VIRY.CZ

Dobrý den,
Měl bych takový problém. Nevím, co se stalo, ale grafika pořád jede naplno na 98 % a teploty se pohybují pořád kolem 70 stupňů při téměř nulové zátěži (např. internetový prohlížeč). Grafiku mám dobrou ani při náročných hrách se tohle nestává. Konkrétně nvidia gtx 960. Zkoušel jsem aktualizovat ovladače, ale zřejmě nepomohlo. Teda než jsem vypl počítač a znovu ho zapl mám pocit, že to chvilku běželo normálně, ale to asi nic...
Test antiviru Avast (hloubkový test a test před restartem) jsem zkoušel také nic nezjistil, tak nevím.

Děkuji za případné rady

Logfile of random's system information tool 1.10 (written by random/random)
Run by Lukas at 2015-08-17 23:36:21
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 42 GB (36%) free of 114 GB
Total RAM: 8117 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:36:22, on 17.8.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17937)
Boot mode: Normal

Running processes:
D:\Programs\Advanced SystemCare 8\Monitor.exe
D:\Programs\Wise Care 365\WiseTray.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
C:\Windows\PixArt\Pac207\Monitor.exe
D:\Programs\Steam\Steam.exe
D:\Programs\Advanced SystemCare 8\ASCTray.exe
C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe
C:\Users\Lukas\AppData\Roaming\Adobe\FlashPlayerManager_11_3_280.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
D:\Programs\Wise Care 365\WiseCare365.exe
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
D:\Programs\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
D:\Programs\IObit Uninstaller\UninstallMonitor.exe
D:\Programs\Advanced SystemCare 8\RealTimeProtector.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Lukas.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hppp ... SAFC58091L
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type= ... earchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type= ... earchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hppp ... SAFC58091L
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hppp ... SAFC58091L
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type= ... earchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type= ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId= ... SAFC58091L
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: 0.0.0.1 mssplus.mcafee.com
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Advanced SystemCare Surfing Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe" 60
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [Super Charger] C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe Creative Cloud] "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "D:\Programs\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Steam] "D:\Programs\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Advanced SystemCare 8] "D:\Programs\Advanced SystemCare 8\ASCTray.exe" /Auto
O4 - HKCU\..\Run: [Remote Mouse] C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe
O4 - HKCU\..\Run: [FlashPlayerManager] C:\Users\Lukas\AppData\Roaming\Adobe\nircmd.exe exec hide C:\Users\Lukas\AppData\Roaming\Adobe\start.bat
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 8 (AdvancedSystemCareService8) - IObit - D:\Programs\Advanced SystemCare 8\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Smart Connect Technology Agent (ISCTAgent) - Unknown owner - C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.11.149\McCHSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MSI_SuperCharger - MSI - C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Samsung RAPID Mode Service (SamsungRapidSvc) - Unknown owner - C:\Windows\system32\RAPID\SamsungRapidSvc.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: Adobe SwitchBoard (SwitchBoard) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WindowsMangerProtect Service (WindowsMangerProtect) - Unknown owner - C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
O23 - Service: Wise Boot Assistant (WiseBootAssistant) - WiseCleaner.com - D:\Programs\Wise Care 365\BootTime.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13876 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"D:\Programs\Advanced SystemCare 8\ASCService.exe"
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe"
"C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
system32\RAPID\SamsungRapidSvc.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe"
ngservice.exe pipeserver
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" 7cf6b5c7-6761-43c6-aaea-85696cec2c9b
\??\C:\Windows\system32\conhost.exe "156706406607251531893492406-980899915-1570763619-2004745086-1565187576-42966954
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"taskhost.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
taskeng.exe {64BED3CC-E848-46C4-B118-DA8E677C1987}
"C:\Windows\system32\Dwm.exe"
\??\C:\Windows\system32\conhost.exe "-1006286325376513432-1593108789-18566033321008817447-810930526-349956666-1630042231
C:\Windows\Explorer.EXE
"D:\Programs\Advanced SystemCare 8\Monitor.exe" /Task
"D:\Programs\Wise Care 365\WiseTray.exe" -StartTray
"C:\Program Files (x86)\Google\Update\1.3.28.1\GoogleCrashHandler.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files (x86)\Samsung\RAPID\CacheFilter\SamsungRapidApp.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe"
"C:\Windows\PixArt\Pac207\Monitor.exe"
"D:\Programs\Steam\Steam.exe" -silent
"D:\Programs\Advanced SystemCare 8\ASCTray.exe" /Auto
"C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe"
"C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe"
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe"
"C:\Users\Lukas\AppData\Roaming\Adobe\FlashPlayerManager_11_3_280.exe" --skein -o stratum+tcp://stratum.dgb.theblocksfactory.com:9002 -u Recors.1 -p x -I d
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
\??\C:\Windows\system32\conhost.exe "1263848198-1227872101-861199443-1575333303-1511321527-12805162411052333622-405212018
"C:\Program Files (x86)\Google\Update\1.3.28.1\GoogleCrashHandler64.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe" "-launchedbyvulcan"
"C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe"
"C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe" --type=renderer --no-sandbox --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/537.36 CreativeCloud/1.9.0.465" --lang=en-US --lang=en-US --locales-dir-path="C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\locales" --log-severity=disable --channel="4192.0.680616670\785807286" /prefetch:673131151
C:\Windows\system32\SearchIndexer.exe /Embedding
"D:\Programs\Wise Care 365\WiseCare365.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe" --type=gpu-process --channel="4192.1.561522883\1148411532" --no-sandbox --lang=en-US --locales-dir-path="C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\locales" --log-severity=disable --supports-dual-gpus=false --gpu-vendor-id=0x10de --gpu-device-id=0x1401 --gpu-driver-vendor=NVIDIA --gpu-driver-version=10.18.13.5560 --lang=en-US --locales-dir-path="C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\locales" --log-severity=disable /prefetch:822062411
"C:\Windows\system32\GWX\GWX.exe"
"D:\Programs\Steam\bin\steamwebhelper.exe" -cefhost -cachedir "C:\Users\Lukas\AppData\Local\Steam\htmlcache" -steampid 3372 -buildid 1439401440 -steamid "0" --disable-gpu-compositing --disable-gpu --process-per-tab --enable-system-flash --disable-spell-checking --enable-direct-write
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe" /AUTOHIDE
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="6996.0.1330684820\298426857" --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,3,12,22,26 --gpu-vendor-id=0x10de --gpu-device-id=0x1401 --gpu-driver-vendor=NVIDIA --gpu-driver-version=10.18.13.5560 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/Prerender/PrerenderEnabled/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_11/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/ --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="6996.1.1303660439\2139741564" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/Prerender/PrerenderEnabled/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_11/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/ --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --channel="6996.2.2012530322\1514378765" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="6996.5.1079607786\1818155974" --ppapi-flash-args --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"D:\Programs\IObit Uninstaller\UninstallMonitor.exe"
"D:\Programs\Advanced SystemCare 8\RealTimeProtector.exe" /RunCurUs
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/Prerender/PrerenderEnabled/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_11/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/ --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="6996.7.313659708\919852846" /prefetch:673131151
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/Prerender/PrerenderEnabled/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_11/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/ --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="6996.8.1056566423\576380172" /prefetch:673131151

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/Prerender/PrerenderEnabled/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_11/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/ --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="6996.9.628349374\559080477" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_11/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/ --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="6996.12.1480185930\565700834" /prefetch:673131151
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"D:\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\Wise Care 365 PC Checkup Task.job - D:\Programs\Wise Care 365\WiseCare365.exe -c
C:\Windows\tasks\Wise Care 365.job - D:\Programs\Wise Care 365\WiseTray.exe -StartTray
C:\Windows\tasks\Wise Turbo Checker.job - D:\Programs\Wise Care 365\WiseTurbo.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
ExplorerWnd Helper - D:\Programs\IObit Uninstaller\UninstallExplorer64.dll [2015-02-14 2471744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-23 662672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-17 256456]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-23 565304]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-07-17 194504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}]
Advanced SystemCare Surfing Protection - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL [2014-10-17 669984]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-17 256456]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-07-17 194504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-08-17 8497368]
"SamsungRapidApp"=C:\Program Files (x86)\Samsung\RAPID\CacheFilter\SamsungRapidApp.exe [2014-09-16 281776]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-07-24 2634896]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-07-24 1710568]
"ISCT Tray"=C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe [2014-06-18 5860656]
"Monitor"=C:\Windows\PixArt\PAC207\Monitor.exe [2006-11-03 319488]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-09-19 557768]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2015-01-30 39408]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-08-01 3673696]
"Steam"=D:\Programs\Steam\steam.exe [2015-08-12 2899136]
"Advanced SystemCare 8"=D:\Programs\Advanced SystemCare 8\ASCTray.exe [2015-01-20 2428704]
"Remote Mouse"=C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe [2015-03-09 2050048]
"FlashPlayerManager"=C:\Users\Lukas\AppData\Roaming\Adobe\nircmd.exe [2012-10-29 43520]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IMSS"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [2014-04-03 134616]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2014-03-06 292848]
"Super Charger"=C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [2014-04-08 1047536]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-05-11 5515496]
"Adobe Creative Cloud"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2015-01-07 2694320]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-09-13 59720]
"QuickTime Task"=D:\Programs\QTTask.exe [2014-01-17 421888]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=l3codeca.acm
"VIDC.LAGS"=lagarith.dll
"VIDC.X264"=x264vfw64.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.FFDS"=ff_vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.l3codecp"=l3codecp.acm
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-08-17 23:32:38 ----D---- C:\rsit
2015-08-17 23:32:38 ----D---- C:\Program Files\trend micro
2015-08-17 20:54:38 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-08-17 20:53:22 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2015-08-17 20:53:22 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2015-08-17 20:53:22 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-08-17 20:53:22 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2015-08-17 20:53:22 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-08-17 20:53:22 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2015-08-17 20:53:22 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-08-17 20:53:22 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-08-17 20:53:22 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2015-08-17 20:53:22 ----A---- C:\Windows\system32\nvumdshimx.dll
2015-08-17 20:53:22 ----A---- C:\Windows\system32\nvopencl.dll
2015-08-17 20:53:22 ----A---- C:\Windows\system32\nvoglv64.dll
2015-08-17 20:53:22 ----A---- C:\Windows\system32\nvoglshim64.dll
2015-08-17 20:53:22 ----A---- C:\Windows\system32\nvinitx.dll
2015-08-17 20:53:22 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2015-08-17 20:53:22 ----A---- C:\Windows\system32\NvIFR64.dll
2015-08-17 20:53:22 ----A---- C:\Windows\system32\NvFBC64.dll
2015-08-17 20:53:22 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2015-08-17 20:53:22 ----A---- C:\Windows\system32\nvdispgenco6435560.dll
2015-08-17 20:53:22 ----A---- C:\Windows\system32\nvdispco6435560.dll
2015-08-17 20:53:22 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-08-17 20:53:21 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-08-17 20:53:21 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-08-17 20:53:21 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-08-17 20:53:21 ----A---- C:\Windows\system32\nvcuvid.dll
2015-08-17 20:53:21 ----A---- C:\Windows\system32\nvcuda.dll
2015-08-17 20:53:21 ----A---- C:\Windows\system32\nvcompiler.dll
2015-08-17 20:46:11 ----A---- C:\Windows\system32\nvdispgenco6435362.dll
2015-08-17 20:46:11 ----A---- C:\Windows\system32\nvdispco6435362.dll
2015-08-17 20:45:32 ----A---- C:\Windows\SYSWOW64\RltkAPO.dll
2015-08-17 20:45:32 ----A---- C:\Windows\system32\RtkCfg64.dll
2015-08-17 20:45:32 ----A---- C:\Windows\system32\RTCOM64.dll
2015-08-17 20:45:32 ----A---- C:\Windows\system32\RltkAPO64.dll
2015-08-17 20:45:32 ----A---- C:\Windows\system32\RCoInstII64.dll
2015-08-17 20:45:32 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2015-08-17 20:45:32 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2015-08-17 20:45:31 ----A---- C:\Windows\system32\NAHIMICV2apo.dll
2015-08-17 20:45:31 ----A---- C:\Windows\system32\HiFiDAX2API.dll
2015-08-17 20:45:30 ----A---- C:\Windows\system32\DolbyDAX2APOv211.dll
2015-08-17 20:45:30 ----A---- C:\Windows\system32\DolbyDAX2APOv201.dll
2015-08-17 20:45:30 ----A---- C:\Windows\system32\DolbyDAX2APOProp.dll
2015-08-17 20:45:30 ----A---- C:\Windows\system32\DDPP64AF3.dll
2015-08-17 20:45:30 ----A---- C:\Windows\system32\DDPO64AF3.dll
2015-08-17 20:45:30 ----A---- C:\Windows\system32\DDPD64AF3.dll
2015-08-17 20:45:30 ----A---- C:\Windows\system32\DDPA64F3.dll
2015-08-12 11:35:20 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-12 11:35:20 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-12 10:03:32 ----A---- C:\Windows\system32\invagent.dll
2015-08-12 10:03:32 ----A---- C:\Windows\system32\generaltel.dll
2015-08-12 10:03:32 ----A---- C:\Windows\system32\devinv.dll
2015-08-12 10:03:32 ----A---- C:\Windows\system32\CompatTelRunner.exe
2015-08-12 10:03:32 ----A---- C:\Windows\system32\appraiser.dll
2015-08-12 10:03:32 ----A---- C:\Windows\system32\aepdu.dll
2015-08-12 10:03:32 ----A---- C:\Windows\system32\aeinv.dll
2015-08-12 10:03:32 ----A---- C:\Windows\system32\acmigration.dll
2015-08-12 10:03:19 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2015-08-12 10:03:19 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2015-08-12 10:03:19 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2015-08-12 10:03:19 ----A---- C:\Windows\system32\wksprt.exe
2015-08-12 10:03:19 ----A---- C:\Windows\system32\tsgqec.dll
2015-08-12 10:03:19 ----A---- C:\Windows\system32\rdvidcrl.dll
2015-08-12 10:03:19 ----A---- C:\Windows\system32\mstscax.dll
2015-08-12 10:03:18 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-08-12 10:03:18 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-08-12 10:03:18 ----A---- C:\Windows\system32\sysmain.dll
2015-08-12 10:03:18 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-08-12 10:03:18 ----A---- C:\Windows\system32\ntdll.dll
2015-08-12 10:03:18 ----A---- C:\Windows\system32\kernel32.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-08-12 10:03:17 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-08-12 10:03:17 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-08-12 10:03:17 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-08-12 10:03:17 ----A---- C:\Windows\SYSWOW64\user.exe
2015-08-12 10:03:17 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-08-12 10:03:17 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-08-12 10:03:17 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-08-12 10:03:17 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-08-12 10:03:17 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-08-12 10:03:17 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-08-12 10:03:17 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-08-12 10:03:17 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-08-12 10:03:17 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-08-12 10:03:17 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-08-12 10:03:17 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-08-12 10:03:17 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-08-12 10:03:17 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-08-12 10:03:17 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-08-12 10:03:17 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-08-12 10:03:17 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2015-08-12 10:03:17 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-08-12 10:03:17 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-08-12 10:03:17 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-08-12 10:03:17 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\wow64win.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\wow64cpu.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\wow64.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\winsrv.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\wdigest.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\TSpkg.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\sspisrv.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\sspicli.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\srcore.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\srclient.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\smss.exe
2015-08-12 10:03:17 ----A---- C:\Windows\system32\schannel.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\secur32.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\rstrui.exe
2015-08-12 10:03:17 ----A---- C:\Windows\system32\rpcrt4.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\ntvdm64.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\ncrypt.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\msv1_0.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\msmmsp.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\lsass.exe
2015-08-12 10:03:17 ----A---- C:\Windows\system32\lsasrv.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\KernelBase.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\kerberos.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-08-12 10:03:17 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-08-12 10:03:17 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-08-12 10:03:17 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-08-12 10:03:17 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-08-12 10:03:17 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-08-12 10:03:17 ----A---- C:\Windows\system32\csrsrv.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\cryptbase.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\credssp.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\conhost.exe
2015-08-12 10:03:17 ----A---- C:\Windows\system32\auditpol.exe
2015-08-12 10:03:17 ----A---- C:\Windows\system32\apisetschema.dll
2015-08-12 10:03:17 ----A---- C:\Windows\system32\adtschema.dll
2015-08-12 10:03:16 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-08-12 10:03:16 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-08-12 10:03:16 ----A---- C:\Windows\system32\msobjs.dll
2015-08-12 10:03:16 ----A---- C:\Windows\system32\msaudite.dll
2015-08-12 10:03:13 ----A---- C:\Windows\system32\basesrv.dll
2015-08-12 10:03:10 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-08-12 10:03:10 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-08-12 10:03:10 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-08-12 10:03:10 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-08-12 10:03:10 ----A---- C:\Windows\system32\iertutil.dll
2015-08-12 10:03:10 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-08-12 10:03:10 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-08-12 10:03:09 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-08-12 10:03:09 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-08-12 10:03:09 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-08-12 10:03:09 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-08-12 10:03:09 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-08-12 10:03:09 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-08-12 10:03:09 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-08-12 10:03:09 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-08-12 10:03:09 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-08-12 10:03:09 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-08-12 10:03:09 ----A---- C:\Windows\system32\iernonce.dll
2015-08-12 10:03:09 ----A---- C:\Windows\system32\iedkcs32.dll
2015-08-12 10:03:09 ----A---- C:\Windows\system32\ie4uinit.exe
2015-08-12 10:03:08 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-08-12 10:03:08 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-08-12 10:03:08 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-08-12 10:03:08 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-08-12 10:03:08 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-08-12 10:03:08 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-08-12 10:03:08 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-08-12 10:03:08 ----A---- C:\Windows\system32\urlmon.dll
2015-08-12 10:03:08 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-08-12 10:03:08 ----A---- C:\Windows\system32\msfeeds.dll
2015-08-12 10:03:08 ----A---- C:\Windows\system32\iesetup.dll
2015-08-12 10:03:08 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-08-12 10:03:08 ----A---- C:\Windows\system32\ieapfltr.dll
2015-08-12 10:03:08 ----A---- C:\Windows\system32\dxtrans.dll
2015-08-12 10:03:07 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-08-12 10:03:07 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-08-12 10:03:07 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-08-12 10:03:07 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-08-12 10:03:07 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-08-12 10:03:07 ----A---- C:\Windows\system32\vbscript.dll
2015-08-12 10:03:07 ----A---- C:\Windows\system32\jsproxy.dll
2015-08-12 10:03:07 ----A---- C:\Windows\system32\ieUnatt.exe
2015-08-12 10:03:07 ----A---- C:\Windows\system32\ieui.dll
2015-08-12 10:03:07 ----A---- C:\Windows\system32\dxtmsft.dll
2015-08-12 10:03:06 ----A---- C:\Windows\system32\wininet.dll
2015-08-12 10:03:06 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-08-12 10:03:06 ----A---- C:\Windows\system32\mshtmled.dll
2015-08-12 10:03:06 ----A---- C:\Windows\system32\jscript9diag.dll
2015-08-12 10:03:06 ----A---- C:\Windows\system32\jscript9.dll
2015-08-12 10:03:06 ----A---- C:\Windows\system32\jscript.dll
2015-08-12 10:03:06 ----A---- C:\Windows\system32\ieframe.dll
2015-08-12 10:03:05 ----A---- C:\Windows\system32\msrating.dll
2015-08-12 10:03:05 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-08-12 10:03:05 ----A---- C:\Windows\system32\mshtml.dll
2015-08-12 10:00:03 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2015-08-12 10:00:03 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-08-12 10:00:03 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2015-08-12 10:00:03 ----A---- C:\Windows\system32\WebClnt.dll
2015-08-12 10:00:03 ----A---- C:\Windows\system32\msxml6.dll
2015-08-12 10:00:03 ----A---- C:\Windows\system32\msxml3.dll
2015-08-12 10:00:03 ----A---- C:\Windows\system32\davclnt.dll
2015-08-12 10:00:02 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2015-08-12 10:00:02 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2015-08-12 10:00:02 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-08-12 10:00:02 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2015-08-12 10:00:02 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-08-12 10:00:02 ----A---- C:\Windows\system32\win32k.sys
2015-08-12 10:00:02 ----A---- C:\Windows\system32\msxml6r.dll
2015-08-12 10:00:02 ----A---- C:\Windows\system32\msxml3r.dll
2015-08-12 10:00:02 ----A---- C:\Windows\system32\lpk.dll
2015-08-12 10:00:02 ----A---- C:\Windows\system32\FntCache.dll
2015-08-12 10:00:02 ----A---- C:\Windows\system32\DWrite.dll
2015-08-12 10:00:02 ----A---- C:\Windows\system32\atmfd.dll
2015-08-12 10:00:01 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-08-12 10:00:01 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-08-12 10:00:01 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-08-12 10:00:01 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2015-08-12 10:00:01 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-08-12 10:00:01 ----A---- C:\Windows\system32\fontsub.dll
2015-08-12 10:00:01 ----A---- C:\Windows\system32\dciman32.dll
2015-08-12 10:00:01 ----A---- C:\Windows\system32\d3d10warp.dll
2015-08-12 10:00:01 ----A---- C:\Windows\system32\atmlib.dll
2015-08-12 09:59:56 ----A---- C:\Windows\SYSWOW64\notepad.exe
2015-08-12 09:59:56 ----A---- C:\Windows\system32\notepad.exe
2015-08-12 09:59:56 ----A---- C:\Windows\notepad.exe
2015-08-12 09:59:49 ----A---- C:\Windows\system32\shell32.dll
2015-08-12 09:59:48 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-08-12 09:59:48 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-08-12 09:59:48 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-08-12 09:59:48 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-08-12 09:59:48 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-08-12 09:59:48 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-08-12 09:59:48 ----A---- C:\Windows\system32\wuwebv.dll
2015-08-12 09:59:48 ----A---- C:\Windows\system32\wups2.dll
2015-08-12 09:59:48 ----A---- C:\Windows\system32\wups.dll
2015-08-12 09:59:48 ----A---- C:\Windows\system32\wudriver.dll
2015-08-12 09:59:48 ----A---- C:\Windows\system32\wucltux.dll
2015-08-12 09:59:48 ----A---- C:\Windows\system32\wuaueng.dll
2015-08-12 09:59:48 ----A---- C:\Windows\system32\wuauclt.exe
2015-08-12 09:59:48 ----A---- C:\Windows\system32\wuapp.exe
2015-08-12 09:59:48 ----A---- C:\Windows\system32\wuapi.dll
2015-08-12 09:59:48 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-08-12 09:59:48 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-08-12 09:59:47 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-08-04 13:03:30 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2015-08-04 13:03:30 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2015-08-02 13:02:15 ----D---- C:\Program Files (x86)\Remote Mouse
2015-07-29 23:44:27 ----D---- C:\Program Files\McAfee Security Scan

======List of files/folders modified in the last 1 month======

2015-08-17 23:36:22 ----D---- C:\Windows\Temp
2015-08-17 23:32:38 ----RD---- C:\Program Files
2015-08-17 23:23:46 ----D---- C:\Windows\System32
2015-08-17 23:23:46 ----D---- C:\Windows\inf
2015-08-17 23:23:46 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-08-17 23:20:39 ----D---- C:\Windows\system32\config
2015-08-17 23:18:17 ----D---- C:\Users\Lukas\AppData\Roaming\Wise Care 365
2015-08-17 23:17:49 ----D---- C:\ProgramData\NVIDIA
2015-08-17 23:17:47 ----D---- C:\Windows
2015-08-17 22:51:30 ----D---- C:\Windows\SysWOW64
2015-08-17 20:55:08 ----D---- C:\ProgramData\NVIDIA Corporation
2015-08-17 20:54:36 ----D---- C:\Windows\system32\DriverStore
2015-08-17 20:54:01 ----D---- C:\Windows\system32\drivers
2015-08-17 20:53:59 ----D---- C:\Windows\system32\catroot2
2015-08-17 20:48:15 ----D---- C:\Windows\system32\catroot
2015-08-17 20:47:37 ----SHD---- C:\Windows\Installer
2015-08-17 20:46:43 ----D---- C:\ProgramData\boost_interprocess
2015-08-17 20:45:58 ----D---- C:\Windows\system32\DAX2
2015-08-17 20:45:57 ----D---- C:\Windows\SYSWOW64\RTCOM
2015-08-17 20:44:53 ----SHD---- C:\System Volume Information
2015-08-17 20:33:57 ----D---- C:\Windows\SoftwareDistribution
2015-08-17 20:31:05 ----D---- C:\Windows\debug
2015-08-17 18:06:11 ----D---- C:\Users\Lukas\AppData\Roaming\Adobe
2015-08-14 15:18:39 ----D---- C:\Windows\rescache
2015-08-14 11:33:26 ----D---- C:\Program Files (x86)\XTab
2015-08-14 11:11:00 ----D---- C:\ProgramData\ProductData
2015-08-12 19:49:19 ----D---- C:\Windows\Microsoft.NET
2015-08-12 19:49:06 ----RSD---- C:\Windows\assembly
2015-08-12 18:13:20 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-08-12 12:48:16 ----D---- C:\Windows\winsxs
2015-08-12 12:47:46 ----SD---- C:\Windows\system32\CompatTel
2015-08-12 12:47:46 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-08-12 12:47:46 ----D---- C:\Windows\system32\drivers\cs-CZ
2015-08-12 12:47:46 ----D---- C:\Windows\system32\cs-CZ
2015-08-12 12:47:46 ----D---- C:\Windows\system32\appraiser
2015-08-12 12:47:46 ----D---- C:\Windows\AppPatch
2015-08-12 12:47:45 ----D---- C:\Windows\SYSWOW64\en-US
2015-08-12 12:47:45 ----D---- C:\Windows\system32\en-US
2015-08-12 12:47:45 ----D---- C:\Program Files\Internet Explorer
2015-08-12 12:47:45 ----D---- C:\Program Files (x86)\Internet Explorer
2015-08-12 11:35:43 ----D---- C:\ProgramData\Microsoft Help
2015-08-12 11:32:24 ----D---- C:\Windows\system32\MRT
2015-08-12 11:30:46 ----A---- C:\Windows\system32\MRT.exe
2015-08-09 17:12:10 ----D---- C:\Users\Lukas\AppData\Roaming\vlc
2015-08-07 13:06:30 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2015-08-07 13:06:30 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-08-07 13:06:30 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2015-08-07 13:06:30 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-08-07 13:06:30 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-08-07 13:06:30 ----A---- C:\Windows\system32\OpenCL.dll
2015-08-07 13:06:30 ----A---- C:\Windows\system32\nvwgf2umx.dll
2015-08-07 13:06:30 ----A---- C:\Windows\system32\nvapi64.dll
2015-08-07 06:34:33 ----A---- C:\Windows\system32\nvvsvc.exe
2015-08-07 06:34:33 ----A---- C:\Windows\system32\nvsvcr.dll
2015-08-07 06:34:33 ----A---- C:\Windows\system32\nvshext.dll
2015-08-07 06:34:32 ----A---- C:\Windows\system32\nvmctray.dll
2015-08-07 06:34:31 ----A---- C:\Windows\system32\nvsvc64.dll
2015-08-07 06:34:31 ----A---- C:\Windows\system32\nvcpl.dll
2015-08-05 20:10:34 ----D---- C:\Users\Lukas\AppData\Roaming\TS3Client
2015-08-02 13:02:15 ----RD---- C:\Program Files (x86)
2015-08-02 00:37:31 ----HD---- C:\$Windows.~BT
2015-08-02 00:07:57 ----D---- C:\Windows\Panther
2015-08-01 21:55:24 ----D---- C:\Windows\Logs
2015-07-30 20:40:03 ----D---- C:\Windows\system32\FxsTmp
2015-07-26 15:39:42 ----SD---- C:\Users\Lukas\AppData\Roaming\Microsoft
2015-07-25 10:14:25 ----SD---- C:\Windows\system32\GWX
2015-07-24 06:21:23 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2015-07-24 06:21:23 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll
2015-07-24 06:21:14 ----A---- C:\Windows\system32\nvspcap64.dll
2015-07-24 06:21:14 ----A---- C:\Windows\system32\nvspbridge64.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-04-23 65736]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-04-23 272248]
R0 iaStorA;iaStorA; C:\Windows\system32\DRIVERS\iaStorA.sys [2015-06-07 1399536]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2015-06-07 30960]
R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2014-03-06 20464]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 SamsungRapidDiskFltr;SAMSUNG RAPID Mode Disk Filter Driver; C:\Windows\system32\DRIVERS\SamsungRapidDiskFltr.sys [2014-09-16 268976]
R0 SamsungRapidFSFltr;SamsungRapidFSFltr; C:\Windows\system32\DRIVERS\SamsungRapidFSFltr.sys [2014-09-16 111280]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2015-01-31 564824]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-04-23 93528]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-04-23 1047320]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-06-26 442264]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2015-02-14 26528]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-04-23 29168]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-04-23 89944]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-04-23 137288]
R2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2015-04-23 273824]
R3 ikbevent;Intel Upper keyboard Class Filter Driver; C:\Windows\system32\DRIVERS\ikbevent.sys [2014-05-27 22216]
R3 imsevent;Intel Upper Mouse Class Filter Driver; C:\Windows\system32\DRIVERS\imsevent.sys [2014-05-27 22728]
R3 INETMON;INETMON; \??\C:\Windows\System32\Drivers\INETMON.sys [2014-05-27 25800]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-08-17 4514008]
R3 ISCT;Intel(R) Smart Connect Technology Device Driver; C:\Windows\system32\DRIVERS\ISCTD.sys [2014-02-03 44744]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2014-03-06 370672]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2015-06-07 797456]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2015-03-15 129312]
R3 NTIOLib_1_0_3;NTIOLib_1_0_3; \??\C:\Program Files (x86)\MSI\Super Charger\NTIOLib_X64.sys [2012-10-25 13368]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-06-17 204648]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-07-24 19600]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-07-03 47976]
R3 PAC207;SoC PC-Camera; C:\Windows\system32\DRIVERS\PFC027.SYS [2006-12-05 572416]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2015-04-25 977624]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2011-08-17 19968]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2015-07-14 33448]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [2010-11-01 14544]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-07-07 82128]
R2 AdvancedSystemCareService8;Advanced SystemCare Service 8; D:\Programs\Advanced SystemCare 8\ASCService.exe [2014-11-04 815392]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-04-23 343336]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-07-24 1155216]
R2 ISCTAgent;Intel(R) Smart Connect Technology Agent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [2014-06-18 209712]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2014-04-03 154584]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2014-04-03 398296]
R2 MSI_SuperCharger;MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [2014-03-17 162800]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-07-24 1871504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-07-24 5544592]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-08-07 937592]
R2 SamsungRapidSvc;Samsung RAPID Mode Service; C:\Windows\system32\RAPID\SamsungRapidSvc.exe [2014-09-16 28848]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-08-07 410744]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2015-04-23 4034896]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-08-12 838336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-30 116648]
S2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2015-07-30 2909472]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-02-18 315488]
S2 WindowsMangerProtect;WindowsMangerProtect Service; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [2015-05-23 602112]
S2 WiseBootAssistant;Wise Boot Assistant; D:\Programs\Wise Care 365\BootTime.exe [2014-10-28 580232]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-12 269000]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-30 116648]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2015-01-30 194032]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-07-16 114688]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2014-01-31 887232]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.11.149\McCHSvc.exe [2015-06-26 289256]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 SwitchBoard;Adobe SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-01-31 1255736]
S4 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]

-----------------EOF-----------------

Krasny den Vam preju

Tezite BitCoiny, proto vali grafika na max.

Odinstalujte

McAfee Security Scan - adware z instalace Adobe Flash Playeru http://forum.viry.cz/viewtopic.php?p=1374437#p1374437
vsechno od spolecnosti IObit zejmena Advanced System Care 8 - nekolikrat neopravitelne shodil cely operacni system
Wise Care 365

V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )

ukoncete vsechny programy
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Scan, pote na Cleaning
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner[Cx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

# AdwCleaner v5.001 - Logfile created 18/08/2015 at 12:00:09
# Updated 17/08/2015 by Xplode
# Database : 2015-08-16.2 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : Lukas - LUKAS-PC
# Running from : D:\Desktop\adwcleaner_5.001.exe
# Option : Cleaning

***** [ Services ] *****

[-] Service Deleted : WindowsMangerProtect

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\XTab
[-] Folder Deleted : C:\ProgramData\WindowsMangerProtect
[-] Folder Deleted : C:\ProgramData\IHProtectUpDate

***** [ Files ] *****

[-] File Deleted : C:\Windows\Sysnative\roboot64.exe

***** [ Shortcuts ] *****

***** [ Scheduled tasks ] *****

***** [ Registry ] *****

[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
[-] Key Deleted : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
[-] Key Deleted : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10921475-03CE-4E04-90CE-E2E7EF20C814}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{10921475-03CE-4E04-90CE-E2E7EF20C814}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}
[-] Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
[-] Key Deleted : HKLM\SOFTWARE\delta-homesSoftware
[-] Key Deleted : HKLM\SOFTWARE\SupDp
[-] Key Deleted : HKLM\SOFTWARE\SupTab
[-] Key Deleted : HKLM\SOFTWARE\mystartsearchSoftware
[-] Key Deleted : HKLM\SOFTWARE\IHProtect
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
[-] Data Restored : HKU\S-1-5-21-3343877709-3063114829-576677117-1000\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Data Restored : HKU\S-1-5-21-3343877709-3063114829-576677117-1000\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKU\S-1-5-21-3343877709-3063114829-576677117-1000\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data Restored : HKU\S-1-5-21-3343877709-3063114829-576677117-1000\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[!] Key Not Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[-] Data Restored : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
[-] Data Restored : HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command []

***** [ Web browsers ] *****

[-] [C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : mystartsearch

*************************

:: Proxy settings cleared
:: Winsock settings cleared

*************************

C:\AdwCleaner[C1].txt - [5151 bytes] - [18/08/2015 12:00:09]
C:\AdwCleaner[S1].txt - [7186 bytes] - [18/08/2015 11:59:36]

########## EOF - C:\AdwCleaner[C1].txt - [5275 bytes] ##########

Dejte log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101

FRST + Addition
pozn. ten launcher mi hlásil něco, že není na ploše, ale na ploše byl. Ty 2 soubory mi to normálně vyhodilo, tak snad je vše v pořádku.

Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
znovu spustte FRST a kliknete na Fix

po restartu bude na plose ulozen fixlog, jehoz obsah mi vlozte do pristi odpovedi

Kód: Vybrat vše

Start
CloseProcesses:
File: C:\ProgramData\1-0-0-0.txt
File: C:\Users\Lukas\AppData\Roaming\Adobe\start.bat
File: C:\Users\Lukas\AppData\Roaming\Adobe\nircmd.exe
CMD: dir C:\Users\Lukas\AppData\Roaming\Adobe
File: C:\Users\Lukas\AppData\Roaming\Adobe\libidn-11.dll
File: C:\Users\Lukas\AppData\Roaming\Adobe\zlib1.dll
File: C:\Users\Lukas\AppData\Roaming\Adobe\libgcc_s_dw2-1.dll
File: C:\Users\Lukas\AppData\Roaming\Adobe\libpdcurses.dll

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634896 2015-07-24] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-09-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] => D:\Programs\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKU\S-1-5-21-3343877709-3063114829-576677117-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673696 2013-08-01] (Disc Soft Ltd)
HKU\S-1-5-21-3343877709-3063114829-576677117-1000\...\Run: [FlashPlayerManager] => C:\Users\Lukas\AppData\Roaming\Adobe\nircmd.exe [43520 2012-10-29] (NirSoft)
SearchScopes: HKU\.DEFAULT -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKU\S-1-5-21-3343877709-3063114829-576677117-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2909472 2015-07-30] (IObit)
C:\Program Files (x86)\IObit
S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [X]

2015-08-18 12:34 - 2015-08-18 12:46 - 00029696 _____ C:\Users\Lukas\AppData\Local\MSGBOX.EXE
2015-08-18 12:00 - 2015-08-18 12:00 - 00005395 _____ C:\AdwCleaner[C1].txt
2015-08-18 11:59 - 2015-08-18 12:00 - 00000000 ____D C:\AdwCleaner
2015-08-18 11:59 - 2015-08-18 11:59 - 00007186 _____ C:\AdwCleaner[S1].txt
2015-08-17 23:32 - 2015-08-17 23:36 - 00000000 ____D C:\Program Files\trend micro
2015-08-17 23:32 - 2015-08-17 23:32 - 00000000 ____D C:\rsit
2015-01-30 22:11 - 2015-01-30 22:11 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Task: {28BFB92C-89D3-4483-970F-D9A0493FC3B0} - System32\Tasks\Wise Turbo Checker => D:\Programs\Wise Care 365\WiseTurbo.exe
Task: {6ED2C9D6-E504-4AE2-84A0-A0424436A3A2} - System32\Tasks\Driver Booster SkipUAC (Lukas) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {796AE874-13F1-42DF-A0C0-A618FB6C07CE} - System32\Tasks\Wise Care 365 => D:\Programs\Wise Care 365\WiseTray.exe
Task: {9CC6DCB5-87C3-4131-88BA-BF53C2D3B7F9} - System32\Tasks\Wise Care 365 PC Checkup Task => D:\Programs\Wise Care 365\WiseCare365.exe
Task: {ACEF8288-98A7-4E39-8957-5C43DCCE3085} - System32\Tasks\{DCBBCB6A-8018-49CF-B165-042F9CC14C06} => pcalua.exe -a D:\Downloads\insta\install.exe -d D:\Downloads\insta
Task: {DC94CFF6-B13C-4C6C-8C68-8610FE412E91} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Wise Care 365 PC Checkup Task.job => D:\Programs\Wise Care 365\WiseCare365.exe
Task: C:\Windows\Tasks\Wise Care 365.job => D:\Programs\Wise Care 365\WiseTray.exe
Task: C:\Windows\Tasks\Wise Turbo Checker.job => D:\Programs\Wise Care 365\WiseTurbo.exe
D:\Programs\Wise Care 365
AlternateDataStreams: C:\Users\Lukas\AppData\Local\Temporary Internet Files:mL9VkYRyvYsC9Q820
EmptyTemp:
End

Log mozna bude delsi - zazipovat a opet prilozit jako prilohu. Po restartu sledujte vyuziti graficke karty.

Děkuji za pomoc
Nyní se zdá být vše opět v pořádku. Grafika má opět nyní využití mnohem nižší a teplota je okolo 31 stupňů. Snad je to nyní napořád. V čem byl teda hlavní problém? Na co si mám dát pozor, aby se to již neopakovalo?

Otestujte na virustotal.com C:\Users\Lukas\AppData\Roaming\Adobe\nircmd.exe - pokud uz byl soubor otestovany, zvolte Reanalyse. Do pristiho prispevku dejte link (odkaz) s vysledky analyzy.

Problem zpusobovala prave tezba BitCoinu, kterou mel na svedomi (nejen) tento soubor. Zpusob infikovani Vaseho PC nedokazu presne rict... nejcasteji cracky. Tezit jste prestal a na jine problemy jste neupozornoval, takze jeste uklidime.

Stahnete a spustte DelFix - https://toolslib.net/downloads/viewdownload/2-delfix/
Oznacte jen moznost "Remove disinfection tools"
kliknete na Run

A pokud nejsou dotazy ci jine problemy, je to ode mne vse.

https://www.virustotal.com/cs/file/5820 ... 439904302/

----
# DelFix v1.010 - Logfile created 18/08/2015 at 15:26:44
# Updated 26/04/2015 by Xplode
# Username : Lukas - LUKAS-PC
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)

~ Removing disinfection tools ...

Deleted : C:\FRST
Deleted : D:\Desktop\AdwCleaner[C1].txt
Deleted : D:\Desktop\adwcleaner_5.001.exe
Deleted : D:\Desktop\Fixlog.7z
Deleted : D:\Desktop\Fixlog.txt
Deleted : D:\Desktop\FRST.7z
Deleted : D:\Desktop\FRST64.exe
Deleted : D:\Desktop\log.txt
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis

########## - EOF - ##########

Pripadne vizualni zbytky po utilitach zmizi po restartu. Soubor C:\DelFix.txt muzete smazat a tim je leceni dokonceno.

A ty programy, které jste doporučil odinstalovat nedoporučujete znovu instalovat a používat? Wise care apod.?

McAfee Security Scan je adware - pokud Vam vyhovuje, klidne si ho znovu nainstalujte.
Firma IObit zacala podnikat tim, ze ukradla databazi jine renomovane spolecnosti a dal ve vyvoji sveho produktu pokracovala - kdyz dva delaji totez, neni to totez... Nekolikrat jsme primo zde resili tak krasne nakopnute operacni systemy, ze dokazal pomoct az kompletni reinstall (mluvim konkretne o Advanced System Care).
Wise Care jsem zatim v akci poradne nevidel, ale osobne jsem proti vsem ruznym optimalizatorum a urychlovacum, protoze casto dokazou udelat vice skody nez uzitku. Vyjimkou je CCleaner, ktery mame leta otestovany, a ktery v defaultnim nastaveni uzivateli neublizi.

Do PC si nainstalujte, co uznate za vhodne a cemu duverujete

VIRY.CZ

Grafika jede naplno

Grafika jede naplno

Re: Grafika jede naplno

Re: Grafika jede naplno

Re: Grafika jede naplno

Re: Grafika jede naplno

Re: Grafika jede naplno

Re: Grafika jede naplno

Re: Grafika jede naplno

Re: Grafika jede naplno

Re: Grafika jede naplno

Re: Grafika jede naplno

Re: Grafika jede naplno