VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Vir v prohlížeči

https://forum.viry.cz:443/viewtopic.php?t=144265

Stránka 1 z 1

Vir v prohlížeči

Napsal: 04 kvě 2015 19:55
od Dushanek2
Dobrý den. Mám problém s virem v prohlížeči. Když spustím počítač, tak mi hned najede nějaká stránka s výherními automaty. Chtěl bych se jí zbavit. Posílám log z RSIT. Děkuji.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Dusan at 2015-05-04 19:43:19
Microsoft Windows 8.1
System drive C: has 135 GB (21%) free of 649 GB
Total RAM: 8111 MB (71% free)

HijackThis download failed

======Listing Processes======





wininit.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"C:\Windows\system32\nvvsvc.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"c:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe"
"C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe"
"C:\Program Files\ESET\ESET Endpoint Antivirus\x86\ekrn.exe"
dashost.exe {fd18509d-58ea-45f5-ba76178d37e54dfb}
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\SCM\MSIService.exe"
"C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"c:\postgreSQL\bin\pg_ctl.exe" runservice -N "postgresql-8.4" -D "c:/postgreSQL/data" -w
"C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"c:\postgreSQL\bin\postgres.exe" -D "c:/postgreSQL/data"
\??\C:\WINDOWS\system32\conhost.exe 0x4
"c:/postgreSQL/bin/postgres.exe" "--forkboot" "4660" "-x3"
"c:/postgreSQL/bin/postgres.exe" "--forkboot" "4652" "-x4"
"c:/postgreSQL/bin/postgres.exe" "--forkavlauncher" "4596"
"c:/postgreSQL/bin/postgres.exe" "--forkcol" "4588"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-ec58d343-072f-4bf5-a8df-6b2dc227a0f3 -SystemEventPortName:HostProcess-8b2ae898-758d-401f-ad42-f14bbd8a4d0b -IoCancelEventPortName:HostProcess-21ee2908-c838-44f9-9bd9-0fb06e53a792 -NonStateChangingEventPortName:HostProcess-675f1a2a-c0f9-4cd7-bad4-562e39b99d53 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:539df0a1-0086-45e5-81ce-d7ea01fb5f6b -DeviceGroupId:WudfDefaultDevicePool
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

C:\WINDOWS\System32\WinLogon.exe -SpecialSession
-hiberboot
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session
taskhostex.exe
C:\WINDOWS\Explorer.EXE
igfxEM.exe
igfxHK.exe
igfxTray.exe
"C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe"
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
C:\Windows\System32\skydrive.exe -Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" 74405bf7-2281-4a15-9ba3-a9d77b957f97 1
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\SCM\Radio Manager.exe"
"C:\Program Files (x86)\SCM\SCM.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Windows\System32\rundll32.exe" C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64
"C:\Program Files\ESET\ESET Endpoint Antivirus\egui.exe" /hide /waitservice
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"
"C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" -Embedding
"C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe"
"C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe"
"C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe" -minimize
"C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe" /r
"C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe"
"C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files (x86)\CyberLink\Shared files\brs.exe"
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3048.0.1600275810\2000920624" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,19,42 --gpu-vendor-id=0x8086 --gpu-device-id=0x0416 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3621 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BackgroundRendererProcesses/Disallow/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/*EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Manual install/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/NewSuggestType_A4_Stable_R1/*PasswordGeneration/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/ControlForLargePopulation/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Default/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_39/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_16/*UMA-Uniformity-Trial-50-Percent/default/*UwSInterstitialStatus/On/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/*Win32kLockdown/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=3048 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="3048.2.317576545\2067197406" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*BackgroundRendererProcesses/Disallow/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/*EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Manual install/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/NewSuggestType_A4_Stable_R1/*PasswordGeneration/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/ControlForLargePopulation/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Default/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_39/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_16/*UMA-Uniformity-Trial-50-Percent/default/*UwSInterstitialStatus/On/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/*Win32kLockdown/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=3048 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="3048.3.913673827\1925284263" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*BackgroundRendererProcesses/Disallow/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/*EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Manual install/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/NewSuggestType_A4_Stable_R1/*PasswordGeneration/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/ControlForLargePopulation/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Default/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_39/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_16/*UMA-Uniformity-Trial-50-Percent/default/*UwSInterstitialStatus/On/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/*Win32kLockdown/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=3048 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="3048.4.1761486073\536509515" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*BackgroundRendererProcesses/Disallow/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/*EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Manual install/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/NewSuggestType_A4_Stable_R1/*PasswordGeneration/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/ControlForLargePopulation/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Default/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_39/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_16/*UMA-Uniformity-Trial-50-Percent/default/*UwSInterstitialStatus/On/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/*Win32kLockdown/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=3048 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="3048.5.1795028249\1316378542" /prefetch:673131151
C:\WINDOWS\system32\cmd.exe /c "C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleChromeDAV.exe" --parent-window=0 chrome-extension://fkepacicchenbjecpbpbclokcabebhah/ < \\.\pipe\chrome.nativeMessaging.in.7af41bf57bbbe784 > \\.\pipe\chrome.nativeMessaging.out.7af41bf57bbbe784
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleChromeDAV.exe" --parent-window=0 chrome-extension://fkepacicchenbjecpbpbclokcabebhah/
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*BackgroundRendererProcesses/Disallow/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/*EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Manual install/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/NewSuggestType_A4_Stable_R1/*PasswordGeneration/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/ControlForLargePopulation/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Default/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_39/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_16/*UMA-Uniformity-Trial-50-Percent/default/*UwSInterstitialStatus/On/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/*Win32kLockdown/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=3048 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="3048.6.10954881\1769341838" /prefetch:673131151
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe119_ Global\UsGthrCtrlFltPipeMssGthrPipe119 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 576 580 588 65536 584
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Users\Uživatel\Downloads\RSITx64.exe"
C:\WINDOWS\System32\svchost.exe -k WerSvcGroup

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player PPAPI Notifier.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_pepper.exe

Re: Vir v prohlížeči

Napsal: 04 kvě 2015 19:56
od Dushanek2
:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [2014-08-15 43816]
"SteelSeries Engine"=C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [2014-10-09 87040]
"GoogleChromeAutoLaunch_1BBC7A7CAA618EF2E98B6A6F45676F1E"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-04-28 812872]
"CMD"=cmd.exe /c start http://zenigameblinger.org && exit []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Sound Blaster Cinema"=C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe [2012-11-29 711680]
"UpdReg"=C:\Windows\UpdReg.EXE [2000-05-11 90112]
"Super-Charger"=C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe [2013-02-07 490480]
"RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2013-03-08 95192]
"BDRegion"=C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [2013-04-02 181208]
"BlueStacks Agent"=c:\Program Files (x86)\BlueStacks\HD-Agent.exe [2013-01-07 597880]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-10-15 157480]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-09-26 271744]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Killer Network Manager.lnk - C:\WINDOWS\Installer\{4692B750-DE88-4DCF-9163-745AF5604B24}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe

C:\Users\Uživatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
TornTvDownloader.lnk - C:\Users\Uživatel\AppData\Roaming\TornTV.com\Torntv Downloader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
igfxdev.dll []

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-04-18 14:09:22 ----D---- C:\Program Files (x86)\Rockstar Games
2015-04-18 14:09:21 ----D---- C:\Program Files\Rockstar Games
2015-04-18 13:42:27 ----D---- C:\Program Files (x86)\Grand Theft Auto V
2015-04-18 12:38:25 ----D---- C:\Users\Uživatel\AppData\Roaming\MK10
2015-04-18 12:16:20 ----D---- C:\Program Files (x86)\Mortal Kombat X
2015-04-18 09:48:44 ----D---- C:\Users\Uživatel\AppData\Roaming\WebApp
2015-04-18 09:48:22 ----D---- C:\Users\Uživatel\AppData\Roaming\CyberLink
2015-04-16 18:07:41 ----D---- C:\Program Files (x86)\DesetiPrsty
2015-04-15 11:34:02 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-04-15 11:34:02 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-04-15 11:34:01 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2015-04-15 11:34:01 ----A---- C:\WINDOWS\SYSWOW64\sechost.dll
2015-04-15 11:34:01 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2015-04-15 11:34:01 ----A---- C:\WINDOWS\system32\wow64.dll
2015-04-15 11:34:01 ----A---- C:\WINDOWS\system32\tracerpt.exe
2015-04-15 11:34:01 ----A---- C:\WINDOWS\system32\tdh.dll
2015-04-15 11:34:01 ----A---- C:\WINDOWS\system32\sechost.dll
2015-04-15 11:34:01 ----A---- C:\WINDOWS\system32\microsoft-windows-system-events.dll
2015-04-15 11:34:00 ----A---- C:\WINDOWS\SYSWOW64\tracerpt.exe
2015-04-15 11:34:00 ----A---- C:\WINDOWS\system32\wow64cpu.dll
2015-04-15 11:33:52 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2015-04-15 11:33:52 ----A---- C:\WINDOWS\system32\msctf.dll
2015-04-15 11:33:51 ----A---- C:\WINDOWS\system32\lsm.dll
2015-04-15 11:33:50 ----A---- C:\WINDOWS\SYSWOW64\pku2u.dll
2015-04-15 11:33:50 ----A---- C:\WINDOWS\system32\pku2u.dll
2015-04-15 11:33:47 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-04-15 11:33:46 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-04-15 11:33:44 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-04-15 11:33:44 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-04-15 11:33:44 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-04-15 11:33:43 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-04-15 11:33:43 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-04-15 11:33:43 ----A---- C:\WINDOWS\system32\wininet.dll
2015-04-15 11:33:42 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-04-15 11:33:42 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-04-15 11:33:42 ----A---- C:\WINDOWS\system32\mshtmled.dll
2015-04-15 11:33:42 ----A---- C:\WINDOWS\system32\inetcomm.dll
2015-04-15 11:33:42 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-04-15 11:33:42 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2015-04-15 11:33:41 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-04-15 11:33:41 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-04-15 11:33:41 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2015-04-15 11:33:41 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-04-15 11:33:41 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2015-04-15 11:33:41 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2015-04-15 11:33:41 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-04-15 11:33:41 ----A---- C:\WINDOWS\system32\msfeeds.dll
2015-04-15 11:33:41 ----A---- C:\WINDOWS\system32\jscript.dll
2015-04-15 11:33:41 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2015-04-15 11:33:27 ----A---- C:\WINDOWS\SYSWOW64\clfsw32.dll
2015-04-15 11:33:27 ----A---- C:\WINDOWS\system32\drivers\http.sys
2015-04-15 11:33:27 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2015-04-15 11:33:27 ----A---- C:\WINDOWS\system32\clfsw32.dll
2015-04-15 11:33:26 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2015-04-15 11:33:26 ----A---- C:\WINDOWS\system32\wucltux.dll
2015-04-15 11:33:26 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-04-15 11:33:26 ----A---- C:\WINDOWS\system32\wuauclt.exe
2015-04-15 11:33:26 ----A---- C:\WINDOWS\system32\wuapi.dll
2015-04-15 11:33:26 ----A---- C:\WINDOWS\system32\WinSetupUI.dll
2015-04-15 11:33:25 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2015-04-15 11:33:25 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2015-04-15 11:33:25 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2015-04-15 11:33:25 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2015-04-15 11:33:25 ----A---- C:\WINDOWS\system32\wuwebv.dll
2015-04-15 11:33:25 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2015-04-15 11:33:25 ----A---- C:\WINDOWS\system32\wups2.dll
2015-04-15 11:33:25 ----A---- C:\WINDOWS\system32\wups.dll
2015-04-15 11:33:25 ----A---- C:\WINDOWS\system32\wudriver.dll
2015-04-15 11:33:25 ----A---- C:\WINDOWS\system32\wuapp.exe
2015-04-15 11:33:25 ----A---- C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-04-15 11:33:25 ----A---- C:\WINDOWS\system32\storewuauth.dll
2015-04-15 11:33:22 ----A---- C:\WINDOWS\system32\invagent.dll
2015-04-15 11:33:22 ----A---- C:\WINDOWS\system32\generaltel.dll
2015-04-15 11:33:22 ----A---- C:\WINDOWS\system32\appraiser.dll
2015-04-15 11:33:22 ----A---- C:\WINDOWS\system32\aepdu.dll
2015-04-15 11:33:22 ----A---- C:\WINDOWS\system32\aeinv.dll
2015-04-15 11:33:22 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-04-15 11:33:21 ----A---- C:\WINDOWS\system32\devinv.dll

======List of files/folders modified in the last 1 month======

2015-05-04 19:42:59 ----D---- C:\WINDOWS\Prefetch
2015-05-04 19:40:10 ----D---- C:\WINDOWS\Temp
2015-05-04 19:40:10 ----D---- C:\WINDOWS\debug
2015-05-04 19:40:10 ----D---- C:\Windows
2015-05-04 19:38:59 ----D---- C:\ProgramData\Realtek
2015-05-04 19:30:34 ----D---- C:\WINDOWS\AppReadiness
2015-05-04 09:29:50 ----D---- C:\WINDOWS\Microsoft.NET
2015-05-03 15:53:18 ----D---- C:\WINDOWS\system32\NDF
2015-05-03 15:40:01 ----D---- C:\Program Files (x86)\Opera
2015-05-03 15:39:55 ----D---- C:\WINDOWS\system32\Tasks
2015-05-03 09:19:01 ----HD---- C:\Program Files\WindowsApps
2015-05-02 12:27:23 ----D---- C:\Users\Uživatel\AppData\Roaming\vlc
2015-05-01 14:21:16 ----SHD---- C:\System Volume Information
2015-04-30 06:25:50 ----D---- C:\WINDOWS\system32\config
2015-04-30 06:19:16 ----D---- C:\WINDOWS\system32\drivers
2015-04-28 08:47:57 ----A---- C:\IFRToolLog.txt
2015-04-27 07:31:06 ----D---- C:\WINDOWS\Inf
2015-04-26 10:30:26 ----D---- C:\WINDOWS\SoftwareDistribution
2015-04-26 10:18:47 ----D---- C:\Users\Uživatel\AppData\Roaming\DAEMON Tools Lite
2015-04-26 10:18:47 ----D---- C:\Program Files (x86)\Steam
2015-04-26 10:18:40 ----D---- C:\WINDOWS\Logs
2015-04-24 12:19:11 ----D---- C:\WINDOWS\WinSxS
2015-04-20 03:55:39 ----D---- C:\WINDOWS\system32\catroot2
2015-04-18 14:15:38 ----RD---- C:\Users
2015-04-18 14:09:22 ----RD---- C:\Program Files (x86)
2015-04-18 14:09:21 ----RD---- C:\Program Files
2015-04-18 13:58:19 ----SHD---- C:\WINDOWS\Installer
2015-04-18 11:27:58 ----RD---- C:\WINDOWS\System32
2015-04-18 11:27:58 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-04-18 11:24:46 ----D---- C:\WINDOWS\system32\DriverStore
2015-04-18 10:35:19 ----D---- C:\WINDOWS\AppCompat
2015-04-18 10:13:24 ----D---- C:\WINDOWS\rescache
2015-04-18 10:13:08 ----D---- C:\WINDOWS\system32\catroot
2015-04-18 10:02:40 ----D---- C:\Program Files (x86)\VROOT
2015-04-18 10:02:29 ----D---- C:\Program Files (x86)\Sony Mobile
2015-04-18 09:48:33 ----D---- C:\ProgramData\CyberLink
2015-04-17 09:18:51 ----D---- C:\WINDOWS\SysWOW64
2015-04-17 09:18:51 ----D---- C:\WINDOWS\system32\cs-CZ
2015-04-17 09:18:51 ----D---- C:\WINDOWS\apppatch
2015-04-17 09:18:50 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-04-17 09:18:50 ----D---- C:\Program Files\Internet Explorer
2015-04-17 09:18:49 ----SD---- C:\WINDOWS\system32\CompatTel
2015-04-17 09:18:49 ----D---- C:\WINDOWS\system32\appraiser
2015-04-17 08:34:40 ----D---- C:\WINDOWS\CbsTemp
2015-04-16 01:04:29 ----RSD---- C:\WINDOWS\assembly
2015-04-15 11:53:32 ----D---- C:\WINDOWS\system32\MRT
2015-04-15 11:48:48 ----A---- C:\WINDOWS\system32\MRT.exe
2015-04-15 11:48:40 ----D---- C:\ProgramData\Microsoft Help
2015-04-15 11:47:57 ----D---- C:\ProgramData\Skype
2015-04-15 11:47:54 ----RD---- C:\Program Files (x86)\Skype
2015-04-15 11:31:13 ----A---- C:\WINDOWS\system32\wuaext.dll
2015-04-14 00:24:21 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2015-04-09 12:02:29 ----D---- C:\Program Files (x86)\PokerStars
2015-04-05 14:16:06 ----D---- C:\WINDOWS\system32\sru

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 edevmon;edevmon; C:\WINDOWS\system32\DRIVERS\edevmon.sys [2013-09-09 185224]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-03-18 678384]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2014-11-13 31560]
R1 BfLwf;@oem38.inf,%BfLwf_Desc%;Qualcomm Atheros Bandwidth Control; C:\WINDOWS\system32\DRIVERS\bwcW8x64.sys [2014-04-10 82608]
R1 dtsoftbus01;@oem1.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2014-08-05 283064]
R1 eamonm;eamonm; C:\WINDOWS\system32\DRIVERS\eamonm.sys [2013-10-25 219184]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2013-09-09 155896]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 epfwwfpr;epfwwfpr; C:\WINDOWS\system32\DRIVERS\epfwwfpr.sys [2013-09-09 147096]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2014-10-29 53248]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2014-03-18 226304]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Zařízení Bluetooth (síť PAN); C:\WINDOWS\System32\drivers\bthpan.sys [2014-07-24 118272]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-10-29 81920]
R3 busenum;@oem39.inf,%SvcDesc%;SteelBusSvc; C:\WINDOWS\System32\drivers\SteelBus64.sys [2014-10-08 146944]
R3 ETD;@oem43.inf,%PS2DeviceDesc%;ELAN Input Device; C:\WINDOWS\system32\DRIVERS\ETD.sys [2014-08-28 428808]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2014-05-21 3791872]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2013-09-06 3425608]
R3 iwdbus;@oem24.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2014-05-06 27032]
R3 Ke2200;@oem37.inf,%BFTN.Service.DispName%;NDIS Miniport Driver for Killer e2201/e2202 PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\e22w8x64.sys [2014-03-27 130224]
R3 MBfilt;MBfilt; C:\WINDOWS\system32\drivers\MBfilt64.sys [2013-09-06 32344]
R3 MEIx64;@oem20.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2013-03-12 64624]
R3 NTIOLib_1_0_3;NTIOLib_1_0_3; \??\C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [2012-10-26 13368]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2014-11-13 13213512]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-03-28 19600]
R3 nvvad_WaveExtensible;@oem47.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2014-11-22 38032]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-01-30 167424]
R3 RtkBtFilter;@oem8.inf,%BtFilt.SvcDesc%;Realtek Bluetooth Filter Driver; C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys [2013-09-06 532552]
R3 RTSPER;@oem7.inf,%Rts5227PER%;Realtek PCIE Card Reader - PER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [2013-09-06 407112]
R3 RTWlanE;@netrtwlane.inf,%RTWlanE.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E – síťový adaptér; C:\WINDOWS\system32\DRIVERS\rtwlane.sys [2013-07-31 1936088]
R3 SAlphaPS2;@oem42.inf,%SvcDescBth%;SteelPs2Svc; C:\WINDOWS\System32\drivers\SAlphaPS264.sys [2014-10-08 27520]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2014-06-21 212736]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S2 BstHdDrv;BlueStacks Hypervisor; \??\c:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [2013-01-07 71032]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-10-29 1198080]
S3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys []
S3 ggflt;@oem53.inf,%SvcFltDesc%;SOMC USB Flash Driver Filter; C:\WINDOWS\System32\drivers\ggflt.sys [2015-03-28 16088]
S3 ggsomc;@oem53.inf,%SvcDesc%;SOMC USB Flash Driver; C:\WINDOWS\System32\drivers\ggsomc.sys [2015-03-28 30424]
S3 intaud_WaveExtensible;@oem23.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2014-05-06 38296]
S3 IntcDAud;@oem21.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2013-09-06 452088]
S3 KovaPlusFltr;@oem31.inf,%SvcDispName%;ROCCAT Kova[+] Mouse; C:\WINDOWS\system32\drivers\KovaPlusFltr.sys [2010-01-25 15104]
S3 Netaapl;@oem27.inf,%Netaapl.Service.DispName%;Apple Mobile Device Ethernet Service; C:\WINDOWS\system32\DRIVERS\netaapl64.sys [2014-06-10 23040]
S3 NTIOLib_MSIClock_CC;NTIOLib_MSIClock_CC; \??\C:\Program Files (x86)\MSI\Command Center\ClockGen\NTIOLib_X64.sys []
S3 NTIOLib_MSICOMM_CC;NTIOLib_MSICOMM_CC; \??\C:\Program Files (x86)\MSI\Command Center\NTIOLib_X64.sys []
S3 NTIOLib_MSICPU_CC;NTIOLib_MSICPU_CC; \??\C:\Program Files (x86)\MSI\Command Center\CPU\NTIOLib_X64.sys []
S3 NTIOLib_MSIDDR_CC;NTIOLib_MSIDDR_CC; \??\C:\Program Files (x86)\MSI\Command Center\DDR\NTIOLib_X64.sys []
S3 NTIOLib_MSISMB_CC;NTIOLib_MSISMB_CC; \??\C:\Program Files (x86)\MSI\Command Center\SMBus\NTIOLib_X64.sys []
S3 NTIOLib_MSISuperIO_CC;NTIOLib_MSISuperIO_CC; \??\C:\Program Files (x86)\MSI\Command Center\SuperIO\NTIOLib_X64.sys []
S3 USBAAPL64;@oem5.inf,%USBAAPL64.SvcDesc%;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl64.sys [2014-07-28 54784]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-10-07 60744]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service; c:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [2013-01-07 384888]
R2 BTDevManager;BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [2013-04-26 47104]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Endpoint Antivirus\x86\ekrn.exe [2013-10-07 1025584]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-03-28 1152144]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-03-22 15344]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2014-05-21 314696]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-02-13 731648]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2013-03-12 131544]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-03-12 169432]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-03-12 366552]
R2 Micro Star SCM;Micro Star SCM; C:\Program Files (x86)\SCM\MSIService.exe [2013-08-22 160768]
R2 MSI_SuperCharger;MSI_SuperCharger; C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe [2013-02-08 154112]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-03-28 1878672]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-03-28 22995600]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-11-12 934032]
R2 postgresql-8.4;postgresql-8.4 - PostgreSQL Server 8.4; c:\postgreSQL\bin\pg_ctl.exe [2014-02-18 66048]
R2 Qualcomm Atheros Killer Service V2;Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [2014-04-17 344576]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-10-15 643880]
S2 BstHdAndroidSvc;BlueStacks Android Service; c:\Program Files (x86)\BlueStacks\HD-Service.exe [2013-01-07 393080]
S2 CLKMSVC10_38F51D56;CyberLink Product - 2013/09/06 18:14:12; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [2013-04-02 247768]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-02 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-14 268464]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2014-05-21 278344]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Endpoint Antivirus\EHttpSrv.exe [2013-10-07 42048]
S3 ESHASRV;ESET SHA Service; C:\Program Files\ESET\ESET Endpoint Antivirus\EShaSrv.exe [2013-10-07 191368]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-02 116648]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-02-13 820184]
S3 iumsvc;Intel(R) Update Manager; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28 174368]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-04-14 836288]

-----------------EOF-----------------

Re: Vir v prohlížeči

Napsal: 04 kvě 2015 19:59
od vyosek
Zdravim :)

:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
  • Ulozte nejlepe na plochu
  • Ukoncete vsechny programy
  • Po spusteni probehne stazeni databaze
  • Kliknete na Scan a nasledne Clean
  • Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
:arrow: Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do okna vlozte skript nize

  • Kód: Vybrat vše

    autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;
  • Nasledne kliknete na Run Script
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Re: Vir v prohlížeči

Napsal: 04 kvě 2015 20:31
od Dushanek2
Zoek.exe v5.0.0.0 Updated 23-04-2015
Tool run by Dusan on po 04. 05. 2015 at 20:13:25,36.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\UIVATE~1\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

4. 5. 2015 20:16:17 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\AGEIA Technologies deleted successfully
C:\PROGRA~2\Rockstar Games deleted successfully
C:\PROGRA~2\Sony Mobile deleted successfully
C:\PROGRA~2\VROOT deleted successfully
C:\PROGRA~2\COMMON~1\Symantec Shared deleted successfully
C:\Program Files\Rockstar Games deleted successfully
C:\Users\UIVATE~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Registry Trash Keys Finder deleted successfully
C:\Users\UIVATE~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Sony Mobile deleted successfully
C:\PROGRA~3\Oracle deleted successfully
C:\Users\postgres\AppData\\LocalLow deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\PROGRA~2\AGEIA Technologies not found
C:\PROGRA~2\Rockstar Games not found
C:\PROGRA~2\Sony Mobile not found
C:\PROGRA~2\VROOT not found
C:\PROGRA~3\Package Cache deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
C:\windows\SysNative\Tasks\1c95655a-3728-4c5b-b662-e858f84934fc-1 deleted
C:\windows\SysNative\Tasks\1c95655a-3728-4c5b-b662-e858f84934fc-11 deleted
C:\windows\SysNative\Tasks\1c95655a-3728-4c5b-b662-e858f84934fc-5 deleted
C:\windows\SysNative\Tasks\1c95655a-3728-4c5b-b662-e858f84934fc-6 deleted
C:\windows\SysNative\tasks\temp_1c95655a-3728-4c5b-b662-e858f84934fc-2 deleted
C:\WINDOWS\SysNative\config\systemprofile\Searches deleted
"C:\Users\UIVATE~1\AppData\Local???????????????????" not deleted

==== Chromium Look ======================

Google Chrome Version: 42.0.2311.135 (Possible outdated, latest Stable version: , Mac and Linux. A list of changes is available in the <a href="https://chromium.googlesource.com/chrom ... og</a>.<br />)


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{7B0A2360-E3FB-44AA-8224-299994FC24D3} Unknown Url="Not_Found"
{B80664DC-927A-4AA5-9F67-861C69365B51} Google Url="http://www.google.com/search?q={searchT ... utEncoding?}"

==== Reset Google Chrome ======================

Nothing found to reset

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-361112718-1743478378-116688551-1002\Software\Microsoft\Internet Explorer\SearchScopes\{7B0A2360-E3FB-44AA-8224-299994FC24D3} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{7B0A2360-E3FB-44AA-8224-299994FC24D3} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{7B0A2360-E3FB-44AA-8224-299994FC24D3} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=15 folders=9 7393110 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\postgres\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\UIVATE~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\UIVATE~1\AppData\Local???????????????????" not deleted

==== EOF on po 04. 05. 2015 at 20:29:45,78 ======================

Re: Vir v prohlížeči

Napsal: 04 kvě 2015 20:33
od Dushanek2
# AdwCleaner v4.203 - Log vytvořen 04/05/2015 v 20:09:28
# Aktualizováno 30/04/2015 by Xplode
# Databáze : 2015-05-02.1 [Server]
# Operační system : Windows 8.1 (x64)
# Uživatelské jméno : Dusan - MSI
# Spuštěno z : C:\Users\Uživatel\Desktop\adwcleaner_4.203.exe
# Nastavení : Čištění

***** [ Služby ] *****


***** [ Soubory / Složky ] *****

Složka Smazáno : C:\Program Files (x86)\DriverToolkit
Složka Smazáno : C:\Users\Uživatel\AppData\Local\DriverToolkit
Soubor Smazáno : C:\Users\Uživatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TornTvDownloader.lnk

***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****


***** [ Registry ] *****

Hodnota Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [cmd]
Klíč Smazáno : HKCU\Software\TornTv Downloader
Klíč Smazáno : HKCU\Software\DriverTuner_Init
Klíč Smazáno : HKCU\Software\DriverTuner
Klíč Smazáno : HKCU\Software\DriverToolkit
Klíč Smazáno : HKU\.DEFAULT\Software\TornTv Downloader
Data Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Google Chrome v42.0.2311.135


*************************

AdwCleaner[R0].txt - [5312 bytů] - [03/09/2014 07:55:03]
AdwCleaner[R1].txt - [2192 bytů] - [03/09/2014 09:42:42]
AdwCleaner[R2].txt - [1844 bytů] - [04/05/2015 20:08:04]
AdwCleaner[S0].txt - [3962 bytů] - [03/09/2014 07:58:29]
AdwCleaner[S1].txt - [2253 bytů] - [03/09/2014 09:45:44]
AdwCleaner[S2].txt - [1550 bytů] - [04/05/2015 20:09:28]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1608 bytů] ##########

Re: Vir v prohlížeči

Napsal: 04 kvě 2015 20:41
od vyosek
Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz