VIRY.CZ

Dobry den,

chcem Vas poziadat o prekontrolovanie mojho PC. Sprava sa nevypocitatelne, je hrozne pomale,a v poslednej dobe je problem sa preipojit na wifi..
Budem rad, za kazdu radu.
Vopred dakujem.




Logfile of random's system information tool 1.10 (written by random/random)
Run by Ľubka at 2015-10-24 11:56:20
Microsoft Windows 7 Starter Service Pack 1
System drive C: has 171 GB (77%) free of 221 GB
Total RAM: 1013 MB (20% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:56:55, on 24. 10. 2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16750)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Bluetooth Suite\BtvStack.exe
C:\Program Files\Bluetooth Suite\AthBtTray.exe
C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\igfxext.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServer.exe
C:\Windows\system32\conhost.exe
C:\Users\Ľubka\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ľubka\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ľubka\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\taskeng.exe
C:\Users\Ľubka\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ľubka\Downloads\RSIT (1).exe
C:\Program Files\trend micro\Ľubka.exe
C:\Users\Ľubka\AppData\Local\Google\Chrome\Application\chrome.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [AtherosBtStack] "C:\Program Files\Bluetooth Suite\BtvStack.exe"
O4 - HKLM\..\Run: [AthBtTray] "C:\Program Files\Bluetooth Suite\AthBtTray.exe"
O4 - HKLM\..\Run: [Acer ePower Management] C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Ľubka\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files\Bluetooth Suite\adminservice.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files\Launch Manager\dsiwmis.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files\Acer\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Raw Socket Service (RS_Service) - Acer Incorporated - C:\Program Files\Acer\Acer VCM\RS_Service.exe
O23 - Service: Updater Service - Acer Group - C:\Program Files\Acer\Acer Updater\UpdaterService.exe

--
End of file - 6819 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-92525525-684568335-2651620714-1000Core.job - C:\Users\Ľubka\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-92525525-684568335-2651620714-1000UA.job - C:\Users\Ľubka\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2010-06-08 284696]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2010-08-03 9398888]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-06-16 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-06-16 173592]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-06-16 150552]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-02-05 1692968]
"AtherosBtStack"=C:\Program Files\Bluetooth Suite\BtvStack.exe [2010-05-26 470176]
"AthBtTray"=C:\Program Files\Bluetooth Suite\AthBtTray.exe [2010-05-26 289952]
"Acer ePower Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2010-06-11 715296]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-09-23 157456]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Ľubka\AppData\Local\Google\Update\GoogleUpdate.exe [2015-05-21 107848]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AndroidManager]
C:\Program Files\Acer\Android Manager\AML.exe [2010-01-08 508280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iPatchData]
C:\Program Files\Acer\Updater\iUpdate.exe [2010-11-30 489848]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iSyncData]
C:\Program Files\Acer\Android Manager\iSync.exe [2010-01-08 407416]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2015-09-23 157456]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify]
C:\Users\Ľubka\AppData\Roaming\Spotify\Spotify.exe -autostart -minimized []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper]
C:\Users\Ľubka\AppData\Roaming\Spotify\SpotifyWebHelper.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-04-19 218112]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv
"midi1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-10-24 11:56:21 ----D---- C:\Program Files\trend micro
2015-10-24 11:56:20 ----D---- C:\rsit
2015-10-24 11:31:08 ----A---- C:\Windows\ntbtlog.txt
2015-10-20 15:18:15 ----D---- C:\Program Files\iPod
2015-10-20 15:18:02 ----D---- C:\Program Files\iTunes
2015-10-20 15:14:50 ----D---- C:\Program Files\Apple Software Update
2015-10-20 15:13:59 ----D---- C:\Program Files\Bonjour

======List of files/folders modified in the last 1 month======

2015-10-24 11:56:50 ----D---- C:\Windows\Prefetch
2015-10-24 11:56:41 ----D---- C:\Windows\Temp
2015-10-24 11:56:21 ----RD---- C:\Program Files
2015-10-24 11:33:46 ----D---- C:\Windows\system32\config
2015-10-24 11:32:11 ----D---- C:\Windows\system32\catroot
2015-10-24 11:31:08 ----D---- C:\Windows
2015-10-24 11:20:05 ----SHD---- C:\Windows\Installer
2015-10-24 11:20:04 ----SHD---- C:\Config.Msi
2015-10-24 11:14:39 ----SHD---- C:\System Volume Information
2015-10-24 11:01:46 ----D---- C:\Windows\inf
2015-10-24 10:59:07 ----D---- C:\Windows\Tasks
2015-10-24 10:59:07 ----D---- C:\Windows\system32\wfp
2015-10-24 10:59:05 ----D---- C:\Windows\system32\wbem
2015-10-24 10:57:59 ----D---- C:\Windows\system32\NDF
2015-10-24 10:57:59 ----D---- C:\Windows\system32\DriverStore
2015-10-24 10:57:59 ----D---- C:\Windows\system32\drivers
2015-10-24 10:57:59 ----D---- C:\Windows\system32\CodeIntegrity
2015-10-24 10:57:59 ----D---- C:\Windows\system32\catroot2
2015-10-24 10:57:59 ----D---- C:\Windows\System32
2015-10-24 10:57:51 ----D---- C:\Windows\registration
2015-10-23 18:11:06 ----D---- C:\Windows\system32\LogFiles
2015-10-20 15:15:01 ----D---- C:\Windows\system32\Tasks
2015-10-20 15:14:17 ----D---- C:\Program Files\Common Files\Apple

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2010-06-08 435736]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2010-04-07 1792512]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2010-05-20 28200]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2010-04-19 4806144]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2010-08-03 3158120]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x86.sys [2010-08-24 68208]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-02-05 242992]
R3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2015-06-10 45056]
R3 WinUsb;SAMSUNG Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]
S2 Parvdm;Parvdm; C:\Windows\system32\drivers\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2010-05-20 37224]
S3 ATHDFU;Atheros Valkyrie USB BootROM; C:\Windows\System32\Drivers\AthDfu.sys [2010-05-20 47144]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2010-05-20 256360]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2010-05-20 177704]
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2010-05-20 46952]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2010-05-20 143080]
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2010-05-26 230760]
S3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 EUCR;EUCR; C:\Windows\system32\DRIVERS\EUCR6SK.SYS [2010-06-17 82768]
S3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-10-03 26840]
S3 massfilter;ZTE Mass Storage Filter Driver; C:\Windows\system32\drivers\massfilter.sys [2013-05-01 9728]
S3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2011-04-18 43392]
S3 Netaapl;Apple Mobile Device Ethernet Service; C:\Windows\system32\DRIVERS\netaapl.sys [2014-08-15 18944]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usb_rndisx;USB RNDIS Adapter; C:\Windows\system32\drivers\usb8023x.sys [2013-02-12 15872]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]
S3 ZTEusbmdm6k;ZTE Proprietary USB Driver; C:\Windows\system32\DRIVERS\ZTEusbmdm6k.sys [2013-05-01 104960]
S3 ZTEusbnmea;ZTE NMEA Port; C:\Windows\system32\DRIVERS\ZTEusbnmea.sys [2013-05-01 105344]
S3 ZTEusbser6k;ZTE Diagnostic Port; C:\Windows\system32\DRIVERS\ZTEusbser6k.sys [2013-05-01 104960]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-09-14 82128]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-09-02 60720]
R2 AtherosSvc;AtherosSvc; C:\Program Files\Bluetooth Suite\adminservice.exe [2010-05-26 38560]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 390416]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files\Launch Manager\dsiwmis.exe [2010-08-10 321104]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2010-06-11 735776]
R2 GREGService;GREGService; C:\Program Files\Acer\Registration\GREGsvc.exe [2010-01-08 23584]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-06-08 13336]
R2 RS_Service;Raw Socket Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [2010-01-30 260640]
R2 Updater Service;Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2010-01-29 243232]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 1713536]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-09-23 541456]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-05-21 144200]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-05-21 144200]
S4 NetMsmqActivator;@%SystemRoot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2010-11-05 128848]
S4 NetPipeActivator;@%SystemRoot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2010-11-05 128848]
S4 NetTcpActivator;@%SystemRoot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2010-11-05 128848]

-----------------EOF-----------------

Zdravím, přes Start >> Všechny programy >> Příslušenství >> Spustit >> napiš - services.msc >> Enter. Najdi službu :

GREGService - Acer Incorporated
Služba Google Update (gupdate)
Služba Google Update (gupdatem)
Updater Service - Acer Group

dvojklikem se otevře karta kde nejprve službu zastav tlačítkem Zastavit u položky Typ spouštění vyber Zakázáno a klik na OK.


V Knihovně Plánovače úloh zakaž Google Update bude to tam vícekrát.


Přes Odebrat programy nebo CCleaner níže odinstaluj Spybot - SD


Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém


Dále v CCleaneru >> Nástroje >> Start zakaž :

HKLM : Run iTunesHelper
HKCU : Run Google Update


Stáhni a ulož na plochu AdwCleaner,

ukonči všechny programy včetně prohlížeče a dvojklikem jej spusť,

objeví se okno kde vlevo nahoře klikni na Scan.

Po dokončení skenu klikni na Clean,

proběhne restart PC kdy dojde ke smazání nepořádku.

Po té mi sem zkopíruj Report.

# AdwCleaner v5.026 - Logfile created 26/12/2015 at 15:43:13
# Updated 21/12/2015 by Xplode
# Database : 2015-12-23.1 [Server]
# Operating system : Windows 7 Starter Service Pack 1 (x86)
# Username : Ľubka - PC
# Running from : C:\Users\Ľubka\Desktop\adwcleaner_5.026.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : ihpmServer

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files\RayDld
[-] Folder Deleted : C:\Users\Ľubka\AppData\Roaming\yoursearching

***** [ Files ] *****


***** [ DLLs ] *****


***** [ Shortcuts ] *****

[-] Shortcut Disinfected : C:\Users\Ľubka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
[-] Shortcut Disinfected : C:\Users\Ľubka\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[-] Shortcut Disinfected : C:\Users\Ľubka\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk

***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{85198F55-85AC-498A-BFE4-BBC33840F4AB}
[-] Key Deleted : HKCU\Software\PRODUCTSETUP
[-] Key Deleted : HKLM\SOFTWARE\RayDld
[-] Key Deleted : HKLM\SOFTWARE\ihpmserver
[-] Key Deleted : HKLM\SOFTWARE\yoursearchingSoftware

***** [ Web browsers ] *****

[-] [C:\Users\Ľubka\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : yoursearching
[-] [C:\Users\Ľubka\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Deleted : hxxp://www.yoursearching.com/?type=hp&ts=14509 ... 3dscn10tlx

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [1863 bytes] ##########

To byl fofr, už jsem ani nečekal že se ozveš.


Stáhni a ulož na plochu ComboFix,

spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.


V případě nejasností je ZDE obrázkový návod.

Nedalo sa mi skor.
Vdaka , ze mi s tym pomahas.

ComboFix 15-12-29.01 - Ľubka . 12. 2015 21:28:36.1.2 - x86
Microsoft Windows 7 Starter 6.1.7601.1.1250.421.1051.18.1013.342 [GMT 1:00]
Running from: C:\Users\Ľubka\Downloads\ComboFix.exe
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}


((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\Users\Lubka\AppData\Roaming\64dlls.exe
C:\Users\Lubka\AppData\Roaming\intel64.exe
C:\Users\Lubka\AppData\Roaming\Kernel32.exe
C:\Users\Lubka\AppData\Roaming\localsys64.exe
C:\Users\Lubka\AppData\Roaming\ntos.exe
C:\Users\Lubka\AppData\Roaming\oembios.exe
C:\Users\Lubka\AppData\Roaming\sdra64.exe
C:\Users\Lubka\AppData\Roaming\sdra73.exe
C:\Users\Lubka\AppData\Roaming\swin32.exe
C:\Users\Lubka\AppData\Roaming\twex.exe
C:\Users\Lubka\AppData\Roaming\twext.exe
C:\Users\Lubka\AppData\Roaming\win32avs.exe
C:\Users\Lubka\AppData\Roaming\wsnpoema.exe
C:\Windows\iun6002.exe
C:\Windows\msdownld.tmp


((((((((((((((((((((((((( Files Created from 2015-11-28 to 2015-12-29 )))))))))))))))))))))))))))))))

A kde je zbytek logu ?

mysli, ze som ho skopiroval cely. bolo tam iba to co som ti sem prilozil.

e-comm píše:mysli, ze som ho skopiroval cely. bolo tam iba to co som ti sem prilozil.

Ne ne, podívej se podle návodu kde se nachází a nakopíruj mi sem celý.

Roli píše:Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

Ahoj, toto je spravne?

ComboFix 15-12-29.01 - Ľubka . 12. 2015 21:28:36.1.2 - x86
Microsoft Windows 7 Starter 6.1.7601.1.1250.421.1051.18.1013.342 [GMT 1:00]
Running from: C:\Users\Ľubka\Downloads\ComboFix.exe
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}


((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\Users\Lubka\AppData\Roaming\64dlls.exe
C:\Users\Lubka\AppData\Roaming\intel64.exe
C:\Users\Lubka\AppData\Roaming\Kernel32.exe
C:\Users\Lubka\AppData\Roaming\localsys64.exe
C:\Users\Lubka\AppData\Roaming\ntos.exe
C:\Users\Lubka\AppData\Roaming\oembios.exe
C:\Users\Lubka\AppData\Roaming\sdra64.exe
C:\Users\Lubka\AppData\Roaming\sdra73.exe
C:\Users\Lubka\AppData\Roaming\swin32.exe
C:\Users\Lubka\AppData\Roaming\twex.exe
C:\Users\Lubka\AppData\Roaming\twext.exe
C:\Users\Lubka\AppData\Roaming\win32avs.exe
C:\Users\Lubka\AppData\Roaming\wsnpoema.exe
C:\Windows\iun6002.exe
C:\Windows\msdownld.tmp


((((((((((((((((((((((((( Files Created from 2015-11-28 to 2015-12-29 )))))))))))))))))))))))))))))))


2015-12-29 20:48:23 . 2015-12-29 20:48:23 62576 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6F9025DE-954B-42C1-9439-0E6DC6995FFF}\offreg.2028.dll
2015-12-27 18:26:53 . 2015-12-29 20:10:18 -------- d-----w- C:\Users\Ľubka\AppData\Local\Spotify
2015-12-27 18:25:54 . 2015-12-29 20:10:16 -------- d-----w- C:\Users\Ľubka\AppData\Roaming\Spotify
2015-12-27 13:38:47 . 2015-12-27 13:38:47 62576 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6F9025DE-954B-42C1-9439-0E6DC6995FFF}\offreg.2504.dll
2015-12-27 13:32:25 . 2015-12-28 14:31:56 -------- d-----w- C:\Users\Ľubka\AppData\Roaming\vlc
2015-12-26 14:29:52 . 2015-12-26 14:56:00 -------- d-----w- C:\AdwCleaner
2015-12-26 14:13:14 . 2015-12-26 14:13:20 -------- d-----w- C:\ProgramData\Package Cache
2015-12-26 13:51:11 . 2008-10-15 05:22:52 452440 ----a-w- C:\Windows\system32\d3dx10_40.dll
2015-12-26 13:51:11 . 2008-10-15 05:22:52 2036576 ----a-w- C:\Windows\system32\D3DCompiler_40.dll
2015-12-26 13:51:10 . 2008-10-15 05:22:52 4379984 ----a-w- C:\Windows\system32\D3DX9_40.dll
2015-12-26 11:32:18 . 2015-12-26 11:32:18 62576 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6F9025DE-954B-42C1-9439-0E6DC6995FFF}\offreg.3212.dll
2015-12-26 10:55:52 . 2015-12-26 10:55:52 -------- d-----w- C:\Users\Ľubka\AppData\Local\Steam
2015-12-26 10:53:44 . 2015-12-26 10:55:54 -------- d-----w- C:\Program Files\Common Files\Steam
2015-12-25 10:19:42 . 2015-12-25 10:19:42 -------- d-----w- C:\Users\Ľubka\AppData\Roaming\Wargaming.net
2015-12-25 10:04:17 . 2015-12-25 10:04:19 62576 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6F9025DE-954B-42C1-9439-0E6DC6995FFF}\offreg.332.dll
2015-12-25 09:47:59 . 2006-07-28 08:30:32 236824 ----a-w- C:\Windows\system32\xactengine2_3.dll
2015-12-24 11:16:20 . 2015-12-24 11:16:20 -------- d-----w- C:\Users\Ľubka\AppData\Roaming\dvdcss
2015-12-19 20:39:49 . 2015-12-19 20:39:49 62576 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6F9025DE-954B-42C1-9439-0E6DC6995FFF}\offreg.2364.dll
.


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2015-11-24 17:30:46 . 2015-11-24 17:30:45 62576 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6F9025DE-954B-42C1-9439-0E6DC6995FFF}\offreg.2432.dll
2015-10-24 13:17:06 . 2015-10-24 13:17:05 62576 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6F9025DE-954B-42C1-9439-0E6DC6995FFF}\offreg.4740.dll

e-comm píše:Ahoj, toto je spravne?

Je to správně, ale pořád to není celý log.

Nic ine som nenasiel, ako by to malo vyzerat? jediny combofix.txt ktory som nasiel som Ti poslal.

e-comm píše:Nic ine som nenasiel, ako by to malo vyzerat? jediny combofix.txt ktory som nasiel som Ti poslal.

To je správný log, ale není celý, více jak polovina ho schází. Když tak mi ten Combofix.txt nahraj na nějaké úložiště a dej mi sem link ke stažení.

ComboFix 15-12-29.01 - Ľubka . 12. 2015 21:28:36.1.2 - x86
Microsoft Windows 7 Starter 6.1.7601.1.1250.421.1051.18.1013.342 [GMT 1:00]
Running from: C:\Users\Ľubka\Downloads\ComboFix.exe
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}


((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\Users\Lubka\AppData\Roaming\64dlls.exe
C:\Users\Lubka\AppData\Roaming\intel64.exe
C:\Users\Lubka\AppData\Roaming\Kernel32.exe
C:\Users\Lubka\AppData\Roaming\localsys64.exe
C:\Users\Lubka\AppData\Roaming\ntos.exe
C:\Users\Lubka\AppData\Roaming\oembios.exe
C:\Users\Lubka\AppData\Roaming\sdra64.exe
C:\Users\Lubka\AppData\Roaming\sdra73.exe
C:\Users\Lubka\AppData\Roaming\swin32.exe
C:\Users\Lubka\AppData\Roaming\twex.exe
C:\Users\Lubka\AppData\Roaming\twext.exe
C:\Users\Lubka\AppData\Roaming\win32avs.exe
C:\Users\Lubka\AppData\Roaming\wsnpoema.exe
C:\Windows\iun6002.exe
C:\Windows\msdownld.tmp


((((((((((((((((((((((((( Files Created from 2015-11-28 to 2015-12-29 )))))))))))))))))))))))))))))))


2015-12-29 20:48:23 . 2015-12-29 20:48:23 62576 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6F9025DE-954B-42C1-9439-0E6DC6995FFF}\offreg.2028.dll
2015-12-27 18:26:53 . 2015-12-29 20:10:18 -------- d-----w- C:\Users\Ľubka\AppData\Local\Spotify
2015-12-27 18:25:54 . 2015-12-29 20:10:16 -------- d-----w- C:\Users\Ľubka\AppData\Roaming\Spotify
2015-12-27 13:38:47 . 2015-12-27 13:38:47 62576 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6F9025DE-954B-42C1-9439-0E6DC6995FFF}\offreg.2504.dll
2015-12-27 13:32:25 . 2015-12-28 14:31:56 -------- d-----w- C:\Users\Ľubka\AppData\Roaming\vlc
2015-12-26 14:29:52 . 2015-12-26 14:56:00 -------- d-----w- C:\AdwCleaner
2015-12-26 14:13:14 . 2015-12-26 14:13:20 -------- d-----w- C:\ProgramData\Package Cache
2015-12-26 13:51:11 . 2008-10-15 05:22:52 452440 ----a-w- C:\Windows\system32\d3dx10_40.dll
2015-12-26 13:51:11 . 2008-10-15 05:22:52 2036576 ----a-w- C:\Windows\system32\D3DCompiler_40.dll
2015-12-26 13:51:10 . 2008-10-15 05:22:52 4379984 ----a-w- C:\Windows\system32\D3DX9_40.dll
2015-12-26 11:32:18 . 2015-12-26 11:32:18 62576 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6F9025DE-954B-42C1-9439-0E6DC6995FFF}\offreg.3212.dll
2015-12-26 10:55:52 . 2015-12-26 10:55:52 -------- d-----w- C:\Users\Ľubka\AppData\Local\Steam
2015-12-26 10:53:44 . 2015-12-26 10:55:54 -------- d-----w- C:\Program Files\Common Files\Steam
2015-12-25 10:19:42 . 2015-12-25 10:19:42 -------- d-----w- C:\Users\Ľubka\AppData\Roaming\Wargaming.net
2015-12-25 10:04:17 . 2015-12-25 10:04:19 62576 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6F9025DE-954B-42C1-9439-0E6DC6995FFF}\offreg.332.dll
2015-12-25 09:47:59 . 2006-07-28 08:30:32 236824 ----a-w- C:\Windows\system32\xactengine2_3.dll
2015-12-24 11:16:20 . 2015-12-24 11:16:20 -------- d-----w- C:\Users\Ľubka\AppData\Roaming\dvdcss
2015-12-19 20:39:49 . 2015-12-19 20:39:49 62576 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6F9025DE-954B-42C1-9439-0E6DC6995FFF}\offreg.2364.dll
.


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2015-11-24 17:30:46 . 2015-11-24 17:30:45 62576 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6F9025DE-954B-42C1-9439-0E6DC6995FFF}\offreg.2432.dll
2015-10-24 13:17:06 . 2015-10-24 13:17:05 62576 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6F9025DE-954B-42C1-9439-0E6DC6995FFF}\offreg.4740.dll

Pořád to samé, chybí více jak polovina.

Pokud tam opravdu není více zkus spusit ComFix znovu.

OK, odpoledne davam LOG.