VIRY.CZ

Zdravím, prosil bych vás o takovou preventivku.

Protože před 2-ma dny jsem nechtěně klikl na jednu webovou stránku a myslím si, že se mi do prohlížeče/počítače dostal nějaký spyware, prostě nějaký špehovací program (keylogger), mohli by jste mi pomoc prosím? Udělám to, co po mě budete chtít!

Přikládám ze LOG z FRST:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:17-10-2015
Ran by Phong (administrator) on PHONG-VAIO (17-10-2015 23:07:31)
Running from C:\Users\Phong\Desktop
Loaded Profiles: Phong (Available Profiles: Phong)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 10 (Default browser not detected!)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IObit) D:\Advanced SystemCare 8\ASCService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Akamai Technologies, Inc.) C:\Users\Phong\AppData\Local\Akamai\netsession_win.exe
(Spotify Ltd) C:\Users\Phong\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Akamai Technologies, Inc.) C:\Users\Phong\AppData\Local\Akamai\netsession_win.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ElevationManager\AdobeUpdateService.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Threat Expert Ltd.) C:\Program Files (x86)\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe
(IObit) D:\Advanced SystemCare 8\Monitor.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(WiseCleaner.com) D:\Wise Registry Cleaner\AssistService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(Valve Corporation) D:\Steam\Steam.exe
(Valve Corporation) D:\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) D:\Steam\bin\steamwebhelper.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Phong\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [518784 2011-03-29] (Conexant Systems, Inc.)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [226672 2011-02-17] (Alps Electric Co., Ltd.)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [2757312 2011-02-15] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] => c:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [648032 2010-11-27] (Sony Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKU\S-1-5-21-2338150882-3624695077-237545274-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Phong\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2338150882-3624695077-237545274-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7063832 2014-11-21] (Piriform Ltd)
HKU\S-1-5-21-2338150882-3624695077-237545274-1000\...\Run: [Google Update] => C:\Users\Phong\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-09-04] (Google Inc.)
HKU\S-1-5-21-2338150882-3624695077-237545274-1000\...\Run: [Spotify Web Helper] => C:\Users\Phong\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-09-05] (Spotify Ltd)
HKU\S-1-5-21-2338150882-3624695077-237545274-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2014-12-19] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2014-12-19] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2014-12-19] ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => No File
CHR HKU\S-1-5-21-2338150882-3624695077-237545274-1000\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{185E5B43-4309-4573-9D42-493F22A95F7D}: [DhcpNameServer] 213.46.172.37 213.46.172.36

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-2338150882-3624695077-237545274-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2338150882-3624695077-237545274-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2338150882-3624695077-237545274-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.cz/
URLSearchHook: HKU\S-1-5-21-2338150882-3624695077-237545274-1000 - (No Name) - {472734EA-242A-422b-ADF8-83D1E48CC825} - No File
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2338150882-3624695077-237545274-1000 -> {2800457D-ECC9-4CD5-AC17-E1CE6368BA14} URL = hxxp://rover.ebay.com/rover/1/14361-113527-36183-6/4?satitle={searchTerms}
SearchScopes: HKU\S-1-5-21-2338150882-3624695077-237545274-1000 -> {B0DC2BF5-EB0B-41C1-BAC1-0EEB90F4B23B} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2013-05-14] (Skype Technologies S.A.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18] (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2014-11-23] (Sun Microsystems, Inc.)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-03-31] (Atheros Commnucations)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-05-14] (Skype Technologies S.A.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2014-11-23] (Sun Microsystems, Inc.)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM-x32 - No Name - {472734EA-242A-422B-ADF8-83D1E48CC825} - No File
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2013-05-14] (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-05-14] (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Filter: application/x-mfe-ipt - No CLSID Value

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll [2015-09-22] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-01-07] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-22] ()
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_45 -> C:\Windows\SysWOW64\npdeployJava1.dll [2014-11-23] (Sun Microsystems, Inc.)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll [2014-11-23] (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2011-02-18] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2011-02-18] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-14] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-02-16] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-01-07] (Adobe Systems)
FF Plugin HKU\S-1-5-21-2338150882-3624695077-237545274-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Phong\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-2338150882-3624695077-237545274-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Phong\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-2338150882-3624695077-237545274-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2012-11-29] (Ubisoft)

Chrome:
=======
CHR Profile: C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Disk Google) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-15]
CHR Extension: (YouTube) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-15]
CHR Extension: (Dota 2 / CS:GO lounge autobump) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cefaeceoipbbajophehdidoeamkmkhej [2015-03-10]
CHR Extension: (Steam theme) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ciomdfgkibhfdaocjomnjlolnmbmnakk [2015-01-15]
CHR Extension: (Steam inventory helper) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2015-03-10]
CHR Extension: (Vyhledávání Google) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-15]
CHR Extension: (Floating YouTube Extension) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\egncdnniomonjgpjbapalkckojhkfddk [2015-09-27]
CHR Extension: (Lounge Assistant) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\enjonnlehciedbcidabdglnnihcncbml [2015-03-10]
CHR Extension: (LoungeDestroyer) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghahcnmfjfckcedfajbhekgknjdplfcl [2015-08-16]
CHR Extension: (AdBlock) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-01-15]
CHR Extension: (Facebook Unseen) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\iicapmagmhahddefgokbabbgieiogjop [2015-07-14]
CHR Extension: (Emoji Input by EmojiStuff.com) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\immhpnclomdloikkpcefncmfgjbkojmh [2015-06-10]
CHR Extension: (Floating YouTube™) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jjphmlaoffndcnecccgemfdaaoighkel [2015-09-27]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-15]
CHR Extension: (Gmail) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-15]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-05-14]
StartMenuInternet: Google Chrome - C:\Users\Phong\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ElevationManager\AdobeUpdateService.exe [710320 2015-01-07] (Adobe Systems Incorporated)
R2 AdvancedSystemCareService8; D:\Advanced SystemCare 8\ASCService.exe [815392 2014-11-04] (IObit)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-03-31] (Atheros) [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [75936 2011-03-31] (Atheros Commnucations) [File not signed]
R2 Browser Defender Update Service; C:\Program Files (x86)\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe [580728 2012-10-23] (Threat Expert Ltd.)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2361344 2011-03-29] (Realsil Microelectronics Inc.) [File not signed]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3611808 2015-07-22] (INCA Internet Co., Ltd.)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.)
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [887000 2011-01-20] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1642544 2014-02-28] (Sony Corporation)
R2 wasnotify; D:\Wise Registry Cleaner\AssistService.exe [643392 2015-04-28] (WiseCleaner.com)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2014-06-21] (DT Soft Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 HPMo4DE3; C:\Windows\System32\DRIVERS\HPMo4DE3.sys [25088 2011-03-09] (TPMX Electronics Ltd.)
S3 HPub4DE3; C:\Windows\System32\Drivers\HPub4DE3.sys [18432 2011-04-12] (TPMX Electronics Ltd.)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-01-10] (REALiX(tm))
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2014-11-23] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33008 2014-11-23] (Synaptics Incorporated)
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] ()
S3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex) [File not signed]
S3 Huawei; system32\DRIVERS\ewdcsc.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-17 23:07 - 2015-10-17 23:08 - 00023482 _____ C:\Users\Phong\Desktop\FRST.txt
2015-10-17 23:06 - 2015-10-17 23:07 - 00000000 ____D C:\FRST
2015-10-17 23:05 - 2015-10-17 23:05 - 02196992 _____ (Farbar) C:\Users\Phong\Desktop\FRST64.exe
2015-10-17 23:01 - 2015-10-17 23:01 - 00112640 _____ (forum.viry.cz) C:\Users\Phong\Desktop\FRSTLauncher.exe
2015-10-17 21:46 - 2015-10-17 21:46 - 00000000 ____D C:\rsit
2015-10-17 20:49 - 2015-10-17 20:49 - 00000056 _____ C:\Windows\setupact.log
2015-10-17 20:49 - 2015-10-17 20:49 - 00000000 _____ C:\Windows\setuperr.log
2015-10-16 19:13 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2015-10-16 19:13 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2015-10-16 19:13 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-10-16 19:13 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-10-16 19:13 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-10-16 19:13 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2015-10-16 19:13 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2015-10-16 19:13 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2015-10-16 19:12 - 2015-10-16 19:13 - 00000000 ___SD C:\ComboFix
2015-10-16 19:11 - 2015-10-16 19:11 - 00000000 ____D C:\Windows\erdnt
2015-10-16 19:03 - 2015-10-17 20:47 - 00000000 ____D C:\AdwCleaner
2015-10-16 19:02 - 2015-10-16 19:02 - 00003058 _____ C:\Windows\System32\Tasks\{3191BDE4-7A19-41BC-87DB-5D26A3D270C3}
2015-10-16 18:57 - 2015-10-16 18:57 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2015-10-15 22:50 - 2015-10-15 22:50 - 08218312 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-10-07 18:21 - 2015-10-07 18:21 - 03168768 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-10-07 18:21 - 2015-10-07 18:21 - 02607104 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-10-07 18:21 - 2015-10-07 18:21 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-10-07 18:21 - 2015-10-07 18:21 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-10-07 18:21 - 2015-10-07 18:21 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-10-07 18:21 - 2015-10-07 18:21 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-10-07 18:21 - 2015-10-07 18:21 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-10-07 18:21 - 2015-10-07 18:21 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-10-07 18:21 - 2015-10-07 18:21 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-10-07 18:21 - 2015-10-07 18:21 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-10-07 18:21 - 2015-10-07 18:21 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-10-07 18:21 - 2015-10-07 18:21 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-10-07 18:21 - 2015-10-07 18:21 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-10-07 18:21 - 2015-10-07 18:21 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-10-07 18:21 - 2015-10-07 18:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-10-07 18:21 - 2015-10-07 18:21 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-10-03 22:37 - 2015-10-03 22:37 - 00000000 ____D C:\Users\Phong\AppData\Local\GWX
2015-09-27 19:14 - 2015-09-27 19:14 - 00000000 ____D C:\Users\Phong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome
2015-09-26 16:54 - 2015-09-26 16:54 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2015-09-26 16:54 - 2015-09-26 16:54 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-17 22:59 - 2015-01-18 08:09 - 00000000 ____D C:\Windows\SysWOW64\WCID
2015-10-17 22:50 - 2013-02-26 15:52 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-10-17 22:46 - 2015-05-20 18:22 - 00000962 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2338150882-3624695077-237545274-1000UA.job
2015-10-17 21:52 - 2014-11-21 22:56 - 00000000 ____D C:\Program Files\trend micro
2015-10-17 21:03 - 2009-07-14 06:45 - 00028848 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-10-17 21:03 - 2009-07-14 06:45 - 00028848 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-10-17 21:01 - 2015-05-09 18:51 - 01959316 _____ C:\Windows\WindowsUpdate.log
2015-10-17 20:59 - 2015-01-16 17:21 - 00000000 ____D C:\ProgramData\TEMP
2015-10-17 20:52 - 2011-02-14 22:16 - 00669116 _____ C:\Windows\system32\perfh005.dat
2015-10-17 20:52 - 2011-02-14 22:16 - 00141744 _____ C:\Windows\system32\perfc005.dat
2015-10-17 20:52 - 2009-07-14 07:13 - 01584554 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-17 20:49 - 2012-03-18 23:17 - 00000000 ____D C:\ProgramData\NVIDIA
2015-10-17 20:49 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-17 20:39 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2015-10-17 20:16 - 2012-03-18 23:14 - 00003978 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{BA172C46-C51A-4723-B7D3-F69EB73167E2}
2015-10-16 19:34 - 2015-05-14 15:15 - 00000000 ___RD C:\Users\Phong\Desktop\Spyware & Malware
2015-10-16 19:12 - 2015-01-20 20:25 - 00000000 ____D C:\Qoobox
2015-10-15 22:50 - 2013-02-26 15:52 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-10-15 22:50 - 2013-02-26 15:52 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-10-15 22:50 - 2012-03-24 12:55 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-15 07:30 - 2012-03-27 15:50 - 00002326 _____ C:\Users\Phong\Desktop\Google Chrome.lnk
2015-10-12 16:25 - 2012-03-21 19:07 - 00000000 ____D C:\Users\Phong\AppData\Local\CrashDumps
2015-10-10 16:05 - 2015-05-09 17:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8
2015-10-08 16:04 - 2015-04-04 16:02 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-10-08 16:04 - 2015-04-04 16:02 - 00000000 ___SD C:\Windows\system32\GWX
2015-10-07 07:08 - 2015-02-05 15:18 - 00000000 ____D C:\Users\Phong\AppData\Local\Steam
2015-09-25 15:06 - 2013-12-21 16:26 - 00000000 ____D C:\Users\Phong\AppData\Local\Akamai
2015-09-24 20:41 - 2013-02-22 16:34 - 00000000 ____D C:\Users\Phong\AppData\Local\Microsoft Help
2015-09-20 20:13 - 2015-03-28 21:59 - 00000000 ____D C:\Users\Phong\AppData\Local\Spotify
2015-09-20 19:18 - 2015-03-28 21:58 - 00000000 ____D C:\Users\Phong\AppData\Roaming\Spotify
2015-09-18 22:16 - 2015-05-01 16:39 - 00000000 ____D C:\Users\Phong\AppData\Roaming\TS3Client
2015-09-17 16:56 - 2015-06-20 21:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune
2015-09-17 16:56 - 2015-05-14 15:13 - 00000000 ___RD C:\Users\Phong\Desktop\Photoshop & Edit

==================== Files in the root of some directories =======

2015-01-31 19:37 - 2015-08-10 22:15 - 0000132 _____ () C:\Users\Phong\AppData\Roaming\Adobe Formát PNG CS5 – předvolby
2013-03-02 17:42 - 2014-05-29 16:38 - 0006144 _____ () C:\Users\Phong\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-11-01 19:38 - 2014-11-01 19:38 - 0003752 _____ () C:\Users\Phong\AppData\Local\recently-used.xbel
2014-10-11 17:23 - 2014-10-11 17:23 - 0000000 _____ () C:\Users\Phong\AppData\Local\{7C5BF313-CB05-4DF1-9B2D-219B423B7EBB}

Some files in TEMP:
====================
C:\Users\Phong\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\COMODO Updater.job => D:\COMODO\Updater.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2338150882-3624695077-237545274-1000Core.job => C:\Users\Phong\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2338150882-3624695077-237545274-1000UA.job => C:\Users\Phong\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\ProgramData\TEMP:430C6D84
AlternateDataStreams: C:\ProgramData\TEMP:DFC5A2B2

==================== Security Center ==================

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Phong\Desktop" je 64 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher
"C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager
"C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 8
"D:\Advanced SystemCare 8\ASCTray.exe" /Auto [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AthBtTray
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AtherosBtStack
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync
"C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring
"C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update
"C:\Users\Phong\AppData\Local\Google\Update\GoogleUpdate.exe" /c [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAStorIcon
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mcui_exe
"C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mncercqdeSrv
C:\Windows\inf\mncercqde.vbe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mnceumtSrv
C:\Windows\inf\mnceumt.vbe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MouseDriver
D:\Razer Cortex\RazerCortex.exe -autorun [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RazerCortex
"C:\Users\Phong\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify
"C:\Users\Phong\AppData\Roaming\Spotify\SpotifyWebHelper.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper
Re�im ECHO je vypnut.


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
DoNotAllowExceptions REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
DoNotAllowExceptions REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Zároveň přesouvám vaše vlákno do správné sekce.

Zde je LOG, ale jak vidím, tak nikde nic, ale pořád mám předtuchu/možná i vím, že v mém počítači je nějaký špehovací prográmek, nemohli by jsme zajít někam dále? Chci mít tu nejlepší jistotu, prosím... Děkuji vám mockrát za repost a pomoc, moc si toho vážím!


# AdwCleaner v5.013 - Logfile created 18/10/2015 at 12:44:37
# Updated 09/10/2015 by Xplode
# Database : 2015-10-18.3 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Phong - PHONG-VAIO
# Running from : C:\Users\Phong\Desktop\adwcleaner_5.013.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****


***** [ Files ] *****


***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****


*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C8].txt - [655 bytes] ##########

OK. Otevřte poznámkový blok a zkopírujte do něj:

Start
C:\Users\Phong\AppData\Local\Akamai
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => No File
CHR HKU\S-1-5-21-2338150882-3624695077-237545274-1000\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-2338150882-3624695077-237545274-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
URLSearchHook: HKU\S-1-5-21-2338150882-3624695077-237545274-1000 - (No Name) - {472734EA-242A-422b-ADF8-83D1E48CC825} - No File
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2338150882-3624695077-237545274-1000 -> {B0DC2BF5-EB0B-41C1-BAC1-0EEB90F4B23B} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-05-14] (Skype Technologies S.A.)
C:\Program Files (x86)\Skype\Toolbars
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.)
C:\Program Files (x86)\Microsoft\BingBar
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM-x32 - No Name - {472734EA-242A-422B-ADF8-83D1E48CC825} - No File
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
CHR Extension: (Dota 2 / CS:GO lounge autobump) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cefaeceoipbbajophehdidoeamkmkhej [2015-03-10]
CHR Extension: (Facebook Unseen) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\iicapmagmhahddefgokbabbgieiogjop [2015-07-14]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-05-14]
C:\Users\Phong\AppData\Local\Temp
AlternateDataStreams: C:\ProgramData\TEMP:430C6D84
AlternateDataStreams: C:\ProgramData\TEMP:DFC5A2B2
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mncercqdeSrv
C:\Windows\inf\mncercqde.vbe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mnceumtSrv
C:\Windows\inf\mnceumt.vbe
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Co ten Combofix? Hodláte si nabořit systém, nebo nějakou aplikaci? CF je utilita pro profesionály.

Combofix? Něco mi to říká, ale už jsem ho odinstalovával...tedy myslím.
Jinak zde je ten LOG

Fix result of Farbar Recovery Scan Tool (x64) Version:17-10-2015
Ran by Phong (2015-10-18 13:29:31) Run:1
Running from C:\Users\Phong\Desktop
Loaded Profiles: Phong (Available Profiles: Phong)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
C:\Users\Phong\AppData\Local\Akamai
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => No File
CHR HKU\S-1-5-21-2338150882-3624695077-237545274-1000\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-2338150882-3624695077-237545274-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
URLSearchHook: HKU\S-1-5-21-2338150882-3624695077-237545274-1000 - (No Name) - {472734EA-242A-422b-ADF8-83D1E48CC825} - No File
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2338150882-3624695077-237545274-1000 -> {B0DC2BF5-EB0B-41C1-BAC1-0EEB90F4B23B} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-05-14] (Skype Technologies S.A.)
C:\Program Files (x86)\Skype\Toolbars
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.)
C:\Program Files (x86)\Microsoft\BingBar
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM-x32 - No Name - {472734EA-242A-422B-ADF8-83D1E48CC825} - No File
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
CHR Extension: (Dota 2 / CS:GO lounge autobump) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cefaeceoipbbajophehdidoeamkmkhej [2015-03-10]
CHR Extension: (Facebook Unseen) - C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\iicapmagmhahddefgokbabbgieiogjop [2015-07-14]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-05-14]
C:\Users\Phong\AppData\Local\Temp
AlternateDataStreams: C:\ProgramData\TEMP:430C6D84
AlternateDataStreams: C:\ProgramData\TEMP:DFC5A2B2
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mncercqdeSrv
C:\Windows\inf\mncercqde.vbe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mnceumtSrv
C:\Windows\inf\mnceumt.vbe
End
*****************


"C:\Users\Phong\AppData\Local\Akamai" folder move:

Could not move "C:\Users\Phong\AppData\Local\Akamai" => Scheduled to move on reboot.

"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => key removed successfully
HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\GDriveSharedOverlay" => key removed successfully
HKCR\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => key not found.
"HKU\S-1-5-21-2338150882-3624695077-237545274-1000\SOFTWARE\Policies\Google" => key removed successfully
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
"HKU\S-1-5-21-2338150882-3624695077-237545274-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
HKU\S-1-5-21-2338150882-3624695077-237545274-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{472734EA-242A-422b-ADF8-83D1E48CC825} => value removed successfully
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
"HKU\S-1-5-21-2338150882-3624695077-237545274-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B0DC2BF5-EB0B-41C1-BAC1-0EEB90F4B23B}" => key removed successfully
HKCR\CLSID\{B0DC2BF5-EB0B-41C1-BAC1-0EEB90F4B23B} => key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
"HKCR\Wow6432Node\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
C:\Program Files (x86)\Skype\Toolbars => moved successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}" => key removed successfully
"HKCR\Wow6432Node\CLSID\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}" => key removed successfully
C:\Program Files (x86)\Microsoft\BingBar => moved successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => value removed successfully
HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{472734EA-242A-422B-ADF8-83D1E48CC825} => value removed successfully
HKCR\Wow6432Node\CLSID\{472734EA-242A-422B-ADF8-83D1E48CC825} => key not found.
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => key removed successfully
C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cefaeceoipbbajophehdidoeamkmkhej => moved successfully
C:\Users\Phong\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\iicapmagmhahddefgokbabbgieiogjop => moved successfully
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl" => key removed successfully
"C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx" => not found.

"C:\Users\Phong\AppData\Local\Temp" folder move:

Could not move "C:\Users\Phong\AppData\Local\Temp" => Scheduled to move on reboot.

C:\ProgramData\TEMP => ":430C6D84" ADS removed successfully.
C:\ProgramData\TEMP => ":DFC5A2B2" ADS removed successfully.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mncercqdeSrv => Error: No automatic fix found for this entry.
C:\Windows\inf\mncercqde.vbe => moved successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mnceumtSrv => Error: No automatic fix found for this entry.
C:\Windows\inf\mnceumt.vbe => moved successfully

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2015-10-18 13:31:50)

C:\Users\Phong\AppData\Local\Akamai => Is moved successfully
"C:\Users\Phong\AppData\Local\Temp" => Could not move

==== End of Fixlog 13:31:53 ====

Smazáno. Nastala nějaká změna?

Našel jsem pouze AdWary a zbytečnosti. Vše bylo smazáno. Můžeme ještě udělat hloubkový sken. Stáhněte, nainstalujte a spusťte MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Zde je LOG

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 18.10.2015
Čas skenování: 18:46
Protokol: loggg.txt
Správce: Ano

Verze: 2.2.0.1024
Databáze malwaru: v2015.10.18.04
Databáze rootkitů: v2015.10.16.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Phong

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 354407
Uplynulý čas: 34 min, 50 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 1
PUP.Optional.PCSpeedUp, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PCSUUCDRV, , [a8c4f4643655c57129aa4743c93a9b65],

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 1
Trojan.Agent.VBS, C:\Windows\SysWOW64\msstp.vbe, , [f17babad8902ee481c24d4c05ea442be],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Položky smažte. Ani toto není keylogger.

Takže mohu už počítač na 100% využívat, nebo jsou nějaké 'hračky' co by možná ještě něco našli? Jinak vám moc děkuji za pomoc, měl jsem totiž veliký strach!

Jsou, ale na keylogger toto stačí. Myslím, že PC je čistý.

Vy též a nemáte zač!