VIRY.CZ

Dobry den,moc prosim o kontrolu logu,je to mamky notebook a posledni dobou se hodne zpomalil a hlavně vyskakujou nějaky tabulky,nebo zamrzne a musi se vypnout natvrdo,nevim co to hlasí pač mi nedokáže popsat co to dělá,děkuji a přeji pěkny den


Logfile of random's system information tool 1.10 (written by random/random)
Run by Hanka at 2016-10-30 12:36:56
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 427 GB (90%) free of 477 GB
Total RAM: 2781 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:36:59, on 30.10.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18500)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Users\Hanka\Downloads\RSIT.exe
C:\Program Files\trend micro\Hanka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll
O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AtherosSvc - Qualcomm Atheros Commnucations - C:\Program Files\Bluetooth Suite\adminservice.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @C:\Windows\system32\CxAudMsg32.exe,-100 (CxAudMsg) - Conexant Systems Inc. - C:\Windows\system32\CxAudMsg32.exe
O23 - Service: Conexant SmartAudio service (SAService) - Conexant Systems, Inc. - C:\Windows\system32\SAsrv.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: ZAtheros Bt and Wlan Coex Agent - Atheros - C:\Program Files\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 4003 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Hanka\AppData\Roaming\Mozilla\Firefox\Profiles\gig5thmf.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/?clid=22668"
prefs.js - "keyword.URL" - "http://search.seznam.cz/?sourceid=quick ... earchTerms}&"

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
"sp@avast.com"=C:\Program Files\AVAST Software\Avast\SafePrice\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 23.0.0.185 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_23_0_0_185.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp]
"Description"=
"Path"=C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf]
"Description"=
"Path"=C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


C:\Users\Hanka\AppData\Roaming\Mozilla\Firefox\Profiles\gig5thmf.default\searchplugins\
seznam-avast.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24 664848]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-10-27 9099440]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2016-09-12 29635712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\331BigDog]
C:\Program Files\USB Camera\VM331STI.EXE [2013-03-02 552960]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppEx Accelerator UI]
C:\Program Files\AMD Quick Stream\AMDQuickStream.exe [2013-02-08 320224]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cAudioFilterAgent]
C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent.exe [2013-02-04 843360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dolby Advanced Audio v2]
C:\Program Files\Dolby Advanced Audio v2\pcee4.exe [2012-08-31 508144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NoIE4StubProcessing]
C:\Windows\system32\reg.exe [2009-07-14 62464]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NUSB3MON]
C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2011-09-16 115048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmartAudio]
C:\Program Files\CONEXANT\SAII\SACpl.exe [2013-03-05 1647616]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2013-03-22 642656]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Hanka^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
C:\PROGRA~1\MICROS~1\Office12\ONENOTEM.EXE [2009-02-26 97680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"DisableCAD"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-10-30 12:28:01 ----D---- C:\Program Files\trend micro
2016-10-30 12:28:00 ----D---- C:\rsit
2016-10-30 12:10:00 ----A---- C:\Windows\ntbtlog.txt
2016-10-21 19:55:43 ----D---- C:\Program Files\Mozilla Firefox
2016-10-17 16:07:29 ----D---- C:\Program Files\Common Files\Skype
2016-10-11 19:07:16 ----A---- C:\Windows\system32\devinv.dll
2016-10-11 19:07:16 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-10-11 19:07:16 ----A---- C:\Windows\system32\appraiser.dll
2016-10-11 19:07:16 ----A---- C:\Windows\system32\aeinv.dll
2016-10-11 19:07:16 ----A---- C:\Windows\system32\acmigration.dll
2016-10-11 19:07:15 ----A---- C:\Windows\system32\invagent.dll
2016-10-11 19:07:15 ----A---- C:\Windows\system32\generaltel.dll
2016-10-11 19:07:15 ----A---- C:\Windows\system32\centel.dll
2016-10-11 19:07:15 ----A---- C:\Windows\system32\aepic.dll
2016-10-11 19:07:13 ----A---- C:\Windows\system32\poqexec.exe
2016-10-11 19:07:04 ----A---- C:\Windows\system32\mshtml.dll
2016-10-11 19:07:02 ----A---- C:\Windows\system32\wmp.dll
2016-10-11 19:07:01 ----A---- C:\Windows\system32\ieframe.dll
2016-10-11 19:07:00 ----A---- C:\Windows\system32\jscript9.dll
2016-10-11 19:06:59 ----A---- C:\Windows\system32\wininet.dll
2016-10-11 19:06:59 ----A---- C:\Windows\system32\mf.dll
2016-10-11 19:06:59 ----A---- C:\Windows\system32\drmv2clt.dll
2016-10-11 19:06:59 ----A---- C:\Windows\system32\blackbox.dll
2016-10-11 19:06:58 ----A---- C:\Windows\system32\WsmSvc.dll
2016-10-11 19:06:58 ----A---- C:\Windows\system32\wmdrmsdk.dll
2016-10-11 19:06:58 ----A---- C:\Windows\system32\urlmon.dll
2016-10-11 19:06:58 ----A---- C:\Windows\system32\scavengeui.dll
2016-10-11 19:06:58 ----A---- C:\Windows\system32\quartz.dll
2016-10-11 19:06:58 ----A---- C:\Windows\system32\iertutil.dll
2016-10-11 19:06:58 ----A---- C:\Windows\system32\evr.dll
2016-10-11 19:06:57 ----A---- C:\Windows\system32\WsmWmiPl.dll
2016-10-11 19:06:57 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2016-10-11 19:06:57 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
2016-10-11 19:06:57 ----A---- C:\Windows\system32\vbscript.dll
2016-10-11 19:06:57 ----A---- C:\Windows\system32\qdvd.dll
2016-10-11 19:06:57 ----A---- C:\Windows\system32\MSVidCtl.dll
2016-10-11 19:06:57 ----A---- C:\Windows\system32\msfeeds.dll
2016-10-11 19:06:57 ----A---- C:\Windows\system32\lsasrv.dll
2016-10-11 19:06:57 ----A---- C:\Windows\system32\drmmgrtn.dll
2016-10-11 19:06:57 ----A---- C:\Windows\system32\cryptui.dll
2016-10-11 19:06:57 ----A---- C:\Windows\system32\audiosrv.dll
2016-10-11 19:06:57 ----A---- C:\Windows\system32\AUDIOKSE.dll
2016-10-11 19:06:57 ----A---- C:\Windows\system32\AudioEng.dll
2016-10-11 19:06:56 ----A---- C:\Windows\system32\WsmAuto.dll
2016-10-11 19:06:56 ----A---- C:\Windows\system32\pcasvc.dll
2016-10-11 19:06:56 ----A---- C:\Windows\system32\ntkrnlpa.exe
2016-10-11 19:06:56 ----A---- C:\Windows\system32\mfplat.dll
2016-10-11 19:06:56 ----A---- C:\Windows\system32\EncDump.dll
2016-10-11 19:06:56 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2016-10-11 19:06:56 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2016-10-11 19:06:56 ----A---- C:\Windows\system32\AudioSes.dll
2016-10-11 19:06:55 ----A---- C:\Windows\system32\wmploc.DLL
2016-10-11 19:06:55 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-10-11 19:06:55 ----A---- C:\Windows\system32\FntCache.dll
2016-10-11 19:06:55 ----A---- C:\Windows\system32\DWrite.dll
2016-10-11 19:06:54 ----A---- C:\Windows\system32\inetcomm.dll
2016-10-11 19:06:54 ----A---- C:\Windows\system32\iedkcs32.dll
2016-10-11 19:06:54 ----A---- C:\Windows\system32\drivers\dfsc.sys
2016-10-11 19:06:54 ----A---- C:\Windows\system32\cryptsp.dll
2016-10-11 19:06:53 ----A---- C:\Windows\system32\win32k.sys
2016-10-11 19:06:53 ----A---- C:\Windows\system32\ntdll.dll
2016-10-11 19:06:53 ----A---- C:\Windows\system32\mfps.dll
2016-10-11 19:06:52 ----A---- C:\Windows\system32\WebClnt.dll
2016-10-11 19:06:52 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-10-11 19:06:52 ----A---- C:\Windows\system32\msscp.dll
2016-10-11 19:06:52 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-10-11 19:06:52 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2016-10-11 19:06:52 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-10-11 19:06:52 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-10-11 19:06:52 ----A---- C:\Windows\system32\audiodg.exe
2016-10-11 19:06:52 ----A---- C:\Windows\system32\adsmsext.dll
2016-10-11 19:06:51 ----A---- C:\Windows\system32\rrinstaller.exe
2016-10-11 19:06:51 ----A---- C:\Windows\system32\pcadm.dll
2016-10-11 19:06:51 ----A---- C:\Windows\system32\msnetobj.dll
2016-10-11 19:06:51 ----A---- C:\Windows\system32\mfpmp.exe
2016-10-11 19:06:51 ----A---- C:\Windows\system32\ie4uinit.exe
2016-10-11 19:06:50 ----A---- C:\Windows\system32\wsmprovhost.exe
2016-10-11 19:06:50 ----A---- C:\Windows\system32\wsmplpxy.dll
2016-10-11 19:06:50 ----A---- C:\Windows\system32\spwmp.dll
2016-10-11 19:06:50 ----A---- C:\Windows\system32\pcawrk.exe
2016-10-11 19:06:50 ----A---- C:\Windows\system32\pcalua.exe
2016-10-11 19:06:50 ----A---- C:\Windows\system32\msmmsp.dll
2016-10-11 19:06:50 ----A---- C:\Windows\system32\jscript.dll
2016-10-11 19:06:50 ----A---- C:\Windows\system32\INETRES.dll
2016-10-11 19:06:50 ----A---- C:\Windows\system32\davclnt.dll
2016-10-11 19:06:49 ----A---- C:\Windows\system32\WsmRes.dll
2016-10-11 19:06:49 ----A---- C:\Windows\system32\webcheck.dll
2016-10-11 19:06:49 ----A---- C:\Windows\system32\pcaevts.dll
2016-10-11 19:06:49 ----A---- C:\Windows\system32\mferror.dll
2016-10-11 19:06:49 ----A---- C:\Windows\system32\ieui.dll
2016-10-11 19:06:49 ----A---- C:\Windows\system32\ieapfltr.dll
2016-10-11 19:06:49 ----A---- C:\Windows\system32\dxmasf.dll
2016-10-11 19:06:48 ----A---- C:\Windows\system32\rpcrt4.dll
2016-10-11 19:06:48 ----A---- C:\Windows\system32\occache.dll
2016-10-11 19:06:48 ----A---- C:\Windows\system32\msrating.dll
2016-10-11 19:06:48 ----A---- C:\Windows\system32\mshtmled.dll
2016-10-11 19:06:48 ----A---- C:\Windows\system32\kerberos.dll
2016-10-11 19:06:48 ----A---- C:\Windows\system32\jsproxy.dll
2016-10-11 19:06:48 ----A---- C:\Windows\system32\jscript9diag.dll
2016-10-11 19:06:48 ----A---- C:\Windows\system32\ieUnatt.exe
2016-10-11 19:06:48 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-10-11 19:06:48 ----A---- C:\Windows\system32\dxtrans.dll
2016-10-11 19:06:48 ----A---- C:\Windows\system32\dxtmsft.dll
2016-10-11 19:06:48 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-10-11 19:06:47 ----A---- C:\Windows\system32\wdigest.dll
2016-10-11 19:06:47 ----A---- C:\Windows\system32\smss.exe
2016-10-11 19:06:47 ----A---- C:\Windows\system32\schannel.dll
2016-10-11 19:06:47 ----A---- C:\Windows\system32\msv1_0.dll
2016-10-11 19:06:47 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-10-11 19:06:47 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-10-11 19:06:47 ----A---- C:\Windows\system32\inseng.dll
2016-10-11 19:06:47 ----A---- C:\Windows\system32\iesetup.dll
2016-10-11 19:06:47 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-10-11 19:06:47 ----A---- C:\Windows\system32\advapi32.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\wintrust.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\TSpkg.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\sspisrv.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\sspicli.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\srcore.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\secur32.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\rpchttp.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\ncrypt.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\lsass.exe
2016-10-11 19:06:46 ----A---- C:\Windows\system32\iernonce.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-10-11 19:06:46 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-10-11 19:06:46 ----A---- C:\Windows\system32\cryptsvc.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\cryptnet.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\cryptbase.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\crypt32.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\credssp.dll
2016-10-11 19:06:45 ----A---- C:\Windows\system32\apisetschema.dll
2016-10-11 19:06:44 ----A---- C:\Windows\system32\srclient.dll
2016-10-11 19:06:44 ----A---- C:\Windows\system32\drivers\appid.sys
2016-10-11 19:06:44 ----A---- C:\Windows\system32\csrsrv.dll
2016-10-11 19:06:43 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-10-11 19:06:43 ----A---- C:\Windows\system32\rstrui.exe
2016-10-11 19:06:43 ----A---- C:\Windows\system32\msobjs.dll
2016-10-11 19:06:43 ----A---- C:\Windows\system32\msaudite.dll
2016-10-11 19:06:43 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-10-11 19:06:43 ----A---- C:\Windows\system32\auditpol.exe
2016-10-11 19:06:43 ----A---- C:\Windows\system32\appidsvc.dll
2016-10-11 19:06:43 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-10-11 19:06:43 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-10-11 19:06:43 ----A---- C:\Windows\system32\appidapi.dll
2016-10-11 19:06:43 ----A---- C:\Windows\system32\adtschema.dll
2016-10-11 19:06:02 ----A---- C:\Windows\system32\shell32.dll
2016-10-11 19:06:02 ----A---- C:\Windows\explorer.exe
2016-10-11 19:06:01 ----A---- C:\Windows\system32\ExplorerFrame.dll
2016-10-11 19:06:01 ----A---- C:\Windows\system32\authui.dll
2016-10-11 19:05:59 ----A---- C:\Windows\system32\drivers\usbport.sys
2016-10-11 19:05:59 ----A---- C:\Windows\system32\drivers\usbhub.sys
2016-10-11 19:05:59 ----A---- C:\Windows\system32\drivers\usbehci.sys
2016-10-11 19:05:58 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2016-10-11 19:05:58 ----A---- C:\Windows\system32\drivers\usbohci.sys
2016-10-11 19:05:58 ----A---- C:\Windows\system32\drivers\usbd.sys
2016-10-11 19:05:58 ----A---- C:\Windows\system32\drivers\usbccgp.sys

======List of files/folders modified in the last 1 month======

2016-10-30 12:28:01 ----D---- C:\Program Files
2016-10-30 12:27:40 ----D---- C:\Users\Hanka\AppData\Roaming\Skype
2016-10-30 12:21:34 ----D---- C:\Windows\System32
2016-10-30 12:21:34 ----D---- C:\Windows\inf
2016-10-30 12:21:34 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-10-30 12:13:35 ----D---- C:\Windows\Temp
2016-10-30 12:10:00 ----D---- C:\Windows
2016-10-30 10:13:40 ----D---- C:\Windows\system32\config
2016-10-29 19:48:16 ----D---- C:\Windows\system32\drivers
2016-10-29 15:57:10 ----D---- C:\Windows\system32\Macromed
2016-10-26 11:28:58 ----SD---- C:\Windows\system32\Microsoft
2016-10-23 19:50:36 ----HD---- C:\ProgramData
2016-10-23 13:26:36 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2016-10-23 13:22:49 ----D---- C:\Program Files\Mozilla Maintenance Service
2016-10-17 16:07:34 ----SHD---- C:\Windows\Installer
2016-10-17 16:07:29 ----D---- C:\Program Files\Common Files
2016-10-17 16:07:18 ----D---- C:\ProgramData\Skype
2016-10-16 15:51:49 ----D---- C:\AdwCleaner
2016-10-13 20:14:59 ----D---- C:\Windows\rescache
2016-10-13 20:11:30 ----SHD---- C:\System Volume Information
2016-10-13 19:59:24 ----D---- C:\Windows\Microsoft.NET
2016-10-13 19:57:56 ----RSD---- C:\Windows\assembly
2016-10-12 18:45:13 ----D---- C:\Windows\winsxs
2016-10-12 18:25:21 ----SHD---- C:\Boot
2016-10-12 18:25:05 ----D---- C:\Windows\Logs
2016-10-12 18:21:28 ----SD---- C:\Windows\system32\CompatTel
2016-10-12 18:21:28 ----D---- C:\Windows\system32\appraiser
2016-10-12 18:21:26 ----D---- C:\Windows\system32\Dism
2016-10-12 18:21:25 ----D---- C:\Windows\system32\en-US
2016-10-12 18:21:25 ----D---- C:\Windows\system32\cs-CZ
2016-10-12 18:21:23 ----D---- C:\Windows\AppPatch
2016-10-12 18:21:23 ----D---- C:\Program Files\Windows Media Player
2016-10-12 18:21:23 ----D---- C:\Program Files\Internet Explorer
2016-10-12 18:21:22 ----D---- C:\Windows\system32\drivers\cs-CZ
2016-10-12 18:21:22 ----D---- C:\Windows\cs-CZ
2016-10-12 18:21:20 ----D---- C:\Windows\system32\DriverStore
2016-10-12 18:19:06 ----D---- C:\ProgramData\Microsoft Help
2016-10-12 18:11:07 ----D---- C:\Windows\system32\MRT
2016-10-12 18:00:34 ----AC---- C:\Windows\system32\MRT.exe
2016-10-11 19:05:45 ----D---- C:\Windows\system32\catroot2
2016-10-09 15:02:25 ----D---- C:\Program Files\Malwarebytes Anti-Malware

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amd_sata;amd_sata; C:\Windows\system32\DRIVERS\amd_sata.sys [2012-10-12 70824]
R0 amd_xata;amd_xata; C:\Windows\system32\DRIVERS\amd_xata.sys [2012-10-12 34984]
R0 amdkmpfd;AMD PCI Root Bus Lower Filter; C:\Windows\system32\DRIVERS\amdkmpfd.sys [2013-02-14 24672]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2016-09-10 60424]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2016-10-13 224752]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2016-09-10 35096]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2016-09-10 91232]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2016-09-13 735488]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2016-09-22 433768]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 APXACC;AppEx Networks Accelerator LWF; C:\Windows\system32\DRIVERS\appexDrv.sys [2013-03-21 176352]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2016-09-10 92256]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2016-09-10 118664]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\Windows\system32\DRIVERS\AcpiVpc.sys [2012-07-08 26392]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-03-20 9974272]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-03-20 463872]
R3 AthBTPort;Qualcomm Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2013-01-24 80200]
R3 athr;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2012-12-20 3086336]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2013-02-15 79872]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2013-01-24 302920]
R3 btath_avdt;Qualcomm Atheros Bluetooth AVDT Service; C:\Windows\system32\drivers\btath_avdt.sys [2013-01-24 100680]
R3 BTATH_BUS;Qualcomm Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2013-01-24 27976]
R3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2013-01-24 158688]
R3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2013-01-24 66448]
R3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2013-01-24 119264]
R3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2013-01-24 493896]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT32.sys [2013-03-05 1363040]
R3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x86.sys [2012-11-20 100504]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2012-08-29 45736]
R3 vm331avs;Digital Camera 1; C:\Windows\System32\Drivers\vm331avs.sys [2013-03-02 998272]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2016-09-10 34008]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 CH341SER;CH341SER; C:\Windows\System32\Drivers\CH341SER.SYS [2011-11-04 39696]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUVStor.sys [2013-01-16 242760]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 49664]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]
S3 WiseHDInfo;WiseHDInfo; \??\C:\Program Files\Wise\Wise Care 365\WiseHDInfo32.dll []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-03-20 219136]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-03-22 291840]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-09-10 197128]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-11-05 105144]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2016-07-25 324224]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2015-11-05 45744]
S3 AtherosSvc;AtherosSvc; C:\Program Files\Bluetooth Suite\adminservice.exe [2013-01-24 191616]
S3 CxAudMsg;@C:\Windows\system32\CxAudMsg32.exe,-100; C:\Windows\system32\CxAudMsg32.exe [2013-03-05 193696]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-09-30 102912]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 SAService;Conexant SmartAudio service; C:\Windows\system32\SAsrv.exe [2013-03-05 447104]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-10-10 1343400]
S3 ZAtheros Bt and Wlan Coex Agent;ZAtheros Bt and Wlan Coex Agent; C:\Program Files\Bluetooth Suite\Ath_CoexAgent.exe [2013-01-24 323584]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-10-23 270016]
S4 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S4 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2016-10-21 172488]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]

-----------------EOF-----------------

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

děkuji za rady nic to nenašlo

# AdwCleaner v6.030 - Log soubor vytvořen 30/10/2016 na 12:51:27
# Aktualizováno dne 19/10/2016 z Malwarebytes
# Databáze : 2016-10-30.1 [Server]
# Operační systém : Windows 7 Professional Service Pack 1 (X86)
# Uživatelské jméno : Hanka - HANKA-PC
# Beží od : C:\Users\Hanka\Desktop\adwcleaner_6.030.exe
# Mod: Čištění
# Podpora : hxxps://www.malwarebytes.com/support



***** [ Služby ] *****



***** [ Adresáře ] *****



***** [ Soubory ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Zástupce ] *****



***** [ Plánovač úloh ] *****



***** [ Registry ] *****



***** [ Prohlížeče ] *****



*************************

:: "Tracing" klíč smazán
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [815 Bajtů] - [30/10/2016 12:51:27]
C:\AdwCleaner\AdwCleaner[R0].txt - [899 Bajtů] - [14/06/2014 15:02:22]
C:\AdwCleaner\AdwCleaner[R1].txt - [1093 Bajtů] - [03/08/2016 16:38:26]
C:\AdwCleaner\AdwCleaner[S0].txt - [965 Bajtů] - [14/06/2014 15:05:17]
C:\AdwCleaner\AdwCleaner[S1].txt - [1163 Bajtů] - [03/08/2016 16:40:21]
C:\AdwCleaner\AdwCleaner[S2].txt - [1693 Bajtů] - [16/10/2016 15:51:49]
C:\AdwCleaner\AdwCleaner[S3].txt - [1779 Bajtů] - [30/10/2016 12:51:20]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1330 Bajtů] ##########

Toto je OK. Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.

Dobry den omlouvam se ale byl jsem mimo,tady je log ot

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Hanka
->Temp folder emptied: 86346326 bytes
->Temporary Internet Files folder emptied: 7016851 bytes
->FireFox cache emptied: 364712286 bytes
->Flash cache emptied: 51744 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 54460314 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50635 bytes
RecycleBin emptied: 524050183 bytes

Total Files Cleaned = 989,00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Hanka
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 11062016_153239

Files moved on Reboot...
File move failed. C:\Windows\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\opera_installer_20160221171209.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\opera_installer_20160221171210.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\opera_installer_20160221171243.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\safezone_installer_20160910173537.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\safezone_installer_20160910173538.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\safezone_installer_20160910173559.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\safezone_installer_20160920201213.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\safezone_installer_20160920201214.log scheduled to be moved on reboot.
File move failed. C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.

Registry entries deleted on Reboot...

a tady rsit

Logfile of random's system information tool 1.10 (written by random/random)
Run by Hanka at 2016-11-06 15:50:07
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 428 GB (90%) free of 477 GB
Total RAM: 2781 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:51:14, on 6.11.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18500)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Users\Hanka\Downloads\RSIT.exe
C:\Program Files\trend micro\Hanka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll
O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AtherosSvc - Qualcomm Atheros Commnucations - C:\Program Files\Bluetooth Suite\adminservice.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @C:\Windows\system32\CxAudMsg32.exe,-100 (CxAudMsg) - Conexant Systems Inc. - C:\Windows\system32\CxAudMsg32.exe
O23 - Service: Conexant SmartAudio service (SAService) - Conexant Systems, Inc. - C:\Windows\system32\SAsrv.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: ZAtheros Bt and Wlan Coex Agent - Atheros - C:\Program Files\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 4131 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Hanka\AppData\Roaming\Mozilla\Firefox\Profiles\gig5thmf.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/?clid=22668"
prefs.js - "keyword.URL" - "http://search.seznam.cz/?sourceid=quick ... earchTerms}&"

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
"sp@avast.com"=C:\Program Files\AVAST Software\Avast\SafePrice\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 23.0.0.185 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_23_0_0_185.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp]
"Description"=
"Path"=C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf]
"Description"=
"Path"=C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


C:\Users\Hanka\AppData\Roaming\Mozilla\Firefox\Profiles\gig5thmf.default\searchplugins\
seznam-avast.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24 664848]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-10-27 9099440]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2016-09-12 29635712]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\331BigDog]
C:\Program Files\USB Camera\VM331STI.EXE [2013-03-02 552960]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppEx Accelerator UI]
C:\Program Files\AMD Quick Stream\AMDQuickStream.exe [2013-02-08 320224]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cAudioFilterAgent]
C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent.exe [2013-02-04 843360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dolby Advanced Audio v2]
C:\Program Files\Dolby Advanced Audio v2\pcee4.exe [2012-08-31 508144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NoIE4StubProcessing]
C:\Windows\system32\reg.exe [2009-07-14 62464]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NUSB3MON]
C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2011-09-16 115048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmartAudio]
C:\Program Files\CONEXANT\SAII\SACpl.exe [2013-03-05 1647616]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2013-03-22 642656]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Hanka^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
C:\PROGRA~1\MICROS~1\Office12\ONENOTEM.EXE [2009-02-26 97680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"DisableCAD"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-11-06 15:32:39 ----D---- C:\_OTM
2016-10-30 12:28:01 ----D---- C:\Program Files\trend micro
2016-10-30 12:28:00 ----D---- C:\rsit
2016-10-30 12:10:00 ----A---- C:\Windows\ntbtlog.txt
2016-10-21 19:55:43 ----D---- C:\Program Files\Mozilla Firefox
2016-10-17 16:07:29 ----D---- C:\Program Files\Common Files\Skype
2016-10-11 19:07:16 ----A---- C:\Windows\system32\devinv.dll
2016-10-11 19:07:16 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-10-11 19:07:16 ----A---- C:\Windows\system32\appraiser.dll
2016-10-11 19:07:16 ----A---- C:\Windows\system32\aeinv.dll
2016-10-11 19:07:16 ----A---- C:\Windows\system32\acmigration.dll
2016-10-11 19:07:15 ----A---- C:\Windows\system32\invagent.dll
2016-10-11 19:07:15 ----A---- C:\Windows\system32\generaltel.dll
2016-10-11 19:07:15 ----A---- C:\Windows\system32\centel.dll
2016-10-11 19:07:15 ----A---- C:\Windows\system32\aepic.dll
2016-10-11 19:07:13 ----A---- C:\Windows\system32\poqexec.exe
2016-10-11 19:07:04 ----A---- C:\Windows\system32\mshtml.dll
2016-10-11 19:07:02 ----A---- C:\Windows\system32\wmp.dll
2016-10-11 19:07:01 ----A---- C:\Windows\system32\ieframe.dll
2016-10-11 19:07:00 ----A---- C:\Windows\system32\jscript9.dll
2016-10-11 19:06:59 ----A---- C:\Windows\system32\wininet.dll
2016-10-11 19:06:59 ----A---- C:\Windows\system32\mf.dll
2016-10-11 19:06:59 ----A---- C:\Windows\system32\drmv2clt.dll
2016-10-11 19:06:59 ----A---- C:\Windows\system32\blackbox.dll
2016-10-11 19:06:58 ----A---- C:\Windows\system32\WsmSvc.dll
2016-10-11 19:06:58 ----A---- C:\Windows\system32\wmdrmsdk.dll
2016-10-11 19:06:58 ----A---- C:\Windows\system32\urlmon.dll
2016-10-11 19:06:58 ----A---- C:\Windows\system32\scavengeui.dll
2016-10-11 19:06:58 ----A---- C:\Windows\system32\quartz.dll
2016-10-11 19:06:58 ----A---- C:\Windows\system32\iertutil.dll
2016-10-11 19:06:58 ----A---- C:\Windows\system32\evr.dll
2016-10-11 19:06:57 ----A---- C:\Windows\system32\WsmWmiPl.dll
2016-10-11 19:06:57 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2016-10-11 19:06:57 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
2016-10-11 19:06:57 ----A---- C:\Windows\system32\vbscript.dll
2016-10-11 19:06:57 ----A---- C:\Windows\system32\qdvd.dll
2016-10-11 19:06:57 ----A---- C:\Windows\system32\MSVidCtl.dll
2016-10-11 19:06:57 ----A---- C:\Windows\system32\msfeeds.dll
2016-10-11 19:06:57 ----A---- C:\Windows\system32\lsasrv.dll
2016-10-11 19:06:57 ----A---- C:\Windows\system32\drmmgrtn.dll
2016-10-11 19:06:57 ----A---- C:\Windows\system32\cryptui.dll
2016-10-11 19:06:57 ----A---- C:\Windows\system32\audiosrv.dll
2016-10-11 19:06:57 ----A---- C:\Windows\system32\AUDIOKSE.dll
2016-10-11 19:06:57 ----A---- C:\Windows\system32\AudioEng.dll
2016-10-11 19:06:56 ----A---- C:\Windows\system32\WsmAuto.dll
2016-10-11 19:06:56 ----A---- C:\Windows\system32\pcasvc.dll
2016-10-11 19:06:56 ----A---- C:\Windows\system32\ntkrnlpa.exe
2016-10-11 19:06:56 ----A---- C:\Windows\system32\mfplat.dll
2016-10-11 19:06:56 ----A---- C:\Windows\system32\EncDump.dll
2016-10-11 19:06:56 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2016-10-11 19:06:56 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2016-10-11 19:06:56 ----A---- C:\Windows\system32\AudioSes.dll
2016-10-11 19:06:55 ----A---- C:\Windows\system32\wmploc.DLL
2016-10-11 19:06:55 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-10-11 19:06:55 ----A---- C:\Windows\system32\FntCache.dll
2016-10-11 19:06:55 ----A---- C:\Windows\system32\DWrite.dll
2016-10-11 19:06:54 ----A---- C:\Windows\system32\inetcomm.dll
2016-10-11 19:06:54 ----A---- C:\Windows\system32\iedkcs32.dll
2016-10-11 19:06:54 ----A---- C:\Windows\system32\drivers\dfsc.sys
2016-10-11 19:06:54 ----A---- C:\Windows\system32\cryptsp.dll
2016-10-11 19:06:53 ----A---- C:\Windows\system32\win32k.sys
2016-10-11 19:06:53 ----A---- C:\Windows\system32\ntdll.dll
2016-10-11 19:06:53 ----A---- C:\Windows\system32\mfps.dll
2016-10-11 19:06:52 ----A---- C:\Windows\system32\WebClnt.dll
2016-10-11 19:06:52 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-10-11 19:06:52 ----A---- C:\Windows\system32\msscp.dll
2016-10-11 19:06:52 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-10-11 19:06:52 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2016-10-11 19:06:52 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-10-11 19:06:52 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-10-11 19:06:52 ----A---- C:\Windows\system32\audiodg.exe
2016-10-11 19:06:52 ----A---- C:\Windows\system32\adsmsext.dll
2016-10-11 19:06:51 ----A---- C:\Windows\system32\rrinstaller.exe
2016-10-11 19:06:51 ----A---- C:\Windows\system32\pcadm.dll
2016-10-11 19:06:51 ----A---- C:\Windows\system32\msnetobj.dll
2016-10-11 19:06:51 ----A---- C:\Windows\system32\mfpmp.exe
2016-10-11 19:06:51 ----A---- C:\Windows\system32\ie4uinit.exe
2016-10-11 19:06:50 ----A---- C:\Windows\system32\wsmprovhost.exe
2016-10-11 19:06:50 ----A---- C:\Windows\system32\wsmplpxy.dll
2016-10-11 19:06:50 ----A---- C:\Windows\system32\spwmp.dll
2016-10-11 19:06:50 ----A---- C:\Windows\system32\pcawrk.exe
2016-10-11 19:06:50 ----A---- C:\Windows\system32\pcalua.exe
2016-10-11 19:06:50 ----A---- C:\Windows\system32\msmmsp.dll
2016-10-11 19:06:50 ----A---- C:\Windows\system32\jscript.dll
2016-10-11 19:06:50 ----A---- C:\Windows\system32\INETRES.dll
2016-10-11 19:06:50 ----A---- C:\Windows\system32\davclnt.dll
2016-10-11 19:06:49 ----A---- C:\Windows\system32\WsmRes.dll
2016-10-11 19:06:49 ----A---- C:\Windows\system32\webcheck.dll
2016-10-11 19:06:49 ----A---- C:\Windows\system32\pcaevts.dll
2016-10-11 19:06:49 ----A---- C:\Windows\system32\mferror.dll
2016-10-11 19:06:49 ----A---- C:\Windows\system32\ieui.dll
2016-10-11 19:06:49 ----A---- C:\Windows\system32\ieapfltr.dll
2016-10-11 19:06:49 ----A---- C:\Windows\system32\dxmasf.dll
2016-10-11 19:06:48 ----A---- C:\Windows\system32\rpcrt4.dll
2016-10-11 19:06:48 ----A---- C:\Windows\system32\occache.dll
2016-10-11 19:06:48 ----A---- C:\Windows\system32\msrating.dll
2016-10-11 19:06:48 ----A---- C:\Windows\system32\mshtmled.dll
2016-10-11 19:06:48 ----A---- C:\Windows\system32\kerberos.dll
2016-10-11 19:06:48 ----A---- C:\Windows\system32\jsproxy.dll
2016-10-11 19:06:48 ----A---- C:\Windows\system32\jscript9diag.dll
2016-10-11 19:06:48 ----A---- C:\Windows\system32\ieUnatt.exe
2016-10-11 19:06:48 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-10-11 19:06:48 ----A---- C:\Windows\system32\dxtrans.dll
2016-10-11 19:06:48 ----A---- C:\Windows\system32\dxtmsft.dll
2016-10-11 19:06:48 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-10-11 19:06:47 ----A---- C:\Windows\system32\wdigest.dll
2016-10-11 19:06:47 ----A---- C:\Windows\system32\smss.exe
2016-10-11 19:06:47 ----A---- C:\Windows\system32\schannel.dll
2016-10-11 19:06:47 ----A---- C:\Windows\system32\msv1_0.dll
2016-10-11 19:06:47 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-10-11 19:06:47 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-10-11 19:06:47 ----A---- C:\Windows\system32\inseng.dll
2016-10-11 19:06:47 ----A---- C:\Windows\system32\iesetup.dll
2016-10-11 19:06:47 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-10-11 19:06:47 ----A---- C:\Windows\system32\advapi32.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\wintrust.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\TSpkg.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\sspisrv.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\sspicli.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\srcore.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\secur32.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\rpchttp.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\ncrypt.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\lsass.exe
2016-10-11 19:06:46 ----A---- C:\Windows\system32\iernonce.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-10-11 19:06:46 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-10-11 19:06:46 ----A---- C:\Windows\system32\cryptsvc.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\cryptnet.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\cryptbase.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\crypt32.dll
2016-10-11 19:06:46 ----A---- C:\Windows\system32\credssp.dll
2016-10-11 19:06:45 ----A---- C:\Windows\system32\apisetschema.dll
2016-10-11 19:06:44 ----A---- C:\Windows\system32\srclient.dll
2016-10-11 19:06:44 ----A---- C:\Windows\system32\drivers\appid.sys
2016-10-11 19:06:44 ----A---- C:\Windows\system32\csrsrv.dll
2016-10-11 19:06:43 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-10-11 19:06:43 ----A---- C:\Windows\system32\rstrui.exe
2016-10-11 19:06:43 ----A---- C:\Windows\system32\msobjs.dll
2016-10-11 19:06:43 ----A---- C:\Windows\system32\msaudite.dll
2016-10-11 19:06:43 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-10-11 19:06:43 ----A---- C:\Windows\system32\auditpol.exe
2016-10-11 19:06:43 ----A---- C:\Windows\system32\appidsvc.dll
2016-10-11 19:06:43 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-10-11 19:06:43 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-10-11 19:06:43 ----A---- C:\Windows\system32\appidapi.dll
2016-10-11 19:06:43 ----A---- C:\Windows\system32\adtschema.dll
2016-10-11 19:06:02 ----A---- C:\Windows\system32\shell32.dll
2016-10-11 19:06:02 ----A---- C:\Windows\explorer.exe
2016-10-11 19:06:01 ----A---- C:\Windows\system32\ExplorerFrame.dll
2016-10-11 19:06:01 ----A---- C:\Windows\system32\authui.dll
2016-10-11 19:05:59 ----A---- C:\Windows\system32\drivers\usbport.sys
2016-10-11 19:05:59 ----A---- C:\Windows\system32\drivers\usbhub.sys
2016-10-11 19:05:59 ----A---- C:\Windows\system32\drivers\usbehci.sys
2016-10-11 19:05:58 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2016-10-11 19:05:58 ----A---- C:\Windows\system32\drivers\usbohci.sys
2016-10-11 19:05:58 ----A---- C:\Windows\system32\drivers\usbd.sys
2016-10-11 19:05:58 ----A---- C:\Windows\system32\drivers\usbccgp.sys

======List of files/folders modified in the last 1 month======

2016-11-06 15:49:52 ----D---- C:\Windows\System32
2016-11-06 15:49:52 ----D---- C:\Windows\inf
2016-11-06 15:49:52 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-11-06 15:49:40 ----D---- C:\Windows\Temp
2016-11-06 15:46:50 ----D---- C:\Users\Hanka\AppData\Roaming\Skype
2016-11-06 15:36:58 ----D---- C:\Windows\system32\drivers
2016-11-06 15:29:34 ----D---- C:\Windows\system32\config
2016-11-05 14:23:50 ----D---- C:\Windows\system32\Macromed
2016-10-31 18:44:42 ----HD---- C:\ProgramData
2016-10-30 12:51:27 ----D---- C:\AdwCleaner
2016-10-30 12:28:01 ----D---- C:\Program Files
2016-10-30 12:10:00 ----D---- C:\Windows
2016-10-26 11:28:58 ----SD---- C:\Windows\system32\Microsoft
2016-10-23 13:26:36 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2016-10-23 13:22:49 ----D---- C:\Program Files\Mozilla Maintenance Service
2016-10-17 16:07:34 ----SHD---- C:\Windows\Installer
2016-10-17 16:07:29 ----D---- C:\Program Files\Common Files
2016-10-17 16:07:18 ----D---- C:\ProgramData\Skype
2016-10-13 20:14:59 ----D---- C:\Windows\rescache
2016-10-13 20:11:30 ----SHD---- C:\System Volume Information
2016-10-13 19:59:24 ----D---- C:\Windows\Microsoft.NET
2016-10-13 19:57:56 ----RSD---- C:\Windows\assembly
2016-10-12 18:45:13 ----D---- C:\Windows\winsxs
2016-10-12 18:25:21 ----SHD---- C:\Boot
2016-10-12 18:25:05 ----D---- C:\Windows\Logs
2016-10-12 18:21:28 ----SD---- C:\Windows\system32\CompatTel
2016-10-12 18:21:28 ----D---- C:\Windows\system32\appraiser
2016-10-12 18:21:26 ----D---- C:\Windows\system32\Dism
2016-10-12 18:21:25 ----D---- C:\Windows\system32\en-US
2016-10-12 18:21:25 ----D---- C:\Windows\system32\cs-CZ
2016-10-12 18:21:23 ----D---- C:\Windows\AppPatch
2016-10-12 18:21:23 ----D---- C:\Program Files\Windows Media Player
2016-10-12 18:21:23 ----D---- C:\Program Files\Internet Explorer
2016-10-12 18:21:22 ----D---- C:\Windows\system32\drivers\cs-CZ
2016-10-12 18:21:22 ----D---- C:\Windows\cs-CZ
2016-10-12 18:21:20 ----D---- C:\Windows\system32\DriverStore
2016-10-12 18:19:06 ----D---- C:\ProgramData\Microsoft Help
2016-10-12 18:11:07 ----D---- C:\Windows\system32\MRT
2016-10-12 18:00:34 ----AC---- C:\Windows\system32\MRT.exe
2016-10-11 19:05:45 ----D---- C:\Windows\system32\catroot2
2016-10-09 15:02:25 ----D---- C:\Program Files\Malwarebytes Anti-Malware

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amd_sata;amd_sata; C:\Windows\system32\DRIVERS\amd_sata.sys [2012-10-12 70824]
R0 amd_xata;amd_xata; C:\Windows\system32\DRIVERS\amd_xata.sys [2012-10-12 34984]
R0 amdkmpfd;AMD PCI Root Bus Lower Filter; C:\Windows\system32\DRIVERS\amdkmpfd.sys [2013-02-14 24672]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2016-09-10 60424]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2016-10-13 224752]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2016-09-10 35096]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2016-09-10 91232]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2016-09-13 735488]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2016-09-22 433768]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 APXACC;AppEx Networks Accelerator LWF; C:\Windows\system32\DRIVERS\appexDrv.sys [2013-03-21 176352]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2016-09-10 92256]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2016-09-10 118664]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\Windows\system32\DRIVERS\AcpiVpc.sys [2012-07-08 26392]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-03-20 9974272]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-03-20 463872]
R3 AthBTPort;Qualcomm Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2013-01-24 80200]
R3 athr;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2012-12-20 3086336]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2013-02-15 79872]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2013-01-24 302920]
R3 btath_avdt;Qualcomm Atheros Bluetooth AVDT Service; C:\Windows\system32\drivers\btath_avdt.sys [2013-01-24 100680]
R3 BTATH_BUS;Qualcomm Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2013-01-24 27976]
R3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2013-01-24 158688]
R3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2013-01-24 66448]
R3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2013-01-24 119264]
R3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2013-01-24 493896]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT32.sys [2013-03-05 1363040]
R3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x86.sys [2012-11-20 100504]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2012-08-29 45736]
R3 vm331avs;Digital Camera 1; C:\Windows\System32\Drivers\vm331avs.sys [2013-03-02 998272]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2016-09-10 34008]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 CH341SER;CH341SER; C:\Windows\System32\Drivers\CH341SER.SYS [2011-11-04 39696]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUVStor.sys [2013-01-16 242760]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 49664]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]
S3 WiseHDInfo;WiseHDInfo; \??\C:\Program Files\Wise\Wise Care 365\WiseHDInfo32.dll []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-03-20 219136]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-03-22 291840]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-09-10 197128]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-11-05 105144]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2016-07-25 324224]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2015-11-05 45744]
S3 AtherosSvc;AtherosSvc; C:\Program Files\Bluetooth Suite\adminservice.exe [2013-01-24 191616]
S3 CxAudMsg;@C:\Windows\system32\CxAudMsg32.exe,-100; C:\Windows\system32\CxAudMsg32.exe [2013-03-05 193696]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-09-30 102912]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 SAService;Conexant SmartAudio service; C:\Windows\system32\SAsrv.exe [2013-03-05 447104]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-10-10 1343400]
S3 ZAtheros Bt and Wlan Coex Agent;ZAtheros Bt and Wlan Coex Agent; C:\Program Files\Bluetooth Suite\Ath_CoexAgent.exe [2013-01-24 323584]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-10-23 270016]
S4 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S4 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2016-10-21 172488]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]

-----------------EOF-----------------

Smazáno. Nastala nějaká změna?

Děkuji zatim nevim je to mamky notebook tak uvidím až sni budu mluvit.

OK. Dejte pak vědět.