VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Asi mám zas zavirováno a klasicky nevím jak a co s tím

https://forum.viry.cz:443/viewtopic.php?t=145054

Stránka 1 z 2

Asi mám zas zavirováno a klasicky nevím jak a co s tím

Napsal: 01 črc 2015 22:59
od MyNameIsCady
Tohle pro mě vždycky byla je a bude tak trochu španělská vesnice, umprumačka no.

Problém je ten, že kdykoliv pohnu ukazovátkem myší nebo touchpadem, tak mi začne ukazovátko jezdit různými směry, jen ne tím, kam chci já. Vždycky mi to začne uhýbat, a než kliknu na to, co chci, tak to trvá minutu minimálně.
Tohle se mi dělo před rokem, když jsem měla asi tři koně:D

Prosím o jakoukoliv radu jak a co dělat abych měla notebook zase ok.
Předem díky:) Jsem sice chudý student ale kdyžtak vám pak hodím nějakou symbolickou kačku do "kasičky"

Re: Asi mám zas zavirováno a klasicky nevím jak a co s tím

Napsal: 02 črc 2015 00:33
od Márty84
Zdravim :)

Jelikoz vestit stale jeste neumime (ale udilovne trenujeme :D ), dejte nejprve log z RSIT (pripadne RSITx64, dle verze systemu) http://forum.viry.cz/viewtopic.php?f=13&t=130786

:???: Blbne to i v nouzovem rezimu?

Re: Asi mám zas zavirováno a klasicky nevím jak a co s tím

Napsal: 02 črc 2015 00:50
od MyNameIsCady
Logfile of random's system information tool 1.10 (written by random/random)
Run by Karol at 2015-07-02 01:38:19
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 159 GB (34%) free of 461 GB
Total RAM: 3691 MB (53% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:38:28, on 2.7.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17840)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
C:\Program Files\trend micro\Karol.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId= ... 81&src=hmp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId= ... kId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {f999a48b-1950-4d81-9971-79018f807b4b} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O2 - BHO: Linkey - {4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {f999a48b-1950-4d81-9971-79018f807b4b} - (no file)
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
O4 - HKLM\..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe Creative Cloud] "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\Users\Karol\AppData\Local\Linkey\IEEXTE~1\iedll.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AdobeUpdateService - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AMD Reservation Manager - Advanced Micro Devices - C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Atheros Bt&Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Wireless Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: XobniService - Xobni Corporation - C:\Program Files (x86)\Xobni\XobniService.exe

--
End of file - 13597 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\system32\WLANExt.exe 3337152
\??\C:\Windows\system32\conhost.exe "909407047-20345464559950728592911579063292938372105919551-1959134986805115644
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
taskeng.exe {92B8E841-3E56-4590-B935-C2610E0ED1A6}
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe"
"C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe"
"C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe"
"C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe"
"C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Windows\system32\GWX\GWX.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 1612
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe" -quickstart
"C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe" "-quickstart" "-env:OOO_CWD=2C:\\Program Files (x86)\\OpenOffice.org 3\\program"
"C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
"C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe"
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe" "-launchedbyvulcan"
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
"C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe" --onOSstartup=true --showwindow=false --waitForRegistration=true
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k bthsvcs
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe" --type=renderer --no-sandbox --user-agent="Mozilla/5.0 (Windows NT 6.1.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/537.36 CreativeCloud/2.1.0.108" --lang=en-US --lang=en-US --locales-dir-path="C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\locales" --log-severity=disable --channel="3504.1.536555842\1037078525" /prefetch:673131151
"C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe"
"C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe" /hidden
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe" --type=renderer --no-sandbox --user-agent="Mozilla/5.0 (Windows NT 6.1.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/537.36 CreativeCloud/2.1.0.108" --lang=en-US --lang=en-US --locales-dir-path="C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\locales" --log-severity=disable --channel="3504.3.983510781\690674296" /prefetch:673131151
"C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe"
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe" "<hpNotification><Toast><Title>HP Wireless Assistant</Title><Text>Bluetooth®: On
WLAN: On</Text><IconPath>C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WA_tray_32_on.ico</IconPath><ID>339935180</ID><Path>C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe</Path><Parameters></Parameters></Toast></hpNotification>"

C:\Windows\system32\prevhost.exe {914FEED8-267A-4BAA-B8AA-21E233792679} -Embedding
"C:\Program Files\Windows Media Player\wmprph.exe" -Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Users\Karol\Desktop\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2746505849-1622842176-3222786117-1001Core.job - C:\Users\Karol\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2746505849-1622842176-3222786117-1001UA.job - C:\Users\Karol\AppData\Local\Facebook\Update\FacebookUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Karol\AppData\Roaming\Mozilla\Firefox\Profiles\obw3cq37.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "keyword.URL" - "http://www.default-search.net/search?si ... &src=ds&p="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.190 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_190.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nppl3260;version=16.0.0.282]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.0]
"Description"=RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In
"Path"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.0]
"Description"=RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In
"Path"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.0]
"Description"=RealNetworks(tm) RealDownloader Peppe rFlash Video Shim Plug-In
"Path"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nprpplugin;version=16.0.0.282]
"Description"=RealPlayer Download Plugin
"Path"=C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@realnetworks.com/npdlplugin;version=1]
"Description"=RealDownloader Plugin
"Path"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0]
"Description"=WildTangent Games App Presence Detector Plugin
"Path"=C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.190 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_190.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

C:\Program Files (x86)\Mozilla Firefox\components\
nsIQTScriptablePlugin.xpt

C:\Users\Karol\AppData\Roaming\Mozilla\Firefox\Profiles\obw3cq37.default\extensions\
donottrackplus@abine.com

C:\Users\Karol\AppData\Roaming\Mozilla\Firefox\Profiles\obw3cq37.default\searchplugins\
default-search.xml
freeonlineradioplayerrecorder-customized-web-search.xml
seznam-avast.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}]
Linkey - C:\Users\Karol\AppData\Local\Linkey\IEEXTE~1\iedll64.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-07-01 662672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-05-10 49440]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealNetworks Download and Record Plugin for Internet Explorer - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2012-11-29 539888]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-03-03 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-01-06 60576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-07-01 565304]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-08-16 3942048]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-01 1089288]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-03-03 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{f999a48b-1950-4d81-9971-79018f807b4b}
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-01 1089288]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2011-01-12 6602856]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-12-21 2480936]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2011-01-06 615584]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2011-01-06 379040]
"HPWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe [2010-07-21 8192]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-05-26 500936]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM Startup"=C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2004-06-16 221184]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-03-04 336384]
"HP Quick Launch"=C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [2010-11-09 586296]
"HPOSD"=C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [2010-12-13 318520]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-04-23 43848]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-07-01 5515496]
"Adobe Creative Cloud"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2015-06-19 2303152]

C:\Users\Karol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.3.lnk - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Users\Karol\AppData\Local\Linkey\IEEXTE~1\iedll64.dll "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-07-02 01:38:20 ----D---- C:\Program Files\trend micro
2015-07-02 01:38:19 ----D---- C:\rsit
2015-07-01 20:51:08 ----A---- C:\Windows\system32\aswBoot.exe
2015-07-01 20:50:33 ----A---- C:\Windows\avastSS.scr
2015-06-29 11:11:56 ----SHD---- C:\Config.Msi
2015-06-25 06:39:42 ----D---- C:\ProgramData\boost_interprocess
2015-06-25 06:30:49 ----D---- C:\ProgramData\Package Cache
2015-06-09 23:02:43 ----A---- C:\Windows\system32\wmp.dll
2015-06-09 23:02:35 ----A---- C:\Windows\SYSWOW64\wmp.dll
2015-06-09 23:02:28 ----A---- C:\Windows\system32\spwmp.dll
2015-06-09 23:02:25 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2015-06-09 23:02:25 ----A---- C:\Windows\system32\dxmasf.dll
2015-06-09 23:02:24 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2015-06-09 23:02:22 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2015-06-09 23:02:19 ----A---- C:\Windows\system32\wmploc.DLL
2015-06-09 23:02:13 ----A---- C:\Windows\system32\drivers\stream.sys
2015-06-09 23:01:33 ----A---- C:\Windows\system32\diagtrack.dll
2015-06-09 23:01:31 ----A---- C:\Windows\system32\KernelBase.dll
2015-06-09 23:01:31 ----A---- C:\Windows\system32\kerberos.dll
2015-06-09 23:01:30 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-06-09 23:01:28 ----A---- C:\Windows\system32\kernel32.dll
2015-06-09 23:01:27 ----A---- C:\Windows\system32\lsasrv.dll
2015-06-09 23:01:25 ----A---- C:\Windows\system32\advapi32.dll
2015-06-09 23:01:24 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2015-06-09 23:01:23 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-06-09 23:01:22 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-06-09 23:01:19 ----A---- C:\Windows\system32\ntdll.dll
2015-06-09 23:01:18 ----A---- C:\Windows\system32\wow64.dll
2015-06-09 23:01:18 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-06-09 23:01:17 ----A---- C:\Windows\system32\conhost.exe
2015-06-09 23:01:16 ----A---- C:\Windows\SYSWOW64\tracerpt.exe
2015-06-09 23:01:16 ----A---- C:\Windows\system32\srcore.dll
2015-06-09 23:01:15 ----A---- C:\Windows\system32\winsrv.dll
2015-06-09 23:01:15 ----A---- C:\Windows\system32\tracerpt.exe
2015-06-09 23:01:15 ----A---- C:\Windows\system32\rstrui.exe
2015-06-09 23:01:13 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-06-09 23:01:12 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-06-09 23:01:12 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-06-09 23:01:12 ----A---- C:\Windows\system32\schannel.dll
2015-06-09 23:01:11 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-06-09 23:01:11 ----A---- C:\Windows\system32\msv1_0.dll
2015-06-09 23:01:10 ----A---- C:\Windows\system32\tdh.dll
2015-06-09 23:01:10 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-06-09 23:01:09 ----A---- C:\Windows\system32\wdigest.dll
2015-06-09 23:01:09 ----A---- C:\Windows\system32\sechost.dll
2015-06-09 23:01:08 ----A---- C:\Windows\system32\logman.exe
2015-06-09 23:01:07 ----A---- C:\Windows\SYSWOW64\logman.exe
2015-06-09 23:01:07 ----A---- C:\Windows\system32\ncrypt.dll
2015-06-09 23:01:06 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-06-09 23:01:05 ----A---- C:\Windows\SYSWOW64\tdh.dll
2015-06-09 23:01:04 ----A---- C:\Windows\SYSWOW64\sechost.dll
2015-06-09 23:01:04 ----A---- C:\Windows\system32\TSpkg.dll
2015-06-09 23:01:04 ----A---- C:\Windows\system32\sspicli.dll
2015-06-09 23:01:03 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-06-09 23:01:03 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-06-09 23:01:03 ----A---- C:\Windows\system32\smss.exe
2015-06-09 23:01:03 ----A---- C:\Windows\system32\lsass.exe
2015-06-09 23:01:02 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-06-09 23:01:02 ----A---- C:\Windows\system32\typeperf.exe
2015-06-09 23:01:02 ----A---- C:\Windows\system32\relog.exe
2015-06-09 23:01:02 ----A---- C:\Windows\system32\auditpol.exe
2015-06-09 23:01:01 ----A---- C:\Windows\SYSWOW64\typeperf.exe
2015-06-09 23:01:01 ----A---- C:\Windows\SYSWOW64\relog.exe
2015-06-09 23:01:01 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-06-09 23:01:00 ----A---- C:\Windows\system32\srclient.dll
2015-06-09 23:00:59 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-06-09 23:00:59 ----A---- C:\Windows\system32\csrsrv.dll
2015-06-09 23:00:58 ----A---- C:\Windows\SYSWOW64\diskperf.exe
2015-06-09 23:00:58 ----A---- C:\Windows\system32\diskperf.exe
2015-06-09 23:00:57 ----A---- C:\Windows\system32\sspisrv.dll
2015-06-09 23:00:57 ----A---- C:\Windows\system32\ntvdm64.dll
2015-06-09 23:00:56 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-06-09 23:00:56 ----A---- C:\Windows\system32\credssp.dll
2015-06-09 23:00:55 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-06-09 23:00:55 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-06-09 23:00:55 ----A---- C:\Windows\system32\secur32.dll
2015-06-09 23:00:54 ----A---- C:\Windows\system32\wow64win.dll
2015-06-09 23:00:53 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-06-09 23:00:52 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-06-09 23:00:52 ----A---- C:\Windows\system32\wow64cpu.dll
2015-06-09 23:00:51 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-06-09 23:00:50 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-06-09 23:00:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-09 23:00:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-09 23:00:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-09 23:00:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-09 23:00:46 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-09 23:00:46 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-09 23:00:46 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-09 23:00:46 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-09 23:00:46 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-09 23:00:46 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-09 23:00:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-09 23:00:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-09 23:00:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-09 23:00:45 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-09 23:00:45 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-09 23:00:45 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-09 23:00:45 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-09 23:00:45 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-09 23:00:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-09 23:00:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-09 23:00:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-09 23:00:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-09 23:00:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-09 23:00:44 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-09 23:00:44 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-09 23:00:44 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-09 23:00:44 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-09 23:00:44 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-09 23:00:44 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-09 23:00:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-09 23:00:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-09 23:00:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-09 23:00:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-09 23:00:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-09 23:00:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-09 23:00:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-09 23:00:43 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-09 23:00:43 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-09 23:00:43 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-09 23:00:43 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-09 23:00:43 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-09 23:00:42 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-09 23:00:42 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-09 23:00:42 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-09 23:00:42 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-09 23:00:42 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-09 23:00:42 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-09 23:00:42 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-09 23:00:42 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-09 23:00:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-09 23:00:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-09 23:00:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-09 23:00:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-09 23:00:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-09 23:00:40 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-09 23:00:40 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-09 23:00:40 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-06-09 23:00:40 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-06-09 23:00:40 ----A---- C:\Windows\system32\apisetschema.dll
2015-06-09 23:00:39 ----A---- C:\Windows\SYSWOW64\user.exe
2015-06-09 23:00:36 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-06-09 23:00:36 ----A---- C:\Windows\system32\adtschema.dll
2015-06-09 23:00:35 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-06-09 23:00:35 ----A---- C:\Windows\system32\msaudite.dll
2015-06-09 23:00:34 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-06-09 23:00:34 ----A---- C:\Windows\system32\UtcResources.dll
2015-06-09 23:00:33 ----A---- C:\Windows\system32\msobjs.dll
2015-06-09 22:58:40 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2015-06-09 22:58:40 ----A---- C:\Windows\system32\comctl32.dll
2015-06-09 22:58:31 ----A---- C:\Windows\system32\win32k.sys
2015-06-09 22:55:28 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-06-09 22:55:27 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-06-09 22:55:27 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-06-09 22:55:26 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-06-09 22:55:26 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-06-09 22:55:25 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-06-09 22:55:23 ----A---- C:\Windows\system32\iernonce.dll
2015-06-09 22:55:23 ----A---- C:\Windows\system32\ie4uinit.exe
2015-06-09 22:55:22 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-06-09 22:55:22 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-06-09 22:55:21 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-06-09 22:55:20 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-06-09 22:55:18 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-06-09 22:55:18 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-06-09 22:55:18 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-09 22:55:16 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-06-09 22:55:11 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-06-09 22:55:11 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-06-09 22:55:09 ----A---- C:\Windows\system32\iedkcs32.dll
2015-06-09 22:55:08 ----A---- C:\Windows\system32\urlmon.dll
2015-06-09 22:55:07 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-06-09 22:55:06 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-06-09 22:55:06 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-06-09 22:55:05 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-06-09 22:55:04 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-06-09 22:55:04 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-06-09 22:55:01 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-09 22:55:00 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-06-09 22:55:00 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-06-09 22:55:00 ----A---- C:\Windows\system32\dxtrans.dll
2015-06-09 22:54:59 ----A---- C:\Windows\system32\msfeeds.dll
2015-06-09 22:54:57 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-06-09 22:54:54 ----A---- C:\Windows\system32\iesetup.dll
2015-06-09 22:54:53 ----A---- C:\Windows\system32\ieapfltr.dll
2015-06-09 22:54:49 ----A---- C:\Windows\system32\iertutil.dll
2015-06-09 22:54:46 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-06-09 22:54:46 ----A---- C:\Windows\system32\vbscript.dll
2015-06-09 22:54:45 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-06-09 22:54:43 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-06-09 22:54:43 ----A---- C:\Windows\system32\jsproxy.dll
2015-06-09 22:54:43 ----A---- C:\Windows\system32\ieUnatt.exe
2015-06-09 22:54:41 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-06-09 22:54:37 ----A---- C:\Windows\system32\ieui.dll
2015-06-09 22:54:37 ----A---- C:\Windows\system32\dxtmsft.dll
2015-06-09 22:54:35 ----A---- C:\Windows\system32\ieframe.dll
2015-06-09 22:54:32 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-06-09 22:54:32 ----A---- C:\Windows\system32\mshtmled.dll
2015-06-09 22:54:30 ----A---- C:\Windows\system32\jscript.dll
2015-06-09 22:54:29 ----A---- C:\Windows\system32\jscript9diag.dll
2015-06-09 22:54:28 ----A---- C:\Windows\system32\jscript9.dll
2015-06-09 22:54:26 ----A---- C:\Windows\system32\wininet.dll
2015-06-09 22:54:21 ----A---- C:\Windows\system32\msrating.dll
2015-06-09 22:54:21 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-06-09 22:54:16 ----A---- C:\Windows\system32\mshtml.dll
2015-06-05 19:54:34 ----A---- C:\Windows\system32\generaltel.dll
2015-06-05 19:54:34 ----A---- C:\Windows\system32\appraiser.dll
2015-06-05 19:54:34 ----A---- C:\Windows\system32\aepic.dll
2015-06-05 19:54:34 ----A---- C:\Windows\system32\aeinv.dll
2015-06-05 19:54:33 ----A---- C:\Windows\system32\invagent.dll
2015-06-05 19:54:33 ----A---- C:\Windows\system32\devinv.dll
2015-06-05 19:54:33 ----A---- C:\Windows\system32\aepdu.dll
2015-06-05 19:54:33 ----A---- C:\Windows\system32\acmigration.dll

======List of files/folders modified in the last 1 month======

2015-07-02 01:38:23 ----D---- C:\Windows\Temp
2015-07-02 01:38:20 ----RD---- C:\Program Files
2015-07-01 23:41:31 ----D---- C:\Windows\Minidump
2015-07-01 23:41:31 ----D---- C:\Windows\debug
2015-07-01 23:41:31 ----D---- C:\Windows
2015-07-01 22:24:58 ----D---- C:\Windows\system32\config
2015-07-01 22:14:51 ----D---- C:\Windows\system32\drivers
2015-07-01 22:14:27 ----D---- C:\Windows\system32\Tasks
2015-07-01 20:51:09 ----D---- C:\Windows\System32
2015-07-01 20:47:29 ----SHD---- C:\System Volume Information
2015-06-29 11:12:16 ----SHD---- C:\Windows\Installer
2015-06-27 03:04:11 ----D---- C:\Windows\inf
2015-06-27 03:04:11 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-06-25 06:56:50 ----D---- C:\ProgramData\Adobe
2015-06-25 06:39:48 ----D---- C:\Users\Karol\AppData\Roaming\Adobe
2015-06-25 06:39:42 ----HD---- C:\ProgramData
2015-06-25 06:34:58 ----D---- C:\Windows\SysWOW64
2015-06-25 06:26:02 ----D---- C:\Program Files (x86)\Adobe
2015-06-24 20:15:49 ----D---- C:\Windows\Prefetch
2015-06-23 22:22:54 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-06-11 19:29:33 ----D---- C:\Windows\winsxs
2015-06-11 19:12:37 ----D---- C:\Program Files (x86)\Windows Media Player
2015-06-11 19:12:35 ----D---- C:\Program Files\Windows Media Player
2015-06-10 23:15:55 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-06-10 23:15:51 ----D---- C:\Windows\system32\cs-CZ
2015-06-10 23:15:47 ----D---- C:\Windows\AppPatch
2015-06-10 23:15:42 ----D---- C:\Program Files\Internet Explorer
2015-06-10 23:15:40 ----D---- C:\Windows\SYSWOW64\en-US
2015-06-10 23:15:36 ----D---- C:\Windows\PolicyDefinitions
2015-06-10 23:15:35 ----D---- C:\Windows\system32\en-US
2015-06-10 23:15:31 ----D---- C:\Program Files (x86)\Internet Explorer
2015-06-10 22:30:06 ----D---- C:\ProgramData\Microsoft Help
2015-06-10 22:24:07 ----D---- C:\Windows\system32\MRT
2015-06-10 21:57:21 ----A---- C:\Windows\system32\MRT.exe
2015-06-09 22:51:11 ----D---- C:\Windows\system32\catroot2
2015-06-06 11:49:06 ----SD---- C:\Windows\system32\CompatTel
2015-06-06 11:49:04 ----D---- C:\Windows\system32\appraiser

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amd_sata;amd_sata; C:\Windows\system32\DRIVERS\amd_sata.sys [2010-11-12 77952]
R0 amd_xata;amd_xata; C:\Windows\system32\DRIVERS\amd_xata.sys [2010-11-12 37504]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-07-01 65736]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-07-01 272248]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-07-01 93528]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-07-01 1047320]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-07-01 442264]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-03-09 283200]
R1 F06DEFF2-5B9C-490D-910F-35D3A9119622;F06DEFF2-5B9C-490D-910F-35D3A9119622; \??\C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfmgrc2.cfg [2014-09-22 41872]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-07-01 29168]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-07-01 89944]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-07-01 137288]
R2 RMCAST;@%SystemRoot%\system32\wshrm.dll,-102; C:\Windows\system32\DRIVERS\RMCAST.sys [2010-11-21 146432]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-03-05 8283136]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-03-04 295424]
R3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2011-01-06 36000]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2011-02-10 2717696]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2011-03-01 115216]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2011-01-06 298144]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2011-01-06 28832]
R3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2011-01-06 201376]
R3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2011-01-06 55456]
R3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2011-01-06 154272]
R3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2011-01-06 279200]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys [2011-02-09 31088]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-01-12 2709224]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RSPCIESTOR;Realtek PCIE CardReader Driver; C:\Windows\system32\DRIVERS\RtsPStor.sys [2011-02-15 335464]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-03-05 436840]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-12-21 1402416]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2010-11-29 44672]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2009-06-10 1311232]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x64.sys [2009-06-10 408960]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 WinUsb;WinUsb; C:\Windows\system32\drivers\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
R2 AdobeUpdateService;AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [2015-06-09 680112]
R2 AERTFilters;Andrea RT Filters Service; C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe [2009-11-18 98208]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-03-04 203776]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-03-04 354304]
R2 AMD Reservation Manager;AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 194496]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-02-12 43336]
R2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [2011-01-06 138400]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2011-01-06 53920]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-07-01 343336]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 HP Wireless Assistant Service;HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2010-07-21 103992]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-02-04 92216]
R2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2010-11-09 26680]
R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2010-12-28 1817088]
R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [2012-11-29 38608]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-02-25 249648]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2011-02-04 797240]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-25 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-23 268464]
S3 BBSvc;Bing Bar Update Service; C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-03-01 183560]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-25 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-05-22 114688]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-05-26 641352]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-06-02 148080]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-12-04 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Re: Asi mám zas zavirováno a klasicky nevím jak a co s tím

Napsal: 02 črc 2015 01:10
od Márty84
Márty84 píše: :???: Blbne to i v nouzovem rezimu?

:arrow: Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.


:arrow: Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu (cili Vlastni sken vsech disku) http://forum.viry.cz/viewtopic.php?f=29&t=144868 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

Re: Asi mám zas zavirováno a klasicky nevím jak a co s tím

Napsal: 02 črc 2015 13:27
od MyNameIsCady
Sakra, já si té otázky s nouzovým režimem všimla až teď. No momentálně mi to přestalo blbout už i v normálním režimu

Jinak zatím ten první:

# AdwCleaner v4.207 - Log vytvořen 02/07/2015 v 13:01:43
# Aktualizováno 21/06/2015 by Xplode
# Databáze : 2015-07-02.1 [Server]
# Operační system : Windows 7 Home Premium Service Pack 1 (x64)
# Uživatelské jméno : Karol - KAROL-HP
# Spuštěno z : C:\Users\Karol\Desktop\adwcleaner_4.207.exe
# Nastavení : Čištění

***** [ Služby ] *****

[#] Služba Smazáno : F06DEFF2-5B9C-490D-910F-35D3A9119622

***** [ Soubory / Složky ] *****

Složka Smazáno : C:\ProgramData\smdmf
Složka Smazáno : C:\Program Files (x86)\Settings Manager
Složka Smazáno : C:\Users\Karol\AppData\Local\Linkey
Složka Smazáno : C:\Users\Karol\AppData\Roaming\FirefoxToolbar
Složka Smazáno : C:\Users\Karol\AppData\Roaming\RHEng
Složka Smazáno : C:\Users\Karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpmeembnagmagppkgghhfjfdfajdfcah
Soubor Smazáno : C:\Users\Karol\AppData\Roaming\Mozilla\Firefox\Profiles\obw3cq37.default\invalidprefs.js
Soubor Smazáno : C:\Users\Karol\AppData\Roaming\Mozilla\Firefox\Profiles\obw3cq37.default\searchplugins\default-search.xml
Soubor Smazáno : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\default-search.xml

***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\fpmeembnagmagppkgghhfjfdfajdfcah
Hodnota Smazáno : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Hodnota Smazáno : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x86]
Klíč Smazáno : HKLM\SOFTWARE\Classes\SettingsManagerIEHelper.DNSGuard.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\SettingsManagerIEHelper.DNSGuard
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\iedll.dll
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{6A7CD9EC-D8BD-4340-BCD0-77C09A282921}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{54739D49-AC03-4C57-9264-C5195596B3A1}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{E1842850-FB16-4471-B327-7343FBAED55C}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{AA760BA8-5862-4BC5-9263-4452CBC0B264}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{4613B1C1-FBC0-43C3-A4B9-B1D6CD360BB3}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{726E90BE-DC22-4965-B215-E0784DC26F47}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{93D511B5-143B-4A99-ABFC-B5B78AD0AE1B}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{54739D49-AC03-4C57-9264-C5195596B3A1}
Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{F999A48B-1950-4D81-9971-79018F807B4B}]
Hodnota Smazáno : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{F999A48B-1950-4D81-9971-79018F807B4B}]
Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{F999A48B-1950-4D81-9971-79018F807B4B}]
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\CLSID\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\CLSID\{54739D49-AC03-4C57-9264-C5195596B3A1}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\CLSID\{E1842850-FB16-4471-B327-7343FBAED55C}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{AA760BA8-5862-4BC5-9263-4452CBC0B264}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{4613B1C1-FBC0-43C3-A4B9-B1D6CD360BB3}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Klíč Smazáno : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Klíč Smazáno : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EC29EDF6-AD3C-4E1C-A087-D6CB81400C43}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EC29EDF6-AD3C-4E1C-A087-D6CB81400C43}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Klíč Smazáno : HKCU\Software\Conduit
Klíč Smazáno : HKCU\Software\SmdmF
Klíč Smazáno : HKCU\Software\Linkey
Klíč Smazáno : HKLM\SOFTWARE\SmdmF
Klíč Smazáno : HKLM\SOFTWARE\Linkey
Klíč Smazáno : HKLM\SOFTWARE\SiteSee
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Linkey
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Settings Manager
Klíč Smazáno : [x64] HKLM\SOFTWARE\Linkey
Data Smazáno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\Users\Karol\AppData\Local\Linkey\IEEXTE~1\iedll.dll
Data Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\Users\Karol\AppData\Local\Linkey\IEEXTE~1\iedll64.dll
Data Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17840

Nastavení Obnoveno : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v38.0.5 (x86 cs)

[obw3cq37.default\prefs.js] - Řádek Smazáno : user_pref("browser.search.order.1", "default-search.net");
[obw3cq37.default\prefs.js] - Řádek Smazáno : user_pref("browser.search.selectedEngine", "default-search.net");
[obw3cq37.default\prefs.js] - Řádek Smazáno : user_pref("keyword.URL", "hxxp://www.default-search.net/search?sid=503&a ... &src=ds&p=");

-\\ Google Chrome v43.0.2357.130


*************************

AdwCleaner[R1].txt - [6548 bytů] - [02/07/2015 12:56:34]
AdwCleaner[S1].txt - [5697 bytů] - [02/07/2015 13:01:43]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [5755 bytů] ##########

Re: Asi mám zas zavirováno a klasicky nevím jak a co s tím

Napsal: 02 črc 2015 18:35
od Márty84
MyNameIsCady píše:No momentálně mi to přestalo blbout už i v normálním režimu
:???: Prestalo to samo od sebe, nebo po pouziti ADWCleaneru?

Pockam na vysledky z MBAM a podle toho se zaridime dale :-)

Re: Asi mám zas zavirováno a klasicky nevím jak a co s tím

Napsal: 02 črc 2015 19:06
od MyNameIsCady
Až poté... když se mi to stalo loni, taky se mi myš vzpamatovala po použití tohoto programu, pokud si dobře vzpomínám. Jinak skenuje se to už přes čtyři hodiny tak doufám že už to bude u konce. Nakoukla jsem do průběžného zobrazení nalezených hrozeb a už jsem tam spatřila mezi ostatními věcmi kterým nerozumím dva trojany:D Krása.

Re: Asi mám zas zavirováno a klasicky nevím jak a co s tím

Napsal: 03 črc 2015 08:43
od Márty84
No je tam spousta smeti, takze je potreba to procistit poradne.

Sken muze byt hodne dlouhy, ale je dukladny a najde toho nejvic.

Pokud to bude mozne, az sem zkopirujete vysledky, nezavirejte program, jen ho minimalizujte na listu. Az vysledky prohlednu a pokud je budeme mazat, musela byste test zopakovat :arcisit:




18.7. pro neaktivitu :lock: http://forum.viry.cz/viewtopic.php?f=12&t=123975

Re: Asi mám zas zavirováno a klasicky nevím jak a co s tím

Napsal: 21 črc 2015 02:15
od Márty84
Na zadost uzivatelky tema odemknuto :)

Re: Asi mám zas zavirováno a klasicky nevím jak a co s tím

Napsal: 21 črc 2015 15:27
od MyNameIsCady
Ještě jedou Vám děkuji za ochotu!:)

Jinak:

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 20.7.2015
Čas skenování: 15:52
Protokol: výsledky.txt
Správce: Ano

Verze: 2.1.8.1057
Databáze malwaru: v2015.07.20.03
Databáze rootkitů: v2015.07.17.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Karol

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 556030
Uplynulý čas: 6 hod, 27 min, 59 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 3
PUP.Optional.Linkey.A, HKLM\SOFTWARE\CLASSES\Linkey.Linkey, , [2ad941a32a60340286798efb53af4cb4],
PUP.Optional.Linkey.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Linkey.Linkey, , [956e479d3753e5518d722c5d3ec4f30d],
PUP.Optional.Linkey.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Linkey.Linkey, , [956e479d3753e5518d722c5d3ec4f30d],

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 1
PUP.Optional.SweetPacks.A, C:\Program Files (x86)\sweetpacks bundle uninstaller_SweetPlayer_1348381, , [32d1b92bddadff37e0036e82649ee818],

Soubory: 71
PUP.Optiona.ConduitTB.Gen, C:\Users\Karol\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8GEE9HWT\FreeOnlineRadioPlayerRecorder[1].exe, , [2cd710d4c4c6c96d1b5ed691a85db947],
PUP.Optional.APNToolBar.A, C:\Users\Karol\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8OYE3FCT\askrt_en[1].cab, , [eb18fce8eb9fcd69187ad8cf7e83e41c],
PUP.Optional.OpenCandy, C:\Users\Karol\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SKV2WR94\stubinst_pkg_en-eu[1].cab, , [e81b994b187286b042d5fe5d5baafe02],
PUP.Optional.Linkey.A, C:\Users\Karol\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDOOZ6CQ\SettingsManagerSetup[1].exe, , [b053e9fb7119e94d38ac6bc07190728e],
PUP.Optional.OpenCandy, C:\Users\Karol\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDOOZ6CQ\stubinst_pkg_en-eu[1].cab, , [cf34d212385255e1c453b9a256afd030],
PUP.Optional.APNToolBar.A, C:\Users\Karol\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\13.00\agent\stub_data\askrt_en.cab, , [f3109c484a40e353286a911644bdef11],
Trojan.Dropper.PGen, C:\Users\Karol\Desktop\Downloads\BS_Player.rar.part, , [b84b6a7a9cee8ea84d94a9bdf50bd12f],
PUP.Optional.OpenCandy, C:\Users\Karol\Desktop\Downloads\DTLite-setup.exe, , [9172a83c95f5a09667b01645f51030d0],
PUP.Optional.Bundle, C:\Users\Karol\Desktop\Downloads\adobeacrobatreader-lista-centrumcz.exe, , [7390be26137779bd565956450df46997],
PUP.Optional.AztecMedia.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Settings Manager\smdmf\Helper.dll.vir, , [48bb6e76fb8f44f2795c84e4be4748b8],
PUP.Optional.AztecMedia.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Settings Manager\smdmf\Internet Explorer Settings.exe.vir, , [7f84687c305a4ceac90c6ff943c28080],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Settings Manager\smdmf\smdmf.dll.vir, , [7d86d70d6228d561f740d75cd52c2fd1],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Settings Manager\smdmf\smdmfbho.dll.vir, , [35ce875db0daac8acf66470fdf2210f0],
PUP.Optional.AztecMedia.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Settings Manager\smdmf\smdmfldr.dll.vir, , [eb1843a16e1c0b2b4f860e5acd38827e],
PUP.Optional.AztecMedia.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Settings Manager\smdmf\smdmfldr_u.dll.vir, , [dc277e66692106303f96e3853cc9ba46],
PUP.Optional.AztecMedia.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Settings Manager\smdmf\smdmfmgrc2.cfg.vir, , [4ab9687cff8b290dd6ff3b2dae57fa06],
PUP.Optional.AztecMedia.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll.vir, , [a55e3ca81e6cce688e47c0a8b451f808],
PUP.Optional.Linkey.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Settings Manager\smdmf\tbicon.exe.vir, , [a95a905473170036469d30fbcd3430d0],
PUP.Optional.Linkey.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Settings Manager\smdmf\Uninstall.exe.vir, , [73906084e7a385b143a131fa7c8535cb],
PUP.Optional.AztecMedia.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Settings Manager\smdmf\x64\Internet Explorer Settings.exe.vir, , [e023bc28c7c3280e805578f025e046ba],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Settings Manager\smdmf\x64\smdmf.dll.vir, , [b44ff0f49cee87af1027a0934fb29c64],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Settings Manager\smdmf\x64\smdmfbho.dll.vir, , [e41f03e13b4fb97dc471183ef40d9b65],
PUP.Optional.AztecMedia.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Settings Manager\smdmf\x64\smdmfldr.dll.vir, , [d52ea63eff8bf0467c59d692af566799],
PUP.Optional.AztecMedia.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Settings Manager\smdmf\x64\smdmfldr_u.dll.vir, , [a360c91b206a5cda5e77dc8cea1b52ae],
PUP.Optional.AztecMedia.A, C:\AdwCleaner\Quarantine\C\Program Files (x86)\Settings Manager\smdmf\x64\smdmfmgrc2.cfg.vir, , [f112786c107a4de9726380e81aeb18e8],
PUP.Optional.AztecMedia.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Local\Linkey\Helper.dll.vir, , [986b885c6228181ee9ec670151b4cd33],
PUP.Optional.Linkey.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Local\Linkey\LinkeyDeals.exe.vir, , [897a62820189bd7926e4918e41c0f60a],
PUP.Optional.Linkey.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Local\Linkey\Uninstall.exe.vir, , [768d539178123006ef0f4dd126dbe31d],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF14.dll.vir, , [c43f38ac62285bdb6fc834ff0ef336ca],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF10.dll.vir, , [fc0793514248ef47d1667eb59a675aa6],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF11.dll.vir, , [d82bb0348efcaa8c39feed464eb3d927],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF12.dll.vir, , [af5436ae3258af870b2ccf64a55c7789],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF13.dll.vir, , [0af9cd17e7a3ac8aea4dce6547ba01ff],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF15.dll.vir, , [cf34fbe9c4c64cea0d2ac86ba958748c],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF16.dll.vir, , [4bb8c51fbad0b87e3700d063966bb848],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF17.dll.vir, , [c83b5094a1e94cea3ef9a68d7a876b95],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF18.dll.vir, , [8380bc28602af6405ed9181b9869639d],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF19.dll.vir, , [51b2de06b0dac37383b480b3936e13ed],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF2.dll.vir, , [05fef1f3ff8b310567d01320d22f0cf4],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF20.dll.vir, , [08fb875d0387fe383304c86bb44d6d93],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF21.dll.vir, , [8e75f8eccebce94d5ed98fa454ad09f7],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF22.dll.vir, , [956e14d081099b9b74c32b083fc224dc],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF23.dll.vir, , [43c0855f008ae84ef54239faf90840c0],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF24.dll.vir, , [32d1de06e3a7cf673ff8959eee1313ed],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF25.dll.vir, , [1ce74b99bcceba7cb582e64dd32ee21e],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF26.dll.vir, , [db2820c42e5c2016ae89f63d9b66b34d],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF27.dll.vir, , [cc37558f29615ed859dedd5636cb38c8],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF28.dll.vir, , [c142469e0d7d4aec003766cd3ec355ab],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF29.dll.vir, , [39cae8fc365474c21b1c71c2847d38c8],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF30.dll.vir, , [ef14489c98f2a492f344161d4db435cb],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF31.dll.vir, , [3ac971735a30b97d5dda1b18bc45ed13],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF32.dll.vir, , [a95ae8fc375393a3fc3b5cd759a8e719],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF4.dll.vir, , [7a8918cce9a1e155b186b67d629fd729],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF5.dll.vir, , [768d9252acde7eb879be9d96986939c7],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF6.dll.vir, , [f3104a9a0684bd7957e00132de2305fb],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF7.dll.vir, , [9d6641a3b3d78ea8c6711122d130df21],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF8.dll.vir, , [28db855f03873df944f3280b60a18080],
PUP.Optional.SettingsManager.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF9.dll.vir, , [d62d72720882102691a6d65d946dfe02],
PUP.Optional.Linkey.A, C:\AdwCleaner\Quarantine\C\Users\Karol\AppData\Roaming\RHEng\68D37B1A1B9445C9ABED8237FB11F82E\SettingsManagerSetup.exe.vir, , [ac57d60ed1b93cfae5ffeb40956cc838],
PUP.Optiona.ConduitTB.Gen, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Users\Karol\AppData\Local\Conduit\BackStage\{5555CC4C-FA2B-4D69-8296-B6AE5E95C0B7}\BackStage.exe.vir, , [a162f6ee14762d09df9a620512f3c937],
PUP.Optiona.ConduitTB.Gen, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Users\Karol\AppData\Local\Conduit\BackStage\{5555CC4C-FA2B-4D69-8296-B6AE5E95C0B7}\ConduitHook.DLL.vir, , [748f06de9ded5cdad6a3c99e4abb7a86],
PUP.Optiona.ConduitTB.Gen, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Users\Karol\AppData\Local\Conduit\CT2737658\AutoUpdateRunner.exe.vir, , [d82ba2424743aa8cef8a016660a5956b],
PUP.Optiona.ConduitTB.Gen, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Users\Karol\AppData\LocalLow\CT2737658\BS_tbFree.dll.vir, , [21e2c32151399f97b3c6adbad82d18e8],
PUP.Optiona.ConduitTB.Gen, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Users\Karol\AppData\LocalLow\CT2737658\ldrtbFree.dll.vir, , [55aeb3310e7c61d5f7823334917430d0],
PUP.Optiona.ConduitTB.Gen, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Users\Karol\AppData\LocalLow\CT2737658\tbFree.dll.vir, , [62a1ca1a04861d194e2bd3949d68916f],
PUP.Optional.SweetIM, C:\FRST\Quarantine\C\Users\Karol\AppData\Local\Temp\mgsqlite3.dll.xBAD, , [9a695e8695f53afcdccc18422bda45bb],
Trojan.Agent.CK, C:\Program Files (x86)\TNod User & Password Finder\uninst-tnod.exe, , [2fd4ebf9107a75c13c2bd076986d9f61],
PUP.Optional.SweetIM, C:\Windows\Installer\5a4cacf.msi, , [6b98a242b3d778be0b9d70ea8b7ad729],
PUP.Optional.Conduit.A, C:\Users\Karol\AppData\Roaming\Mozilla\Firefox\Profiles\obw3cq37.default\searchplugins\freeonlineradioplayerrecorder-customized-web-search.xml, , [23e08c584c3e4aec3eaeec2fb54e07f9],
Malware.Trace, C:\Windows\inf\ntvdm.inf, , [82816480c4c6e3534bd4c99bdf258c74],
PUP.Optional.DefaultSearch.A, C:\Users\Karol\AppData\Roaming\Mozilla\Firefox\Profiles\obw3cq37.default\prefs.js, Dobré: (), Špatné: (user_pref("keyword.URL", "http://www.default-search.net/search?si ... &src=ds&p=");), ,[e91aad37b2d892a431a585e99a6b48b8]

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Re: Asi mám zas zavirováno a klasicky nevím jak a co s tím

Napsal: 21 črc 2015 18:35
od Márty84
Neni vubec zac! :)

:arrow: Vsechny nalezy nechte odstranit. Po odstraneni a restartu pc test zopakujte, at vime, jestli se to nevraci. Napiste vysledek testu a podle nej zvolim dalsi postup.

Re: Asi mám zas zavirováno a klasicky nevím jak a co s tím

Napsal: 23 črc 2015 00:32
od MyNameIsCady
Zas to trvá jak psovi potřeba, ale nebojte, nebude to na dva týdny jak posledně:D Ponasnažím se, už mi to nabíhá díky mému snadno se vypínacímu notebooku po třetí, ale snad naposled:D #actualreport

Re: Asi mám zas zavirováno a klasicky nevím jak a co s tím

Napsal: 23 črc 2015 07:53
od Márty84
Jestli bude problem s dokoncenim, udelejte aspon Sken hrozeb. Bude rychlejsi. Neprohlizi sice cely pocitac, ale k overeni by mohl stacit.

Re: Asi mám zas zavirováno a klasicky nevím jak a co s tím

Napsal: 24 črc 2015 00:24
od MyNameIsCady
no, jde o to že teprve dneska se mi podařilo to nalezené smetí odstranit. :( čekám tedy zatím na dokončení té další kontroly...

Re: Asi mám zas zavirováno a klasicky nevím jak a co s tím

Napsal: 24 črc 2015 07:33
od MyNameIsCady
aaa, aleluja sláva - dokončeno! :) a nalezený počet smetí: nula.
co teď?:)
Všechny časy jsou v UTC+01:00
Stránka 1 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz