VIRY.CZ

Známé se začal sekat notebook po tom, co si nejspíš natáhla do notebooku VIR skrze odkaz na Facebooku, na který "omylem" klikla. Něco v notebooku ale nejspíše zůstalo (projížděl jsem PC MBAM, CCleanerem,...) ale pořád se notebook začne (např. jen při otevření prohlížeče) strašně sekat. Přikládám log z RSIT.

-----

Logfile of random's system information tool 1.10 (written by random/random)
Run by Magda at 2015-05-17 10:11:40
Microsoft Windows 8 Pro
System drive C: has 641 GB (90%) free of 715 GB
Total RAM: 3535 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:11:47, on 17. 5. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.17267)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Magda.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
O2 - BHO: Advanced SystemCare Surfing Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPlugin_Protection.dll
O2 - BHO: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll
O3 - Toolbar: Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [HydraVisionDesktopManager] "C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
O4 - HKCU\..\Run: [HydraVisionDesktopManager] "C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
O9 - Extra button: (no name) - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - C:\Program Files\Classic Shell\ClassicIE_32.exe
O9 - Extra 'Tools' menuitem: Classic IE Settings - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - C:\Program Files\Classic Shell\ClassicIE_32.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: hpHotkeyMonitor - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: @oem8.inf,%hpservice_desc%;HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7420 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
"dwm.exe"
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
dashost.exe {dc8778ea-0aa6-434e-a538d6db1645db67}
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe"
"C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe"
"C:\Program Files\Windows Defender\MsMpEng.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-bcc4d1f1-9e24-44d3-b065-7d675ae0b489 -SystemEventPortName:HostProcess-50ad7b0b-b007-48f2-aada-128efe608e12 -IoCancelEventPortName:HostProcess-9f57089c-0def-406b-8c4f-18119e37a2d3 -NonStateChangingEventPortName:HostProcess-35823c8d-1a84-4ffa-a96f-eb1d1e60bf7a -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:e346659a-9b9f-4a37-aea3-7f123fc5429f -DeviceGroupId:
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-c4489c70-760d-4143-913e-e76be6a4ed10 -SystemEventPortName:HostProcess-1e7487e7-4d7d-4032-934e-2e7c8cb5b7ce -IoCancelEventPortName:HostProcess-88967803-e5a4-4aff-bceb-3ac56d827f40 -NonStateChangingEventPortName:HostProcess-5c5fe957-3a4f-49de-a7dd-c6d6bfb78eb1 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:e1cd6a13-21a5-46de-a43b-bb2f9b38edf1 -DeviceGroupId:WudfDefaultDevicePool
taskhostex.exe
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\Windows\Explorer.EXE
ClassicStartMenu.exe -startup
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
HydraDM64.exe -h:196820 "Maximalizovat na celou plochu" "Maximalizovat k rohům okna" "Obnovit pracovní plochu"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2140.0.1502107410\1027943934" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,19,42 --gpu-vendor-id=0x1002 --gpu-device-id=0x9990 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=14.100.0.0 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BackgroundRendererProcesses/AllowIdleFromBrowser/BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Extension (public)/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Unused_4/*PasswordGeneration/Disabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_24/*UMA-Uniformity-Trial-10-Percent/group_05/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_01/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultDisabled/V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Disabled/*Win32kLockdown/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=2140 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --channel="2140.1.1434788749\1645941017" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BackgroundRendererProcesses/AllowIdleFromBrowser/BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Extension (public)/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Unused_4/*PasswordGeneration/Disabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_24/*UMA-Uniformity-Trial-10-Percent/group_05/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_01/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultDisabled/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Disabled/*Win32kLockdown/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=2140 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --channel="2140.2.1694820931\255947280" /prefetch:673131151
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0

C:\Windows\system32\msiexec.exe /V
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*BackgroundRendererProcesses/AllowIdleFromBrowser/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Extension (public)/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/Unused_4/*PasswordGeneration/Disabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_24/*UMA-Uniformity-Trial-10-Percent/group_05/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_01/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultDisabled/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Disabled/*Win32kLockdown/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=2140 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --channel="2140.15.1622662611\2017324082" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*BackgroundRendererProcesses/AllowIdleFromBrowser/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Extension (public)/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/Unused_4/*PasswordGeneration/Disabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_24/*UMA-Uniformity-Trial-10-Percent/group_05/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_01/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultDisabled/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Disabled/*Win32kLockdown/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=2140 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --channel="2140.18.750319256\133327502" /prefetch:673131151
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 552 556 564 65536 560
"C:\Users\Magda\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\Uninstaller_SkipUac_Administrator.job - C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe /UninstallExplorer
C:\Windows\tasks\Uninstaller_SkipUac_Magda.job - C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe /UninstallExplorer

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
ExplorerWnd Helper - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll [2015-02-07 2471744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{449D0D6E-2412-4E61-B68F-1CB625CD9E52}]
ExplorerBHO Class - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-04-09 810176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office15\URLREDIR.DLL [2012-10-01 877720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2012-10-01 2322576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA801577-E6AD-4BD5-8F71-4BE0154331A4}]
ClassicIEBHO Class - C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2015-04-09 487616]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{449D0D6E-2412-4E61-B68F-1CB625CD9E52}]
ExplorerBHO Class - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-04-09 688320]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL [2012-10-01 704664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}]
Advanced SystemCare Surfing Protection - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPlugin_Protection.dll [2015-04-01 672032]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA801577-E6AD-4BD5-8F71-4BE0154331A4}]
ClassicIEBHO Class - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2015-04-09 444096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{553891B7-A0D5-4526-BE18-D3CE461D6310} - Classic Explorer Bar - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-04-09 810176]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{553891B7-A0D5-4526-BE18-D3CE461D6310} - Classic Explorer Bar - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-04-09 688320]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2015-05-13 1703424]
"Classic Start Menu"=C:\Program Files\Classic Shell\ClassicStartMenu.exe [2015-04-09 163520]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"HydraVisionDesktopManager"=C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [2014-04-17 1967616]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
c:\program files (x86)\common files\adobe\arm\1.0\adobearm.exe [2014-11-20 1021128]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
c:\program files (x86)\common files\adobe\cs5servicemanager\cs5servicemanager.exe [2010-02-22 406992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HydraVisionDesktopManager]
c:\program files (x86)\ati technologies\hydravision\hydradm.exe [2014-04-17 1967616]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QLBController]
c:\program files (x86)\hewlett-packard\hp hotkey support\qlbcontroller.exe [2013-10-16 337184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
c:\program files (x86)\common files\adobe\switchboard\switchboard.exe [2010-02-19 517096]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2014-04-17 767200]
"HydraVisionDesktopManager"=C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [2014-04-17 1967616]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\2A88E335.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\2A88E335.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StartMenuService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\str]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"PromptOnSecureDesktop"=0
"ConsentPromptBehaviorAdmin"=0
"disablecad"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2015-05-17 10:11:41 ----D---- C:\Program Files\trend micro
2015-05-17 10:11:40 ----D---- C:\rsit
2015-05-14 18:41:19 ----D---- C:\Windows\temp
2015-05-14 18:41:00 ----A---- C:\ComboFix.txt
2015-05-14 18:21:08 ----SHD---- C:\$RECYCLE.BIN
2015-05-14 18:04:06 ----A---- C:\Windows\MBR.exe
2015-05-14 18:04:05 ----A---- C:\Windows\zip.exe
2015-05-14 18:04:05 ----A---- C:\Windows\SWXCACLS.exe
2015-05-14 18:04:05 ----A---- C:\Windows\SWSC.exe
2015-05-14 18:04:05 ----A---- C:\Windows\SWREG.exe
2015-05-14 18:04:05 ----A---- C:\Windows\sed.exe
2015-05-14 18:04:05 ----A---- C:\Windows\PEV.exe
2015-05-14 18:04:05 ----A---- C:\Windows\NIRCMD.exe
2015-05-14 18:04:05 ----A---- C:\Windows\grep.exe
2015-05-14 18:03:48 ----D---- C:\Qoobox
2015-05-14 18:03:26 ----D---- C:\Windows\erdnt
2015-05-13 21:18:22 ----A---- C:\Windows\system32\drivers\2A88E335.sys
2015-05-13 21:18:21 ----D---- C:\KVRT_Data
2015-05-13 21:18:21 ----A---- C:\Windows\system32\drivers\05032994.sys
2015-05-13 21:17:57 ----D---- C:\ProgramData\AppData
2015-05-13 20:41:29 ----A---- C:\Windows\system32\IObitSmartDefragExtension.dll
2015-05-13 20:41:28 ----A---- C:\Windows\system32\SmartDefragBootTime.exe
2015-05-13 20:32:44 ----D---- C:\Program Files\CCleaner
2015-05-13 19:44:04 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2015-05-13 19:44:04 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2015-05-13 19:44:04 ----A---- C:\Windows\system32\XAudio2_7.dll
2015-05-13 19:44:04 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2015-05-13 19:44:03 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2015-05-13 19:44:03 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2015-05-13 19:44:03 ----A---- C:\Windows\system32\xactengine3_7.dll
2015-05-13 19:44:03 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2015-05-13 19:44:02 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2015-05-13 19:44:02 ----A---- C:\Windows\system32\d3dcsx_43.dll
2015-05-13 19:44:01 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2015-05-13 19:44:01 ----A---- C:\Windows\system32\d3dx11_43.dll
2015-05-13 19:44:00 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2015-05-13 19:44:00 ----A---- C:\Windows\system32\D3DX9_43.dll
2015-05-13 19:44:00 ----A---- C:\Windows\system32\d3dx10_43.dll
2015-05-13 19:43:59 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2015-05-13 19:43:59 ----A---- C:\Windows\system32\XAudio2_6.dll
2015-05-13 19:43:59 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2015-05-13 19:43:58 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2015-05-13 19:43:58 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2015-05-13 19:43:58 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2015-05-13 19:43:58 ----A---- C:\Windows\system32\xactengine3_6.dll
2015-05-13 19:43:57 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2015-05-13 19:43:57 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2015-05-13 19:43:56 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2015-05-13 19:43:56 ----A---- C:\Windows\system32\XAudio2_5.dll
2015-05-13 19:43:56 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2015-05-13 19:43:55 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2015-05-13 19:43:55 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2015-05-13 19:43:55 ----A---- C:\Windows\system32\xactengine3_5.dll
2015-05-13 19:43:55 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2015-05-13 19:43:54 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2015-05-13 19:43:54 ----A---- C:\Windows\system32\d3dcsx_42.dll
2015-05-13 19:43:53 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2015-05-13 19:43:53 ----A---- C:\Windows\system32\d3dx11_42.dll
2015-05-13 19:43:52 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2015-05-13 19:43:52 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2015-05-13 19:43:52 ----A---- C:\Windows\system32\D3DX9_42.dll
2015-05-13 19:43:52 ----A---- C:\Windows\system32\d3dx10_42.dll
2015-05-13 19:43:51 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2015-05-13 19:43:51 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2015-05-13 19:43:51 ----A---- C:\Windows\system32\d3dx10_41.dll
2015-05-13 19:43:51 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2015-05-13 19:43:50 ----A---- C:\Windows\system32\D3DX9_41.dll
2015-05-13 19:43:49 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2015-05-13 19:43:49 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2015-05-13 19:43:49 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2015-05-13 19:43:49 ----A---- C:\Windows\system32\XAudio2_4.dll
2015-05-13 19:43:48 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2015-05-13 19:43:48 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2015-05-13 19:43:48 ----A---- C:\Windows\system32\xactengine3_4.dll
2015-05-13 19:43:48 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2015-05-13 19:43:47 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2015-05-13 19:43:47 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2015-05-13 19:43:47 ----A---- C:\Windows\system32\d3dx10_40.dll
2015-05-13 19:43:47 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2015-05-13 19:43:46 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2015-05-13 19:43:46 ----A---- C:\Windows\system32\D3DX9_40.dll
2015-05-13 19:43:45 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2015-05-13 19:43:45 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2015-05-13 19:43:45 ----A---- C:\Windows\system32\XAudio2_3.dll
2015-05-13 19:43:45 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2015-05-13 19:43:44 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2015-05-13 19:43:44 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2015-05-13 19:43:44 ----A---- C:\Windows\system32\xactengine3_3.dll
2015-05-13 19:43:44 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2015-05-13 19:43:43 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2015-05-13 19:43:43 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2015-05-13 19:43:43 ----A---- C:\Windows\system32\XAudio2_2.dll
2015-05-13 19:43:43 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2015-05-13 19:43:42 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2015-05-13 19:43:42 ----A---- C:\Windows\system32\xactengine3_2.dll
2015-05-13 19:43:42 ----A---- C:\Windows\system32\d3dx10_39.dll
2015-05-13 19:43:42 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2015-05-13 19:43:41 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2015-05-13 19:43:41 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2015-05-13 19:43:41 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2015-05-13 19:43:41 ----A---- C:\Windows\system32\D3DX9_39.dll
2015-05-13 19:43:40 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2015-05-13 19:43:40 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2015-05-13 19:43:40 ----A---- C:\Windows\system32\XAudio2_1.dll
2015-05-13 19:43:40 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2015-05-13 19:43:39 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2015-05-13 19:43:39 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2015-05-13 19:43:39 ----A---- C:\Windows\system32\xactengine3_1.dll
2015-05-13 19:43:39 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2015-05-13 19:43:38 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2015-05-13 19:43:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2015-05-13 19:43:38 ----A---- C:\Windows\system32\D3DX9_38.dll
2015-05-13 19:43:38 ----A---- C:\Windows\system32\d3dx10_38.dll
2015-05-13 19:43:38 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2015-05-13 19:43:37 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2015-05-13 19:43:37 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2015-05-13 19:43:37 ----A---- C:\Windows\system32\XAudio2_0.dll
2015-05-13 19:43:36 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2015-05-13 19:43:36 ----A---- C:\Windows\system32\xactengine3_0.dll
2015-05-13 19:43:35 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2015-05-13 19:43:35 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2015-05-13 19:43:35 ----A---- C:\Windows\system32\d3dx10_37.dll
2015-05-13 19:43:35 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2015-05-13 19:43:34 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2015-05-13 19:43:34 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2015-05-13 19:43:34 ----A---- C:\Windows\system32\D3DX9_37.dll
2015-05-13 19:43:33 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2015-05-13 19:43:33 ----A---- C:\Windows\system32\xactengine2_10.dll
2015-05-13 19:43:32 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2015-05-13 19:43:32 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2015-05-13 19:43:31 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2015-05-13 19:43:31 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2015-05-13 19:43:31 ----A---- C:\Windows\system32\d3dx9_36.dll
2015-05-13 19:43:31 ----A---- C:\Windows\system32\d3dx10_36.dll
2015-05-13 19:43:31 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2015-05-13 19:43:30 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2015-05-13 19:43:30 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2015-05-13 19:43:29 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2015-05-13 19:43:29 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2015-05-13 19:43:29 ----A---- C:\Windows\system32\d3dx10_35.dll
2015-05-13 19:43:29 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2015-05-13 19:43:28 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2015-05-13 19:43:28 ----A---- C:\Windows\system32\d3dx9_35.dll
2015-05-13 19:43:27 ----A---- C:\Windows\system32\xactengine2_8.dll
2015-05-13 19:43:26 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2015-05-13 19:43:25 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2015-05-13 19:43:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2015-05-13 19:43:25 ----A---- C:\Windows\system32\d3dx9_34.dll
2015-05-13 19:43:25 ----A---- C:\Windows\system32\d3dx10_34.dll
2015-05-13 19:43:25 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2015-05-13 19:43:24 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2015-05-13 19:43:23 ----A---- C:\Windows\system32\d3dx10_33.dll
2015-05-13 19:43:23 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2015-05-13 19:43:22 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2015-05-13 19:43:22 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2015-05-13 19:43:22 ----A---- C:\Windows\system32\d3dx9_33.dll
2015-05-13 19:43:21 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2015-05-13 19:43:21 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2015-05-13 19:43:21 ----A---- C:\Windows\system32\xactengine2_6.dll
2015-05-13 19:43:20 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2015-05-13 19:43:20 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2015-05-13 19:43:20 ----A---- C:\Windows\system32\xactengine2_5.dll
2015-05-13 19:43:20 ----A---- C:\Windows\system32\d3dx10.dll
2015-05-13 19:43:19 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2015-05-13 19:43:19 ----A---- C:\Windows\system32\xactengine2_4.dll
2015-05-13 19:43:19 ----A---- C:\Windows\system32\d3dx9_32.dll
2015-05-13 19:43:18 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2015-05-13 19:43:16 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2015-05-13 19:43:16 ----A---- C:\Windows\system32\xinput1_2.dll
2015-05-13 19:43:16 ----A---- C:\Windows\system32\xactengine2_3.dll
2015-05-13 19:43:15 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2015-05-13 19:43:15 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2015-05-13 19:43:15 ----A---- C:\Windows\system32\xinput1_1.dll
2015-05-13 19:43:15 ----A---- C:\Windows\system32\xactengine2_2.dll
2015-05-13 19:43:14 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2015-05-13 19:43:13 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2015-05-13 19:43:13 ----A---- C:\Windows\system32\xactengine2_1.dll
2015-05-13 19:43:03 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2015-05-13 19:43:03 ----A---- C:\Windows\system32\d3dx9_30.dll
2015-05-13 19:43:02 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2015-05-13 19:43:02 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2015-05-13 19:43:02 ----A---- C:\Windows\system32\xactengine2_0.dll
2015-05-13 19:43:02 ----A---- C:\Windows\system32\x3daudio1_0.dll
2015-05-13 19:43:01 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2015-05-13 19:43:01 ----A---- C:\Windows\system32\d3dx9_29.dll
2015-05-13 19:43:00 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2015-05-13 19:43:00 ----A---- C:\Windows\system32\d3dx9_28.dll
2015-05-13 19:42:58 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2015-05-13 19:42:58 ----A---- C:\Windows\system32\d3dx9_27.dll
2015-05-13 19:42:57 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2015-05-13 19:42:57 ----A---- C:\Windows\system32\d3dx9_26.dll
2015-05-13 19:42:56 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2015-05-13 19:42:56 ----A---- C:\Windows\system32\d3dx9_25.dll
2015-05-13 19:42:55 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2015-05-13 19:42:55 ----A---- C:\Windows\system32\d3dx9_24.dll
2015-05-13 19:41:23 ----A---- C:\Windows\system32\drivers\athw8x.sys
2015-05-13 19:40:46 ----N---- C:\Windows\system32\stapi64.dll
2015-05-13 19:40:45 ----A---- C:\Windows\system32\HPToneCtrls64.dll
2015-05-13 19:40:44 ----A---- C:\Windows\system32\stcplx64.dll
2015-05-13 19:40:43 ----A---- C:\Windows\system32\stapo64.dll
2015-05-13 19:40:43 ----A---- C:\Windows\system32\slapoi64.dll
2015-05-13 19:40:42 ----A---- C:\Windows\system32\stlang64.dll
2015-05-13 19:40:42 ----A---- C:\Windows\system32\IDTNX.dll
2015-05-13 19:40:42 ----A---- C:\Windows\system32\IDTNJ.exe
2015-05-13 19:40:42 ----A---- C:\Windows\system32\IDTNHP.dll
2015-05-13 19:40:42 ----A---- C:\Windows\system32\IDTNGUI.exe
2015-05-13 19:40:42 ----A---- C:\Windows\sttray64.exe
2015-05-13 19:40:37 ----D---- C:\Program Files\IDT
2015-05-13 19:40:36 ----D---- C:\Windows\system32\SRSLabs
2015-05-13 19:39:20 ----A---- C:\Windows\system32\drivers\stwrt64.sys
2015-05-13 19:39:17 ----A---- C:\Windows\system32\st646499.dll
2015-05-13 19:38:55 ----A---- C:\Windows\system32\drivers\amd_xata.sys
2015-05-13 19:38:55 ----A---- C:\Windows\system32\drivers\amd_sata.sys
2015-05-13 19:37:14 ----A---- C:\Windows\SYSWOW64\SynTPCom.dll
2015-05-13 19:37:14 ----A---- C:\Windows\system32\SET3402.tmp
2015-05-13 19:37:13 ----A---- C:\Windows\system32\SET34C.tmp
2015-05-13 19:37:13 ----A---- C:\Windows\system32\drivers\SynTP.sys
2015-05-13 19:37:09 ----A---- C:\Windows\SYSWOW64\SynCom.dll
2015-05-13 19:37:09 ----A---- C:\Windows\system32\SynCOM.dll
2015-05-13 19:35:35 ----A---- C:\Windows\system32\RtNicProp64.dll
2015-05-13 19:35:35 ----A---- C:\Windows\system32\drivers\Rt630x64.sys
2015-05-13 19:25:11 ----A---- C:\Windows\SYSWOW64\drivers\HWiNFO64A.SYS
2015-05-13 19:20:24 ----A---- C:\Windows\SYSWOW64\sdbinst.exe
2015-05-13 19:20:24 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2015-05-13 19:20:24 ----A---- C:\Windows\system32\sdbinst.exe
2015-05-13 19:20:24 ----A---- C:\Windows\system32\apphelp.dll
2015-05-13 19:20:24 ----A---- C:\Windows\system32\aelupsvc.dll
2015-05-13 18:59:08 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-05-13 17:26:05 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 17:26:05 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 16:47:37 ----A---- C:\Windows\system32\win32k.sys
2015-05-13 16:47:37 ----A---- C:\Windows\system32\FntCache.dll
2015-05-13 16:47:37 ----A---- C:\Windows\system32\DWrite.dll
2015-05-13 16:47:36 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2015-05-13 16:47:18 ----A---- C:\Windows\system32\mshtml.dll
2015-05-13 16:47:11 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-05-13 16:47:08 ----A---- C:\Windows\system32\ieframe.dll
2015-05-13 16:47:06 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-05-13 16:47:03 ----A---- C:\Windows\system32\wininet.dll
2015-05-13 16:47:02 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-05-13 16:47:02 ----A---- C:\Windows\system32\urlmon.dll
2015-05-13 16:47:02 ----A---- C:\Windows\system32\jscript.dll
2015-05-13 16:47:01 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-05-13 16:47:01 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-05-13 16:47:01 ----A---- C:\Windows\system32\iertutil.dll
2015-05-13 16:47:00 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-05-13 16:47:00 ----A---- C:\Windows\system32\vbscript.dll
2015-05-13 16:46:59 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-05-13 16:46:59 ----A---- C:\Windows\system32\msfeeds.dll
2015-05-13 16:46:56 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-05-13 16:46:56 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2015-05-13 16:46:56 ----A---- C:\Windows\system32\inetcomm.dll
2015-05-13 16:46:55 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-05-13 16:46:55 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-05-13 16:46:55 ----A---- C:\Windows\system32\dxtrans.dll
2015-05-13 16:46:54 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-05-13 16:46:54 ----A---- C:\Windows\system32\jscript9.dll
2015-05-13 16:46:54 ----A---- C:\Windows\system32\iedkcs32.dll
2015-05-13 16:46:53 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-05-13 16:46:53 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-05-13 16:46:53 ----A---- C:\Windows\system32\mshtmled.dll
2015-05-13 16:46:46 ----A---- C:\Windows\system32\services.exe
2015-05-13 16:45:40 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-05-13 16:45:40 ----A---- C:\Windows\system32\schannel.dll
2015-05-13 16:45:40 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-05-13 16:45:40 ----A---- C:\Windows\system32\drivers\cng.sys
2015-05-13 16:44:01 ----A---- C:\Windows\system32\tssdisai.dll
2015-05-13 16:44:01 ----A---- C:\Windows\system32\poqexec.exe
2015-05-13 16:40:24 ----A---- C:\Windows\system32\wevtsvc.dll
2015-05-13 16:39:10 ----A---- C:\Windows\SYSWOW64\PhotoMetadataHandler.dll
2015-05-13 16:39:10 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2015-05-13 16:35:49 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2015-05-13 16:35:49 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2015-05-13 16:35:49 ----A---- C:\Windows\system32\wpdshext.dll
2015-05-13 16:22:49 ----D---- C:\ProgramData\Malwarebytes

======List of files/folders modified in the last 1 month======

2015-05-17 10:11:41 ----RD---- C:\Program Files
2015-05-17 10:11:39 ----D---- C:\Windows\Prefetch
2015-05-17 10:04:06 ----D---- C:\Program Files (x86)\IObit
2015-05-17 10:04:03 ----D---- C:\Windows\system32\Tasks
2015-05-17 10:04:02 ----D---- C:\Windows\system32\Drivers
2015-05-17 10:01:32 ----D---- C:\Windows\system32\config
2015-05-17 09:02:30 ----D---- C:\Windows\system32\sru
2015-05-17 03:08:34 ----D---- C:\Windows\Microsoft.NET
2015-05-15 17:40:59 ----SHD---- C:\System Volume Information
2015-05-15 16:55:31 ----D---- C:\Windows\WinSxS
2015-05-15 14:05:59 ----D---- C:\Windows\system32\catroot2
2015-05-14 19:08:58 ----D---- C:\ProgramData\ClassicShell
2015-05-14 19:00:42 ----RSD---- C:\Windows\assembly
2015-05-14 18:59:49 ----D---- C:\Windows\debug
2015-05-14 18:50:11 ----D---- C:\ProgramData
2015-05-14 18:50:07 ----SHD---- C:\Windows\Installer
2015-05-14 18:50:06 ----RD---- C:\Windows\System32
2015-05-14 18:50:06 ----D---- C:\Program Files\Classic Shell
2015-05-14 18:50:05 ----D---- C:\Windows\SysWOW64
2015-05-14 18:48:30 ----D---- C:\Windows\Tasks
2015-05-14 18:41:19 ----D---- C:\Windows
2015-05-14 18:21:06 ----A---- C:\Windows\system.ini
2015-05-14 18:20:37 ----D---- C:\Windows\system32\drivers\etc
2015-05-14 18:09:04 ----D---- C:\Windows\SYSWOW64\drivers
2015-05-14 18:09:04 ----D---- C:\Windows\apppatch
2015-05-14 18:09:03 ----D---- C:\Program Files (x86)\Common Files
2015-05-14 17:52:16 ----D---- C:\Windows\AUInstallAgent
2015-05-14 17:52:07 ----HD---- C:\Program Files\WindowsApps
2015-05-14 17:50:19 ----D---- C:\Windows\SoftwareDistribution
2015-05-14 00:35:48 ----D---- C:\Windows\rescache
2015-05-13 23:03:52 ----D---- C:\Program Files (x86)\Ashampoo
2015-05-13 23:02:54 ----RD---- C:\Program Files (x86)
2015-05-13 22:32:35 ----D---- C:\Program Files (x86)\IPCam ActiveX
2015-05-13 22:28:16 ----D---- C:\Users\Magda\AppData\Roaming\IObit
2015-05-13 22:21:39 ----D---- C:\Users\Magda\AppData\Roaming\ClassicShell
2015-05-13 21:07:03 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-05-13 21:07:02 ----D---- C:\Windows\Inf
2015-05-13 20:36:12 ----D---- C:\Windows\Minidump
2015-05-13 20:36:12 ----D---- C:\Windows\Logs
2015-05-13 19:58:10 ----D---- C:\Windows\CbsTemp
2015-05-13 19:54:41 ----D---- C:\ProgramData\ProductData
2015-05-13 19:46:00 ----D---- C:\Windows\system32\catroot
2015-05-13 19:44:50 ----D---- C:\Program Files (x86)\Adobe
2015-05-13 19:41:49 ----D---- C:\Windows\system32\DriverStore
2015-05-13 19:25:12 ----D---- C:\ProgramData\IObit
2015-05-13 18:55:06 ----D---- C:\Program Files\Windows Journal
2015-05-13 18:55:04 ----D---- C:\Program Files (x86)\Internet Explorer
2015-05-13 18:55:03 ----D---- C:\Program Files\Internet Explorer
2015-05-13 18:54:40 ----RSD---- C:\Windows\Fonts
2015-05-13 18:54:38 ----D---- C:\Windows\system32\AdvancedInstallers
2015-05-13 18:54:36 ----D---- C:\Windows\system32\drivers\UMDF
2015-05-13 17:33:09 ----D---- C:\Windows\system32\MRT
2015-05-13 17:29:10 ----A---- C:\Windows\system32\MRT.exe
2015-05-13 16:45:39 ----D---- C:\Users\Magda\AppData\Roaming\Skype
2015-05-13 16:44:27 ----D---- C:\ProgramData\Skype
2015-05-13 16:44:06 ----RD---- C:\Program Files (x86)\Skype
2015-05-13 16:36:54 ----A---- C:\Windows\SYSWOW64\PrintConfig.dll
2015-04-26 12:54:46 ----D---- C:\Windows\system32\NDF

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 2A88E335;2A88E335; C:\Windows\system32\drivers\2A88E335.sys [2015-05-13 457824]
R0 amd_sata;amd_sata; C:\Windows\System32\drivers\amd_sata.sys [2015-05-13 81608]
R0 amd_xata;amd_xata; C:\Windows\System32\drivers\amd_xata.sys [2015-05-13 25800]
R0 amdkmpfd;@oem12.inf,%AMDKMPFD_svcdesc%;AMD PCI Root Bus Lower Filter; C:\Windows\System32\drivers\amdkmpfd.sys [2013-12-13 36608]
R0 hpdskflt;@oem8.inf,%service_desc%;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2013-07-30 31040]
R1 dtsoftbus01;@oem5.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\Windows\System32\drivers\dtsoftbus01.sys [2013-12-17 283064]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2015-05-13 26528]
R1 MpKsl3168c529;MpKsl3168c529; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{318A8B4B-05E1-4BF9-86CE-4A19D298CF83}\MpKsl3168c529.sys [2015-05-17 45352]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [2012-07-26 64000]
R2 AODDriver4.3;AODDriver4.3; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2014-02-11 59616]
R3 Accelerometer;@oem8.inf,%accelerometer_desc%;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2013-07-30 43328]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2014-04-18 15376384]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2014-04-18 638976]
R3 athr;@oem20.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athw8x.sys [2015-05-13 3915264]
R3 AtiHDAudioService;@oem14.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW86.sys [2013-12-19 215040]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\Windows\System32\drivers\BthEnum.sys [2013-01-09 51712]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\Windows\system32\DRIVERS\BthLEEnum.sys [2012-07-26 202752]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2012-07-26 119808]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2013-01-09 74752]
R3 HpqKbFiltr;@oem10.inf,%HpqKbFiltr.SvcDesc%;HpqKbFilter Driver; C:\Windows\System32\drivers\HpqKbFiltr.sys [2012-08-27 26504]
R3 JMCR;JMCR; C:\Windows\System32\drivers\jmcr.sys [2013-04-26 176880]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\System32\drivers\rfcomm.sys [2013-03-01 156672]
R3 RTL8168;@oem16.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2015-05-13 881368]
R3 SensorsServiceDriver;@sensorsservicedriver.inf,%WudfSensorsServiceDriverDisplayName%;Služba Reflektor UMDF pro knihovnu SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 198656]
R3 SNP2UVC;@oem3.inf,%SERVICE_DISPLAY_NAME%;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2012-11-28 1866080]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2015-05-13 551936]
R3 SynTP;@oem17.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2015-05-13 555760]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [2012-07-26 17920]
R3 WirelessButtonDriver;@oem6.inf,%ServiceDesc%;HP Wireless Button Driver Service; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [2013-06-27 20800]
S0 amdkmafd;@oem11.inf,%AMDKMAFD_svcdesc%;AMD Audio Bus Lower Filter; C:\Windows\System32\drivers\amdkmafd.sys [2012-09-23 21160]
S2 APXACC;@oem15.inf,%APPEX_ACC_SERVICE_NAME%;AppEx Networks Accelerator LWF; C:\Windows\system32\DRIVERS\appexDrv.sys []
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2013-03-01 1175040]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2013-07-06 210560]
S3 WinUsb;@wpdmtp.inf,%WinUsb.SvcDesc%;WinUsb; C:\Windows\System32\drivers\WinUsb.sys [2012-07-26 57344]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 hpHotkeyMonitor;hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [2013-10-16 681760]
R2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2015-03-26 2585376]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2015-05-13 340480]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2013-01-23 1006424]
S3 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088]
S3 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2014-04-18 239616]
S3 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2014-04-17 344064]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2012-07-06 43616]
S3 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-20 116648]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-20 116648]
S3 hpsrv;@oem8.inf,%hpservice_desc%;HP Service; C:\Windows\system32\Hpservice.exe [2013-07-30 33600]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-05-16 119408]
S3 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2013-07-18 762192]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-12-08 150600]
S3 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-02-18 315488]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

-----------------EOF-----------------

Zdravim

Byl jste tu 2x a ani jednou jste kontrolu nedokoncil. Ma cenu se tim zabyvat, nebo to bude zase jen mrhani casem?

Minule sken přes MBAM už nic nenašel, předpokládal jsem tedy, že už to bylo čisté (+ se počítač začal chovat už normálně).

Predminule jste neudelal ani prvni krok Cisteni je potreba dotahnout vzdycky az do konce, i kdyz je zlepseni nekdy videt uz po prvnim kroku. Aby tam nezustaly nejake zbytky


Odinstalujte vse od IObit. Dela to vic skody nez uzitku.

Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.

# AdwCleaner v4.204 - Log vytvořen 17/05/2015 v 12:02:10
# Aktualizováno 12/05/2015 by Xplode
# Databáze : 2015-05-12.2 [Server]
# Operační system : Windows 8 Pro (x64)
# Uživatelské jméno : Magda - HP-NB
# Spuštěno z : C:\Users\Magda\Desktop\adwcleaner_4.204.exe
# Nastavení : Čištění

***** [ Služby ] *****


***** [ Soubory / Složky ] *****

Složka Smazáno : C:\Program Files (x86)\DM
Složka Smazáno : C:\Program Files\DM

***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}

***** [ Prohlížeče ] *****

-\\ Internet Explorer v10.0.9200.17267


-\\ Google Chrome v42.0.2311.152


*************************

AdwCleaner[R0].txt - [1268 bytů] - [17/05/2015 12:00:18]
AdwCleaner[S0].txt - [1187 bytů] - [17/05/2015 12:02:10]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1245 bytů] ##########

Jeste mam dotaz. Kdo tam pouzil ComboFix?

Kdybyste si precetl pravidla fora http://forum.viry.cz/viewtopic.php?f=12&t=5601 , docetl byste se mimo jine toto

2. Před položením dotazu použijte tlačítko Hledat. Možná již někdo problém podobným Vašemu řešil. Pokud ale ve vyřešeném tématu budou aplikovány různé utility\aplikace, nespouštějte je. Utility se používají až na pokyn rádce, jelikož mohou mazat stopy po havěti a v rukou ne-oborníka může mít jejich použití nedozírné následky.

3. Zvláště utilitu ComboFix nespouštějte i když Vám ji poradil kamarád\nějaký rádoby odborný web. Naše fórum je jediné z CZ-SK antivirových fór, která mají právo luštit logy z ComboFixu a mámě též plnou podporu autora této utility a přístup k nejaktuálnějším informacím a návodům.

CF smaze veskere stopy pripadne nakazy a ja ted muzu tak akorat varit z vody, jak se rika
Zkusim se na to podivat, ale pokud se to bude opakovat, bude pomoc odmitnuta.
A taky upozornuji, ze se to mozna protahne a vysledek vubec neni jisty



Dejte mi sem jeho log, najdete ho zde C:\ComboFix.txt

ComboFix 15-05-13.01 - Magda . 05. 2015 18:05:48.1.2 - x64
Microsoft Windows 8 Pro 6.2.9200.0.1250.420.1029.18.3535.2443 [GMT 2:00]
Spuštěný z: c:\users\Magda\Downloads\ComboFix.exe
AV: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\IsUn0405.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2015-04-14 do 2015-05-14 )))))))))))))))))))))))))))))))
.
.
2015-05-14 15:51 . 2015-04-04 06:25 12032440 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{5ACA8813-B8F8-401D-8F86-5775C60B9E89}\mpengine.dll
2015-05-13 19:18 . 2015-05-13 19:18 457824 ----a-w- c:\windows\system32\drivers\2A88E335.sys
2015-05-13 19:18 . 2015-05-13 19:18 -------- d-----w- C:\KVRT_Data
2015-05-13 19:18 . 2015-05-13 19:18 85600 ----a-w- c:\windows\system32\drivers\05032994.sys
2015-05-13 18:41 . 2014-06-04 13:17 21184 ----a-w- c:\windows\system32\drivers\SmartDefragDriver.sys
2015-05-13 18:32 . 2015-05-13 18:32 -------- d-----w- c:\program files\CCleaner
2015-05-13 17:44 . 2010-06-02 02:55 74072 ----a-w- c:\windows\SysWow64\XAPOFX1_5.dll
2015-05-13 17:44 . 2010-06-02 02:55 527192 ----a-w- c:\windows\SysWow64\XAudio2_7.dll
2015-05-13 17:44 . 2010-06-02 02:55 239960 ----a-w- c:\windows\SysWow64\xactengine3_7.dll
2015-05-13 17:44 . 2010-05-26 09:41 2106216 ----a-w- c:\windows\SysWow64\D3DCompiler_43.dll
2015-05-13 17:44 . 2010-05-26 09:41 1868128 ----a-w- c:\windows\SysWow64\d3dcsx_43.dll
2015-05-13 17:44 . 2010-05-26 09:41 248672 ----a-w- c:\windows\SysWow64\d3dx11_43.dll
2015-05-13 17:44 . 2010-05-26 09:41 470880 ----a-w- c:\windows\SysWow64\d3dx10_43.dll
2015-05-13 17:42 . 2005-05-26 13:34 2297552 ----a-w- c:\windows\SysWow64\d3dx9_26.dll
2015-05-13 17:41 . 2015-05-13 17:41 3915264 ----a-w- c:\windows\system32\drivers\athw8x.sys
2015-05-13 17:40 . 2015-05-13 17:39 1703424 ----a-w- c:\windows\sttray64.exe
2015-05-13 17:40 . 2015-05-13 17:40 -------- d-----w- c:\program files\IDT
2015-05-13 17:39 . 2015-05-13 17:39 551936 ----a-w- c:\windows\system32\drivers\stwrt64.sys
2015-05-13 17:38 . 2015-05-13 17:38 81608 ----a-w- c:\windows\system32\drivers\amd_sata.sys
2015-05-13 17:38 . 2015-05-13 17:38 25800 ----a-w- c:\windows\system32\drivers\amd_xata.sys
2015-05-13 17:37 . 2015-05-13 17:37 169712 ----a-w- c:\windows\SysWow64\SynTPCom.dll
2015-05-13 17:37 . 2015-05-13 17:37 555760 ----a-w- c:\windows\system32\drivers\SynTP.sys
2015-05-13 17:37 . 2015-05-13 17:37 400624 ----a-w- c:\windows\SysWow64\SynCom.dll
2015-05-13 17:35 . 2015-05-13 17:35 881368 ----a-w- c:\windows\system32\drivers\Rt630x64.sys
2015-05-13 17:25 . 2015-05-13 17:25 26528 ----a-w- c:\windows\SysWow64\drivers\HWiNFO64A.SYS
2015-05-13 17:20 . 2015-05-13 17:20 676864 ----a-w- c:\windows\SysWow64\apphelp.dll
2015-05-13 17:20 . 2015-05-13 17:20 21504 ----a-w- c:\windows\SysWow64\sdbinst.exe
2015-05-13 17:20 . 2015-05-13 17:20 204288 ----a-w- c:\windows\system32\aelupsvc.dll
2015-05-13 16:59 . 2015-05-05 17:49 792032 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-05-13 16:59 . 2015-05-05 17:49 177632 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-05-13 15:26 . 2015-04-30 13:07 102608 ----a-w- c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 15:25 . 2015-05-13 15:25 -------- d-----w- c:\windows\ServiceProfiles\LocalService\winhttp
2015-05-13 14:45 . 2015-05-02 06:28 100184 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2015-05-13 14:45 . 2015-05-02 03:59 318976 ----a-w- c:\windows\SysWow64\schannel.dll
2015-05-13 14:45 . 2015-04-13 22:09 570248 ----a-w- c:\windows\system32\drivers\cng.sys
2015-05-13 14:45 . 2015-05-13 14:45 -------- d-----w- c:\users\Magda\Tracing
2015-05-13 14:39 . 2015-05-13 14:39 367104 ----a-w- c:\windows\SysWow64\PhotoMetadataHandler.dll
2015-05-13 14:37 . 2015-03-23 09:40 1187344 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{92B71F76-79A6-4F33-A887-3B21ACA435DD}\gapaengine.dll
2015-05-13 14:35 . 2015-05-13 14:35 947712 ----a-w- c:\windows\system32\drivers\UMDF\WpdMtpDr.dll
2015-05-13 14:35 . 2015-05-13 14:35 1933312 ----a-w- c:\windows\SysWow64\wpdshext.dll
2015-05-13 14:22 . 2015-05-13 14:22 -------- d-----w- c:\programdata\Malwarebytes
2015-04-15 05:49 . 2015-03-23 09:40 1187344 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\NISBackup\gapaengine.dll
2015-04-14 21:26 . 2015-02-24 07:58 861696 ----a-w- c:\windows\system32\drivers\http.sys
2015-04-14 21:26 . 2015-03-17 04:45 1409496 ----a-w- c:\windows\SysWow64\ntdll.dll
2015-04-14 21:26 . 2015-03-04 07:29 361280 ----a-w- c:\windows\system32\drivers\clfs.sys
2015-04-14 21:26 . 2015-03-04 04:52 57856 ----a-w- c:\windows\SysWow64\clfsw32.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-05-14 16:16 . 2014-09-03 20:40 65536 ----a-w- c:\windows\system32\spu_storage.bin
2015-05-13 17:39 . 2015-05-13 17:40 6154240 ----a-w- c:\windows\system32\stlang64.dll
2015-05-13 17:39 . 2015-05-13 17:40 697856 ------w- c:\windows\system32\stapi64.dll
2015-05-13 17:39 . 2015-05-13 17:40 499200 ----a-w- c:\windows\system32\stcplx64.dll
2015-05-13 17:39 . 2015-05-13 17:40 2213376 ----a-w- c:\windows\system32\stapo64.dll
2015-05-13 17:39 . 2015-05-13 17:39 256000 ----a-w- c:\windows\system32\st646499.dll
2015-05-13 17:39 . 2015-05-13 17:40 464384 ----a-w- c:\windows\system32\slapoi64.dll
2015-05-13 17:39 . 2015-05-13 17:40 2233344 ----a-w- c:\windows\system32\IDTNX.dll
2015-05-13 17:39 . 2015-05-13 17:40 8157184 ----a-w- c:\windows\system32\IDTNHP.dll
2015-05-13 17:39 . 2015-05-13 17:40 8131584 ----a-w- c:\windows\system32\IDTNGUI.exe
2015-05-13 17:39 . 2015-05-13 17:40 253952 ----a-w- c:\windows\system32\IDTNJ.exe
2015-05-13 17:39 . 2015-05-13 17:40 1897984 ----a-w- c:\windows\system32\IDTNC64.cpl
2015-05-13 17:39 . 2015-05-13 17:40 224768 ----a-w- c:\windows\system32\HPToneCtrls64.dll
2015-05-13 17:37 . 2015-05-13 17:37 422640 ----a-w- c:\windows\system32\SET3402.tmp
2015-05-13 17:37 . 2015-05-13 17:37 252144 ----a-w- c:\windows\system32\SET34C.tmp
2015-05-13 17:37 . 2015-05-13 17:37 723184 ----a-w- c:\windows\system32\SynCOM.dll
2015-05-13 17:35 . 2015-05-13 17:35 73800 ----a-w- c:\windows\system32\RtNicProp64.dll
2015-05-13 17:20 . 2015-05-13 17:20 632832 ----a-w- c:\windows\system32\apphelp.dll
2015-05-13 17:20 . 2015-05-13 17:20 429056 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2015-05-13 17:20 . 2015-05-13 17:20 39936 ----a-w- c:\windows\apppatch\apppatch64\acspecfc.dll
2015-05-13 17:20 . 2015-05-13 17:20 276992 ----a-w- c:\windows\apppatch\apppatch64\AcGenral.dll
2015-05-13 17:20 . 2015-05-13 17:20 25088 ----a-w- c:\windows\system32\sdbinst.exe
2015-05-13 17:20 . 2015-05-13 17:20 2362368 ----a-w- c:\windows\apppatch\AcGenral.dll
2015-05-13 15:29 . 2013-12-17 09:32 140425016 ----a-w- c:\windows\system32\MRT.exe
2015-05-13 14:40 . 2015-05-13 14:40 1688576 ----a-w- c:\windows\system32\wevtsvc.dll
2015-05-13 14:39 . 2015-05-13 14:39 452096 ----a-w- c:\windows\system32\PhotoMetadataHandler.dll
2015-05-13 14:36 . 2012-07-26 07:24 2207744 ----a-w- c:\windows\SysWow64\PrintConfig.dll
2015-05-13 14:35 . 2015-05-13 14:35 96256 ----a-w- c:\windows\system32\WPDShServiceObj.dll
2015-05-13 14:35 . 2015-05-13 14:35 2048000 ----a-w- c:\windows\system32\wpdshext.dll
2015-05-02 03:59 . 2015-05-13 14:45 318976 ----a-w- c:\windows\SysWow64\schannel.dll
2015-05-02 03:36 . 2015-05-13 14:45 413696 ----a-w- c:\windows\system32\schannel.dll
2015-04-30 13:07 . 2015-05-13 15:26 124112 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-04-21 13:53 . 2015-05-13 14:47 2237440 ----a-w- c:\windows\system32\wininet.dll
2015-04-21 13:53 . 2015-05-13 14:47 1409536 ----a-w- c:\windows\system32\urlmon.dll
2015-04-21 13:53 . 2015-05-13 14:47 601600 ----a-w- c:\windows\system32\vbscript.dll
2015-04-21 13:52 . 2015-05-13 14:47 19291136 ----a-w- c:\windows\system32\mshtml.dll
2015-04-21 13:52 . 2015-05-13 14:46 603136 ----a-w- c:\windows\system32\msfeeds.dll
2015-04-21 13:52 . 2015-05-13 14:46 97280 ----a-w- c:\windows\system32\mshtmled.dll
2015-04-21 13:52 . 2015-05-13 14:47 856064 ----a-w- c:\windows\system32\jscript.dll
2015-04-21 13:52 . 2015-05-13 14:46 3959296 ----a-w- c:\windows\system32\jscript9.dll
2015-04-21 13:52 . 2015-05-13 14:46 949760 ----a-w- c:\windows\system32\inetcomm.dll
2015-04-21 13:52 . 2015-05-13 14:47 15414784 ----a-w- c:\windows\system32\ieframe.dll
2015-04-21 13:52 . 2015-05-13 14:47 2656768 ----a-w- c:\windows\system32\iertutil.dll
2015-04-21 13:52 . 2015-05-13 14:46 255488 ----a-w- c:\windows\system32\iedkcs32.dll
2015-04-21 13:52 . 2015-05-13 14:46 281600 ----a-w- c:\windows\system32\dxtrans.dll
2015-04-21 13:52 . 2015-05-13 14:46 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2015-04-18 02:34 . 2015-05-13 14:46 441856 ----a-w- c:\windows\system32\html.iec
2015-04-13 07:10 . 2015-04-13 07:10 957440 ----a-w- c:\windows\system32\appraiser.dll
2015-04-13 07:10 . 2015-04-13 07:10 769024 ----a-w- c:\windows\system32\invagent.dll
2015-04-13 07:10 . 2015-04-13 07:10 726528 ----a-w- c:\windows\system32\generaltel.dll
2015-04-13 07:10 . 2015-04-13 07:10 419328 ----a-w- c:\windows\system32\devinv.dll
2015-04-13 07:10 . 2015-04-13 07:10 30720 ----a-w- c:\windows\system32\acmigration.dll
2015-04-13 07:10 . 2015-04-13 07:10 227328 ----a-w- c:\windows\system32\aepdu.dll
2015-04-13 07:10 . 2015-04-13 07:10 192000 ----a-w- c:\windows\system32\aepic.dll
2015-04-13 07:10 . 2015-04-13 07:10 1111552 ----a-w- c:\windows\system32\aeinv.dll
2015-04-13 07:10 . 2015-04-13 07:10 891904 ----a-w- c:\windows\SysWow64\msctf.dll
2015-04-13 07:10 . 2015-04-13 07:10 1120256 ----a-w- c:\windows\system32\msctf.dll
2015-04-13 05:32 . 2015-05-13 14:46 417280 ----a-w- c:\windows\system32\services.exe
2015-04-13 05:30 . 2015-05-13 14:47 1280512 ----a-w- c:\windows\system32\FntCache.dll
2015-04-13 05:30 . 2015-05-13 14:47 1839616 ----a-w- c:\windows\system32\DWrite.dll
2015-04-13 03:25 . 2015-05-13 14:47 4063744 ----a-w- c:\windows\system32\win32k.sys
2015-03-17 07:00 . 2015-04-14 21:26 6971712 ----a-w- c:\windows\system32\ntoskrnl.exe
2015-03-17 06:52 . 2015-04-14 21:26 1822696 ----a-w- c:\windows\system32\ntdll.dll
2015-03-14 11:56 . 2015-03-14 11:56 951808 ----a-w- c:\windows\system32\Windows.Globalization.dll
2015-03-14 11:56 . 2015-03-14 11:56 601088 ----a-w- c:\windows\SysWow64\Windows.Globalization.dll
2015-03-14 11:56 . 2015-03-14 11:56 778240 ----a-w- c:\windows\system32\oleaut32.dll
2015-03-14 11:56 . 2015-03-14 11:56 567808 ----a-w- c:\windows\SysWow64\oleaut32.dll
2015-03-14 11:55 . 2015-03-14 11:55 96576 ----a-w- c:\windows\system32\drivers\wfplwfs.sys
2015-03-14 11:55 . 2015-03-14 11:55 889344 ----a-w- c:\windows\system32\nshwfp.dll
2015-03-14 11:55 . 2015-03-14 11:55 723968 ----a-w- c:\windows\system32\BFE.DLL
2015-03-14 11:55 . 2015-03-14 11:55 702464 ----a-w- c:\windows\SysWow64\nshwfp.dll
2015-03-14 11:55 . 2015-03-14 11:55 1160192 ----a-w- c:\windows\system32\IKEEXT.DLL
2015-03-06 07:39 . 2015-03-11 07:09 588800 ----a-w- c:\windows\system32\SHCore.dll
2015-03-06 05:48 . 2015-03-11 07:09 452608 ----a-w- c:\windows\SysWow64\SHCore.dll
2015-03-04 07:26 . 2015-03-25 08:08 596480 ----a-w- c:\windows\system32\AutoUpdate.exe
2015-03-04 07:26 . 2015-03-25 08:08 467952 ----a-w- c:\windows\system32\NotificationUI.exe
2015-03-04 06:41 . 2015-03-25 08:08 695808 ----a-w- c:\windows\system32\WSShared.dll
2015-03-04 06:41 . 2015-03-25 08:08 163840 ----a-w- c:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-04 06:39 . 2015-04-14 21:26 74752 ----a-w- c:\windows\system32\clfsw32.dll
2015-03-04 04:53 . 2015-03-25 08:08 568832 ----a-w- c:\windows\SysWow64\WSShared.dll
2015-03-04 04:53 . 2015-03-25 08:08 124928 ----a-w- c:\windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-03 13:17 . 2013-12-17 09:41 295552 ------w- c:\windows\system32\MpSigStub.exe
2015-02-23 10:52 . 2015-03-11 07:10 51712 ----a-w- c:\windows\system32\ie4uinit.exe
2015-02-23 10:51 . 2015-03-11 07:10 915968 ----a-w- c:\windows\system32\uxtheme.dll
2015-02-23 10:51 . 2015-03-11 07:10 53760 ----a-w- c:\windows\system32\UXInit.dll
2015-02-23 10:51 . 2015-03-11 07:10 197120 ----a-w- c:\windows\system32\msrating.dll
2015-02-23 10:50 . 2015-03-11 07:10 53760 ----a-w- c:\windows\system32\jsproxy.dll
2015-02-23 10:50 . 2015-03-11 07:10 136704 ----a-w- c:\windows\system32\iesysprep.dll
2015-02-23 10:50 . 2015-03-11 07:10 67072 ----a-w- c:\windows\system32\iesetup.dll
2015-02-23 10:50 . 2015-03-11 07:10 39936 ----a-w- c:\windows\system32\iernonce.dll
2015-02-23 10:50 . 2015-03-11 07:10 451584 ----a-w- c:\windows\system32\dxtmsft.dll
2015-02-23 09:17 . 2015-03-11 07:10 2706432 ----a-w- c:\windows\system32\mshtml.tlb
2015-02-23 09:15 . 2015-03-11 07:10 84480 ----a-w- c:\windows\system32\INETRES.dll
2015-02-21 05:31 . 2015-03-11 07:10 44032 ----a-w- c:\windows\SysWow64\UXInit.dll
2015-02-21 05:30 . 2015-03-11 07:10 109056 ----a-w- c:\windows\SysWow64\iesysprep.dll
2015-02-21 05:30 . 2015-03-11 07:10 61440 ----a-w- c:\windows\SysWow64\iesetup.dll
2015-02-21 05:09 . 2015-03-11 07:10 2706432 ----a-w- c:\windows\SysWow64\mshtml.tlb
2015-02-21 05:07 . 2015-03-11 07:10 84480 ----a-w- c:\windows\SysWow64\INETRES.dll
2015-02-21 03:00 . 2015-03-11 07:10 534528 ----a-w- c:\windows\SysWow64\uxtheme.dll
2015-02-20 13:59 . 2015-03-11 07:10 46080 ----a-w- c:\windows\system32\atmlib.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 8"="c:\program files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe" [2015-04-08 2429728]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2014-04-17 767200]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"PromptOnSecureDesktop"= 0 (0x0)
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
"disablecad"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\2A88E335.sys]
@="Driver"
.
R2 APXACC;AppEx Networks Accelerator LWF;c:\windows\system32\DRIVERS\appexDrv.sys;c:\windows\SYSNATIVE\DRIVERS\appexDrv.sys [x]
R3 amdkmafd;AMD Audio Bus Lower Filter;c:\windows\System32\drivers\amdkmafd.sys;c:\windows\SYSNATIVE\drivers\amdkmafd.sys [x]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW86.sys;c:\windows\SYSNATIVE\drivers\AtihdW86.sys [x]
R3 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe;c:\program files (x86)\Nero\Update\NASvc.exe [x]
R3 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 vmicheartbeat;Služba prezenčního signálu technologie Hyper-V;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S0 2A88E335;2A88E335;c:\windows\system32\drivers\2A88E335.sys;c:\windows\SYSNATIVE\drivers\2A88E335.sys [x]
S0 amd_sata;amd_sata;c:\windows\System32\drivers\amd_sata.sys;c:\windows\SYSNATIVE\drivers\amd_sata.sys [x]
S0 amd_xata;amd_xata;c:\windows\System32\drivers\amd_xata.sys;c:\windows\SYSNATIVE\drivers\amd_xata.sys [x]
S0 amdkmpfd;AMD PCI Root Bus Lower Filter;c:\windows\System32\drivers\amdkmpfd.sys;c:\windows\SYSNATIVE\drivers\amdkmpfd.sys [x]
S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys;c:\windows\SYSNATIVE\Drivers\SmartDefragDriver.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\System32\drivers\dtsoftbus01.sys;c:\windows\SYSNATIVE\drivers\dtsoftbus01.sys [x]
S1 HWiNFO32;HWiNFO32/64 Kernel Driver;c:\windows\SysWOW64\drivers\HWiNFO64A.SYS;c:\windows\SysWOW64\drivers\HWiNFO64A.SYS [x]
S2 AdvancedSystemCareService8;Advanced SystemCare Service 8;c:\program files (x86)\IObit\Advanced SystemCare 8\ASCService.exe;c:\program files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AODDriver4.3;AODDriver4.3;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 hpHotkeyMonitor;hpHotkeyMonitor;c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe;c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [x]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe;c:\windows\SYSNATIVE\Hpservice.exe [x]
S2 LiveUpdateSvc;LiveUpdate;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe [x]
S2 StartMenuService;StartMenu8 Service;c:\program files (x86)\IObit\Start Menu 8\StartMenuServices.exe;c:\program files (x86)\IObit\Start Menu 8\StartMenuServices.exe [x]
S3 BthLEEnum;Ovladač úspory energie technologie Bluetooth;c:\windows\system32\DRIVERS\BthLEEnum.sys;c:\windows\SYSNATIVE\DRIVERS\BthLEEnum.sys [x]
S3 JMCR;JMCR;c:\windows\System32\drivers\jmcr.sys;c:\windows\SYSNATIVE\drivers\jmcr.sys [x]
S3 RTL8168;Realtek 8168 NT Driver;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]
S3 SensorsServiceDriver;Služba Reflektor UMDF pro knihovnu SensorsServiceDriver;c:\windows\system32\DRIVERS\WUDFRd.sys;c:\windows\SYSNATIVE\DRIVERS\WUDFRd.sys [x]
S3 WirelessButtonDriver;HP Wireless Button Driver Service;c:\windows\System32\drivers\WirelessButtonDriver64.sys;c:\windows\SYSNATIVE\drivers\WirelessButtonDriver64.sys [x]
S3 WUDFWpdMtp;WUDFWpdMtp;c:\windows\System32\drivers\WUDFRd.sys;c:\windows\SYSNATIVE\drivers\WUDFRd.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-05-13 17:31 988488 ----a-w- c:\program files (x86)\Google\Chrome\Application\42.0.2311.152\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2015-05-14 c:\windows\Tasks\ASC8_SkipUac_Magda.job
- c:\program files (x86)\IObit\Advanced SystemCare 8\ASC.exe [2015-05-13 12:26]
.
2015-05-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-12-20 12:17]
.
2015-05-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-12-20 12:17]
.
2014-09-09 c:\windows\Tasks\Uninstaller_SkipUac_Administrator.job
- c:\program files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2015-02-07 14:15]
.
2015-05-13 c:\windows\Tasks\Uninstaller_SkipUac_Magda.job
- c:\program files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2015-02-07 14:15]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
2015-02-07 11:57 2471744 ----a-w- c:\program files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2012-10-01 19:47 2322576 ----a-w- c:\progra~1\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2012-10-01 19:47 2322576 ----a-w- c:\progra~1\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2012-10-01 19:47 2322576 ----a-w- c:\progra~1\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2015-05-13 1703424]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.seznam.cz/
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.2.1
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-Indeo® software - c:\windows\IsUn0405.exe
AddRemove-Lemmings Revolution - c:\windows\IsUn0405.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
@SACL=(02 0000)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
c:\program files (x86)\IObit\Start Menu 8\StartMenu8.exe
c:\program files (x86)\IObit\Start Menu 8\StartMenu_Hook.exe
c:\program files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
c:\program files (x86)\IObit\Advanced SystemCare 8\RealTimeProtector.exe
.
**************************************************************************
.
Celkový čas: 2015-05-14 18:40:45 - počítač byl restartován
ComboFix-quarantined-files.txt 2015-05-14 16:40
.
Před spuštěním: 667 017 756 672 bytes free
Po spuštění: 667 446 530 048 bytes free
.
- - End Of File - - FA57702266F76D9E3C657DEF5A80EC93
A36C5E4F47E84449FF07ED3517B43A31

Udelejte novou kontrolu s MBAM. Test nastavte podle tohoto navodu (cili Vlastni sken vsech disku) http://forum.viry.cz/viewtopic.php?f=29&t=137928 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

Menší komplikace... už podruhé se během skenu počítač zasekl po víc jak 45min... pokaždé to bylo u Program Files(x86) a u Google Update. Může tam být nějaká spojitost? Mám to zkoušet spouštět znovu (potřetí)? Jinak to doteď žádné infikované objekty nenašlo.

Zkuste test spustit v nouzovem rezimu.

Spustil jsem MBAM v nouzovém režimu, prohledalo to zhruba stejně objektů a opět zásek...
Začínám mít trochu podezření na nějakou chybu disku :/
Nezasekne se jen MBAM, ale Windows obecně a nepomůže nic jiného než hardreset

Stahnete crystal disk info http://sourceforge.jp/projects/crystald ... 5_0_0.zip/
Spustte jako spravce. Za chvili se zobrazi vysledek.
Kliknete nahore na napis Úpravy a pak na napis Kopírovat. To co se zkopiruje (ulozi se to do pameti) mi sem vlozte (ctrl + V)

----------------------------------------------------------------------------
CrystalDiskInfo 5.0.0 (C) 2008-2012 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 8 Professional [6.2 Build 9200] (x64)
Date : 2015/05/17 16:39:01

-- Controller Map ----------------------------------------------------------
+ AMD SATA Controller [ATA]
- Hitachi HTS547575A9E384
- hp DVDRAM GT50N
- Řadič prostorů úložišť [SCSI]

-- Disk List ---------------------------------------------------------------
(1) Hitachi HTS547575A9E384 : 750,1 GB [0/0/0, pd1]

----------------------------------------------------------------------------
(1) Hitachi HTS547575A9E384
----------------------------------------------------------------------------
Model : Hitachi HTS547575A9E384
Firmware : JE4OA50A
Serial Number : J2540020CL49VE
Disk Size : 750,1 GB (8,4/137,4/750,1)
Buffer Size : 8192 KB
Queue Depth : 32
# of Sectors : 1465149168
Rotation Rate : 5400 RPM
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ATA8-ACS version 6
Transfer Mode : SATA/300
Power On Hours : 6677 hod.
Power On Count : 5179 krát
Temparature : 37 C (98 F)
Health Status : Pozor
Features : S.M.A.R.T., APM, 48bit LBA, NCQ
APM Level : 4080h [ON]
AAM Level : ----

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 _39 _62 000000000000 Počet chyb čtení
02 100 100 _40 000000000000 Průchodnost disku
03 253 100 _33 000C00000001 Čas na roztočení ploten
04 _97 _97 __0 0000000014BF Počet spuštění/zastavení
05 100 100 __5 000000330198 Počet přemapovaných sektorů
07 100 100 _67 000000000000 Počet chybných hledání
08 100 100 _40 000000000000 Čas potřebný na vyhledání
09 _85 _85 __0 000000001A15 Hodin v činnosti
0A 100 100 _60 000000000000 Počet opakovaných pokusů o roztočení ploten
0C _97 _97 __0 00000000143B Počet cyklů zapnutí zařízení
B7 100 100 __0 000000000000 Neznámý
B8 100 100 _97 000000000000 Ukončovacích chyb
BB 100 _56 __0 E628495A002E Ohlášeno neopravitelných chyb
BC 100 _89 __0 000000000451 Časový limit příkazu
BE _63 _57 _45 000025260025 Teplota toku vzduchu
BF _91 _91 __0 0000000009BA Počet udalostí zaznamenaných otřesovým senzorem
C0 100 100 __0 000000450045 Počet vypnutí disku
C1 _75 _75 __0 00000003D89D Počet cyklů načítání/vymazání
C4 100 100 __0 000000000033 Počet udalostí s číslem realokování sektorů
C5 _93 _88 __0 000000000188 Počet podezřelých sektorů
C6 100 100 __0 000000000000 Počet neopravitelných sektorů
C7 100 100 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
DF 100 100 __0 000000000000 Zatížení budiče magnetických hlav způsobené opakovanými úkony

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0040 3FFF C837 0010 0000 003F 003F 0000 0000 0000
010: 2020 2020 2020 4A32 3534 3230 3230 434C 3439 5645
020: 0003 4000 0004 4A45 344F 3041 3041 4869 7461 6368
030: 6920 4854 5335 3437 3537 3945 3945 3338 3420 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 4000 2F00
050: 4000 0200 0200 0007 3FFF 003F 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 0D06 0D06 0000 004C 0044
080: 01FC 0028 706B 7C09 6123 BC09 BC09 6123 203F 005E
090: 005F 4080 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 66F0 5754 0000 0000 0000 6003 6003 826C 5000 CCA7
110: 28C8 3EE3 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 000B
130: 0198 0000 2182 1CF1 3A10 4000 4000 0400 0108 0000
140: 0000 0405 0604 0605 0506 0000 0000 0000 0000 0000
150: 0000 0000 3448 4435 0000 0000 0000 5DAD 2518 8000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0003 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 003D 003D 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 1518 0000 0000
220: 0000 0000 101F 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 0000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 BDA5

Tady asi vazne bude problem


Udelejte kontrolu programem HD Tune
Stahnete http://www.slunecnice.cz/sw/hd-tune/ , nainstalujte a spustte jako spravce (pokud vam pri instalaci nabidne nejaky doplnek, odmitnete ho!)
V tom okne kliknete na posledni zalozku - Error Scan (pokud bude zatrzeny quick scan, tak zatrzitko zruste) a kliknete na Start.
Kontrola bude nejakou dobu trvat. Dejte vedet, jestli tam bylo nejake cervene policko.
Taky se podivejte na zalozku Health a opiste mi (vyfotte), co se tam pise. Melo by tam byt OK http://www.google.cz/imgres?um=1&hl=cs& ... s:20,i:143

Tady je obrázek z toho skenu: http://i.imgur.com/CFn2Lpm.png
Pod záložkou health mi to nic neukázalo po tom, co to doběhlo :/

Nebudu mít teď několik dní k tomuto notebooku přístup, proto asi nebudu moct aplikovat další rady/postupy do té doby.