiner, C:\Windows\SysWOW64\lcpmncrrhya.exe, , [c71e231ec2c867cf7dcd3dfb15ec57a9],
PUP.Optional.OpenCandy, C:\Users\1\AppData\Roaming\OpenCandy\49F6C0395EB24AF9A8EA58B407DA73AC\chrometest3.html, , [0cd93a075d2d57df10a63431cc37ae52],
PUP.Optional.OpenCandy, C:\Users\1\AppData\Roaming\OpenCandy\B405071B036D41AFBC87627ECB9AC5A0\chrometest3.html, , [0cd93a075d2d57df10a63431cc37ae52],
PUP.Optional.OpenCandy, C:\Users\1\AppData\Roaming\OpenCandy\DE21B417A14742AD85B27D1E59414EB7\SkypeSetupFulltrackable-6.16.0.105.exe, , [0cd93a075d2d57df10a63431cc37ae52],
PUP.Optional.OpenCandy, C:\Users\1\AppData\Roaming\OpenCandy\E344345D8ECE4FA8B7A76BF5AD9CC378\chrometest3.html, , [0cd93a075d2d57df10a63431cc37ae52],
Trojan.Agent.BCM, C:\Windows\inf\mncblnydy\diablo130302.cl, , [34b10938d5b5ac8a3faeb8af0cf7da26],
Trojan.Agent.BCM, C:\Windows\inf\mncblnydy\diakgcn121016.cl, , [34b10938d5b5ac8a3faeb8af0cf7da26],
Trojan.Agent.BCM, C:\Windows\inf\mncblnydy\libcurl-4.dll, , [34b10938d5b5ac8a3faeb8af0cf7da26],
Trojan.Agent.BCM, C:\Windows\inf\mncblnydy\libeay32.dll, , [34b10938d5b5ac8a3faeb8af0cf7da26],
Trojan.Agent.BCM, C:\Windows\inf\mncblnydy\libidn-11.dll, , [34b10938d5b5ac8a3faeb8af0cf7da26],
Trojan.Agent.BCM, C:\Windows\inf\mncblnydy\librtmp.dll, , [34b10938d5b5ac8a3faeb8af0cf7da26],
Trojan.Agent.BCM, C:\Windows\inf\mncblnydy\libssh2.dll, , [34b10938d5b5ac8a3faeb8af0cf7da26],
Trojan.Agent.BCM, C:\Windows\inf\mncblnydy\mncblnydy.exe, , [34b10938d5b5ac8a3faeb8af0cf7da26],
Trojan.Agent.BCM, C:\Windows\inf\mncblnydy\phatk121016.cl, , [34b10938d5b5ac8a3faeb8af0cf7da26],
Trojan.Agent.BCM, C:\Windows\inf\mncblnydy\poclbm130302.cl, , [34b10938d5b5ac8a3faeb8af0cf7da26],
Trojan.Agent.BCM, C:\Windows\inf\mncblnydy\scrypt130511.cl, , [34b10938d5b5ac8a3faeb8af0cf7da26],
Trojan.Agent.BCM, C:\Windows\inf\mncblnydy\ssleay32.dll, , [34b10938d5b5ac8a3faeb8af0cf7da26],
Trojan.Agent.BCM, C:\Windows\inf\mncblnydy\zlib1.dll, , [34b10938d5b5ac8a3faeb8af0cf7da26],
Trojan.Agent.BCM, C:\Windows\inf\mncblnydy\bitstreams\fpgaminer_top_fixed7_197MHz.ncd, , [34b10938d5b5ac8a3faeb8af0cf7da26],

Physical Sectors: 0
(No malicious items detected)


(end)

vsetko najdene nechaj odstranit v MBAM do karanteny
restart PC a vycisti este s ADWCleanerom

# AdwCleaner v4.111 - Logfile created 05/03/2015 at 08:38:50
# Updated 18/02/2015 by Xplode
# Database : 2015-03-02.3 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : 1 - 1-PC
# Running from : C:\Users\1\Desktop\adwcleaner_4.111.exe
# Option : Cleaning

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\1\AppData\Roaming\OpenCandy

***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Google\Chrome\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Key Deleted : HKLM\SOFTWARE\SystemK
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17631


-\\ Mozilla Firefox v36.0 (x86 cs)


-\\ Google Chrome v41.0.2272.76


*************************

AdwCleaner[R2].txt - [2483 bytes] - [05/03/2015 08:33:41]
AdwCleaner[S1].txt - [2089 bytes] - [05/03/2015 08:38:50]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [2148 bytes] ##########

Internet Settings [ProxyOverride] - *.local
toto si nastav naspat
a malo by vsetko fungovat OK

Jsem asi lama, ale nevím kde to mám nastavit

v MSIE - vid obrazok - cast vynimky:

Mám to ve win7 trochu jinak, tak teď nevím.

pokial nepouzivas server proxy, je zbytocne nastavovat vynimku
v tom pripade bol zmazany riadok zmatocny a netreba sa tym zaoberat
ako sa sprava PC ak nie su problemy, hotovo

Aha,
no já těmhle věcem vůbec nerozumím
Nicméně, videa už fungují, stahování je víceméně bez chyb sítě, udělá to jen jednou za hodně dlouhý čas.
Takže to vypadá, že je "vše v pořádku".
Mnohokrát ti děkuji a přeji pěkný zbytek víkendu, moc jsi mi pomohl.
Ahoj,
Marek

rado sa stalo
prajem pekny vecer
Jan