VIRY.CZ

Logfile of random's system information tool 1.10 (written by random/random)
Run by Adam at 2015-12-02 18:28:48
Microsoft Windows 10 Home
System drive C: has 22 GB (44%) free of 51 GB
Total RAM: 1023 MB (17% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:29:10, on 2. 12. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0000)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\sihost.exe
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe
C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\WINDOWS\system32\DllHost.exe
C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
C:\WINDOWS\system32\taskhostw.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\system32\Macromed\Flash\FlashPlayerPlugin_19_0_0_245.exe
C:\WINDOWS\system32\Macromed\Flash\FlashPlayerPlugin_19_0_0_245.exe
C:\WINDOWS\system32\SearchFilterHost.exe
C:\Users\Adam\Desktop\RSIT.exe
C:\Program Files\trend micro\Adam.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://unstopp.me/wpad.dat?f77e9caff48c ... 2152068816
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll
O2 - BHO: Discover Treasure - {bfa55139-82af-4663-a19b-e135dac8d043} - C:\Program Files\Discover Treasure\Extensions\bfa55139-82af-4663-a19b-e135dac8d043.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll
O4 - HKLM\..\Run: [NvBackend] "C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe"
O4 - HKLM\..\Run: [ShadowPlay] C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap.dll,ShadowPlayOnSystemStart
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Adam\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [SpybotPostWindows10UpgradeReInstall] "C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Adam\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Global Startup: TP-LINK Wireless Configuration Utility.lnk = C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
O4 - Global Startup: Universal Media Server.lnk = C:\Program Files\Universal Media Server\UMS.exe
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\MSI\BToes Bluetooth Software\btsendto_ie_ctx.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvvsvc.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

--
End of file - 5874 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\luh6bl93.default-1443711275127

prefs.js - "browser.startup.homepage" - "www.google.sk"

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_19_0_0_245.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.66.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.66.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@verimatrix.com/ViewRightWeb]
"Description"=Verimatrix ViewRightWeb
"Path"=C:\Program Files\Verimatrix\ViewRight Web\\npViewRight.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-11-19 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bfa55139-82af-4663-a19b-e135dac8d043}]
Discover Treasure - C:\Program Files\Discover Treasure\Extensions\bfa55139-82af-4663-a19b-e135dac8d043.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-19 172640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"=C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2015-10-13 2585744]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap.dll [2015-10-13 1278920]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2015-11-09 596528]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Adam\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-08-13 402632]
"SpybotPostWindows10UpgradeReInstall"=C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [2015-07-28 1011200]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner.exe [2015-11-16 6602152]
"uTorrent"=C:\Users\Adam\AppData\Roaming\uTorrent\uTorrent.exe [2015-11-29 1822048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-09-14 1045720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AirDroid 3]
C:\Program Files\AirDroid\AirDroid.exe /start []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner.exe [2015-11-16 6602152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvBackend]
C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2015-10-13 2585744]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Plex Media Server]
C:\Program Files\Plex\Plex Media Server\Plex Media Server.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2015-11-09 596528]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Users\Adam\AppData\Roaming\uTorrent\uTorrent.exe [2015-11-29 1822048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TVMOBiLiArtworkManager.lnk]
C:\PROGRA~1\TVMOBiLi\bin\ITUNES~1.EXE /path:C:\ProgramData\TVMOBiLi\cache []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Universal Media Server.lnk]
C:\Program Files\Universal Media Server\UMS.exe [2015-11-22 603866]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Adam^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^ConnectAir.lnk]
C:\Program Files\ConnectAir\ConnectAir.exe -hide []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
TP-LINK Wireless Configuration Utility.lnk - C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
Universal Media Server.lnk - C:\Program Files\Universal Media Server\UMS.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iaioi2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.cvid"=iccvid.dll
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"VIDC.FFDS"=ff_vfw.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-12-02 18:28:48 ----D---- C:\rsit
2015-11-29 23:09:05 ----D---- C:\Users\Adam\AppData\Roaming\uTorrent
2015-11-29 23:08:28 ----D---- C:\Users\Adam\AppData\Roaming\Geek Uninstaller
2015-11-29 22:57:50 ----D---- C:\Users\Adam\AppData\Roaming\SimpleFiles
2015-11-29 22:57:38 ----D---- C:\ProgramData\LuckyBrowse
2015-11-29 22:57:36 ----D---- C:\Program Files\LuckyBrowse
2015-11-29 22:55:28 ----D---- C:\Program Files\SimpleFiles
2015-11-25 21:58:43 ----AD---- C:\Program Files\CCleaner
2015-11-25 21:45:58 ----A---- C:\WINDOWS\system32\drivers\DrvAgent32.sys
2015-11-25 21:42:57 ----D---- C:\Program Files\FinalWire
2015-11-25 20:06:38 ----A---- C:\WINDOWS\wininit.ini
2015-11-25 18:25:26 ----D---- C:\Program Files\Common Files\AV
2015-11-25 18:18:12 ----D---- C:\ProgramData\Spybot - Search & Destroy
2015-11-25 18:16:51 ----D---- C:\Programᡄ
2015-11-25 16:10:33 ----A---- C:\WINDOWS\system32\WWAHost.exe
2015-11-25 16:10:33 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-11-25 16:10:32 ----A---- C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-11-25 16:10:32 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2015-11-21 12:57:48 ----D---- C:\WINDOWS\system32\SleepStudy
2015-11-20 00:19:34 ----SHD---- C:\Recovery
2015-11-19 23:59:16 ----ASH---- C:\hiberfil.sys
2015-11-19 23:53:11 ----D---- C:\Program Files\Common Files\SpeechEngines
2015-11-19 23:50:15 ----SD---- C:\Users\Adam\AppData\Roaming\Microsoft
2015-11-19 23:48:50 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-11-19 23:44:46 ----D---- C:\WINDOWS\system32\RTCOM
2015-11-19 23:44:46 ----D---- C:\Program Files\Realtek
2015-11-19 23:44:43 ----D---- C:\ProgramData\NVIDIA
2015-11-19 23:44:37 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2015-11-19 23:44:37 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2015-11-19 23:44:37 ----A---- C:\WINDOWS\system32\nvsvc.dll
2015-11-19 23:44:37 ----A---- C:\WINDOWS\system32\nvshext.dll
2015-11-19 23:44:37 ----A---- C:\WINDOWS\system32\nvmctray.dll
2015-11-19 23:44:37 ----A---- C:\WINDOWS\system32\nvcpl.dll
2015-11-19 23:44:20 ----HD---- C:\Program Files\Uninstall Information
2015-11-19 23:43:54 ----D---- C:\ProgramData\NVIDIA Corporation
2015-11-19 23:43:44 ----D---- C:\Program Files\NVIDIA Corporation
2015-11-19 23:42:56 ----AS---- C:\WINDOWS\bootstat.dat
2015-11-19 23:42:19 ----D---- C:\WINDOWS\Prefetch
2015-11-19 23:41:19 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2015-11-19 23:40:18 ----DC---- C:\WINDOWS\Panther
2015-11-19 23:35:36 ----D---- C:\Windows.old
2015-11-19 23:34:57 ----A---- C:\WINDOWS\system32\mfps.dll
2015-11-19 23:34:57 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-11-19 23:34:57 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-11-19 23:34:56 ----A---- C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-11-19 23:34:56 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-11-19 23:34:56 ----A---- C:\WINDOWS\system32\EncDump.dll
2015-11-19 23:34:56 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-11-19 23:34:56 ----A---- C:\WINDOWS\system32\AudioSes.dll
2015-11-19 23:34:56 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-11-19 23:34:55 ----A---- C:\WINDOWS\system32\drivers\tdx.sys
2015-11-19 23:34:55 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2015-11-19 23:34:55 ----A---- C:\WINDOWS\system32\AudioEng.dll
2015-11-19 23:34:55 ----A---- C:\WINDOWS\system32\audiodg.exe
2015-11-19 23:34:53 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-11-19 23:34:52 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-11-19 23:34:52 ----A---- C:\WINDOWS\system32\jscript.dll
2015-11-19 23:34:48 ----A---- C:\WINDOWS\system32\readingviewresources.dll
2015-11-19 23:34:48 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-11-19 23:34:46 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2015-11-19 23:34:44 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2015-11-19 23:34:44 ----A---- C:\WINDOWS\system32\lpk.dll
2015-11-19 23:34:44 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2015-11-19 23:34:44 ----A---- C:\WINDOWS\system32\fontsub.dll
2015-11-19 23:34:44 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2015-11-19 23:34:44 ----A---- C:\WINDOWS\system32\dciman32.dll
2015-11-19 23:34:44 ----A---- C:\WINDOWS\system32\atmlib.dll
2015-11-19 23:34:44 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-11-19 23:34:44 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\wwanprotdim.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\win32k.sys
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\wimserv.exe
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\wimgapi.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\usermgr.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\twinui.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\tetheringconfigsp.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\tetheringclient.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\shell32.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\provtool.exe
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\ProvPluginEng.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\provops.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\provhandlers.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\provengine.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\provdatastore.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\policymanager.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\PhoneProviders.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\mfpmp.exe
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\mf.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\KnobsCsp.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\KnobsCore.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\kerberos.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\IcsEntitlementHost.exe
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\drivers\wimmount.sys
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\bcastdvr.proxy.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\AppCapture.dll
2015-11-19 23:34:43 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-11-19 23:34:42 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2015-11-19 23:34:42 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-11-19 23:34:42 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-11-19 23:34:42 ----A---- C:\WINDOWS\system32\tzautoupdate.dll
2015-11-19 23:34:42 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2015-11-19 23:34:42 ----A---- C:\WINDOWS\system32\dcomp.dll
2015-11-19 23:32:51 ----A---- C:\WINDOWS\system32\prm0009.dll
2015-11-19 23:32:50 ----A---- C:\WINDOWS\system32\NlsLexicons0009.dll
2015-11-19 23:32:50 ----A---- C:\WINDOWS\system32\NlsData0009.dll
2015-11-19 23:31:21 ----D---- C:\WINDOWS\system32\Microsoft
2015-11-19 23:27:45 ----D---- C:\WINDOWS\system32\msmq
2015-11-19 23:27:45 ----D---- C:\WINDOWS\system32\BestPractices
2015-11-19 23:27:42 ----D---- C:\Program Files\Reference Assemblies
2015-11-19 23:27:42 ----D---- C:\Program Files\MSBuild
2015-11-19 23:27:42 ----D---- C:\inetpub
2015-11-19 23:26:49 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2015-11-19 23:26:49 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-11-19 23:26:48 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-11-19 22:41:07 ----A---- C:\WINDOWS\system32\nvhdap32.dll
2015-11-19 22:41:07 ----A---- C:\WINDOWS\system32\nvhdagenco3220103.dll
2015-11-19 22:41:07 ----A---- C:\WINDOWS\system32\drivers\nvhda32v.sys
2015-11-19 21:28:34 ----D---- C:\ProgramData\ESET
2015-11-19 20:57:56 ----A---- C:\WINDOWS\system32\nvStreaming.exe
2015-11-19 20:54:19 ----A---- C:\WINDOWS\system32\nvwgf2um.dll
2015-11-19 20:54:18 ----A---- C:\WINDOWS\system32\nvopencl.dll
2015-11-19 20:54:18 ----A---- C:\WINDOWS\system32\nvoglv32.dll
2015-11-19 20:54:18 ----A---- C:\WINDOWS\system32\NvIFR.dll
2015-11-19 20:54:18 ----A---- C:\WINDOWS\system32\NvFBC.dll
2015-11-19 20:54:18 ----A---- C:\WINDOWS\system32\drivers\nvlddmkm.sys
2015-11-19 20:54:17 ----A---- C:\WINDOWS\system32\nvdispgenco3234192.dll
2015-11-19 20:54:17 ----A---- C:\WINDOWS\system32\nvdispco3234192.dll
2015-11-19 20:54:16 ----A---- C:\WINDOWS\system32\nvd3dum.dll
2015-11-19 20:54:15 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2015-11-19 20:54:14 ----A---- C:\WINDOWS\system32\nvcuda.dll
2015-11-19 20:54:13 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2015-11-19 20:54:13 ----A---- C:\WINDOWS\system32\nvapi.dll
2015-11-19 20:33:39 ----SHD---- C:\Config.Msi
2015-11-19 20:32:42 ----D---- C:\Program Files\Common Files\Java
2015-11-05 14:37:32 ----AD---- C:\Program Files\Mozilla Firefox

======List of files/folders modified in the last 1 month======

2015-12-02 18:28:54 ----D---- C:\Program Files\trend micro
2015-12-02 18:28:35 ----D---- C:\WINDOWS\Temp
2015-12-02 17:40:00 ----D---- C:\WINDOWS\system32\sru
2015-12-02 09:50:28 ----D---- C:\WINDOWS\system32\config
2015-12-02 09:32:51 ----D---- C:\WINDOWS\Microsoft.NET
2015-12-02 09:32:12 ----D---- C:\WINDOWS\WinSxS
2015-12-02 09:26:08 ----D---- C:\WINDOWS\debug
2015-12-02 07:50:41 ----D---- C:\WINDOWS\AppReadiness
2015-12-02 07:50:40 ----HD---- C:\Program Files\WindowsApps
2015-11-29 23:04:34 ----RD---- C:\Program Files
2015-11-29 23:02:10 ----D---- C:\WINDOWS\system32\Tasks
2015-11-29 23:00:56 ----HD---- C:\ProgramData
2015-11-29 23:00:56 ----D---- C:\Program Files\Common Files
2015-11-29 22:55:15 ----SHD---- C:\WINDOWS\Installer
2015-11-29 21:41:10 ----D---- C:\WINDOWS\CbsTemp
2015-11-25 22:03:23 ----D---- C:\WINDOWS\SoftwareDistribution
2015-11-25 22:03:16 ----D---- C:\Windows
2015-11-25 22:02:34 ----D---- C:\WINDOWS\system32\drivers
2015-11-25 22:02:27 ----D---- C:\WINDOWS\INF
2015-11-25 21:59:25 ----D---- C:\WINDOWS\Logs
2015-11-25 21:36:43 ----D---- C:\Program Files\Winamp
2015-11-25 21:33:09 ----D---- C:\WINDOWS\System32
2015-11-25 21:33:08 ----D---- C:\WINDOWS\System
2015-11-25 21:33:06 ----A---- C:\WINDOWS\system32\typelib.dll
2015-11-25 21:33:06 ----A---- C:\WINDOWS\system32\storage.dll
2015-11-25 21:33:06 ----A---- C:\WINDOWS\system32\ole2nls.dll
2015-11-25 21:33:06 ----A---- C:\WINDOWS\system32\ole2disp.dll
2015-11-25 21:33:06 ----A---- C:\WINDOWS\system32\ole2.dll
2015-11-25 21:33:06 ----A---- C:\WINDOWS\system32\compobj.dll
2015-11-25 21:33:04 ----A---- C:\WINDOWS\system32\win.com
2015-11-25 21:33:04 ----A---- C:\WINDOWS\system32\ver.dll
2015-11-25 21:33:04 ----A---- C:\WINDOWS\system32\USER.EXE
2015-11-25 21:33:04 ----A---- C:\WINDOWS\system32\TOOLHELP.DLL
2015-11-25 21:33:04 ----A---- C:\WINDOWS\system32\pmspl.dll
2015-11-25 21:33:04 ----A---- C:\WINDOWS\system32\OLESVR.DLL
2015-11-25 21:33:04 ----A---- C:\WINDOWS\system32\ntvdmd.dll
2015-11-25 21:33:04 ----A---- C:\WINDOWS\system32\mem.exe
2015-11-25 21:33:04 ----A---- C:\WINDOWS\system32\lzexpand.dll
2015-11-25 21:33:04 ----A---- C:\WINDOWS\system32\KB16.COM
2015-11-25 21:33:04 ----A---- C:\WINDOWS\system32\GRAPHICS.COM
2015-11-25 21:33:04 ----A---- C:\WINDOWS\system32\GDI.EXE
2015-11-25 21:33:04 ----A---- C:\WINDOWS\system32\edit.com
2015-11-25 21:33:04 ----A---- C:\WINDOWS\system32\debug.exe
2015-11-25 21:33:04 ----A---- C:\WINDOWS\system32\DDEML.DLL
2015-11-25 21:33:03 ----A---- C:\WINDOWS\system32\WIFEMAN.DLL
2015-11-25 21:33:03 ----A---- C:\WINDOWS\system32\sysedit.exe
2015-11-25 21:33:03 ----A---- C:\WINDOWS\system32\SHELL.DLL
2015-11-25 21:33:03 ----A---- C:\WINDOWS\system32\ntvdm.exe
2015-11-25 21:33:03 ----A---- C:\WINDOWS\system32\graftabl.com
2015-11-25 21:33:03 ----A---- C:\WINDOWS\system32\COMMDLG.DLL
2015-11-25 21:33:03 ----A---- C:\WINDOWS\system32\COMMAND.COM
2015-11-25 21:33:02 ----A---- C:\WINDOWS\winhelp.exe
2015-11-25 21:33:02 ----A---- C:\WINDOWS\system32\WINNLS.DLL
2015-11-25 21:33:02 ----A---- C:\WINDOWS\system32\vdmredir.dll
2015-11-25 21:33:02 ----A---- C:\WINDOWS\system32\setver.exe
2015-11-25 21:33:02 ----A---- C:\WINDOWS\system32\nlsfunc.exe
2015-11-25 21:33:02 ----A---- C:\WINDOWS\system32\netapi.dll
2015-11-25 21:33:02 ----A---- C:\WINDOWS\system32\MMSYSTEM.DLL
2015-11-25 21:33:02 ----A---- C:\WINDOWS\system32\krnl386.exe
2015-11-25 21:33:02 ----A---- C:\WINDOWS\system32\exe2bin.exe
2015-11-25 21:33:02 ----A---- C:\WINDOWS\system32\edlin.exe
2015-11-25 21:33:02 ----A---- C:\WINDOWS\system32\DRWATSON.EXE
2015-11-25 21:33:02 ----A---- C:\WINDOWS\system32\ctl3dv2.dll
2015-11-25 21:33:02 ----A---- C:\WINDOWS\system32\append.exe
2015-11-25 21:33:01 ----A---- C:\WINDOWS\system32\win87em.dll
2015-11-25 21:33:01 ----A---- C:\WINDOWS\system32\olecli.dll
2015-11-25 21:33:01 ----A---- C:\WINDOWS\system32\dosx.exe
2015-11-25 21:31:03 ----D---- C:\WINDOWS\system32\DriverStore
2015-11-25 20:51:22 ----D---- C:\WINDOWS\system32\WDI
2015-11-25 20:09:40 ----SD---- C:\ProgramData\Microsoft
2015-11-25 18:58:47 ----D---- C:\ProgramData\UMS
2015-11-25 18:54:13 ----D---- C:\Program Files\Universal Media Server
2015-11-25 17:21:43 ----D---- C:\WINDOWS\system32\migration
2015-11-25 16:07:15 ----D---- C:\WINDOWS\system32\catroot2
2015-11-22 17:43:48 ----RD---- C:\WINDOWS\assembly
2015-11-21 13:02:14 ----D---- C:\Users\Adam\AppData\Roaming\WOW
2015-11-21 11:30:19 ----D---- C:\WINDOWS\system32\LogFiles
2015-11-21 11:28:40 ----D---- C:\WINDOWS\AppCompat
2015-11-21 11:27:11 ----RD---- C:\WINDOWS\DevicesFlow
2015-11-20 00:26:22 ----RD---- C:\WINDOWS\PrintDialog
2015-11-20 00:26:08 ----RD---- C:\WINDOWS\MiracastView
2015-11-20 00:25:04 ----D---- C:\WINDOWS\rescache
2015-11-20 00:24:41 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2015-11-20 00:15:45 ----D---- C:\WINDOWS\system32\WinBioDatabase
2015-11-20 00:15:32 ----D---- C:\WINDOWS\Registration
2015-11-20 00:10:46 ----D---- C:\WINDOWS\Tasks
2015-11-20 00:08:43 ----RSD---- C:\WINDOWS\Media
2015-11-20 00:08:31 ----D---- C:\WINDOWS\system32\drivers\etc
2015-11-20 00:04:35 ----D---- C:\WINDOWS\system32\wbem
2015-11-19 23:55:14 ----D---- C:\WINDOWS\system32\SPReview
2015-11-19 23:55:12 ----D---- C:\WINDOWS\system32\spool
2015-11-19 23:55:09 ----D---- C:\WINDOWS\system32\slmgr
2015-11-19 23:55:05 ----D---- C:\WINDOWS\system32\sk-SK
2015-11-19 23:55:04 ----D---- C:\WINDOWS\system32\NDF
2015-11-19 23:55:03 ----D---- C:\WINDOWS\system32\IME
2015-11-19 23:55:02 ----D---- C:\WINDOWS\system32\EventProviders
2015-11-19 23:55:00 ----D---- C:\WINDOWS\system32\en-US
2015-11-19 23:54:59 ----D---- C:\WINDOWS\system32\drivers\en-US
2015-11-19 23:53:52 ----D---- C:\WINDOWS\system32\CatRoot
2015-11-19 23:53:46 ----D---- C:\WINDOWS\schemas
2015-11-19 23:53:45 ----RD---- C:\WINDOWS\PurchaseDialog
2015-11-19 23:53:45 ----D---- C:\WINDOWS\PolicyDefinitions
2015-11-19 23:53:44 ----D---- C:\WINDOWS\OCR
2015-11-19 23:53:43 ----D---- C:\WINDOWS\LiveKernelReports
2015-11-19 23:53:35 ----HD---- C:\WINDOWS\ELAMBKUP
2015-11-19 23:53:35 ----D---- C:\WINDOWS\ehome
2015-11-19 23:53:33 ----RD---- C:\Users
2015-11-19 23:53:29 ----D---- C:\ProgramData\USOPrivate
2015-11-19 23:53:28 ----D---- C:\ProgramData\SoftwareDistribution
2015-11-19 23:53:16 ----D---- C:\Program Files\Windows Mail
2015-11-19 23:53:13 ----D---- C:\Program Files\Microsoft Games
2015-11-19 23:53:11 ----D---- C:\Program Files\Common Files\microsoft shared
2015-11-19 23:52:49 ----D---- C:\WINDOWS\system32\Recovery
2015-11-19 23:51:57 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-11-19 23:47:56 ----D---- C:\WINDOWS\system32\Sysprep
2015-11-19 23:44:27 ----D---- C:\WINDOWS\Help
2015-11-19 23:41:38 ----D---- C:\WINDOWS\ServiceProfiles
2015-11-19 23:35:22 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2015-11-19 23:35:22 ----D---- C:\WINDOWS\system32\oobe
2015-11-19 23:35:22 ----D---- C:\WINDOWS\system32\Dism
2015-11-19 23:35:22 ----D---- C:\WINDOWS\system32\appraiser
2015-11-19 23:35:21 ----D---- C:\WINDOWS\Provisioning
2015-11-19 23:35:21 ----D---- C:\WINDOWS\apppatch
2015-11-19 23:27:45 ----D---- C:\WINDOWS\system32\inetsrv
2015-11-19 23:27:43 ----RSD---- C:\WINDOWS\Fonts
2015-11-19 23:27:37 ----A---- C:\WINDOWS\system32\mqsnap.dll
2015-11-19 23:27:37 ----A---- C:\WINDOWS\system32\mqcertui.dll
2015-11-19 23:27:35 ----A---- C:\WINDOWS\system32\mqoa.dll
2015-11-19 23:27:34 ----A---- C:\WINDOWS\system32\mqqm.dll
2015-11-19 23:27:30 ----A---- C:\WINDOWS\system32\mqsvc.exe
2015-11-19 23:27:30 ----A---- C:\WINDOWS\system32\mqbkup.exe
2015-11-19 23:27:27 ----A---- C:\WINDOWS\system32\iisRtl.dll
2015-11-19 23:27:27 ----A---- C:\WINDOWS\system32\admwprox.dll
2015-11-19 23:27:26 ----A---- C:\WINDOWS\system32\wamregps.dll
2015-11-19 23:27:26 ----A---- C:\WINDOWS\system32\iisrstap.dll
2015-11-19 23:27:26 ----A---- C:\WINDOWS\system32\iisreset.exe
2015-11-19 23:27:26 ----A---- C:\WINDOWS\system32\ahadmin.dll
2015-11-19 23:27:25 ----A---- C:\WINDOWS\system32\mqrt.dll
2015-11-19 23:27:23 ----A---- C:\WINDOWS\system32\mqlogmgr.dll
2015-11-19 23:27:22 ----A---- C:\WINDOWS\system32\mqutil.dll
2015-11-19 23:02:46 ----HD---- C:\$WINDOWS.~BT
2015-11-19 20:34:33 ----D---- C:\ProgramData\Oracle
2015-11-19 20:30:43 ----A---- C:\WINDOWS\system32\WindowsAccessBridge.dll
2015-11-19 20:28:55 ----D---- C:\Program Files\Java
2015-11-11 20:16:23 ----D---- C:\Program Files\Mozilla Maintenance Service
2015-11-11 20:04:53 ----D---- C:\WINDOWS\system32\MRT
2015-11-11 19:56:02 ----A---- C:\WINDOWS\system32\MRT.exe
2015-11-03 01:12:51 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 edevmon;edevmon; C:\WINDOWS\system32\DRIVERS\edevmon.sys [2015-07-14 199608]
R0 epfwwfp;epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [2015-09-23 56944]
R1 eamonm;eamonm; C:\WINDOWS\system32\DRIVERS\eamonm.sys [2015-09-23 205800]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2015-09-23 145512]
R1 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2015-09-23 161992]
R1 EpfwLWF;@oem26.inf,%EpfwLWF_Desc%;ESET Personal Firewall; C:\WINDOWS\system32\DRIVERS\EpfwLWF.sys [2015-09-23 44608]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-10-30 76288]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 7680]
R2 ekbdflt;ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [2015-10-07 111040]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 36864]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-10-30 62464]
R3 athur;@oem2.inf,%ATHR.Service.DispName%;Atheros AR9271 Wireless Network Adapter Service; C:\WINDOWS\System32\drivers\athur.sys [2013-06-28 1570304]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2015-11-19 130560]
R3 NVHDA;@oem31.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32v.sys [2015-11-19 171312]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-10-13 10707120]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-10-13 18576]
R3 nvvad_WaveExtensible;@oem7.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad32v.sys [2015-08-18 32912]
R3 rt640x86;@rt640x86.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x86.sys [2015-10-30 494080]
S0 eelam;eelam; C:\WINDOWS\system32\DRIVERS\eelam.sys [2015-09-23 14464]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 88928]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 83288]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-10-30 51040]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-10-30 51552]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-10-30 27992]
S3 avchv;@oem0.inf,%ServiceDesc%;avchv Function Driver; C:\WINDOWS\system32\DRIVERS\avchv.sys []
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 8192]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 26624]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-10-30 96768]
S3 DFX11_1;DFX Audio Enhancer 11.1; C:\WINDOWS\system32\drivers\dfx11_1.sys [2012-12-13 24424]
S3 DrvAgent32;DrvAgent32; \??\C:\WINDOWS\system32\Drivers\DrvAgent32.sys [2015-11-25 31832]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 17408]
S3 GPIO;@iaiogpio.inf,%GPIO.SVCDESC%;Intel SoC GPIO Controller Driver; C:\WINDOWS\System32\drivers\iaiogpio.sys [2015-10-30 22016]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 38240]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 66048]
S3 iaioi2c;@iaioi2c.inf,%Driver_Service.Desc%;Intel(R) Atom(TM) Processor I2C Controller Service; C:\WINDOWS\System32\drivers\iaioi2c.sys [2015-10-30 61936]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHDA.sys [2015-06-18 3522264]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 23040]
S3 jrvad_service;JRiver Media Center 20 (service); C:\WINDOWS\system32\drivers\JRiverWDMDriver.sys [2015-01-26 30168]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-10-30 45056]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-10-30 33792]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-10-30 32768]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-10-30 200032]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-10-30 74080]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-10-30 104800]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2015-10-30 42840]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2015-10-30 21856]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2015-10-30 21856]
S3 usbser;@usbser.inf,%UsbSerial.DriverDesc%;Microsoft USB Serial Driver; C:\WINDOWS\System32\drivers\usbser.sys [2015-10-30 48640]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-09-14 82128]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2015-10-09 1971968]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-10-13 915600]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2015-11-19 25088]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-10-13 1706128]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-10-13 19775632]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-10-13 670512]
R2 OneSyncSvc_1b6bc;Sync Host_1b6bc; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-10-13 416432]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R2 UserManager;@%systemroot%\system32\usermgr.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
S2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-10-30 135848]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S2 OneSyncSvc_425d54;Sync Host_425d54; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-11 269000]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 26112]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 MessagingService_1b6bc;MessagingService_1b6bc; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 MessagingService_425d54;MessagingService_425d54; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2015-11-05 147624]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 PimIndexMaintenanceSvc_1b6bc;Kontaktné údaje_1b6bc; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 PimIndexMaintenanceSvc_425d54;Kontaktné údaje_425d54; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-10-30 900096]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2015-10-30 256512]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 UnistoreSvc_1b6bc;Ukladací priestor používateľských údajov_1b6bc; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 UnistoreSvc_425d54;Ukladací priestor používateľských údajov_425d54; C:\WINDOWS\System32\svchost.exe [2015-10-30 37256]
S3 UserDataSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-14001; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 UserDataSvc_1b6bc;Prístup k používateľským údajom_1b6bc; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 UserDataSvc_425d54;Prístup k používateľským údajom_425d54; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S3 UsoSvc;@%systemroot%\system32\usocore.dll,-102; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2015-10-30 45752]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 37256]

-----------------EOF-----------------

Krasny den Vam preju

V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )

ukoncete vsechny programy
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Scan, pote na Cleaning
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner[Cx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

# AdwCleaner v5.023 - Logfile created 03/12/2015 at 17:29:24
# Updated 30/11/2015 by Xplode
# Database : 2015-11-30.1 [Server]
# Operating system : Windows 10 Home (x86)
# Username : Adam - ADAM-PC
# Running from : C:\Users\Adam\Desktop\adwcleaner_5.023.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files\SimpleFiles
[-] Folder Deleted : C:\Program Files\LuckyBrowse
[-] Folder Deleted : C:\ProgramData\LuckyBrowse
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\SimpleFiles
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\LuckyBrowse
[-] Folder Deleted : C:\Users\Adam\AppData\Local\eSupport.com
[-] Folder Deleted : C:\Users\Adam\AppData\Roaming\SimpleFiles
[#] Folder Deleted : C:\WINDOWS\system32\Tasks\LuckyBrowse

***** [ Files ] *****

[-] File Deleted : C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\luh6bl93.default-1443711275127\user.js

***** [ DLLs ] *****

***** [ Shortcuts ] *****

[-] Shortcut Disinfected : C:\Users\Public\Desktop\Mozilla Firefox.lnk
[-] Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[-] Shortcut Disinfected : C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk
[-] Shortcut Disinfected : C:\Users\Adam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[-] Shortcut Disinfected : C:\Users\Adam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk
[-] Shortcut Disinfected : C:\Users\Adam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Internet Explorer.lnk

***** [ Scheduled tasks ] *****

[-] Task Deleted : amiupdaterExd
[-] Task Deleted : amiupdaterExi
[-] Task Deleted : LuckyBrowse

***** [ Registry ] *****

[-] Key Deleted : HKLM\System\CurrentControlSet\Services\Eventlog\Application\Util Cyti Web
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D14D64BC-A0E4-42E3-BB72-FB41EA43C198}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DD1F043F-ABC8-4643-8B95-D2C5B22BB019}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F3E8F9-F747-4DD6-BA6B-82A6CE1E0860}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ED0B64D4-BF27-4521-AD27-190F49BF5EA7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{023E9EC8-B147-40EB-B0B3-DF90618FB371}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0522D9A4-4D57-437D-978D-E5B3B6C9005D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{07F41522-AF7D-4F26-B394-094F059FDB8A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0C40F472-7407-4467-8914-1DEA7C326972}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{212E6D43-6062-492A-B8CC-144669FF11ED}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{224FE662-1E6D-4BC0-AEBB-9E2FB4057BE9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3A807417-B46D-4D37-8C9A-19AC6DE204F9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3CC60715-D6C5-429D-830E-43FA3F86C61D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4517D94C-19BA-46FA-BE66-2A30CEAC4A85}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{555D7146-94A8-4C94-AE76-C39CDC7F7705}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8120D9D6-785C-4413-9C0C-DF2028C56FAD}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{823AE2EB-E62C-4847-B192-C99B91B92416}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9B4F7CFE-987D-410E-A8E4-20182E0B3C24}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9B9A45F4-18FC-484A-BACA-076D78273D8E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A6D54287-7939-466A-8579-92546D946C8C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A78EDAFB-926F-4D93-AB13-8232D7378EB1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{395DA725-A162-43FF-B885-27BD92F112E8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{04FEAF9C-DC32-41C7-95CA-790E93488E7D}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKCU\Software\eSupport.com
[-] Key Deleted : HKCU\Software\SimpleFiles
[-] Key Deleted : HKCU\Software\PRODUCTSETUP
[-] Key Deleted : HKCU\Software\OB
[-] Key Deleted : HKCU\Software\WEBAPP
[-] Key Deleted : HKCU\Software\AppDataLow\Software\adawarebp
[-] Key Deleted : HKLM\SOFTWARE\SimpleFiles
[-] Key Deleted : HKLM\SOFTWARE\SiteSee
[-] Key Deleted : HKLM\SOFTWARE\LuckyBrowse

***** [ Web browsers ] *****

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [5059 bytes] ##########

Dejte logy FRST.txt a Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101

Log v prílohe

V archivu je jen FRST.txt, poprosim jeste o Addition.txt (pro jeho vytvoreni je pred kliknutim na Scan zatrhnout polozku Addition.txt vpravo dole).

V prílohe

Mate vypnutou funkci bodu obnoveni - velice doporucuji tuto funkci zapnout.

Kliknete pravym na Tento pocitac -> Vlastnosti -> Upresnit nastaveni systemu -> nahore zalozka Ochrana systemu -> Konfigurovat -> vyberte Obnovit nastaveni systemu a predchozi verze souboru a ulozte klikem na Pouzit.
Pokud si chcete hrat s velikosti mista na disku, ktere je vyuzito body obnoveni, nedoporucuji tuto hranici snizovat pod 1 GB. Pokud mate mista na disku dost, ponechte defaultni 3-5% vyuziti disku.

Az body obnoveni povolite, dejte prosim aktualni logy FRST.txt a Addition.txt

V prílohe

Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
znovu spustte FRST a kliknete na Fix

po restartu bude na plose ulozen fixlog, jehoz obsah vlozte do pristi odpovedi

Kód: Vybrat vše

Start
CreateRestorePoint:
CloseProcesses:
HKU\S-1-5-21-3409903947-2537725115-4003705135-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
S3 avchv; \SystemRoot\system32\DRIVERS\avchv.sys [X]
U3 idsvc; no ImagePath
2015-12-04 17:44 - 2015-12-04 17:45 - 00010287 _____ C:\Users\Adam\Desktop\FRST.txt
2015-12-03 17:27 - 2015-12-03 17:29 - 00000000 ____D C:\AdwCleaner
2015-12-02 18:28 - 2015-12-02 18:29 - 00000000 ____D C:\rsit
2015-12-02 18:28 - 2015-03-13 16:49 - 00000000 ____D C:\Program Files\trend micro
Task: {C3F20F7E-25CC-4316-8D42-CE8E224D4235} - System32\Tasks\{6D0A16F6-7172-4C38-88C6-080AFACDA44F} => pcalua.exe -a C:\Users\Adam\Desktop\pms-1.90.1-setup-full-x64.exe -d C:\Users\Adam\Desktop
FirewallRules: [{040CED62-F86E-43EF-96EF-D478E0125583}] => (Allow) C:\Program Files\LuckyBrowse\app\LuckyBrowse.exe
FirewallRules: [{39749ED9-937F-40CA-B92B-BD355914F041}] => (Allow) C:\Program Files\LuckyBrowse\app\LuckyBrowse.exe
C:\Program Files\LuckyBrowse
FirewallRules: [{25686C2F-849A-4741-A569-2618AD30B814}] => (Allow) C:\Program Files\SimpleFiles\SimpleFiles.exe
FirewallRules: [{3B4E7F3B-1C14-4782-8373-3F913F0E346A}] => (Allow) C:\Program Files\SimpleFiles\SimpleFiles.exe
FirewallRules: [{83A0B5A6-46E0-46EE-9196-959CD4318D58}] => (Allow) C:\Program Files\SimpleFiles\downloader.exe
FirewallRules: [{32F79713-6F8D-47CB-B455-790017E1EF60}] => (Allow) C:\Program Files\SimpleFiles\downloader.exe
C:\Program Files\SimpleFiles
Hosts:
EmptyTemp:
End

Fix result of Farbar Recovery Scan Tool (x86) Version:01-12-2015
Ran by Adam (2015-12-04 18:54:59) Run:1
Running from C:\Users\Adam\Desktop
Loaded Profiles: Adam (Available Profiles: Adam & DefaultAppPool)
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start
CreateRestorePoint:
CloseProcesses:
HKU\S-1-5-21-3409903947-2537725115-4003705135-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
S3 avchv; \SystemRoot\system32\DRIVERS\avchv.sys [X]
U3 idsvc; no ImagePath
2015-12-04 17:44 - 2015-12-04 17:45 - 00010287 _____ C:\Users\Adam\Desktop\FRST.txt
2015-12-03 17:27 - 2015-12-03 17:29 - 00000000 ____D C:\AdwCleaner
2015-12-02 18:28 - 2015-12-02 18:29 - 00000000 ____D C:\rsit
2015-12-02 18:28 - 2015-03-13 16:49 - 00000000 ____D C:\Program Files\trend micro
Task: {C3F20F7E-25CC-4316-8D42-CE8E224D4235} - System32\Tasks\{6D0A16F6-7172-4C38-88C6-080AFACDA44F} => pcalua.exe -a C:\Users\Adam\Desktop\pms-1.90.1-setup-full-x64.exe -d C:\Users\Adam\Desktop
FirewallRules: [{040CED62-F86E-43EF-96EF-D478E0125583}] => (Allow) C:\Program Files\LuckyBrowse\app\LuckyBrowse.exe
FirewallRules: [{39749ED9-937F-40CA-B92B-BD355914F041}] => (Allow) C:\Program Files\LuckyBrowse\app\LuckyBrowse.exe
C:\Program Files\LuckyBrowse
FirewallRules: [{25686C2F-849A-4741-A569-2618AD30B814}] => (Allow) C:\Program Files\SimpleFiles\SimpleFiles.exe
FirewallRules: [{3B4E7F3B-1C14-4782-8373-3F913F0E346A}] => (Allow) C:\Program Files\SimpleFiles\SimpleFiles.exe
FirewallRules: [{83A0B5A6-46E0-46EE-9196-959CD4318D58}] => (Allow) C:\Program Files\SimpleFiles\downloader.exe
FirewallRules: [{32F79713-6F8D-47CB-B455-790017E1EF60}] => (Allow) C:\Program Files\SimpleFiles\downloader.exe
C:\Program Files\SimpleFiles
Hosts:
EmptyTemp:
End
*****************

Restore point was successfully created.
Processes closed successfully.
HKU\S-1-5-21-3409903947-2537725115-4003705135-1000\Software\Microsoft\Windows\CurrentVersion\Run\\SpybotPostWindows10UpgradeReInstall => value removed successfully.
avchv => service removed successfully.
idsvc => service removed successfully.
"C:\Users\Adam\Desktop\FRST.txt" => not found.
C:\AdwCleaner => moved successfully
C:\rsit => moved successfully
C:\Program Files\trend micro => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C3F20F7E-25CC-4316-8D42-CE8E224D4235}" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C3F20F7E-25CC-4316-8D42-CE8E224D4235}" => key removed successfully.
C:\Windows\System32\Tasks\{6D0A16F6-7172-4C38-88C6-080AFACDA44F} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{6D0A16F6-7172-4C38-88C6-080AFACDA44F}" => key removed successfully.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{040CED62-F86E-43EF-96EF-D478E0125583} => value removed successfully.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{39749ED9-937F-40CA-B92B-BD355914F041} => value removed successfully.
"C:\Program Files\LuckyBrowse" => not found.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{25686C2F-849A-4741-A569-2618AD30B814} => value removed successfully.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3B4E7F3B-1C14-4782-8373-3F913F0E346A} => value removed successfully.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{83A0B5A6-46E0-46EE-9196-959CD4318D58} => value removed successfully.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{32F79713-6F8D-47CB-B455-790017E1EF60} => value removed successfully.
"C:\Program Files\SimpleFiles" => not found.
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
EmptyTemp: => 1.2 GB temporary data Removed.

The system needed a reboot.

==== End of Fixlog 18:56:30 ====

Takze jeste uklidime.

Stahnete a spustte DelFix - https://toolslib.net/downloads/viewdownload/2-delfix/
Oznacte jen moznost "Remove disinfection tools"
kliknete na Run

A pokud nejsou dotazy ci jine problemy, je to ode mne vse.

No ešte sa mi stáva, že keď kliknem napr. tu na fóre na PREVENTÍVKY, tak mi otvorí nejakú inú stránku, ale nerobí to len tu. Nechápem prečo to robí, keď mi to predtým nerobilo.

Deje se tak jen ve Firefoxu nebo i v IE?

Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
znovu spustte FRST a kliknete na Fix

po restartu bude na plose ulozen fixlog, jehoz obsah vlozte do pristi odpovedi

Kód: Vybrat vše

Start
CloseProcesses:
BHO: Discover Treasure -> {bfa55139-82af-4663-a19b-e135dac8d043} -> C:\Program Files\Discover Treasure\Extensions\bfa55139-82af-4663-a19b-e135dac8d043.dll => No File
C:\Program Files\Discover Treasure
End

Neskúšal som či to robí aj na IE, keďže ho absolútne nepoužívam. Inak zdá, sa že je to vyriešené, nevyhodilo mi už zatiaľ nijakú inú stránku.
Oprava: ako som dal odoslať túto správu, tak mi vyhodilu túto stránku:

Kód: Vybrat vše

http://www.newpoptab.com/watch?key=0cdb16b7667982280fbb05007a35eb39

Fix result of Farbar Recovery Scan Tool (x86) Version:05-12-2015
Ran by Adam (2015-12-06 19:55:09) Run:1
Running from C:\Users\Adam\Desktop
Loaded Profiles: Adam (Available Profiles: Adam & DefaultAppPool)
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start
CloseProcesses:
BHO: Discover Treasure -> {bfa55139-82af-4663-a19b-e135dac8d043} -> C:\Program Files\Discover Treasure\Extensions\bfa55139-82af-4663-a19b-e135dac8d043.dll => No File
C:\Program Files\Discover Treasure
End
*****************

Processes closed successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bfa55139-82af-4663-a19b-e135dac8d043}" => key removed successfully.
"HKCR\CLSID\{bfa55139-82af-4663-a19b-e135dac8d043}" => key removed successfully.
"C:\Program Files\Discover Treasure" => not found.

The system needed a reboot.

==== End of Fixlog 19:55:10 ====

VIRY.CZ

Prosím o kontrolu

Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu