Prosím o kontrolu logu
Napsal: 23 úno 2016 09:58
Zdravím,
po spuštění počítače je OS dost zpomalený a internetové prohlížeče nereagují.. Zhruba po 10ti minutách je vše v pořádku
až na to, že si OS sám otevírá okna anebo stránky.
Stolní PC, Windows 8.1, HDD SMART OK, Paměti OK. Děkuji za čas.
Logfile of random's system information tool 1.10 (written by random/random)
Run by Pavel at 2016-02-20 11:08:58
Microsoft Windows 8.1
System drive C: has 746 GB (79%) free of 938 GB
Total RAM: 8133 MB (81% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:08:59, on 20. 2. 2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\NIS.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\Origin\Origin.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\Pavel.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\coIEPlg.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\coIEPlg.dll
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\NIS.exe
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 5272 bytes
======Listing Processes======
wininit.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
"dwm.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
taskeng.exe {855E8CC2-F501-487F-88A8-AF4F4636E2BF}
taskhostex.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\NIS.exe" /s "NIS" /m "C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\diMaster.dll" /prefetch:1
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\NIS.exe" /c /a /s UserSession2
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
dashost.exe {c5276625-c0dc-4169-b25189ca3f1d9416}
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" -cachedir="C:\Users\Pavel\AppData\Local\Steam\htmlcache" -steampid=3036 -buildid=1454620878 -steamid="0" --disable-gpu-compositing --disable-gpu --process-per-tab --enable-system-flash --disable-spell-checking --enable-widevine-cdm --enable-direct-write
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Windows\system32\GWX\GWX.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-108460686-1593251965-3165503301-10011_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-108460686-1593251965-3165503301-10011 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Windows\system32\SearchFilterHost.exe" 0 560 564 572 65536 568
"C:\Program Files\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3428 CREDAT:267521 /prefetch:2
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\WinStore\WSHost.exe -Embedding
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17709_none_fa7932f59afc2e40\TiWorker.exe -Embedding
"C:\Users\Pavel\Desktop\RSITx64.exe"
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Norton Identity Protection - C:\Program Files (x86)\Norton Internet Security\Engine64\22.5.5.15\coIEPlg.dll [2015-11-05 1038648]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Norton Identity Protection - C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\coIEPlg.dll [2015-11-05 794424]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\coIEPlg.dll [2015-11-05 794424]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2016-02-04 3014224]
"EADM"=C:\Program Files (x86)\Origin\Origin.exe [2016-02-02 3639280]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-01-15 8619224]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.XVID"=xvidvfw.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2016-02-20 11:07:08 ----D---- C:\rsit
2016-02-20 11:07:08 ----D---- C:\Program Files\trend micro
2016-02-16 17:13:48 ----A---- C:\Windows\system32\FNTCACHE.DAT
2016-02-16 16:47:50 ----A---- C:\Windows\tweaking.com-regbackup-PC-Windows-8.1-(64-bit).dat
2016-02-16 16:47:48 ----D---- C:\RegBackup
2016-02-15 17:08:32 ----D---- C:\Users\Pavel\AppData\Roaming\TeamViewer
2016-02-12 14:46:51 ----D---- C:\Windows\Minidump
2016-02-12 13:49:55 ----D---- C:\ProgramData\Malwarebytes
2016-02-12 13:37:41 ----D---- C:\AdwCleaner
2016-02-12 13:19:30 ----A---- C:\Windows\system32\mshtml.dll
2016-02-12 13:19:30 ----A---- C:\Windows\system32\iertutil.dll
2016-02-12 13:19:29 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-02-12 13:19:29 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-02-12 13:19:29 ----A---- C:\Windows\system32\urlmon.dll
2016-02-12 13:19:28 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-02-12 13:19:28 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-02-12 13:19:28 ----A---- C:\Windows\system32\ieframe.dll
2016-02-12 13:15:02 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2016-02-12 13:15:02 ----A---- C:\Windows\system32\CPFilters.dll
2016-02-12 13:15:01 ----A---- C:\Windows\system32\EncDec.dll
2016-02-12 13:15:00 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2016-02-12 13:14:58 ----A---- C:\Windows\system32\mtxoci.dll
2016-02-12 13:14:57 ----A---- C:\Windows\SYSWOW64\mtxoci.dll
2016-02-12 13:14:56 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2016-02-12 13:14:56 ----A---- C:\Windows\system32\cfgbkend.dll
2016-02-12 13:14:55 ----A---- C:\Windows\SYSWOW64\cfgbkend.dll
2016-02-12 13:14:44 ----A---- C:\Windows\system32\glcndFilter.dll
2016-02-12 13:14:42 ----A---- C:\Windows\system32\Windows.Data.Pdf.dll
2016-02-12 13:14:41 ----A---- C:\Windows\SYSWOW64\glcndFilter.dll
2016-02-12 13:14:39 ----A---- C:\Windows\SYSWOW64\Windows.Data.Pdf.dll
2016-02-12 13:13:55 ----A---- C:\Windows\system32\shell32.dll
2016-02-12 13:13:53 ----A---- C:\Windows\system32\twinui.dll
2016-02-12 13:13:50 ----A---- C:\Windows\SYSWOW64\twinui.dll
2016-02-12 13:13:46 ----A---- C:\Windows\SYSWOW64\shell32.dll
2016-02-12 13:13:45 ----A---- C:\Windows\system32\authui.dll
2016-02-12 13:13:44 ----A---- C:\Windows\SYSWOW64\authui.dll
2016-02-12 13:07:27 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-02-12 13:07:27 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-02-12 13:07:27 ----A---- C:\Windows\system32\ntdll.dll
2016-02-12 13:07:27 ----A---- C:\Windows\system32\KernelBase.dll
2016-02-12 13:07:27 ----A---- C:\Windows\system32\combase.dll
2016-02-12 13:07:26 ----A---- C:\Windows\SYSWOW64\WinTypes.dll
2016-02-12 13:07:26 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-02-12 13:07:26 ----A---- C:\Windows\SYSWOW64\combase.dll
2016-02-12 13:07:26 ----A---- C:\Windows\system32\WinTypes.dll
2016-02-12 13:07:26 ----A---- C:\Windows\system32\microsoft-windows-system-events.dll
2016-02-12 13:07:25 ----A---- C:\Windows\SYSWOW64\wincorlib.dll
2016-02-12 13:07:15 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2016-02-12 13:07:12 ----A---- C:\Windows\SYSWOW64\WinSync.dll
2016-02-12 13:07:12 ----A---- C:\Windows\system32\WinSync.dll
2016-02-12 13:07:10 ----A---- C:\Windows\system32\appraiser.dll
2016-02-12 13:07:09 ----A---- C:\Windows\system32\invagent.dll
2016-02-12 13:07:09 ----A---- C:\Windows\system32\generaltel.dll
2016-02-12 13:07:09 ----A---- C:\Windows\system32\devinv.dll
2016-02-12 13:07:09 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-02-12 13:07:09 ----A---- C:\Windows\system32\aeinv.dll
2016-02-12 13:07:09 ----A---- C:\Windows\system32\acmigration.dll
2016-02-12 13:07:05 ----A---- C:\Windows\system32\win32k.sys
2016-02-12 13:07:03 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-02-12 13:07:03 ----A---- C:\Windows\system32\kerberos.dll
2016-02-12 13:07:02 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-02-12 13:07:02 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-02-12 13:07:02 ----A---- C:\Windows\system32\msv1_0.dll
2016-02-12 13:07:02 ----A---- C:\Windows\system32\lsasrv.dll
2016-02-12 13:07:02 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-02-12 13:07:02 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-02-12 13:07:02 ----A---- C:\Windows\system32\dpapisrv.dll
2016-02-12 13:07:02 ----A---- C:\Windows\system32\certcli.dll
2016-02-12 13:06:43 ----A---- C:\Windows\system32\jscript9.dll
2016-02-12 13:06:41 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-02-12 13:06:40 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-02-12 13:06:40 ----A---- C:\Windows\system32\wininet.dll
2016-02-12 13:06:39 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-02-12 13:06:39 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-02-12 13:06:39 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-02-12 13:06:39 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-02-12 13:06:39 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2016-02-12 13:06:39 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-02-12 13:06:39 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-02-12 13:06:39 ----A---- C:\Windows\SYSWOW64\hlink.dll
2016-02-12 13:06:39 ----A---- C:\Windows\system32\webcheck.dll
2016-02-12 13:06:39 ----A---- C:\Windows\system32\vbscript.dll
2016-02-12 13:06:39 ----A---- C:\Windows\system32\msfeeds.dll
2016-02-12 13:06:39 ----A---- C:\Windows\system32\jscript.dll
2016-02-12 13:06:39 ----A---- C:\Windows\system32\inetcomm.dll
2016-02-12 13:06:39 ----A---- C:\Windows\system32\iedkcs32.dll
2016-02-12 13:06:39 ----A---- C:\Windows\system32\ieapfltr.dll
2016-02-12 13:06:39 ----A---- C:\Windows\system32\ie4uinit.exe
2016-02-12 13:06:39 ----A---- C:\Windows\system32\hlink.dll
2016-02-12 13:06:39 ----A---- C:\Windows\system32\actxprxy.dll
2016-02-12 13:06:33 ----A---- C:\Windows\system32\rdpudd.dll
2016-02-12 13:06:33 ----A---- C:\Windows\system32\rdpcorets.dll
2016-02-12 13:06:30 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2016-02-12 13:06:30 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2016-02-12 13:06:30 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2016-02-12 13:06:30 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2016-02-12 13:06:30 ----A---- C:\Windows\system32\wuwebv.dll
2016-02-12 13:06:30 ----A---- C:\Windows\system32\WUSettingsProvider.dll
2016-02-12 13:06:30 ----A---- C:\Windows\system32\wudriver.dll
2016-02-12 13:06:30 ----A---- C:\Windows\system32\wucltux.dll
2016-02-12 13:06:30 ----A---- C:\Windows\system32\wuaueng.dll
2016-02-12 13:06:30 ----A---- C:\Windows\system32\wuauclt.exe
2016-02-12 13:06:30 ----A---- C:\Windows\system32\wuapp.exe
2016-02-12 13:06:30 ----A---- C:\Windows\system32\wuapi.dll
2016-02-12 13:02:37 ----A---- C:\Windows\system32\drivers\TrueSight.sys
2016-02-12 13:02:32 ----D---- C:\ProgramData\RogueKiller
2016-01-22 17:55:54 ----D---- C:\Users\Pavel\AppData\Roaming\RotMG.Production
======List of files/folders modified in the last 1 month======
2016-02-20 11:07:23 ----D---- C:\Windows\Prefetch
2016-02-20 11:07:21 ----SHD---- C:\System Volume Information
2016-02-20 11:07:08 ----RD---- C:\Program Files
2016-02-20 11:05:19 ----D---- C:\ProgramData\Origin
2016-02-20 11:05:14 ----D---- C:\Program Files (x86)\Steam
2016-02-20 11:03:50 ----D---- C:\Windows\Temp
2016-02-20 11:00:00 ----D---- C:\Windows\system32\sru
2016-02-19 21:26:12 ----D---- C:\Windows\Microsoft.NET
2016-02-18 20:03:07 ----SHD---- C:\Windows\Installer
2016-02-18 20:02:53 ----D---- C:\Windows\SysWOW64
2016-02-17 16:42:45 ----D---- C:\Windows\system32\config
2016-02-16 18:04:59 ----D---- C:\Program Files (x86)\Origin
2016-02-16 17:14:01 ----D---- C:\Windows
2016-02-16 17:13:48 ----RD---- C:\Windows\System32
2016-02-16 17:12:40 ----D---- C:\Windows\debug
2016-02-12 17:45:36 ----D---- C:\Windows\Inf
2016-02-12 17:45:36 ----D---- C:\ProgramData\Package Cache
2016-02-12 14:56:13 ----D---- C:\Windows\Panther
2016-02-12 14:56:13 ----D---- C:\Windows\Logs
2016-02-12 14:53:41 ----RD---- C:\Program Files (x86)
2016-02-12 14:53:40 ----D---- C:\Windows\system32\drivers
2016-02-12 14:36:45 ----RSD---- C:\Windows\assembly
2016-02-12 14:24:29 ----D---- C:\Windows\rescache
2016-02-12 14:12:04 ----RD---- C:\Windows\Offline Web Pages
2016-02-12 14:11:39 ----D---- C:\Users\Pavel\AppData\Roaming\msct
2016-02-12 13:49:55 ----HD---- C:\ProgramData
2016-02-12 13:43:16 ----D---- C:\Windows\WinSxS
2016-02-12 13:39:56 ----D---- C:\Windows\system32\appraiser
2016-02-12 13:39:56 ----D---- C:\Windows\apppatch
2016-02-12 13:39:55 ----RD---- C:\Windows\ToastData
2016-02-12 13:39:55 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-02-12 13:39:55 ----D---- C:\Windows\system32\cs-CZ
2016-02-12 13:39:54 ----D---- C:\Windows\system32\wbem
2016-02-12 13:39:54 ----D---- C:\Program Files\Windows Journal
2016-02-12 13:39:53 ----D---- C:\Program Files\Internet Explorer
2016-02-12 13:39:53 ----D---- C:\Program Files (x86)\Internet Explorer
2016-02-12 13:32:05 ----D---- C:\Windows\AppReadiness
2016-02-12 13:32:04 ----HD---- C:\Program Files\WindowsApps
2016-02-12 13:31:59 ----D---- C:\Windows\CbsTemp
2016-02-12 13:26:00 ----D---- C:\Windows\system32\MRT
2016-02-12 13:23:21 ----D---- C:\Windows\Tasks
2016-02-12 13:22:11 ----A---- C:\Windows\system32\MRT.exe
2016-02-12 13:20:58 ----D---- C:\Windows\system32\catroot2
2016-02-12 13:03:15 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-02-06 19:48:51 ----D---- C:\Program Files (x86)\Origin Games
2016-02-02 03:37:41 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 SymEFASI;Symantec Extended File Attributes (SI); C:\Windows\system32\drivers\NISx64\1605050.00F\SYMEFASI64.SYS [2015-11-12 1621232]
R0 Wof;Windows Overlay File System Filter Driver; C:\Windows\system32\drivers\Wof.sys [2014-11-21 157016]
R1 adgnetworkwfpdrv;adgnetworkwfpdrv; C:\Windows\system32\drivers\adgnetworkwfpdrv.sys [2015-06-02 55800]
R1 BHDrvx64;BHDrvx64; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.4.24\Definitions\BASHDefs\20160213.003\BHDrvx64.sys [2015-10-08 1665608]
R1 ccSet_NIS;NIS Settings Manager; C:\Windows\system32\drivers\NISx64\1605050.00F\ccSetx64.sys [2015-09-23 173808]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2015-11-18 498512]
R1 IDSVia64;IDSVia64; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.4.24\Definitions\IPSDefs\20160219.001\IDSvia64.sys [2016-02-13 767224]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\NISx64\1605050.00F\SRTSPX64.SYS [2015-09-23 50936]
R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\NISx64\1605050.00F\Ironx64.SYS [2015-09-23 297720]
R1 SymNetS;Symantec Network Security WFP Driver; C:\Windows\System32\Drivers\NISx64\1605050.00F\SYMNETS.SYS [2015-11-12 577768]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2015-04-24 18959360]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2015-04-24 589312]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2015-11-18 157520]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport – ovladač pro řadič Qualcomm Atheros AR81xx PCI-E Ethernet; C:\Windows\system32\DRIVERS\L1C63x64.sys [2013-06-18 129224]
R3 NAVENG;NAVENG; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.4.24\Definitions\VirusDefs\20160219.020\ENG64.SYS [2015-12-22 138488]
R3 NAVEX15;NAVEX15; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.4.24\Definitions\VirusDefs\20160219.020\EX64.SYS [2015-12-22 2148080]
R3 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\System32\Drivers\NISx64\1605050.00F\SRTSP64.SYS [2015-11-12 928496]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [2015-10-05 111344]
S0 SymELAM;Symantec ELAM Driver; C:\Windows\system32\drivers\NISx64\1605050.00F\SymELAM.sys [2015-09-23 24192]
S3 WUDFSensorLP;@locationprovider.inf,%WudfLocationProviderDisplayName%;Služba Reflektor UMDF pro zprostředkovatele umístění (LocationProvider); C:\Windows\system32\DRIVERS\WUDFRd.sys [2014-11-21 226304]
S3 WUDFWpdFs;WUDFWpdFs; C:\Windows\system32\DRIVERS\WUDFRd.sys [2014-11-21 226304]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-13 82128]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2015-04-24 244736]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2014-11-21 38792]
R2 NIS;Norton Internet Security; C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\NIS.exe [2015-11-20 282016]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2015-11-12 76888]
R2 PnkBstrB;PnkBstrB; C:\Windows\syswow64\PnkBstrB.exe [2015-11-12 189248]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-02-04 835152]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-06 144200]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2014-11-21 38792]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-06 144200]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2016-02-02 2104840]
-----------------EOF-----------------
po spuštění počítače je OS dost zpomalený a internetové prohlížeče nereagují.. Zhruba po 10ti minutách je vše v pořádku
až na to, že si OS sám otevírá okna anebo stránky.
Stolní PC, Windows 8.1, HDD SMART OK, Paměti OK. Děkuji za čas.
Logfile of random's system information tool 1.10 (written by random/random)
Run by Pavel at 2016-02-20 11:08:58
Microsoft Windows 8.1
System drive C: has 746 GB (79%) free of 938 GB
Total RAM: 8133 MB (81% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:08:59, on 20. 2. 2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\NIS.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\Origin\Origin.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\Pavel.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\coIEPlg.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\coIEPlg.dll
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\NIS.exe
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 5272 bytes
======Listing Processes======
wininit.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
"dwm.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
taskeng.exe {855E8CC2-F501-487F-88A8-AF4F4636E2BF}
taskhostex.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\NIS.exe" /s "NIS" /m "C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\diMaster.dll" /prefetch:1
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\NIS.exe" /c /a /s UserSession2
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
dashost.exe {c5276625-c0dc-4169-b25189ca3f1d9416}
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" -cachedir="C:\Users\Pavel\AppData\Local\Steam\htmlcache" -steampid=3036 -buildid=1454620878 -steamid="0" --disable-gpu-compositing --disable-gpu --process-per-tab --enable-system-flash --disable-spell-checking --enable-widevine-cdm --enable-direct-write
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Windows\system32\GWX\GWX.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-108460686-1593251965-3165503301-10011_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-108460686-1593251965-3165503301-10011 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Windows\system32\SearchFilterHost.exe" 0 560 564 572 65536 568
"C:\Program Files\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3428 CREDAT:267521 /prefetch:2
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\WinStore\WSHost.exe -Embedding
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17709_none_fa7932f59afc2e40\TiWorker.exe -Embedding
"C:\Users\Pavel\Desktop\RSITx64.exe"
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Norton Identity Protection - C:\Program Files (x86)\Norton Internet Security\Engine64\22.5.5.15\coIEPlg.dll [2015-11-05 1038648]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Norton Identity Protection - C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\coIEPlg.dll [2015-11-05 794424]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\coIEPlg.dll [2015-11-05 794424]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2016-02-04 3014224]
"EADM"=C:\Program Files (x86)\Origin\Origin.exe [2016-02-02 3639280]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-01-15 8619224]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.XVID"=xvidvfw.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2016-02-20 11:07:08 ----D---- C:\rsit
2016-02-20 11:07:08 ----D---- C:\Program Files\trend micro
2016-02-16 17:13:48 ----A---- C:\Windows\system32\FNTCACHE.DAT
2016-02-16 16:47:50 ----A---- C:\Windows\tweaking.com-regbackup-PC-Windows-8.1-(64-bit).dat
2016-02-16 16:47:48 ----D---- C:\RegBackup
2016-02-15 17:08:32 ----D---- C:\Users\Pavel\AppData\Roaming\TeamViewer
2016-02-12 14:46:51 ----D---- C:\Windows\Minidump
2016-02-12 13:49:55 ----D---- C:\ProgramData\Malwarebytes
2016-02-12 13:37:41 ----D---- C:\AdwCleaner
2016-02-12 13:19:30 ----A---- C:\Windows\system32\mshtml.dll
2016-02-12 13:19:30 ----A---- C:\Windows\system32\iertutil.dll
2016-02-12 13:19:29 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-02-12 13:19:29 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-02-12 13:19:29 ----A---- C:\Windows\system32\urlmon.dll
2016-02-12 13:19:28 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-02-12 13:19:28 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-02-12 13:19:28 ----A---- C:\Windows\system32\ieframe.dll
2016-02-12 13:15:02 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2016-02-12 13:15:02 ----A---- C:\Windows\system32\CPFilters.dll
2016-02-12 13:15:01 ----A---- C:\Windows\system32\EncDec.dll
2016-02-12 13:15:00 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2016-02-12 13:14:58 ----A---- C:\Windows\system32\mtxoci.dll
2016-02-12 13:14:57 ----A---- C:\Windows\SYSWOW64\mtxoci.dll
2016-02-12 13:14:56 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2016-02-12 13:14:56 ----A---- C:\Windows\system32\cfgbkend.dll
2016-02-12 13:14:55 ----A---- C:\Windows\SYSWOW64\cfgbkend.dll
2016-02-12 13:14:44 ----A---- C:\Windows\system32\glcndFilter.dll
2016-02-12 13:14:42 ----A---- C:\Windows\system32\Windows.Data.Pdf.dll
2016-02-12 13:14:41 ----A---- C:\Windows\SYSWOW64\glcndFilter.dll
2016-02-12 13:14:39 ----A---- C:\Windows\SYSWOW64\Windows.Data.Pdf.dll
2016-02-12 13:13:55 ----A---- C:\Windows\system32\shell32.dll
2016-02-12 13:13:53 ----A---- C:\Windows\system32\twinui.dll
2016-02-12 13:13:50 ----A---- C:\Windows\SYSWOW64\twinui.dll
2016-02-12 13:13:46 ----A---- C:\Windows\SYSWOW64\shell32.dll
2016-02-12 13:13:45 ----A---- C:\Windows\system32\authui.dll
2016-02-12 13:13:44 ----A---- C:\Windows\SYSWOW64\authui.dll
2016-02-12 13:07:27 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-02-12 13:07:27 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-02-12 13:07:27 ----A---- C:\Windows\system32\ntdll.dll
2016-02-12 13:07:27 ----A---- C:\Windows\system32\KernelBase.dll
2016-02-12 13:07:27 ----A---- C:\Windows\system32\combase.dll
2016-02-12 13:07:26 ----A---- C:\Windows\SYSWOW64\WinTypes.dll
2016-02-12 13:07:26 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-02-12 13:07:26 ----A---- C:\Windows\SYSWOW64\combase.dll
2016-02-12 13:07:26 ----A---- C:\Windows\system32\WinTypes.dll
2016-02-12 13:07:26 ----A---- C:\Windows\system32\microsoft-windows-system-events.dll
2016-02-12 13:07:25 ----A---- C:\Windows\SYSWOW64\wincorlib.dll
2016-02-12 13:07:15 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2016-02-12 13:07:12 ----A---- C:\Windows\SYSWOW64\WinSync.dll
2016-02-12 13:07:12 ----A---- C:\Windows\system32\WinSync.dll
2016-02-12 13:07:10 ----A---- C:\Windows\system32\appraiser.dll
2016-02-12 13:07:09 ----A---- C:\Windows\system32\invagent.dll
2016-02-12 13:07:09 ----A---- C:\Windows\system32\generaltel.dll
2016-02-12 13:07:09 ----A---- C:\Windows\system32\devinv.dll
2016-02-12 13:07:09 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-02-12 13:07:09 ----A---- C:\Windows\system32\aeinv.dll
2016-02-12 13:07:09 ----A---- C:\Windows\system32\acmigration.dll
2016-02-12 13:07:05 ----A---- C:\Windows\system32\win32k.sys
2016-02-12 13:07:03 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-02-12 13:07:03 ----A---- C:\Windows\system32\kerberos.dll
2016-02-12 13:07:02 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-02-12 13:07:02 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-02-12 13:07:02 ----A---- C:\Windows\system32\msv1_0.dll
2016-02-12 13:07:02 ----A---- C:\Windows\system32\lsasrv.dll
2016-02-12 13:07:02 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-02-12 13:07:02 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-02-12 13:07:02 ----A---- C:\Windows\system32\dpapisrv.dll
2016-02-12 13:07:02 ----A---- C:\Windows\system32\certcli.dll
2016-02-12 13:06:43 ----A---- C:\Windows\system32\jscript9.dll
2016-02-12 13:06:41 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-02-12 13:06:40 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-02-12 13:06:40 ----A---- C:\Windows\system32\wininet.dll
2016-02-12 13:06:39 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-02-12 13:06:39 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-02-12 13:06:39 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-02-12 13:06:39 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-02-12 13:06:39 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2016-02-12 13:06:39 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-02-12 13:06:39 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-02-12 13:06:39 ----A---- C:\Windows\SYSWOW64\hlink.dll
2016-02-12 13:06:39 ----A---- C:\Windows\system32\webcheck.dll
2016-02-12 13:06:39 ----A---- C:\Windows\system32\vbscript.dll
2016-02-12 13:06:39 ----A---- C:\Windows\system32\msfeeds.dll
2016-02-12 13:06:39 ----A---- C:\Windows\system32\jscript.dll
2016-02-12 13:06:39 ----A---- C:\Windows\system32\inetcomm.dll
2016-02-12 13:06:39 ----A---- C:\Windows\system32\iedkcs32.dll
2016-02-12 13:06:39 ----A---- C:\Windows\system32\ieapfltr.dll
2016-02-12 13:06:39 ----A---- C:\Windows\system32\ie4uinit.exe
2016-02-12 13:06:39 ----A---- C:\Windows\system32\hlink.dll
2016-02-12 13:06:39 ----A---- C:\Windows\system32\actxprxy.dll
2016-02-12 13:06:33 ----A---- C:\Windows\system32\rdpudd.dll
2016-02-12 13:06:33 ----A---- C:\Windows\system32\rdpcorets.dll
2016-02-12 13:06:30 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2016-02-12 13:06:30 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2016-02-12 13:06:30 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2016-02-12 13:06:30 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2016-02-12 13:06:30 ----A---- C:\Windows\system32\wuwebv.dll
2016-02-12 13:06:30 ----A---- C:\Windows\system32\WUSettingsProvider.dll
2016-02-12 13:06:30 ----A---- C:\Windows\system32\wudriver.dll
2016-02-12 13:06:30 ----A---- C:\Windows\system32\wucltux.dll
2016-02-12 13:06:30 ----A---- C:\Windows\system32\wuaueng.dll
2016-02-12 13:06:30 ----A---- C:\Windows\system32\wuauclt.exe
2016-02-12 13:06:30 ----A---- C:\Windows\system32\wuapp.exe
2016-02-12 13:06:30 ----A---- C:\Windows\system32\wuapi.dll
2016-02-12 13:02:37 ----A---- C:\Windows\system32\drivers\TrueSight.sys
2016-02-12 13:02:32 ----D---- C:\ProgramData\RogueKiller
2016-01-22 17:55:54 ----D---- C:\Users\Pavel\AppData\Roaming\RotMG.Production
======List of files/folders modified in the last 1 month======
2016-02-20 11:07:23 ----D---- C:\Windows\Prefetch
2016-02-20 11:07:21 ----SHD---- C:\System Volume Information
2016-02-20 11:07:08 ----RD---- C:\Program Files
2016-02-20 11:05:19 ----D---- C:\ProgramData\Origin
2016-02-20 11:05:14 ----D---- C:\Program Files (x86)\Steam
2016-02-20 11:03:50 ----D---- C:\Windows\Temp
2016-02-20 11:00:00 ----D---- C:\Windows\system32\sru
2016-02-19 21:26:12 ----D---- C:\Windows\Microsoft.NET
2016-02-18 20:03:07 ----SHD---- C:\Windows\Installer
2016-02-18 20:02:53 ----D---- C:\Windows\SysWOW64
2016-02-17 16:42:45 ----D---- C:\Windows\system32\config
2016-02-16 18:04:59 ----D---- C:\Program Files (x86)\Origin
2016-02-16 17:14:01 ----D---- C:\Windows
2016-02-16 17:13:48 ----RD---- C:\Windows\System32
2016-02-16 17:12:40 ----D---- C:\Windows\debug
2016-02-12 17:45:36 ----D---- C:\Windows\Inf
2016-02-12 17:45:36 ----D---- C:\ProgramData\Package Cache
2016-02-12 14:56:13 ----D---- C:\Windows\Panther
2016-02-12 14:56:13 ----D---- C:\Windows\Logs
2016-02-12 14:53:41 ----RD---- C:\Program Files (x86)
2016-02-12 14:53:40 ----D---- C:\Windows\system32\drivers
2016-02-12 14:36:45 ----RSD---- C:\Windows\assembly
2016-02-12 14:24:29 ----D---- C:\Windows\rescache
2016-02-12 14:12:04 ----RD---- C:\Windows\Offline Web Pages
2016-02-12 14:11:39 ----D---- C:\Users\Pavel\AppData\Roaming\msct
2016-02-12 13:49:55 ----HD---- C:\ProgramData
2016-02-12 13:43:16 ----D---- C:\Windows\WinSxS
2016-02-12 13:39:56 ----D---- C:\Windows\system32\appraiser
2016-02-12 13:39:56 ----D---- C:\Windows\apppatch
2016-02-12 13:39:55 ----RD---- C:\Windows\ToastData
2016-02-12 13:39:55 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-02-12 13:39:55 ----D---- C:\Windows\system32\cs-CZ
2016-02-12 13:39:54 ----D---- C:\Windows\system32\wbem
2016-02-12 13:39:54 ----D---- C:\Program Files\Windows Journal
2016-02-12 13:39:53 ----D---- C:\Program Files\Internet Explorer
2016-02-12 13:39:53 ----D---- C:\Program Files (x86)\Internet Explorer
2016-02-12 13:32:05 ----D---- C:\Windows\AppReadiness
2016-02-12 13:32:04 ----HD---- C:\Program Files\WindowsApps
2016-02-12 13:31:59 ----D---- C:\Windows\CbsTemp
2016-02-12 13:26:00 ----D---- C:\Windows\system32\MRT
2016-02-12 13:23:21 ----D---- C:\Windows\Tasks
2016-02-12 13:22:11 ----A---- C:\Windows\system32\MRT.exe
2016-02-12 13:20:58 ----D---- C:\Windows\system32\catroot2
2016-02-12 13:03:15 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-02-06 19:48:51 ----D---- C:\Program Files (x86)\Origin Games
2016-02-02 03:37:41 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 SymEFASI;Symantec Extended File Attributes (SI); C:\Windows\system32\drivers\NISx64\1605050.00F\SYMEFASI64.SYS [2015-11-12 1621232]
R0 Wof;Windows Overlay File System Filter Driver; C:\Windows\system32\drivers\Wof.sys [2014-11-21 157016]
R1 adgnetworkwfpdrv;adgnetworkwfpdrv; C:\Windows\system32\drivers\adgnetworkwfpdrv.sys [2015-06-02 55800]
R1 BHDrvx64;BHDrvx64; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.4.24\Definitions\BASHDefs\20160213.003\BHDrvx64.sys [2015-10-08 1665608]
R1 ccSet_NIS;NIS Settings Manager; C:\Windows\system32\drivers\NISx64\1605050.00F\ccSetx64.sys [2015-09-23 173808]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2015-11-18 498512]
R1 IDSVia64;IDSVia64; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.4.24\Definitions\IPSDefs\20160219.001\IDSvia64.sys [2016-02-13 767224]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\NISx64\1605050.00F\SRTSPX64.SYS [2015-09-23 50936]
R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\NISx64\1605050.00F\Ironx64.SYS [2015-09-23 297720]
R1 SymNetS;Symantec Network Security WFP Driver; C:\Windows\System32\Drivers\NISx64\1605050.00F\SYMNETS.SYS [2015-11-12 577768]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2015-04-24 18959360]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2015-04-24 589312]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2015-11-18 157520]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport – ovladač pro řadič Qualcomm Atheros AR81xx PCI-E Ethernet; C:\Windows\system32\DRIVERS\L1C63x64.sys [2013-06-18 129224]
R3 NAVENG;NAVENG; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.4.24\Definitions\VirusDefs\20160219.020\ENG64.SYS [2015-12-22 138488]
R3 NAVEX15;NAVEX15; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.4.24\Definitions\VirusDefs\20160219.020\EX64.SYS [2015-12-22 2148080]
R3 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\System32\Drivers\NISx64\1605050.00F\SRTSP64.SYS [2015-11-12 928496]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [2015-10-05 111344]
S0 SymELAM;Symantec ELAM Driver; C:\Windows\system32\drivers\NISx64\1605050.00F\SymELAM.sys [2015-09-23 24192]
S3 WUDFSensorLP;@locationprovider.inf,%WudfLocationProviderDisplayName%;Služba Reflektor UMDF pro zprostředkovatele umístění (LocationProvider); C:\Windows\system32\DRIVERS\WUDFRd.sys [2014-11-21 226304]
S3 WUDFWpdFs;WUDFWpdFs; C:\Windows\system32\DRIVERS\WUDFRd.sys [2014-11-21 226304]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-13 82128]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2015-04-24 244736]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2014-11-21 38792]
R2 NIS;Norton Internet Security; C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\NIS.exe [2015-11-20 282016]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2015-11-12 76888]
R2 PnkBstrB;PnkBstrB; C:\Windows\syswow64\PnkBstrB.exe [2015-11-12 189248]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-02-04 835152]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-06 144200]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2014-11-21 38792]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-06 144200]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2016-02-02 2104840]
-----------------EOF-----------------