VIRY.CZ

Logfile of random's system information tool 1.10 (written by random/random)
Run by User at 2016-09-15 11:45:50
Microsoft® Windows Vista™ Business Service Pack 2
System drive C: has 12 GB (17%) free of 73 GB
Total RAM: 1791 MB (11% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:46:22, on 15.9.2016
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16811)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\TeamViewer\TeamViewer.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\Taskmgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\User\Desktop\RSIT.exe
C:\Program Files\trend micro\User.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://cs.intl.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://cs.intl.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - (no file)
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: Start Remote Administrator server.lnk = C:\Windows\System32\r_server.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O16 - DPF: {361E6B79-4A69-4376-B0F2-3D1EBEE9D7E2} (RtspVaPgCtrl Class) - http://193.85.210.249/RtspVaPgDec.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://81.200.53.163:7000/activex/AMC.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B21F97F4-3C3D-43C8-AB3E-336CC85C1399}: NameServer = 10.0.0.11
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer\TeamViewer_Service.exe
O23 - Service: uvnc_service - UltraVNC - C:\Program Files\UltraVNC\WinVNC.exe

--
End of file - 4774 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\jj6fe4no.default

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 23.0.0.162 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_23_0_0_162.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\jj6fe4no.default\extensions\
7go@7go.com

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-02-15 4390912]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FreeCall]
C:\Program Files\FreeCall.com\FreeCall\FreeCall.exe -nosplash -minimized []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe
Start Remote Administrator server.lnk - C:\Windows\System32\r_server.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"VIDC.I420"=MSH263.DRV
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"msacm.voxacm160"=vct3216.acm
"msacm.scg726"=scg726.acm
"msacm.alf2cd"=alf2cd.acm
"msacm.ac3acm"=AC3ACM.acm
"vidc.dvsd"=mcdvd_32.dll
"vidc.xvid"=xvidvfw.dll
"vidc.DIVX"=DivX.dll
"vidc.mpg4"=mpg4c32.dll
"vidc.mp42"=mpg4c32.dll
"vidc.mp43"=mpg4c32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-09-15 11:45:51 ----D---- C:\Program Files\trend micro
2016-09-15 11:45:50 ----D---- C:\rsit
2016-08-18 03:00:58 ----A---- C:\Windows\system32\tzres.dll
2016-08-17 03:05:42 ----A---- C:\Windows\system32\win32k.sys
2016-08-16 03:36:04 ----A---- C:\Windows\system32\mshta.exe
2016-08-16 03:36:03 ----A---- C:\Windows\system32\vbscript.dll
2016-08-16 03:36:02 ----A---- C:\Windows\system32\urlmon.dll
2016-08-16 03:36:02 ----A---- C:\Windows\system32\msfeedssync.exe
2016-08-16 03:36:02 ----A---- C:\Windows\system32\msfeedsbs.dll
2016-08-16 03:36:02 ----A---- C:\Windows\system32\msfeeds.dll
2016-08-16 03:36:00 ----A---- C:\Windows\system32\ieUnatt.exe
2016-08-16 03:35:59 ----A---- C:\Windows\system32\jsproxy.dll
2016-08-16 03:35:59 ----A---- C:\Windows\system32\dxtmsft.dll
2016-08-16 03:35:56 ----A---- C:\Windows\system32\jscript.dll
2016-08-16 03:35:54 ----A---- C:\Windows\system32\url.dll
2016-08-16 03:35:54 ----A---- C:\Windows\system32\iertutil.dll
2016-08-16 03:35:53 ----A---- C:\Windows\system32\wininet.dll
2016-08-16 03:35:53 ----A---- C:\Windows\system32\mshtmled.dll
2016-08-16 03:35:53 ----A---- C:\Windows\system32\jscript9.dll
2016-08-16 03:35:52 ----A---- C:\Windows\system32\ieframe.dll
2016-08-16 03:35:49 ----A---- C:\Windows\system32\ieui.dll
2016-08-16 03:35:49 ----A---- C:\Windows\system32\dxtrans.dll
2016-08-16 03:35:46 ----A---- C:\Windows\system32\mshtml.dll

======List of files/folders modified in the last 1 month======

2016-09-15 11:45:51 ----RD---- C:\Program Files
2016-09-15 11:45:28 ----D---- C:\Windows\Temp
2016-09-15 11:39:47 ----D---- C:\Windows\Prefetch
2016-09-15 11:38:14 ----D---- C:\Windows\SoftwareDistribution
2016-09-15 11:37:52 ----D---- C:\Windows\inf
2016-09-15 11:37:52 ----D---- C:\Windows\Debug
2016-09-15 11:37:52 ----D---- C:\Windows
2016-09-15 11:31:31 ----D---- C:\Program Files\Spybot - Search & Destroy 2
2016-09-15 11:28:36 ----A---- C:\Windows\wininit.ini
2016-09-15 11:28:35 ----SD---- C:\ProgramData\Microsoft
2016-09-15 11:28:35 ----D---- C:\Windows\System32
2016-09-15 11:28:35 ----D---- C:\ProgramData\Spybot - Search & Destroy
2016-09-15 11:28:29 ----D---- C:\Windows\Tasks
2016-09-15 11:06:40 ----D---- C:\Windows\system32\Tasks
2016-09-14 04:14:43 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2016-09-14 04:14:31 ----D---- C:\Windows\system32\Macromed
2016-09-12 14:34:28 ----SHD---- C:\System Volume Information
2016-09-12 14:08:23 ----D---- C:\Windows\rescache
2016-09-12 13:52:40 ----D---- C:\Windows\system32\catroot2
2016-09-02 04:42:58 ----D---- C:\Program Files\TeamViewer
2016-09-01 11:29:02 ----D---- C:\Program Files\NetBet Poker
2016-08-18 03:02:47 ----D---- C:\Windows\winsxs
2016-08-18 03:02:47 ----D---- C:\Windows\system32\cs-CZ
2016-08-18 03:02:20 ----D---- C:\Windows\system32\catroot
2016-08-17 03:32:40 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-08-17 03:22:37 ----D---- C:\Windows\system32\migration
2016-08-17 03:22:37 ----D---- C:\Program Files\Internet Explorer

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2016-03-16 71488]
R0 nvstor32;nvstor32; C:\Windows\system32\drivers\nvstor32.sys [2006-12-11 97576]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2016-03-16 206312]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2015-12-19 146024]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2016-03-16 152728]
R1 EpfwLWF;ESET Personal Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2016-03-16 44608]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [2015-12-19 111040]
R2 int15;int15; \??\C:\Windows\system32\drivers\int15.sys [2006-11-27 69632]
R3 CA561;VideoCAM Express V2; C:\Windows\System32\Drivers\SPCA561.SYS [2002-09-30 119798]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-02-14 1740904]
R3 mv2;mv2; C:\Windows\system32\DRIVERS\mv2.sys [2009-04-01 12096]
R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys [2006-01-04 6144]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-06-20 7468128]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2008-01-19 9216]
R3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136]
R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2006-11-09 194560]
S2 netlimiter;netlimiter; \??\C:\Windows\system32\drivers\netlimiter.sys []
S2 osaio;osaio; \??\C:\Windows\system32\drivers\osaio.sys []
S3 avchv;avchv Function Driver; C:\Windows\system32\DRIVERS\avchv.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2008-02-22 47360]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-09-24 81088]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2016-07-14 1983264]
R2 eRecoveryService;eRecovery Service; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [2006-12-28 49152]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-12-14 61440]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-06-20 118784]
R2 TeamViewer;TeamViewer 10; C:\Program Files\TeamViewer\TeamViewer_Service.exe [2015-09-11 5702416]
R2 uvnc_service;uvnc_service; C:\Program Files\UltraVNC\WinVNC.exe [2009-08-16 1589704]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-08 144200]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-09-14 270016]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-08 144200]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2016-07-12 146888]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2014-04-12 772296]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2014-04-12 45744]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

# AdwCleaner v6.020 - Log soubor vytvořen 20/09/2016 na 08:52:11
# Aktualizováno dne 14/09/2016 z ToolsLib
# Databáze : 2016-09-20.1 [Server]
# Operační systém : Windows Vista (TM) Business Service Pack 2 (X86)
# Uživatelské jméno : User - USER-PC
# Beží od : C:\Users\User\Desktop\adwcleaner_6.020.exe
# Mod: Čištění
# Podpora : https://toolslib.net/forum



***** [ Služby ] *****



***** [ Adresáře ] *****

[-] Adresář smazán:C:\Users\User\AppData\Local\VideoDownloadConverter_4z
[-] Adresář smazán:C:\Program Files\VideoDownloadConverter_4z
[#] Adresář nelze smazat:C:\Users\User\AppData\Local\VideoDownloadConverter_4z
[#] Adresář nelze smazat:C:\Program Files\VideoDownloadConverter_4z
[-] Adresář smazán:C:\Users\User\AppData\Local\iac
[#] Adresář nelze smazat:C:\Users\User\AppData\Local\IAC
[-] Adresář smazán:C:\Users\User\AppData\Roaming\PerformerSoft
[-] Adresář smazán:C:\Users\User\AppData\Roaming\SeeSimilar02
[-] Adresář smazán:C:\ProgramData\IBUpdaterService
[#] Adresář nelze smazat:C:\ProgramData\Application Data\IBUpdaterService
[-] Adresář smazán:C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\jj6fe4no.default\extensions\7go@7go.com
[-] Adresář smazán:C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dgjkhjdcljddbedokogakmmdjgnbeanf
[-] Adresář smazán:C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gjajpkikblccgefaibcafkfbanllpefi


***** [ Soubory ] *****

[-] Soubor smazán:C:\Program Files\Yahoo!\Common\unyt.exe
[-] Soubor smazán:C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dgjkhjdcljddbedokogakmmdjgnbeanf_0.localstorage
[-] Soubor smazán:C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gjajpkikblccgefaibcafkfbanllpefi_0.localstorage


***** [ DLL ] *****



***** [ WMI ] *****



***** [ Zástupce ] *****



***** [ Plánovač úloh ] *****



***** [ Registry ] *****

[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.DynamicBarButton
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.DynamicBarButton.1
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.FeedManager
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.FeedManager.1
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLMenu
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLMenu.1
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLPanel
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLPanel.1
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.MultipleButton
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.MultipleButton.1
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.PseudoTransparentPlugin
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.PseudoTransparentPlugin.1
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.Radio
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.Radio.1
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.RadioSettings
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.RadioSettings.1
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ScriptButton
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ScriptButton.1
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ThirdPartyInstaller
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ThirdPartyInstaller.1
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ToolbarProtector
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ToolbarProtector.1
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.UrlAlertButton
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.UrlAlertButton.1
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.XMLSessionPlugin
[-] Klíč smazán:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.XMLSessionPlugin.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.DynamicBarButton
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.DynamicBarButton.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.FeedManager
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.FeedManager.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLMenu
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLMenu.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLPanel
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLPanel.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.MultipleButton
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.MultipleButton.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.PseudoTransparentPlugin
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.PseudoTransparentPlugin.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.Radio
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.Radio.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.RadioSettings
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.RadioSettings.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ScriptButton
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ScriptButton.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ThirdPartyInstaller
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ThirdPartyInstaller.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ToolbarProtector
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ToolbarProtector.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.UrlAlertButton
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.UrlAlertButton.1
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.XMLSessionPlugin
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.XMLSessionPlugin.1
[-] Klíč smazán:HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2d9083ce-8758-4704-ba57-3c891d7452bd}
[-] Klíč smazán:HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3d429207-4689-492d-a0e5-cdc5dfbb5005}
[-] Klíč smazán:HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{66d59105-fe06-43a4-b292-eb0097e9eb74}
[-] Klíč smazán:HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9103c314-c4e2-4463-8934-b19bcb46236d}
[-] Klíč smazán:HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{97cef41c-5055-474a-855a-892d4fe3e596}
[-] Klíč smazán:HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d375ee64-f893-498a-a0e9-0e9829c88c3d}
[#] Klíč smazán po restartování:{2D3826A1-F3E8-45D6-94B5-C26D8EC0073B}
[#] Klíč smazán po restartování:{37923200-6887-4B44-95D4-CAE8F83ECFEE}
[#] Klíč smazán po restartování:{3EE17DD1-E28B-4AED-A3B2-9C29CB2C19D6}
[#] Klíč smazán po restartování:{79332472-47F3-4E32-B07F-CF8DF4C58499}
[#] Klíč smazán po restartování:{886F93AD-3CBB-4424-8442-A7340243540F}
[#] Klíč smazán po restartování:{AA289DBC-59B6-40A5-AC7D-C90DF850289C}
[#] Klíč smazán po restartování:{BC153A3C-0BB7-4EED-83AE-28E6E398F56E}
[#] Klíč smazán po restartování:{CA723163-6FAD-43D4-8B93-0D8C52BD9974}
[#] Klíč smazán po restartování:{F1F328EB-F5A5-432B-A54C-05F3EF5B0BD8}
[#] Klíč smazán po restartování:{FB0E8A09-F08C-44CF-9E15-97ADAC016248}
[#] Klíč smazán po restartování:{FE8DBB09-C3D3-4477-80CB-D38914B94BB8}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{17B10E59-09E1-4C39-A738-6774D7AB7778}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{2D9083CE-8758-4704-BA57-3C891D7452BD}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{34AD1EA7-8B9E-4D8B-B3ED-365D12C8EE73}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{35144E32-8E4C-4152-9B8C-3E2D4B46228E}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{35BBB95B-2CE4-4A9E-BDED-50EFD632AC00}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{3E9469AF-E866-4476-B767-810630F1F6E7}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{46CE5380-6055-4C3A-A7E5-3A02A2335C61}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{4F6ECF71-C575-4BD2-8EF7-548D0EF1AB1D}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{54D99BE4-2FD7-449E-9DB4-76532CEE0B16}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{5684EAE9-72EB-4CA6-83B8-82434B7E955C}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{716E443D-7CAA-44F1-866B-F45D00E712CC}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{72063D77-7590-4DA9-A7F8-F5ECAF3632C4}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{7FC87AC5-FA93-476E-A32C-A941229DED0B}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{7FCD22A8-B70A-4AC7-AAF1-EBCCD2F6612D}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{8B8BB3A7-2ADE-4995-931D-60B430A9B44E}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{8FDA7A57-D1A8-4A62-A643-B85FDC116212}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{93F0AC70-20D8-4AE8-A02F-6812EFFB6B58}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{A266567F-8E5D-480C-BCE2-C360FA669FD5}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{CE4F67F6-4FD4-49DB-9D71-713CCD3D00CD}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{E14CDC24-4BE1-4B65-8452-4BFA0DCEF274}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Interface\{ECC69F9E-5456-4EDF-AF66-1A9DED11F9EE}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\Prod.cap
[-] Klíč smazán:HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}
[#] Klíč smazán po restartování:HKLM\SOFTWARE\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\TypeLib\{2D3826A1-F3E8-45D6-94B5-C26D8EC0073B}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\TypeLib\{F1F328EB-F5A5-432B-A54C-05F3EF5B0BD8}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\TypeLib\{FB0E8A09-F08C-44CF-9E15-97ADAC016248}
[-] Klíč smazán:HKLM\SOFTWARE\Classes\TypeLib\{FE8DBB09-C3D3-4477-80CB-D38914B94BB8}
[-] Klíč smazán:HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{38122A36-83B2-46B8-B39A-EC72A4614A07}
[-] Klíč smazán:HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}
[-] Klíč smazán:HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{38122A36-83B2-46B8-B39A-EC72A4614A07}
[-] Klíč smazán:HKU\S-1-5-21-3562173187-2575733966-3390058566-1000\Software\filescout
[-] Klíč smazán:HKU\S-1-5-21-3562173187-2575733966-3390058566-1000\Software\Yahoo\Companion
[-] Klíč smazán:HKU\S-1-5-21-3562173187-2575733966-3390058566-1000\Software\Yahoo\YFriendsBar
[-] Klíč smazán:HKU\S-1-5-21-3562173187-2575733966-3390058566-1000\Software\YahooPartnerToolbar
[-] Klíč smazán:HKU\S-1-5-21-3562173187-2575733966-3390058566-1000\Software\AppDataLow\Software\adawarebp
[-] Klíč smazán:HKU\S-1-5-21-3562173187-2575733966-3390058566-1000\Software\AppDataLow\Software\Yahoo\Companion
[#] Klíč smazán po restartování:HKCU\Software\filescout
[#] Klíč smazán po restartování:HKCU\Software\Yahoo\Companion
[#] Klíč smazán po restartování:HKCU\Software\Yahoo\YFriendsBar
[#] Klíč smazán po restartování:HKCU\Software\YahooPartnerToolbar
[#] Klíč smazán po restartování:HKCU\Software\AppDataLow\Software\adawarebp
[#] Klíč smazán po restartování:HKCU\Software\AppDataLow\Software\Yahoo\Companion
[-] Klíč smazán:HKLM\SOFTWARE\AppDataLow\SOFTWARE\Yahoo\Companion
[-] Klíč smazán:HKLM\SOFTWARE\Yahoo\Companion
[-] Klíč smazán:HKU\S-1-5-21-3562173187-2575733966-3390058566-1000\Software\Microsoft\Internet Explorer\SearchScopes\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}
[#] Klíč smazán po restartování:HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}
[-] Klíč smazán:HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}
[-] Klíč smazán:HKLM\SOFTWARE\Google\Chrome\Extensions\gjajpkikblccgefaibcafkfbanllpefi


***** [ Prohlížeče ] *****

[-] Firefox nastavení vyčištěno:"extensions.xpiState" - "{\"app-profile\":{\"7go@7go.com\":{\"d\":\"C:\\\\Users\\\\User\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\jj6fe4no.default\\\\extensions\\\\7go@7go.com\",\"e\":false,\"v\":\"1.0.0.0\",\"st\":1377429228559,\"mt\":1377429228559}},\"app-system-addons\":{\"e10srollout@mozilla.org\":{\"d\":\"C:\\\\Users\\\\User\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\jj6fe4no.default\\\\features\\\\{f1e40b6a-dae4-4404-8dae-f5b7a26752d2}\\\\e10srollout@mozilla.org.xpi\",\"e\":true,\"v\":\"1.0\",\"st\":1468991047221},\"firefox@getpocket.com\":{\"d\":\"C:\\\\Users\\\\User\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\jj6fe4no.default\\\\features\\\\{f1e40b6a-dae4-4404-8dae-f5b7a26752d2}\\\\firefox@getpocket.com.xpi\",\"e\":true,\"v\":\"1.0.2\",\"st\":1468991049117},\"loop@mozilla.org\":{\"d\":\"C:\\\\Users\\\\User\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\jj6fe4no.default\\\\features\\\\{f1e40b6a-dae4-4404-8dae-f5b7a26752d2}\\\\loop@mozilla.org.xpi\",\"e\":true,\"v\":\"1.4.2\",\"st\":1468991050092}},\"app-system-defaults\":{\"e10srollout@mozilla.org\":{\"d\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\browser\\\\features\\\\e10srollout@mozilla.org.xpi\",\"e\":false,\"v\":\"1.0\",\"st\":1468301977722},\"firefox@getpocket.com\":{\"d\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\browser\\\\features\\\\firefox@getpocket.com.xpi\",\"e\":false,\"v\":\"1.0.2\",\"st\":1468301977664},\"loop@mozilla.org\":{\"d\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\browser\\\\features\\\\loop@mozilla.org.xpi\",\"e\":false,\"v\":\"1.3.2\",\"st\":1468301977529}},\"app-global\":{\"{972ce4c6-7e08-4474-a285-3208198ce6fd}\":{\"d\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\browser\\\\extensions\\\\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi\",\"e\":true,\"v\":\"47.0.1\",\"st\":1468301977726}},\"winreg-app-global\":{\"{20a82645-c095-46ed-80e3-08825760534b}\":{\"d\":\"C:\\\\Windows\\\\Microsoft.NET\\\\Framework\\\\v3.5\\\\Windows Presentation Foundation\\\\DotNetAssistantExtension\",\"e\":false,\"v\":\"0.0.0\",\"st\":1250091089201,\"mt\":1232707720000}}}"
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazání:dts.search-results.com
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazání:search.sweetim.com
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazání:mystart.incredibar.com
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazání:klit.startnow.com
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazání:ask.com
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazání:www1.delta-search.com
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Smazání:delta-search.com
[-] [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default] [homepage] Smazání:hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=04A60019212B741E&affID=119654&tsp=4985


*************************

:: "Tracing" klíč smazán
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [16895 Bajtů] - [20/09/2016 08:52:11]
C:\AdwCleaner\AdwCleaner[S0].txt - [14008 Bajtů] - [20/09/2016 08:37:41]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [17045 Bajtů] ##########

Dejte nový log RSIT.

Logfile of random's system information tool 1.10 (written by random/random)
Run by User at 2016-09-21 08:37:15
Microsoft® Windows Vista™ Business Service Pack 2
System drive C: has 12 GB (16%) free of 73 GB
Total RAM: 1791 MB (15% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:37:39, on 21.9.2016
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16819)
Boot mode: Normal

Running processes:
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\TeamViewer\TeamViewer.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Users\User\Desktop\RSIT.exe
C:\Program Files\trend micro\User.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://cs.intl.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://cs.intl.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - (no file)
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: Start Remote Administrator server.lnk = C:\Windows\System32\r_server.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O16 - DPF: {361E6B79-4A69-4376-B0F2-3D1EBEE9D7E2} (RtspVaPgCtrl Class) - http://193.85.210.249/RtspVaPgDec.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://81.200.53.163:7000/activex/AMC.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B21F97F4-3C3D-43C8-AB3E-336CC85C1399}: NameServer = 10.0.0.11
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer\TeamViewer_Service.exe
O23 - Service: uvnc_service - UltraVNC - C:\Program Files\UltraVNC\WinVNC.exe

--
End of file - 4699 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\jj6fe4no.default

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 23.0.0.162 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_23_0_0_162.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.50709.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-02-15 4390912]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FreeCall]
C:\Program Files\FreeCall.com\FreeCall\FreeCall.exe -nosplash -minimized []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe
Start Remote Administrator server.lnk - C:\Windows\System32\r_server.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"VIDC.I420"=MSH263.DRV
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"msacm.voxacm160"=vct3216.acm
"msacm.scg726"=scg726.acm
"msacm.alf2cd"=alf2cd.acm
"msacm.ac3acm"=AC3ACM.acm
"vidc.dvsd"=mcdvd_32.dll
"vidc.xvid"=xvidvfw.dll
"vidc.DIVX"=DivX.dll
"vidc.mpg4"=mpg4c32.dll
"vidc.mp42"=mpg4c32.dll
"vidc.mp43"=mpg4c32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-09-21 08:16:44 ----A---- C:\Windows\system32\oleaut32.dll
2016-09-21 08:15:49 ----A---- C:\Windows\system32\tzres.dll
2016-09-21 04:37:55 ----A---- C:\Windows\system32\msfeedssync.exe
2016-09-21 04:37:54 ----A---- C:\Windows\system32\urlmon.dll
2016-09-21 04:37:54 ----A---- C:\Windows\system32\msfeedsbs.dll
2016-09-21 04:37:52 ----A---- C:\Windows\system32\vbscript.dll
2016-09-21 04:37:52 ----A---- C:\Windows\system32\mshta.exe
2016-09-21 04:37:52 ----A---- C:\Windows\system32\msfeeds.dll
2016-09-21 04:37:52 ----A---- C:\Windows\system32\jsproxy.dll
2016-09-21 04:37:52 ----A---- C:\Windows\system32\dxtrans.dll
2016-09-21 04:37:51 ----A---- C:\Windows\system32\iertutil.dll
2016-09-21 04:37:50 ----A---- C:\Windows\system32\wininet.dll
2016-09-21 04:37:50 ----A---- C:\Windows\system32\url.dll
2016-09-21 04:37:50 ----A---- C:\Windows\system32\jscript.dll
2016-09-21 04:37:50 ----A---- C:\Windows\system32\ieUnatt.exe
2016-09-21 04:37:50 ----A---- C:\Windows\system32\ieui.dll
2016-09-21 04:37:50 ----A---- C:\Windows\system32\dxtmsft.dll
2016-09-21 04:37:49 ----A---- C:\Windows\system32\ieframe.dll
2016-09-21 04:37:45 ----A---- C:\Windows\system32\mshtmled.dll
2016-09-21 04:37:44 ----A---- C:\Windows\system32\jscript9.dll
2016-09-21 04:37:43 ----A---- C:\Windows\system32\mshtml.dll
2016-09-21 03:11:40 ----A---- C:\Windows\system32\ncrypt.dll
2016-09-21 03:11:29 ----A---- C:\Windows\system32\schannel.dll
2016-09-21 03:11:29 ----A---- C:\Windows\system32\bcrypt.dll
2016-09-21 03:10:38 ----A---- C:\Windows\system32\netevent.dll
2016-09-21 03:10:29 ----A---- C:\Windows\system32\drivers\srvnet.sys
2016-09-21 03:10:29 ----A---- C:\Windows\system32\drivers\srv2.sys
2016-09-21 03:10:29 ----A---- C:\Windows\system32\drivers\srv.sys
2016-09-21 03:06:50 ----A---- C:\Windows\system32\user32.dll
2016-09-21 03:06:49 ----A---- C:\Windows\system32\win32k.sys
2016-09-21 03:03:57 ----A---- C:\Windows\system32\csrsrv.dll
2016-09-21 03:03:56 ----A---- C:\Windows\system32\ntkrnlpa.exe
2016-09-21 03:03:55 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-09-20 08:12:24 ----D---- C:\AdwCleaner
2016-09-15 11:45:51 ----D---- C:\Program Files\trend micro
2016-09-15 11:45:50 ----D---- C:\rsit

======List of files/folders modified in the last 1 month======

2016-09-21 08:37:26 ----D---- C:\Windows\Prefetch
2016-09-21 08:20:05 ----D---- C:\Windows\Temp
2016-09-21 08:19:10 ----D---- C:\Windows\system32\cs-CZ
2016-09-21 08:19:10 ----D---- C:\Windows\System32
2016-09-21 08:19:09 ----D---- C:\Windows\system32\migration
2016-09-21 08:19:08 ----D---- C:\Program Files\Internet Explorer
2016-09-21 08:16:52 ----D---- C:\Windows\winsxs
2016-09-21 08:16:50 ----D---- C:\Windows\system32\catroot
2016-09-21 08:14:23 ----SHD---- C:\System Volume Information
2016-09-21 04:58:07 ----D---- C:\Windows\rescache
2016-09-21 04:33:10 ----D---- C:\Program Files\Microsoft Silverlight
2016-09-21 04:30:09 ----D---- C:\Windows\system32\drivers
2016-09-21 03:19:37 ----D---- C:\Windows\system32\MRT
2016-09-21 03:19:35 ----D---- C:\Windows\Debug
2016-09-21 03:17:01 ----AC---- C:\Windows\system32\mrt.exe
2016-09-21 03:12:26 ----D---- C:\Windows\system32\catroot2
2016-09-21 03:10:26 ----SHD---- C:\Windows\Installer
2016-09-21 03:10:25 ----SHD---- C:\Config.Msi
2016-09-21 03:02:59 ----D---- C:\Program Files\Windows Journal
2016-09-20 09:00:41 ----D---- C:\Windows\inf
2016-09-20 08:55:55 ----D---- C:\Windows
2016-09-20 08:48:54 ----HD---- C:\ProgramData
2016-09-20 08:43:17 ----RD---- C:\Program Files
2016-09-15 11:38:14 ----D---- C:\Windows\SoftwareDistribution
2016-09-15 11:31:31 ----D---- C:\Program Files\Spybot - Search & Destroy 2
2016-09-15 11:28:36 ----A---- C:\Windows\wininit.ini
2016-09-15 11:28:35 ----SD---- C:\ProgramData\Microsoft
2016-09-15 11:28:35 ----D---- C:\ProgramData\Spybot - Search & Destroy
2016-09-15 11:28:29 ----D---- C:\Windows\Tasks
2016-09-15 11:06:40 ----D---- C:\Windows\system32\Tasks
2016-09-14 04:14:43 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2016-09-14 04:14:31 ----D---- C:\Windows\system32\Macromed
2016-09-02 04:42:58 ----D---- C:\Program Files\TeamViewer
2016-09-01 11:29:02 ----D---- C:\Program Files\NetBet Poker

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2016-03-16 71488]
R0 nvstor32;nvstor32; C:\Windows\system32\drivers\nvstor32.sys [2006-12-11 97576]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2016-03-16 206312]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2015-12-19 146024]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2016-03-16 152728]
R1 EpfwLWF;ESET Personal Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2016-03-16 44608]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [2015-12-19 111040]
R2 int15;int15; \??\C:\Windows\system32\drivers\int15.sys [2006-11-27 69632]
R3 CA561;VideoCAM Express V2; C:\Windows\System32\Drivers\SPCA561.SYS [2002-09-30 119798]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-02-14 1740904]
R3 mv2;mv2; C:\Windows\system32\DRIVERS\mv2.sys [2009-04-01 12096]
R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys [2006-01-04 6144]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-06-20 7468128]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2008-01-19 9216]
R3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136]
R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2006-11-09 194560]
S2 netlimiter;netlimiter; \??\C:\Windows\system32\drivers\netlimiter.sys []
S2 osaio;osaio; \??\C:\Windows\system32\drivers\osaio.sys []
S3 avchv;avchv Function Driver; C:\Windows\system32\DRIVERS\avchv.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2008-02-22 47360]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-09-24 81088]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2016-07-14 1983264]
R2 eRecoveryService;eRecovery Service; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [2006-12-28 49152]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-12-14 61440]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-06-20 118784]
R2 TeamViewer;TeamViewer 10; C:\Program Files\TeamViewer\TeamViewer_Service.exe [2015-09-11 5702416]
R2 uvnc_service;uvnc_service; C:\Program Files\UltraVNC\WinVNC.exe [2009-08-16 1589704]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-08 144200]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-09-14 270016]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-08 144200]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2016-07-12 146888]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2014-04-12 772296]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2014-04-12 45744]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Logfile of random's system information tool 1.10 (written by random/random)
Run by User at 2016-09-22 08:27:00
Microsoft® Windows Vista™ Business Service Pack 2
System drive C: has 14 GB (20%) free of 73 GB
Total RAM: 1791 MB (39% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:27:08, on 22.9.2016
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16819)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\TeamViewer\TeamViewer.exe
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\User\Desktop\RSIT.exe
C:\Program Files\trend micro\User.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://cs.intl.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://cs.intl.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: Start Remote Administrator server.lnk = C:\Windows\System32\r_server.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O16 - DPF: {361E6B79-4A69-4376-B0F2-3D1EBEE9D7E2} (RtspVaPgCtrl Class) - http://193.85.210.249/RtspVaPgDec.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://81.200.53.163:7000/activex/AMC.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B21F97F4-3C3D-43C8-AB3E-336CC85C1399}: NameServer = 10.0.0.11
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer\TeamViewer_Service.exe
O23 - Service: uvnc_service - UltraVNC - C:\Program Files\UltraVNC\WinVNC.exe

--
End of file - 4551 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\jj6fe4no.default

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 23.0.0.162 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_23_0_0_162.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.50709.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-02-15 4390912]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FreeCall]
C:\Program Files\FreeCall.com\FreeCall\FreeCall.exe -nosplash -minimized []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe
Start Remote Administrator server.lnk - C:\Windows\System32\r_server.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"VIDC.I420"=MSH263.DRV
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"msacm.voxacm160"=vct3216.acm
"msacm.scg726"=scg726.acm
"msacm.alf2cd"=alf2cd.acm
"msacm.ac3acm"=AC3ACM.acm
"vidc.dvsd"=mcdvd_32.dll
"vidc.xvid"=xvidvfw.dll
"vidc.DIVX"=DivX.dll
"vidc.mpg4"=mpg4c32.dll
"vidc.mp42"=mpg4c32.dll
"vidc.mp43"=mpg4c32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-09-22 08:17:37 ----D---- C:\_OTM
2016-09-21 08:16:44 ----A---- C:\Windows\system32\oleaut32.dll
2016-09-21 08:15:49 ----A---- C:\Windows\system32\tzres.dll
2016-09-21 04:37:55 ----A---- C:\Windows\system32\msfeedssync.exe
2016-09-21 04:37:54 ----A---- C:\Windows\system32\urlmon.dll
2016-09-21 04:37:54 ----A---- C:\Windows\system32\msfeedsbs.dll
2016-09-21 04:37:52 ----A---- C:\Windows\system32\vbscript.dll
2016-09-21 04:37:52 ----A---- C:\Windows\system32\mshta.exe
2016-09-21 04:37:52 ----A---- C:\Windows\system32\msfeeds.dll
2016-09-21 04:37:52 ----A---- C:\Windows\system32\jsproxy.dll
2016-09-21 04:37:52 ----A---- C:\Windows\system32\dxtrans.dll
2016-09-21 04:37:51 ----A---- C:\Windows\system32\iertutil.dll
2016-09-21 04:37:50 ----A---- C:\Windows\system32\wininet.dll
2016-09-21 04:37:50 ----A---- C:\Windows\system32\url.dll
2016-09-21 04:37:50 ----A---- C:\Windows\system32\jscript.dll
2016-09-21 04:37:50 ----A---- C:\Windows\system32\ieUnatt.exe
2016-09-21 04:37:50 ----A---- C:\Windows\system32\ieui.dll
2016-09-21 04:37:50 ----A---- C:\Windows\system32\dxtmsft.dll
2016-09-21 04:37:49 ----A---- C:\Windows\system32\ieframe.dll
2016-09-21 04:37:45 ----A---- C:\Windows\system32\mshtmled.dll
2016-09-21 04:37:44 ----A---- C:\Windows\system32\jscript9.dll
2016-09-21 04:37:43 ----A---- C:\Windows\system32\mshtml.dll
2016-09-21 03:11:40 ----A---- C:\Windows\system32\ncrypt.dll
2016-09-21 03:11:29 ----A---- C:\Windows\system32\schannel.dll
2016-09-21 03:11:29 ----A---- C:\Windows\system32\bcrypt.dll
2016-09-21 03:10:38 ----A---- C:\Windows\system32\netevent.dll
2016-09-21 03:10:29 ----A---- C:\Windows\system32\drivers\srvnet.sys
2016-09-21 03:10:29 ----A---- C:\Windows\system32\drivers\srv2.sys
2016-09-21 03:10:29 ----A---- C:\Windows\system32\drivers\srv.sys
2016-09-21 03:06:50 ----A---- C:\Windows\system32\user32.dll
2016-09-21 03:06:49 ----A---- C:\Windows\system32\win32k.sys
2016-09-21 03:03:57 ----A---- C:\Windows\system32\csrsrv.dll
2016-09-21 03:03:56 ----A---- C:\Windows\system32\ntkrnlpa.exe
2016-09-21 03:03:55 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-09-20 08:12:24 ----D---- C:\AdwCleaner
2016-09-15 11:45:51 ----D---- C:\Program Files\trend micro
2016-09-15 11:45:50 ----D---- C:\rsit

======List of files/folders modified in the last 1 month======

2016-09-22 08:27:08 ----D---- C:\Windows\Prefetch
2016-09-22 08:19:32 ----D---- C:\Windows\Temp
2016-09-22 08:17:40 ----D---- C:\Windows\Tasks
2016-09-22 00:07:25 ----SHD---- C:\System Volume Information
2016-09-21 08:47:15 ----D---- C:\Windows\rescache
2016-09-21 08:19:10 ----D---- C:\Windows\system32\cs-CZ
2016-09-21 08:19:10 ----D---- C:\Windows\System32
2016-09-21 08:19:09 ----D---- C:\Windows\system32\migration
2016-09-21 08:19:08 ----D---- C:\Program Files\Internet Explorer
2016-09-21 08:16:52 ----D---- C:\Windows\winsxs
2016-09-21 08:16:50 ----D---- C:\Windows\system32\catroot
2016-09-21 04:33:10 ----D---- C:\Program Files\Microsoft Silverlight
2016-09-21 04:30:09 ----D---- C:\Windows\system32\drivers
2016-09-21 04:13:48 ----D---- C:\Windows\system32\MRT
2016-09-21 03:19:35 ----D---- C:\Windows\Debug
2016-09-21 03:17:01 ----AC---- C:\Windows\system32\mrt.exe
2016-09-21 03:12:26 ----D---- C:\Windows\system32\catroot2
2016-09-21 03:10:26 ----SHD---- C:\Windows\Installer
2016-09-21 03:10:25 ----SHD---- C:\Config.Msi
2016-09-21 03:02:59 ----D---- C:\Program Files\Windows Journal
2016-09-20 09:00:41 ----D---- C:\Windows\inf
2016-09-20 08:55:55 ----D---- C:\Windows
2016-09-20 08:48:54 ----HD---- C:\ProgramData
2016-09-20 08:43:17 ----RD---- C:\Program Files
2016-09-15 11:38:14 ----D---- C:\Windows\SoftwareDistribution
2016-09-15 11:31:31 ----D---- C:\Program Files\Spybot - Search & Destroy 2
2016-09-15 11:28:36 ----A---- C:\Windows\wininit.ini
2016-09-15 11:28:35 ----SD---- C:\ProgramData\Microsoft
2016-09-15 11:28:35 ----D---- C:\ProgramData\Spybot - Search & Destroy
2016-09-15 11:06:40 ----D---- C:\Windows\system32\Tasks
2016-09-14 04:14:43 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2016-09-14 04:14:31 ----D---- C:\Windows\system32\Macromed
2016-09-02 04:42:58 ----D---- C:\Program Files\TeamViewer
2016-09-01 11:29:02 ----D---- C:\Program Files\NetBet Poker

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2016-03-16 71488]
R0 nvstor32;nvstor32; C:\Windows\system32\drivers\nvstor32.sys [2006-12-11 97576]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2016-03-16 206312]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2015-12-19 146024]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2016-03-16 152728]
R1 EpfwLWF;ESET Personal Firewall; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2016-03-16 44608]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [2015-12-19 111040]
R2 int15;int15; \??\C:\Windows\system32\drivers\int15.sys [2006-11-27 69632]
R3 CA561;VideoCAM Express V2; C:\Windows\System32\Drivers\SPCA561.SYS [2002-09-30 119798]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-02-14 1740904]
R3 mv2;mv2; C:\Windows\system32\DRIVERS\mv2.sys [2009-04-01 12096]
R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys [2006-01-04 6144]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-06-20 7468128]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2008-01-19 9216]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560]
R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2006-11-09 194560]
S2 netlimiter;netlimiter; \??\C:\Windows\system32\drivers\netlimiter.sys []
S2 osaio;osaio; \??\C:\Windows\system32\drivers\osaio.sys []
S3 avchv;avchv Function Driver; C:\Windows\system32\DRIVERS\avchv.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2008-02-22 47360]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-09-24 81088]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2016-07-14 1983264]
R2 eRecoveryService;eRecovery Service; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [2006-12-28 49152]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-12-14 61440]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-06-20 118784]
R2 TeamViewer;TeamViewer 10; C:\Program Files\TeamViewer\TeamViewer_Service.exe [2015-09-11 5702416]
R2 uvnc_service;uvnc_service; C:\Program Files\UltraVNC\WinVNC.exe [2009-08-16 1589704]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-08 144200]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-09-14 270016]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-08 144200]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2016-07-12 146888]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2014-04-12 772296]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2014-04-12 45744]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------

Smazáno. Nastala nějaká změna?

Při nečinosti na PC jede CPU zhruba na 15 procent při prohlížení netu jede zhruba na 80 procent občas vyskoči na 100, znatelně je počítač ted rychlejší. Děkuji za pomoc

Když je třeba, může vyskočit i na 100%, zvláště tehdy, máte-li k dispozici pouze 1,7GB RAM. Nemáte zač!