VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Problémy s PC

https://forum.viry.cz:443/viewtopic.php?t=151584

Stránka 1 z 1

Problémy s PC

Napsal: 06 bře 2017 19:46
od r.o.s.t.a.c.k.a
Dobrý den,
nedávno jste mi tu pomohli s problémy na NTB, nyní prosím o kontrolu stolního PC, poslední dobou je zasekaný a zlobí poznámkový blok - je otevřený, ukazuje se dole v liště, ale nejde zobrazit. Prosím o kontrolu, děkuji

Logfile of random's system information tool 1.15 (written by random/random)
Run by aky3746 at 2017-03-06 19:15:00
Microsoft Windows 8.1 Pro
System drive C: has 44 GB (9%) free of 477 GB
Total RAM: 3839 MB (28% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:15:26, on 6. 3. 2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe
C:\Users\aky3746\AppData\Roaming\uTorrent\uTorrent.exe
C:\Users\aky3746\AppData\Roaming\uTorrent\updates\3.4.9_43295\utorrentie.exe
C:\Users\aky3746\AppData\Roaming\uTorrent\updates\3.4.9_43295\utorrentie.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
D:\game\World_of_Tanks\WargamingGameUpdater.exe
C:\Program Files\trend micro\aky3746_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkI ... id=UE12DHP
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {1046a206-5101-4a81-8358-1dbb63ae3210} - C:\Program Files (x86)\PConverter_dz\bar\1.bin\dzSrcAs.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: (no name) - {656e2a25-8226-470b-9a67-b2a60f657630} - (no file)
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BingExt.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKCU\..\Run: [uTorrent] "C:\Users\aky3746\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [World of Tanks] "D:\game\World_of_Tanks\WargamingGameUpdater.exe"
O4 - Global Startup: O&O Defrag Tray.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Windows\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: O&O Defrag (OODefragAgent) - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe
O23 - Service: Reprobates Drivers Auto Removal (pr2an4ab) (pr2an4ab) - Unknown owner - C:\Windows\system32\pr2an4ab.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9827 bytes

====== Enumerating Processes ======

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\dwm.exe
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskhostex.exe
"C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe" /STARTUP
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\OO Software\Defrag\oodag.exe"
C:\Windows\system32\dashost.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-8e2d4a19-5820-4380-95e4-4bb349ac08ea -SystemEventPortName:HostProcess-630519a1-eda7-43d6-95d3-a9cd1c6e5ddb -IoCancelEventPortName:HostProcess-03a5f560-b6ec-4b93-88ce-97f668eba3a0 -NonStateChangingEventPortName:HostProcess-cff9bc45-e33e-4061-8872-99bc2563f0d1 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:e7fa7b6e-0ccd-44f9-b2f5-2f81f9bd3ccc -DeviceGroupId:WpdFsGroup
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files\NVIDIA Corporation\Raid\nvraidservice.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\OO Software\Defrag\oodtray.exe"
"C:\Users\aky3746\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
"C:\Users\aky3746\AppData\Roaming\uTorrent\updates\3.4.9_43295\utorrentie.exe" uTorrent_1008_00A3FC08_135333952 µTorrent4823DF041B09 uTorrent
"C:\Users\aky3746\AppData\Roaming\uTorrent\updates\3.4.9_43295\utorrentie.exe" uTorrent_1008_00A3FD38_1702711413 µTorrent4823DF041B09 uTorrent
"C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe"
C:\Program Files\CCleaner\CCleaner64.exe
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\SeaPort.exe"
"C:\Program Files\Internet Explorer\iexplore.exe" -ServerName:DefaultBrowserServer
"C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:4168 CREDAT:2627145 /prefetch:1
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\DAEMON Tools Lite\DTLite.exe"
C:\Windows\system32\taskhost.exe
D:\game\World_of_Tanks\WargamingGameUpdater.exe
"C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:4168 CREDAT:4134520 /prefetch:1
"C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:4168 CREDAT:2365148 /prefetch:1
C:\Windows\system32\OpenWith.exe -Embedding
"C:\Users\aky3746\AppData\Local\Microsoft\Windows\INetCache\IE\FMVX5G57\RSITx64.exe"

====== Scheduled tasks folder ======

C:\Windows\system32\tasks\Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Windows\system32\tasks\avast! Emergency Update - C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
C:\Windows\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\system32\tasks\SafeZone scheduled Autoupdate 1453222151 - C:\Program Files\AVAST Software\SZBrowser\launcher.exe --scheduledautoupdate $(Arg0)
C:\Windows\system32\tasks\SmartDefrag_AutoDefrag - C:\Program Files (x86)\IObit\Smart Defrag\AutoDefrag.exe /AUTODEFRAG
C:\Windows\system32\tasks\SmartDefrag_Startup - C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe /STARTUP
C:\Windows\system32\tasks\SmartDefrag_Update - C:\Program Files (x86)\IObit\Smart Defrag\AutoUpdate.exe /autorun
C:\Windows\system32\tasks\{185754F9-6C24-4303-A5DE-6067686651FB} - C:\Windows\system32\pcalua.exe -a "C:\Users\aky3746\Downloads\Heavy Metal - FAKK2\autorun.exe" -d "C:\Users\aky3746\Downloads\Heavy Metal - FAKK2"
C:\Windows\system32\tasks\{661932E9-3F7C-42FE-A942-869622740FBA} - C:\Windows\system32\pcalua.exe -a J:\SETUP.EXE -d J:\
C:\Windows\system32\tasks\Microsoft\Windows\WS\License Validation - rundll32.exe WSClient.dll,WSpTLR licensing
C:\Windows\system32\tasks\Microsoft\Windows\WS\WSLicenses - %WinDir%\ServiceProfiles\LocalService\AppData\Local\Microsoft\WSLicense\WmiPrvSE.exe
C:\Windows\system32\tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask - rundll32.exe WSClient.dll,RefreshBannedAppsList
C:\Windows\system32\tasks\Microsoft\Windows\WS\WSSync - %WinDir%\ServiceProfiles\LocalService\AppData\Local\Microsoft\WSLicense\dllhost.exe
C:\Windows\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join - %SystemRoot%\System32\AutoWorkplace.exe join
C:\Windows\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start - C:\Windows\system32\sc.exe start wuauserv
C:\Windows\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network - C:\Windows\system32\sc.exe start wuauserv
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone - %windir%\system32\tzsync.exe
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\srtasks.exe ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask - %windir%\system32\rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
C:\Windows\system32\tasks\Microsoft\Windows\SpacePort\SpaceAgentTask - %windir%\system32\SpaceAgent.exe
C:\Windows\system32\tasks\Microsoft\Windows\Shell\FamilySafetyMonitor - %windir%\System32\wpcmon.exe
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers - %SystemRoot%\System32\drvinst.exe 6
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser - %SystemRoot%\System32\MbaeParserTask.exe
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskCleanup\SilentCleanup - %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive%
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c -h -o -$
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup - %windir%\system32\rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
C:\Windows\system32\tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState - %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent /increment
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattel\DiagTrackRunner.exe /UploadEtlFilesOnly
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\rundll32.exe %windir%\system32\invagent.dll,RunUpdate
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\StartupAppTask - %windir%\system32\rundll32.exe Startupscan.dll,SusRunTask
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\Windows\system32\tasks\Microsoft\Office\Office 15 Subscription Heartbeat - %ProgramFiles%\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
C:\Windows\system32\tasks\Microsoft\Office\OfficeTelemetryAgentFallBack - "C:\Program Files\Microsoft Office\Office15\msoia.exe" scan upload mininterval:2880
C:\Windows\system32\tasks\Microsoft\Office\OfficeTelemetryAgentLogOn - "C:\Program Files\Microsoft Office\Office15\msoia.exe" scan upload
C:\Windows\system32\tasks\AVAST Software\Avast settings backup - C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe /backup /iavs

=========Google Chrome=========

C:\Users\aky3746\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapocclcgogkmnckokdopfmhonfmgoek 1 Prezentace Google 0.9
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Obchod Chrome 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Dokumenty Google 0.9
Extension apdfllckaahabafndbhieahigkjlhalf 1 Disk Google 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension ennkphjdgehloodpbhlhldgbnhmacadg 1 Settings 0.2
Extension felcaaldnbdncclmgdcncolpebgiejap
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 1 Dokumenty Google offline 1.4
Extension gomekmidlodglbbmalcneegieacbdmki 1 Avast Online Security 12.0.163
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.46
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mgndgikekgjfcpckkfioiadnlibdjbkf 1 Chrome 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.2
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Platby Internetového obchodu Chrome 1.0.0.1
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 5616.1121.0.3
Homepage:
default_search_provider.search_url:
C:\Users\aky3746\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki]
"Path"=C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\mibfbmhijjgpkmobcfdlelpccpeafoom]
"Path"=


======Registry dump ======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{eb43b60b-2197-43aa-86a6-b143774bae59}]
"URL"=http://int.search.tb.ask.com/search/GGm ... earchTerms}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-12-13 229064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-02-09 901600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-23 255088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2016-11-15 2351920]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2016-12-13 163528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{656e2a25-8226-470b-9a67-b2a60f657630}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-02-09 678656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-23 193136]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2016-11-15 1743664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BingExt.dll [2012-02-13 1307928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-23 255088]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-23 193136]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BingExt.dll [2012-02-13 1307928]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NVRaidService"=C:\Program Files\NVIDIA Corporation\Raid\nvraidservice.exe [2010-04-09 291944]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2016-05-16 16475392]
"OODefragTray"=C:\Program Files\OO Software\Defrag\oodtray.exe [2016-11-03 5128904]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Users\aky3746\AppData\Roaming\uTorrent\uTorrent.exe [2017-02-03 2143936]
"DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2015-06-18 4468056]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-08-20 8455960]
"World of Tanks"=D:\game\World_of_Tanks\WargamingGameUpdater.exe [2017-02-28 3135752]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-03-23 7139256]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2013-04-29 642304]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O&O Defrag Tray.lnk - C:\Windows\Installer\{7A170C5C-3573-4EA3-AB02-79A3901B2960}\app_icon.ico

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.LAGS"=lagarith.dll
"VIDC.X264"=x264vfw64.dll
"VIDC.XVID"=xvidvfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.l3codecp"=l3codecp.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

====== File associations ======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

====== List of files/folders created in the last 1 month ======

2017-03-06 19:15:01 ----D---- C:\Program Files\trend micro
2017-03-06 19:15:00 ----DC---- C:\rsit
2017-03-06 18:52:04 ----D---- C:\Program Files (x86)\Polda 6
2017-03-05 21:20:26 ----D---- C:\Program Files (x86)\Resident Evil 6
2017-03-04 13:43:03 ----D---- C:\Program Files (x86)\Aliens vs. Predator
2017-03-04 12:41:58 ----A---- C:\Windows\system32\FNTCACHE.DAT
2017-02-28 18:35:04 ----D---- C:\Windows\SYSWOW64\xlive
2017-02-28 18:28:13 ----D---- C:\Program Files (x86)\Empire Interactive
2017-02-26 09:28:41 ----D---- C:\ProgramData\IObit
2017-02-26 09:28:39 ----D---- C:\ProgramData\ProductData
2017-02-26 09:28:38 ----A---- C:\Windows\system32\IObitSmartDefragExtension.dll
2017-02-26 09:28:35 ----A---- C:\Windows\system32\SmartDefragBootTime.exe
2017-02-26 09:28:18 ----D---- C:\Program Files (x86)\IObit
2017-02-26 09:27:11 ----D---- C:\Users\aky3746\AppData\Roaming\IObit
2017-02-25 18:40:11 ----D---- C:\Program Files (x86)\R.G. Freedom
2017-02-22 22:49:32 ----D---- C:\Windows\system32\oodag
2017-02-22 22:49:22 ----D---- C:\Program Files\OO Software
2017-02-22 22:48:51 ----D---- C:\ProgramData\OO Software
2017-02-22 21:05:23 ----D---- C:\Users\aky3746\AppData\Roaming\SpinTires
2017-02-22 20:14:31 ----D---- C:\Users\aky3746\AppData\Roaming\Mount&Blade Warband
2017-02-22 20:11:23 ----D---- C:\Program Files (x86)\Mount&Blade Warband
2017-02-19 20:03:54 ----D---- C:\Program Files (x86)\TopCD

====== List of files/folders modified in the last 1 month ======

2017-03-06 19:15:03 ----D---- C:\Users\aky3746\AppData\Roaming\uTorrent
2017-03-06 19:15:01 ----RD---- C:\Program Files
2017-03-06 19:01:29 ----RD---- C:\Windows\System32
2017-03-06 19:01:28 ----A---- C:\Windows\system32\slmgr.vbs
2017-03-06 19:01:27 ----A---- C:\Windows\SYSWOW64\slmgr.vbs
2017-03-06 19:00:05 ----D---- C:\Windows\system32\sru
2017-03-06 18:58:23 ----D---- C:\Windows\Prefetch
2017-03-06 18:52:04 ----RD---- C:\Program Files (x86)
2017-03-06 18:26:12 ----D---- C:\Windows\SYSWOW64\directx
2017-03-06 18:26:01 ----HD---- C:\Windows\msdownld.tmp
2017-03-06 18:25:48 ----D---- C:\Windows
2017-03-06 17:50:23 ----D---- C:\Program Files (x86)\Capcom
2017-03-06 14:02:45 ----D---- C:\Windows\Temp
2017-03-06 02:46:38 ----D---- C:\Windows\system32\config
2017-03-06 02:42:54 ----D---- C:\Windows\system32\DriverStore
2017-03-06 02:42:52 ----D---- C:\Windows\Inf
2017-03-06 02:42:36 ----D---- C:\Windows\Microsoft.NET
2017-03-05 23:23:28 ----SHD---- C:\Windows\Installer
2017-03-05 23:22:47 ----SHD---- C:\System Volume Information
2017-03-05 23:22:06 ----D---- C:\Windows\Logs
2017-03-05 21:45:28 ----SHD---- C:\Windows\ei_temp
2017-03-05 20:41:56 ----D---- C:\Windows\system32\drivers
2017-03-05 19:30:51 ----D---- C:\Windows\SoftwareDistribution
2017-03-05 17:15:36 ----D---- C:\Hry
2017-03-05 11:39:06 ----D---- C:\Windows\system32\catroot2
2017-03-04 16:28:59 ----D---- C:\Windows\debug
2017-03-04 13:40:04 ----D---- C:\Users\aky3746\AppData\Roaming\DAEMON Tools Lite
2017-02-28 18:35:04 ----D---- C:\Windows\SysWOW64
2017-02-27 21:04:10 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-02-27 19:26:57 ----HD---- C:\ProgramData
2017-02-27 03:10:00 ----D---- C:\Windows\LiveKernelReports
2017-02-26 21:11:56 ----D---- C:\Windows\Panther
2017-02-26 21:10:10 ----D---- C:\Windows\system32\Tasks
2017-02-26 10:29:35 ----D---- C:\Windows\WinSxS
2017-02-26 09:29:10 ----D---- C:\Program Files (x86)\Common Files
2017-02-25 10:35:27 ----D---- C:\ProgramData\Microsoft Help
2017-02-25 10:35:27 ----A---- C:\Windows\win.ini
2017-02-25 10:34:52 ----D---- C:\Windows\system32\MRT
2017-02-25 10:30:09 ----AC---- C:\Windows\system32\MRT.exe
2017-02-22 20:20:23 ----D---- C:\Windows\CbsTemp
2017-02-22 20:06:42 ----D---- C:\Program Files (x86)\Spintires
2017-02-19 19:28:27 ----RSD---- C:\Windows\assembly
2017-02-19 19:19:26 ----D---- C:\Program Files (x86)\City Interactive
2017-02-19 12:41:44 ----D---- C:\GOG Games
2017-02-18 17:31:43 ----D---- C:\Windows\AppReadiness

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\SysWOW64\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed

====== List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2016-02-09 74544]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2016-09-18 292704]
R0 nvstor64;nvstor64; C:\Windows\system32\DRIVERS\nvstor64.sys [2009-04-29 239136]
R0 pe3an4ab;Reprobates Environment Driver (pe3an4ab); C:\Windows\system32\drivers\pe3an4ab.sys [2007-11-22 72312]
R0 ps7an4ab;Reprobates Synchronization Driver (ps7an4ab); C:\Windows\system32\drivers\ps7an4ab.sys [2007-11-22 103552]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2016-02-09 37144]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2016-02-09 103064]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2016-03-09 1070904]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2016-02-23 463744]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2016-02-09 37656]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2016-03-09 107792]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2016-02-09 165344]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2015-11-09 311968]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2015-11-09 43168]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-02-17 10657792]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-02-17 334336]
R3 dtlitescsibus;@oem3.inf,%DTLITESCSIBUS.DeviceDesc%;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\System32\drivers\dtlitescsibus.sys [2015-11-08 30264]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2016-05-16 4994304]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2012-12-19 13523816]
R3 RTL8023x64;@netrtl64.inf,%Rtlnicx64.Service.DispName%;Realtek 10/100 NIC Family NDIS x64 Driver; C:\Windows\system32\DRIVERS\Rtnic64.sys [2013-06-18 51712]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360]
S3 cmnxusbser;@oem7.inf,%CMNSUSBSER%;Mobile Connector USB Device for Legacy Serial Communication LCT2053s 20140303; C:\Windows\system32\DRIVERS\cmnxusbser.sys [2015-11-24 146424]
S3 cpuz137;cpuz137; \??\C:\Program Files (x86)\CPUID\PC Wizard 2015\pcwiz_x64.sys [2014-02-17 26856]
S3 dg_ssudbus;@oem9.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2015-12-08 122160]
S3 ssudmdm;@oem10.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2015-12-08 214832]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2014-10-29 44544]
S3 WinUsb;@oem11.inf,%WinUSB_SvcDesc%;SAMSUNG Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2015-10-10 78848]

====== List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-12-19 82640]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-04-29 361984]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-02-09 237096]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; %SystemRoot%\System32\svchost.exe -k utcsvc;"ServiceDll" = %SystemRoot%\system32\diagtrack.dll
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-12-07 891240]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-12-19 1258856]
R2 OODefragAgent;O&O Defrag; C:\Program Files\OO Software\Defrag\oodag.exe [2016-11-03 1735368]
R3 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\SeaPort.exe [2012-02-13 240408]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [2015-06-18 1268568]
S2 BBSvc;BingBar Service; C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BBSvc.exe [2012-02-13 193816]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-04-23 154440]
S2 pr2an4ab;Reprobates Drivers Auto Removal (pr2an4ab); C:\Windows\system32\pr2an4ab.exe [2007-11-22 777592]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; %SystemRoot%\System32\svchost.exe -k LocalServiceAndNoImpersonation;"ServiceDll" = %SystemRoot%\System32\BthHFSrv.dll
S3 EasyAntiCheat;EasyAntiCheat; C:\Windows\syswow64\EasyAntiCheat.exe [2016-07-21 227104]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-04-23 154440]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2016-04-23 194032]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-01-23 178760]

-----------------EOF-----------------

Re: Problémy s PC

Napsal: 06 bře 2017 20:11
od Rudy
Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.

Re: Problémy s PC

Napsal: 07 bře 2017 19:21
od r.o.s.t.a.c.k.a
# AdwCleaner v6.044 - Log vytvořen 07/03/2017 v 19:12:48
# Aktualizováno dne 28/02/2017 z Malwarebytes
# Databáze : 2017-03-07.1 [Server]
# Operační systém : Windows 8.1 Pro (X64)
# Uživatelské jméno : aky3746 - JANA
# Spuštěno z : C:\Users\aky3746\AppData\Local\Microsoft\Windows\INetCache\IE\93ZV86YI\adwcleaner_6.044.exe
# Mod: Čištění
# Podpora : https://www.malwarebytes.com/support



***** [ Služby ] *****



***** [ Složky ] *****

[-] Složka smazána: C:\Users\aky3746\AppData\Local\PConverter_dz
[-] Složka smazána: C:\Users\aky3746\AppData\LocalLow\PConverter_dz
[-] Složka smazána: C:\Program Files (x86)\PConverter_dz
[#] Složka smazána po restartu: C:\Users\aky3746\AppData\Local\PConverter_dz
[#] Složka smazána po restartu: C:\Users\aky3746\AppData\LocalLow\PConverter_dz
[#] Složka smazána po restartu: C:\Program Files (x86)\PConverter_dz
[-] Složka smazána: C:\Users\aky3746\AppData\Local\Amigo
[#] Složka smazána po restartu: C:\Users\aky3746\AppData\Local\PConverter_dz
[#] Složka smazána po restartu: C:\Users\aky3746\AppData\LocalLow\PConverter_dz
[-] Složka smazána: C:\Users\aky3746\AppData\Roaming\OpenCandy
[-] Složka smazána: C:\ProgramData\PC Cleaner Pro
[#] Složka smazána po restartu: C:\ProgramData\Application Data\PC Cleaner Pro
[#] Složka smazána po restartu: C:\Program Files (x86)\PConverter_dz


***** [ Soubory ] *****

[-] Soubor smazán: C:\ProgramData\pclunst.exe
[#] Soubor smazán: C:\ProgramData\Application Data\pclunst.exe


***** [ DLL ] *****



***** [ WMI ] *****



***** [ Zástupci ] *****

[-] Zástupce vyléčen: C:\Users\aky3746\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\WarThunder.lnk


***** [ Naplánované úlohy ] *****



***** [ Registry ] *****

[-] Klíč smazán: HKU\S-1-5-21-2406856743-1186925505-3104228285-1001\Software\PConverter_dz
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1001\Software\PConverter_dz_is1
[-] Klíč smazán: HKU\S-1-5-21-2406856743-1186925505-3104228285-1001\Software\AppDataLow\Software\PConverter_dz
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1001\Software\AppDataLow\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1004\Software\PConverter_dz
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1004\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1004\Software\AppDataLow\Software\PConverter_dz
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1004\Software\AppDataLow\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: HKCU\Software\PConverter_dz
[#] Klíč smazán po restartu: HKCU\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: HKCU\Software\AppDataLow\Software\PConverter_dz
[#] Klíč smazán po restartu: HKCU\Software\AppDataLow\Software\PConverter_dz_is1
[-] Klíč smazán: HKLM\SOFTWARE\PConverter_dz
[#] Klíč smazán po restartu: HKLM\SOFTWARE\PConverter_dz_is1
[#] Klíč smazán po restartu: [x64] HKCU\Software\PConverter_dz
[#] Klíč smazán po restartu: [x64] HKCU\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: [x64] HKCU\Software\AppDataLow\Software\PConverter_dz
[#] Klíč smazán po restartu: [x64] HKCU\Software\AppDataLow\Software\PConverter_dz_is1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\PConverter_dz.HTMLMenu
[-] Klíč smazán: HKLM\SOFTWARE\Classes\PConverter_dz.HTMLMenu.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\PConverter_dz.HTMLPanel
[-] Klíč smazán: HKLM\SOFTWARE\Classes\PConverter_dz.HTMLPanel.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\PConverter_dz.PseudoTransparentPlugin
[-] Klíč smazán: HKLM\SOFTWARE\Classes\PConverter_dz.PseudoTransparentPlugin.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\PConverter_dz.ToolbarProtector
[-] Klíč smazán: HKLM\SOFTWARE\Classes\PConverter_dz.ToolbarProtector.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.HTMLMenu
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.HTMLMenu.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.HTMLPanel
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.HTMLPanel.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.PseudoTransparentPlugin
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.PseudoTransparentPlugin.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.ToolbarProtector
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.ToolbarProtector.1
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1001\Software\PConverter_dz
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1001\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1001\Software\AppDataLow\Software\PConverter_dz
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1001\Software\AppDataLow\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1004\Software\PConverter_dz
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1004\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1004\Software\AppDataLow\Software\PConverter_dz
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1004\Software\AppDataLow\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: HKCU\Software\PConverter_dz
[#] Klíč smazán po restartu: HKCU\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: HKCU\Software\AppDataLow\Software\PConverter_dz
[#] Klíč smazán po restartu: HKCU\Software\AppDataLow\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: HKLM\SOFTWARE\PConverter_dz
[#] Klíč smazán po restartu: HKLM\SOFTWARE\PConverter_dz_is1
[#] Klíč smazán po restartu: [x64] HKCU\Software\PConverter_dz
[#] Klíč smazán po restartu: [x64] HKCU\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: [x64] HKCU\Software\AppDataLow\Software\PConverter_dz
[#] Klíč smazán po restartu: [x64] HKCU\Software\AppDataLow\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.HTMLMenu
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.HTMLMenu.1
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.HTMLPanel
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.HTMLPanel.1
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.PseudoTransparentPlugin
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.PseudoTransparentPlugin.1
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.ToolbarProtector
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.ToolbarProtector.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.HTMLMenu
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.HTMLMenu.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.HTMLPanel
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.HTMLPanel.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.PseudoTransparentPlugin
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.PseudoTransparentPlugin.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.ToolbarProtector
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.ToolbarProtector.1
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PConverter_dzbar Uninstall Internet Explorer
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1febd09f-d1b9-47e6-aa31-1e6326030fa6}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2ab531d4-339f-43d8-9597-fbf326fd29af}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7b092b20-efb8-4f2e-be09-efae5bea6788}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{bac464b4-4e9f-4569-8745-df1f8c55d616}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f1aecc99-b93d-4a8c-a133-7e715084bcff}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{1a707f4c-78e8-49b7-8a3a-41255a22afe0}
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{1a707f4c-78e8-49b7-8a3a-41255a22afe0}
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.PseudoTransparentPlugin.PConverter_dz.PseudoTransparentPlugin
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.PseudoTransparentPlugin.PConverter_dz.PseudoTransparentPlugin.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{369D6F8D-CB2A-4A5C-9890-48C938267848}
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{369D6F8D-CB2A-4A5C-9890-48C938267848}
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.HTMLMenu.PConverter_dz.HTMLMenu
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.HTMLMenu.PConverter_dz.HTMLMenu.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{55780950-41d9-4f03-a794-902e27237eb6}
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{55780950-41d9-4f03-a794-902e27237eb6}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{952fddec-371f-4047-80cf-656ca214cb7a}
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{952fddec-371f-4047-80cf-656ca214cb7a}
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.HTMLPanel.PConverter_dz.HTMLPanel
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.HTMLPanel.PConverter_dz.HTMLPanel.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{97ba415c-383c-41a0-af12-0f7294a73f07}
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{97ba415c-383c-41a0-af12-0f7294a73f07}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{a1b0a99a-19db-4d79-9c0f-955817e43094}
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{a1b0a99a-19db-4d79-9c0f-955817e43094}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{b074d394-fc50-4793-a09e-4f124e4d4a3b}
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{b074d394-fc50-4793-a09e-4f124e4d4a3b}
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.ToolbarProtector.PConverter_dz.ToolbarProtector
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.ToolbarProtector.PConverter_dz.ToolbarProtector.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{f1aecc99-b93d-4a8c-a133-7e715084bcff}
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{f1aecc99-b93d-4a8c-a133-7e715084bcff}
[#] Klíč smazán po restartu: {1046a206-5101-4a81-8358-1dbb63ae3210}
[#] Klíč smazán po restartu: {01C906AF-E92D-4AD4-B478-FDE5AF2D7684}
[#] Klíč smazán po restartu: {3CF9745E-AE8F-4BFC-AA52-A86CBFBCA17F}
[#] Klíč smazán po restartu: {51063FD9-AC6E-413F-8CC3-FF04BFCF8E29}
[#] Klíč smazán po restartu: {5165BA63-A70A-4262-BC63-3DFBE3F37BA8}
[#] Klíč smazán po restartu: {8956153C-5CFC-4150-B37D-DB68FF089767}
[#] Klíč smazán po restartu: {FF512140-BFF9-425F-AFEA-11A0854ED50C}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{0D6C55A8-3003-4B48-BC64-F604E1F1122D}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{349B6EC0-6C39-432E-9486-64C82F38DE22}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{3CDAE1CB-896D-43E9-84D9-3B57EC71305B}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{47CCD08C-52C0-429C-BD30-E2913B7E4512}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{5A5014D7-80EA-44A4-BD99-264961772989}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{66C08BE3-CEBC-43AB-93CA-D63C3E802A96}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{716741B2-B364-47B7-A4A9-C5DDD84AE1A3}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{91E9A2ED-034A-45ED-831D-E16E1909D446}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{B94227B9-6738-4936-A080-FC69E72AF1FB}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{C85EF181-A7B6-49C2-9ABC-C63065A0A18D}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{D4563CAB-4168-49D2-9ED1-F40E618AA9ED}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Classes\Interface\{0D6C55A8-3003-4B48-BC64-F604E1F1122D}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Classes\Interface\{349B6EC0-6C39-432E-9486-64C82F38DE22}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Classes\Interface\{3CDAE1CB-896D-43E9-84D9-3B57EC71305B}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Classes\Interface\{47CCD08C-52C0-429C-BD30-E2913B7E4512}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Classes\Interface\{5A5014D7-80EA-44A4-BD99-264961772989}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Classes\Interface\{66C08BE3-CEBC-43AB-93CA-D63C3E802A96}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Classes\Interface\{716741B2-B364-47B7-A4A9-C5DDD84AE1A3}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Classes\Interface\{91E9A2ED-034A-45ED-831D-E16E1909D446}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\protector_dll.Protector
[-] Klíč smazán: HKLM\SOFTWARE\Classes\protector_dll.Protector.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib
[-] Klíč smazán: HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\protector_dll.Protector
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\protector_dll.Protector.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{FA7B2795-C0C8-4A58-8672-3F8D80CC0270}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\TypeLib\{1112F282-7099-4624-A439-DB29D6551552}
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1001\Software\PConverter_dz
[-] Klíč smazán: HKU\S-1-5-21-2406856743-1186925505-3104228285-1001\Software\PRODUCTSETUP
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1001\Software\AppDataLow\Software\PConverter_dz
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1004\Software\PConverter_dz
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1004\Software\AppDataLow\Software\PConverter_dz
[#] Klíč smazán po restartu: HKCU\Software\PConverter_dz
[#] Klíč smazán po restartu: HKCU\Software\PRODUCTSETUP
[#] Klíč smazán po restartu: HKCU\Software\AppDataLow\Software\PConverter_dz
[#] Klíč smazán po restartu: HKLM\SOFTWARE\PConverter_dz
[-] Klíč smazán: HKLM\SOFTWARE\TData
[-] Klíč smazán: HKLM\SOFTWARE\yoursearchingSoftware
[-] Klíč smazán: HKLM\SOFTWARE\systweak
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PConverter_dzbar Uninstall Internet Explorer
[#] Klíč smazán po restartu: [x64] HKCU\Software\PConverter_dz
[#] Klíč smazán po restartu: [x64] HKCU\Software\PRODUCTSETUP
[#] Klíč smazán po restartu: [x64] HKCU\Software\AppDataLow\Software\PConverter_dz
[-] Klíč smazán: HKU\S-1-5-21-2406856743-1186925505-3104228285-1001\Software\Microsoft\Internet Explorer\SearchScopes\{eb43b60b-2197-43aa-86a6-b143774bae59}
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{eb43b60b-2197-43aa-86a6-b143774bae59}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{eb43b60b-2197-43aa-86a6-b143774bae59}
[#] Klíč smazán po restartu: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{eb43b60b-2197-43aa-86a6-b143774bae59}
[-] Klíč smazán: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
[-] Klíč smazán: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\home.tb.ask.com
[-] Klíč smazán: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\staticimgfarm.com
[#] Klíč smazán po restartu: [x64] HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
[#] Klíč smazán po restartu: [x64] HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\home.tb.ask.com
[#] Klíč smazán po restartu: [x64] HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\staticimgfarm.com
[-] Klíč smazán: HKLM\SOFTWARE\Google\Chrome\Extensions\mibfbmhijjgpkmobcfdlelpccpeafoom


***** [ Prohlížeče ] *****



*************************

:: "Tracing" klíče smazány
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [17175 Bajty] - [07/03/2017 19:12:48]
C:\AdwCleaner\AdwCleaner[S0].txt - [15834 Bajty] - [07/03/2017 19:10:50]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [17323 Bajty] ##########
# AdwCleaner v6.044 - Log vytvořen 07/03/2017 v 19:12:48
# Aktualizováno dne 28/02/2017 z Malwarebytes
# Databáze : 2017-03-07.1 [Server]
# Operační systém : Windows 8.1 Pro (X64)
# Uživatelské jméno : aky3746 - JANA
# Spuštěno z : C:\Users\aky3746\AppData\Local\Microsoft\Windows\INetCache\IE\93ZV86YI\adwcleaner_6.044.exe
# Mod: Čištění
# Podpora : https://www.malwarebytes.com/support



***** [ Služby ] *****



***** [ Složky ] *****

[-] Složka smazána: C:\Users\aky3746\AppData\Local\PConverter_dz
[-] Složka smazána: C:\Users\aky3746\AppData\LocalLow\PConverter_dz
[-] Složka smazána: C:\Program Files (x86)\PConverter_dz
[#] Složka smazána po restartu: C:\Users\aky3746\AppData\Local\PConverter_dz
[#] Složka smazána po restartu: C:\Users\aky3746\AppData\LocalLow\PConverter_dz
[#] Složka smazána po restartu: C:\Program Files (x86)\PConverter_dz
[-] Složka smazána: C:\Users\aky3746\AppData\Local\Amigo
[#] Složka smazána po restartu: C:\Users\aky3746\AppData\Local\PConverter_dz
[#] Složka smazána po restartu: C:\Users\aky3746\AppData\LocalLow\PConverter_dz
[-] Složka smazána: C:\Users\aky3746\AppData\Roaming\OpenCandy
[-] Složka smazána: C:\ProgramData\PC Cleaner Pro
[#] Složka smazána po restartu: C:\ProgramData\Application Data\PC Cleaner Pro
[#] Složka smazána po restartu: C:\Program Files (x86)\PConverter_dz


***** [ Soubory ] *****

[-] Soubor smazán: C:\ProgramData\pclunst.exe
[#] Soubor smazán: C:\ProgramData\Application Data\pclunst.exe


***** [ DLL ] *****



***** [ WMI ] *****



***** [ Zástupci ] *****

[-] Zástupce vyléčen: C:\Users\aky3746\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\WarThunder.lnk


***** [ Naplánované úlohy ] *****



***** [ Registry ] *****

[-] Klíč smazán: HKU\S-1-5-21-2406856743-1186925505-3104228285-1001\Software\PConverter_dz
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1001\Software\PConverter_dz_is1
[-] Klíč smazán: HKU\S-1-5-21-2406856743-1186925505-3104228285-1001\Software\AppDataLow\Software\PConverter_dz
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1001\Software\AppDataLow\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1004\Software\PConverter_dz
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1004\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1004\Software\AppDataLow\Software\PConverter_dz
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1004\Software\AppDataLow\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: HKCU\Software\PConverter_dz
[#] Klíč smazán po restartu: HKCU\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: HKCU\Software\AppDataLow\Software\PConverter_dz
[#] Klíč smazán po restartu: HKCU\Software\AppDataLow\Software\PConverter_dz_is1
[-] Klíč smazán: HKLM\SOFTWARE\PConverter_dz
[#] Klíč smazán po restartu: HKLM\SOFTWARE\PConverter_dz_is1
[#] Klíč smazán po restartu: [x64] HKCU\Software\PConverter_dz
[#] Klíč smazán po restartu: [x64] HKCU\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: [x64] HKCU\Software\AppDataLow\Software\PConverter_dz
[#] Klíč smazán po restartu: [x64] HKCU\Software\AppDataLow\Software\PConverter_dz_is1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\PConverter_dz.HTMLMenu
[-] Klíč smazán: HKLM\SOFTWARE\Classes\PConverter_dz.HTMLMenu.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\PConverter_dz.HTMLPanel
[-] Klíč smazán: HKLM\SOFTWARE\Classes\PConverter_dz.HTMLPanel.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\PConverter_dz.PseudoTransparentPlugin
[-] Klíč smazán: HKLM\SOFTWARE\Classes\PConverter_dz.PseudoTransparentPlugin.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\PConverter_dz.ToolbarProtector
[-] Klíč smazán: HKLM\SOFTWARE\Classes\PConverter_dz.ToolbarProtector.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.HTMLMenu
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.HTMLMenu.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.HTMLPanel
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.HTMLPanel.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.PseudoTransparentPlugin
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.PseudoTransparentPlugin.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.ToolbarProtector
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.ToolbarProtector.1
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1001\Software\PConverter_dz
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1001\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1001\Software\AppDataLow\Software\PConverter_dz
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1001\Software\AppDataLow\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1004\Software\PConverter_dz
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1004\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1004\Software\AppDataLow\Software\PConverter_dz
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1004\Software\AppDataLow\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: HKCU\Software\PConverter_dz
[#] Klíč smazán po restartu: HKCU\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: HKCU\Software\AppDataLow\Software\PConverter_dz
[#] Klíč smazán po restartu: HKCU\Software\AppDataLow\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: HKLM\SOFTWARE\PConverter_dz
[#] Klíč smazán po restartu: HKLM\SOFTWARE\PConverter_dz_is1
[#] Klíč smazán po restartu: [x64] HKCU\Software\PConverter_dz
[#] Klíč smazán po restartu: [x64] HKCU\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: [x64] HKCU\Software\AppDataLow\Software\PConverter_dz
[#] Klíč smazán po restartu: [x64] HKCU\Software\AppDataLow\Software\PConverter_dz_is1
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.HTMLMenu
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.HTMLMenu.1
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.HTMLPanel
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.HTMLPanel.1
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.PseudoTransparentPlugin
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.PseudoTransparentPlugin.1
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.ToolbarProtector
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.ToolbarProtector.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.HTMLMenu
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.HTMLMenu.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.HTMLPanel
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.HTMLPanel.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.PseudoTransparentPlugin
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.PseudoTransparentPlugin.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.ToolbarProtector
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PConverter_dz.ToolbarProtector.1
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PConverter_dzbar Uninstall Internet Explorer
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1febd09f-d1b9-47e6-aa31-1e6326030fa6}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2ab531d4-339f-43d8-9597-fbf326fd29af}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7b092b20-efb8-4f2e-be09-efae5bea6788}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{bac464b4-4e9f-4569-8745-df1f8c55d616}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f1aecc99-b93d-4a8c-a133-7e715084bcff}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{1a707f4c-78e8-49b7-8a3a-41255a22afe0}
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{1a707f4c-78e8-49b7-8a3a-41255a22afe0}
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.PseudoTransparentPlugin.PConverter_dz.PseudoTransparentPlugin
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.PseudoTransparentPlugin.PConverter_dz.PseudoTransparentPlugin.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{369D6F8D-CB2A-4A5C-9890-48C938267848}
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{369D6F8D-CB2A-4A5C-9890-48C938267848}
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.HTMLMenu.PConverter_dz.HTMLMenu
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.HTMLMenu.PConverter_dz.HTMLMenu.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{55780950-41d9-4f03-a794-902e27237eb6}
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{55780950-41d9-4f03-a794-902e27237eb6}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{952fddec-371f-4047-80cf-656ca214cb7a}
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{952fddec-371f-4047-80cf-656ca214cb7a}
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.HTMLPanel.PConverter_dz.HTMLPanel
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.HTMLPanel.PConverter_dz.HTMLPanel.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{97ba415c-383c-41a0-af12-0f7294a73f07}
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{97ba415c-383c-41a0-af12-0f7294a73f07}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{a1b0a99a-19db-4d79-9c0f-955817e43094}
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{a1b0a99a-19db-4d79-9c0f-955817e43094}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{b074d394-fc50-4793-a09e-4f124e4d4a3b}
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{b074d394-fc50-4793-a09e-4f124e4d4a3b}
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.ToolbarProtector.PConverter_dz.ToolbarProtector
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\PConverter_dz.ToolbarProtector.PConverter_dz.ToolbarProtector.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{f1aecc99-b93d-4a8c-a133-7e715084bcff}
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{f1aecc99-b93d-4a8c-a133-7e715084bcff}
[#] Klíč smazán po restartu: {1046a206-5101-4a81-8358-1dbb63ae3210}
[#] Klíč smazán po restartu: {01C906AF-E92D-4AD4-B478-FDE5AF2D7684}
[#] Klíč smazán po restartu: {3CF9745E-AE8F-4BFC-AA52-A86CBFBCA17F}
[#] Klíč smazán po restartu: {51063FD9-AC6E-413F-8CC3-FF04BFCF8E29}
[#] Klíč smazán po restartu: {5165BA63-A70A-4262-BC63-3DFBE3F37BA8}
[#] Klíč smazán po restartu: {8956153C-5CFC-4150-B37D-DB68FF089767}
[#] Klíč smazán po restartu: {FF512140-BFF9-425F-AFEA-11A0854ED50C}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{0D6C55A8-3003-4B48-BC64-F604E1F1122D}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{349B6EC0-6C39-432E-9486-64C82F38DE22}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{3CDAE1CB-896D-43E9-84D9-3B57EC71305B}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{47CCD08C-52C0-429C-BD30-E2913B7E4512}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{5A5014D7-80EA-44A4-BD99-264961772989}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{66C08BE3-CEBC-43AB-93CA-D63C3E802A96}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{716741B2-B364-47B7-A4A9-C5DDD84AE1A3}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{91E9A2ED-034A-45ED-831D-E16E1909D446}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{B94227B9-6738-4936-A080-FC69E72AF1FB}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{C85EF181-A7B6-49C2-9ABC-C63065A0A18D}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{D4563CAB-4168-49D2-9ED1-F40E618AA9ED}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Classes\Interface\{0D6C55A8-3003-4B48-BC64-F604E1F1122D}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Classes\Interface\{349B6EC0-6C39-432E-9486-64C82F38DE22}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Classes\Interface\{3CDAE1CB-896D-43E9-84D9-3B57EC71305B}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Classes\Interface\{47CCD08C-52C0-429C-BD30-E2913B7E4512}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Classes\Interface\{5A5014D7-80EA-44A4-BD99-264961772989}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Classes\Interface\{66C08BE3-CEBC-43AB-93CA-D63C3E802A96}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Classes\Interface\{716741B2-B364-47B7-A4A9-C5DDD84AE1A3}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Classes\Interface\{91E9A2ED-034A-45ED-831D-E16E1909D446}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\protector_dll.Protector
[-] Klíč smazán: HKLM\SOFTWARE\Classes\protector_dll.Protector.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib
[-] Klíč smazán: HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\protector_dll.Protector
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\protector_dll.Protector.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{FA7B2795-C0C8-4A58-8672-3F8D80CC0270}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\TypeLib\{1112F282-7099-4624-A439-DB29D6551552}
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1001\Software\PConverter_dz
[-] Klíč smazán: HKU\S-1-5-21-2406856743-1186925505-3104228285-1001\Software\PRODUCTSETUP
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1001\Software\AppDataLow\Software\PConverter_dz
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1004\Software\PConverter_dz
[#] Klíč smazán po restartu: HKU\S-1-5-21-2406856743-1186925505-3104228285-1004\Software\AppDataLow\Software\PConverter_dz
[#] Klíč smazán po restartu: HKCU\Software\PConverter_dz
[#] Klíč smazán po restartu: HKCU\Software\PRODUCTSETUP
[#] Klíč smazán po restartu: HKCU\Software\AppDataLow\Software\PConverter_dz
[#] Klíč smazán po restartu: HKLM\SOFTWARE\PConverter_dz
[-] Klíč smazán: HKLM\SOFTWARE\TData
[-] Klíč smazán: HKLM\SOFTWARE\yoursearchingSoftware
[-] Klíč smazán: HKLM\SOFTWARE\systweak
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PConverter_dzbar Uninstall Internet Explorer
[#] Klíč smazán po restartu: [x64] HKCU\Software\PConverter_dz
[#] Klíč smazán po restartu: [x64] HKCU\Software\PRODUCTSETUP
[#] Klíč smazán po restartu: [x64] HKCU\Software\AppDataLow\Software\PConverter_dz
[-] Klíč smazán: HKU\S-1-5-21-2406856743-1186925505-3104228285-1001\Software\Microsoft\Internet Explorer\SearchScopes\{eb43b60b-2197-43aa-86a6-b143774bae59}
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{eb43b60b-2197-43aa-86a6-b143774bae59}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{eb43b60b-2197-43aa-86a6-b143774bae59}
[#] Klíč smazán po restartu: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{eb43b60b-2197-43aa-86a6-b143774bae59}
[-] Klíč smazán: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
[-] Klíč smazán: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\home.tb.ask.com
[-] Klíč smazán: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\staticimgfarm.com
[#] Klíč smazán po restartu: [x64] HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
[#] Klíč smazán po restartu: [x64] HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\home.tb.ask.com
[#] Klíč smazán po restartu: [x64] HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\staticimgfarm.com
[-] Klíč smazán: HKLM\SOFTWARE\Google\Chrome\Extensions\mibfbmhijjgpkmobcfdlelpccpeafoom


***** [ Prohlížeče ] *****



*************************

:: "Tracing" klíče smazány
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [17175 Bajty] - [07/03/2017 19:12:48]
C:\AdwCleaner\AdwCleaner[S0].txt - [15834 Bajty] - [07/03/2017 19:10:50]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [17323 Bajty] ##########

Re: Problémy s PC

Napsal: 07 bře 2017 19:48
od Rudy
Dejte nový log RSIT.

Re: Problémy s PC

Napsal: 08 bře 2017 16:58
od r.o.s.t.a.c.k.a
Logfile of random's system information tool 1.15 (written by random/random)
Run by aky3746 at 2017-03-08 16:57:15
Microsoft Windows 8.1 Pro
System drive C: has 64 GB (13%) free of 477 GB
Total RAM: 3839 MB (61% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:57:20, on 8. 3. 2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe
C:\Users\aky3746\AppData\Roaming\uTorrent\uTorrent.exe
C:\Users\aky3746\AppData\Roaming\uTorrent\updates\3.4.9_43295\utorrentie.exe
D:\game\World_of_Tanks\WargamingGameUpdater.exe
C:\Users\aky3746\AppData\Roaming\uTorrent\updates\3.4.9_43295\utorrentie.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
C:\Program Files\trend micro\aky3746_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkI ... id=UE12DHP
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {1046a206-5101-4a81-8358-1dbb63ae3210} - C:\Program Files (x86)\PConverter_dz\bar\1.bin\dzSrcAs.dll (file missing)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: (no name) - {656e2a25-8226-470b-9a67-b2a60f657630} - (no file)
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BingExt.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKCU\..\Run: [uTorrent] "C:\Users\aky3746\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [World of Tanks] "D:\game\World_of_Tanks\WargamingGameUpdater.exe"
O4 - Global Startup: O&O Defrag Tray.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Windows\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: O&O Defrag (OODefragAgent) - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe
O23 - Service: Reprobates Drivers Auto Removal (pr2an4ab) (pr2an4ab) - Unknown owner - C:\Windows\system32\pr2an4ab.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9961 bytes

====== Enumerating Processes ======

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\dwm.exe
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\WSLicense\dllhost.exe
"C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe" /backup /iavs
C:\Windows\system32\taskhostex.exe
"C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe" /STARTUP
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BBSvc.exe"
C:\Windows\System32\svchost.exe -k utcsvc
C:\Windows\system32\dashost.exe
"C:\Program Files\OO Software\Defrag\oodag.exe"
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\WSLicense\WmiPrvSE.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-ef420124-2a54-4d0d-a3a7-f50888b231ab -SystemEventPortName:HostProcess-4fa96f21-4143-4961-938a-b3070cc8218b -IoCancelEventPortName:HostProcess-0fbbdccf-7a6d-463f-92fd-8b38650edd11 -NonStateChangingEventPortName:HostProcess-aa851be1-19a3-4077-bfc9-e904bd962d02 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:8350113c-2b41-466f-89f3-7adc274bfb15 -DeviceGroupId:WpdFsGroup
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files\NVIDIA Corporation\Raid\nvraidservice.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\OO Software\Defrag\oodtray.exe"
"C:\Users\aky3746\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
"C:\Users\aky3746\AppData\Roaming\uTorrent\updates\3.4.9_43295\utorrentie.exe" uTorrent_4324_003221A0_1635928949 µTorrent4823DF041B09 uTorrent
"D:\game\World_of_Tanks\WargamingGameUpdater.exe"
"C:\Users\aky3746\AppData\Roaming\uTorrent\updates\3.4.9_43295\utorrentie.exe" uTorrent_4324_00322790_972582271 µTorrent4823DF041B09 uTorrent
"C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe"
C:\Program Files\CCleaner\CCleaner64.exe
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\taskeng.exe
"C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe"
"C:\Program Files\Internet Explorer\iexplore.exe" -ServerName:DefaultBrowserServer
"C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:4088 CREDAT:267777 /prefetch:1
"C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:4088 CREDAT:2102847 /prefetch:1
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-2406856743-1186925505-3104228285-10012_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-2406856743-1186925505-3104228285-10012 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Windows\system32\SearchFilterHost.exe" 0 560 564 572 65536 568
C:\Windows\system32\rundll32.exe
C:\Windows\system32\taskhost.exe
C:\Windows\System32\wsqmcons.exe
C:\Windows\system32\compattel\DiagTrackRunner.exe /UploadEtlFilesOnly
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Users\aky3746\Downloads\RSITx64.exe"

====== Scheduled tasks folder ======

C:\Windows\system32\tasks\Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Windows\system32\tasks\avast! Emergency Update - C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
C:\Windows\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\system32\tasks\SafeZone scheduled Autoupdate 1453222151 - C:\Program Files\AVAST Software\SZBrowser\launcher.exe --scheduledautoupdate $(Arg0)
C:\Windows\system32\tasks\SmartDefrag_AutoDefrag - C:\Program Files (x86)\IObit\Smart Defrag\AutoDefrag.exe /AUTODEFRAG
C:\Windows\system32\tasks\SmartDefrag_Startup - C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe /STARTUP
C:\Windows\system32\tasks\SmartDefrag_Update - C:\Program Files (x86)\IObit\Smart Defrag\AutoUpdate.exe /autorun
C:\Windows\system32\tasks\{185754F9-6C24-4303-A5DE-6067686651FB} - C:\Windows\system32\pcalua.exe -a "C:\Users\aky3746\Downloads\Heavy Metal - FAKK2\autorun.exe" -d "C:\Users\aky3746\Downloads\Heavy Metal - FAKK2"
C:\Windows\system32\tasks\{661932E9-3F7C-42FE-A942-869622740FBA} - C:\Windows\system32\pcalua.exe -a J:\SETUP.EXE -d J:\
C:\Windows\system32\tasks\Microsoft\Windows\WS\License Validation - rundll32.exe WSClient.dll,WSpTLR licensing
C:\Windows\system32\tasks\Microsoft\Windows\WS\WSLicenses - %WinDir%\ServiceProfiles\LocalService\AppData\Local\Microsoft\WSLicense\WmiPrvSE.exe
C:\Windows\system32\tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask - rundll32.exe WSClient.dll,RefreshBannedAppsList
C:\Windows\system32\tasks\Microsoft\Windows\WS\WSSync - %WinDir%\ServiceProfiles\LocalService\AppData\Local\Microsoft\WSLicense\dllhost.exe
C:\Windows\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join - %SystemRoot%\System32\AutoWorkplace.exe join
C:\Windows\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start - C:\Windows\system32\sc.exe start wuauserv
C:\Windows\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network - C:\Windows\system32\sc.exe start wuauserv
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone - %windir%\system32\tzsync.exe
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\srtasks.exe ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask - %windir%\system32\rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
C:\Windows\system32\tasks\Microsoft\Windows\SpacePort\SpaceAgentTask - %windir%\system32\SpaceAgent.exe
C:\Windows\system32\tasks\Microsoft\Windows\Shell\FamilySafetyMonitor - %windir%\System32\wpcmon.exe
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers - %SystemRoot%\System32\drvinst.exe 6
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser - %SystemRoot%\System32\MbaeParserTask.exe
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskCleanup\SilentCleanup - %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive%
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c -h -o -$
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup - %windir%\system32\rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
C:\Windows\system32\tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState - %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent /increment
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattel\DiagTrackRunner.exe /UploadEtlFilesOnly
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\rundll32.exe %windir%\system32\invagent.dll,RunUpdate
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\StartupAppTask - %windir%\system32\rundll32.exe Startupscan.dll,SusRunTask
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\Windows\system32\tasks\Microsoft\Office\Office 15 Subscription Heartbeat - %ProgramFiles%\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
C:\Windows\system32\tasks\Microsoft\Office\OfficeTelemetryAgentFallBack - "C:\Program Files\Microsoft Office\Office15\msoia.exe" scan upload mininterval:2880
C:\Windows\system32\tasks\Microsoft\Office\OfficeTelemetryAgentLogOn - "C:\Program Files\Microsoft Office\Office15\msoia.exe" scan upload
C:\Windows\system32\tasks\AVAST Software\Avast settings backup - C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe /backup /iavs

=========Google Chrome=========

C:\Users\aky3746\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapocclcgogkmnckokdopfmhonfmgoek 1 Prezentace Google 0.9
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Obchod Chrome 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Dokumenty Google 0.9
Extension apdfllckaahabafndbhieahigkjlhalf 1 Disk Google 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension ennkphjdgehloodpbhlhldgbnhmacadg 1 Settings 0.2
Extension felcaaldnbdncclmgdcncolpebgiejap
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 1 Dokumenty Google offline 1.4
Extension gomekmidlodglbbmalcneegieacbdmki 1 Avast Online Security 12.0.163
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.46
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mgndgikekgjfcpckkfioiadnlibdjbkf 1 Chrome 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.2
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Platby Internetového obchodu Chrome 1.0.0.1
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 5616.1121.0.3
Homepage:
default_search_provider.search_url:
C:\Users\aky3746\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki]
"Path"=C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx


======Registry dump ======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-12-13 229064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-02-09 901600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-23 255088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2016-11-15 2351920]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2016-12-13 163528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{656e2a25-8226-470b-9a67-b2a60f657630}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-02-09 678656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-23 193136]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2016-11-15 1743664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BingExt.dll [2012-02-13 1307928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-23 255088]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-23 193136]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BingExt.dll [2012-02-13 1307928]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NVRaidService"=C:\Program Files\NVIDIA Corporation\Raid\nvraidservice.exe [2010-04-09 291944]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2016-05-16 16475392]
"OODefragTray"=C:\Program Files\OO Software\Defrag\oodtray.exe [2016-11-03 5128904]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Users\aky3746\AppData\Roaming\uTorrent\uTorrent.exe [2017-02-03 2143936]
"DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2015-06-18 4468056]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-08-20 8455960]
"World of Tanks"=D:\game\World_of_Tanks\WargamingGameUpdater.exe [2017-02-28 3135752]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-03-23 7139256]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2013-04-29 642304]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O&O Defrag Tray.lnk - C:\Windows\Installer\{7A170C5C-3573-4EA3-AB02-79A3901B2960}\app_icon.ico

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.LAGS"=lagarith.dll
"VIDC.X264"=x264vfw64.dll
"VIDC.XVID"=xvidvfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.l3codecp"=l3codecp.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

====== File associations ======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

====== List of files/folders created in the last 1 month ======

2017-03-08 16:56:24 ----D---- C:\Program Files (x86)\trend micro
2017-03-07 21:18:34 ----D---- C:\Program Files (x86)\Bulletstorm
2017-03-07 19:51:09 ----RHD---- C:\Users\aky3746\AppData\Roaming\SecuROM
2017-03-07 19:34:51 ----D---- C:\Program Files (x86)\Sierra Entertainment
2017-03-07 19:32:57 ----D---- C:\Users\aky3746\AppData\Roaming\InstallShield
2017-03-07 19:20:26 ----AC---- C:\dllhost.exe
2017-03-07 19:06:50 ----DC---- C:\AdwCleaner
2017-03-06 19:15:01 ----D---- C:\Program Files\trend micro
2017-03-06 19:15:00 ----DC---- C:\rsit
2017-03-06 18:52:04 ----D---- C:\Program Files (x86)\Polda 6
2017-03-05 21:20:26 ----D---- C:\Program Files (x86)\Resident Evil 6
2017-03-04 13:43:03 ----D---- C:\Program Files (x86)\Aliens vs. Predator
2017-03-04 12:41:58 ----A---- C:\Windows\system32\FNTCACHE.DAT
2017-02-28 18:35:04 ----D---- C:\Windows\SYSWOW64\xlive
2017-02-28 18:28:13 ----D---- C:\Program Files (x86)\Empire Interactive
2017-02-26 09:28:41 ----D---- C:\ProgramData\IObit
2017-02-26 09:28:39 ----D---- C:\ProgramData\ProductData
2017-02-26 09:28:38 ----A---- C:\Windows\system32\IObitSmartDefragExtension.dll
2017-02-26 09:28:35 ----A---- C:\Windows\system32\SmartDefragBootTime.exe
2017-02-26 09:28:18 ----D---- C:\Program Files (x86)\IObit
2017-02-26 09:27:11 ----D---- C:\Users\aky3746\AppData\Roaming\IObit
2017-02-25 18:40:11 ----D---- C:\Program Files (x86)\R.G. Freedom
2017-02-22 22:49:32 ----D---- C:\Windows\system32\oodag
2017-02-22 22:49:22 ----D---- C:\Program Files\OO Software
2017-02-22 22:48:51 ----D---- C:\ProgramData\OO Software
2017-02-22 21:05:23 ----D---- C:\Users\aky3746\AppData\Roaming\SpinTires
2017-02-22 20:14:31 ----D---- C:\Users\aky3746\AppData\Roaming\Mount&Blade Warband
2017-02-22 20:11:23 ----D---- C:\Program Files (x86)\Mount&Blade Warband
2017-02-19 20:03:54 ----D---- C:\Program Files (x86)\TopCD

====== List of files/folders modified in the last 1 month ======

2017-03-08 16:56:56 ----D---- C:\Users\aky3746\AppData\Roaming\uTorrent
2017-03-08 16:56:24 ----RD---- C:\Program Files (x86)
2017-03-08 16:55:50 ----D---- C:\Windows\Prefetch
2017-03-08 16:49:55 ----D---- C:\Windows\Temp
2017-03-08 16:49:41 ----D---- C:\Windows\SoftwareDistribution
2017-03-08 16:49:36 ----D---- C:\Windows\system32\catroot2
2017-03-08 16:49:18 ----D---- C:\Windows\Inf
2017-03-08 16:48:07 ----D---- C:\Windows
2017-03-08 16:47:51 ----D---- C:\Windows\debug
2017-03-07 22:02:06 ----D---- C:\Windows\system32\sru
2017-03-07 21:36:18 ----SHD---- C:\Windows\Installer
2017-03-07 21:34:14 ----D---- C:\Windows\Logs
2017-03-07 21:21:58 ----RD---- C:\Windows\System32
2017-03-07 21:21:52 ----A---- C:\Windows\system32\slmgr.vbs
2017-03-07 21:21:50 ----A---- C:\Windows\SYSWOW64\slmgr.vbs
2017-03-07 20:56:07 ----D---- C:\Windows\system32\drivers
2017-03-07 19:34:50 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2017-03-07 19:34:40 ----SHD---- C:\System Volume Information
2017-03-07 19:11:26 ----HD---- C:\ProgramData
2017-03-07 09:12:08 ----D---- C:\Windows\Microsoft.NET
2017-03-06 19:15:01 ----RD---- C:\Program Files
2017-03-06 18:26:12 ----D---- C:\Windows\SYSWOW64\directx
2017-03-06 18:26:01 ----HD---- C:\Windows\msdownld.tmp
2017-03-06 17:50:23 ----D---- C:\Program Files (x86)\Capcom
2017-03-06 15:47:46 ----SHD---- C:\Windows\ei_temp
2017-03-06 02:46:38 ----D---- C:\Windows\system32\config
2017-03-06 02:42:54 ----D---- C:\Windows\system32\DriverStore
2017-03-05 17:15:36 ----D---- C:\Hry
2017-03-04 13:40:04 ----D---- C:\Users\aky3746\AppData\Roaming\DAEMON Tools Lite
2017-02-28 18:35:04 ----D---- C:\Windows\SysWOW64
2017-02-27 21:04:10 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-02-27 03:10:00 ----D---- C:\Windows\LiveKernelReports
2017-02-26 21:11:56 ----D---- C:\Windows\Panther
2017-02-26 21:10:10 ----D---- C:\Windows\system32\Tasks
2017-02-26 10:29:35 ----D---- C:\Windows\WinSxS
2017-02-26 09:29:10 ----D---- C:\Program Files (x86)\Common Files
2017-02-25 10:35:27 ----D---- C:\ProgramData\Microsoft Help
2017-02-25 10:35:27 ----A---- C:\Windows\win.ini
2017-02-25 10:34:52 ----D---- C:\Windows\system32\MRT
2017-02-25 10:30:09 ----AC---- C:\Windows\system32\MRT.exe
2017-02-22 20:21:07 ----D---- C:\Windows\CbsTemp
2017-02-22 20:06:42 ----D---- C:\Program Files (x86)\Spintires
2017-02-19 19:28:27 ----RSD---- C:\Windows\assembly
2017-02-19 19:19:26 ----D---- C:\Program Files (x86)\City Interactive
2017-02-19 12:41:44 ----D---- C:\GOG Games
2017-02-18 17:31:45 ----D---- C:\Windows\AppReadiness

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\SysWOW64\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed

====== List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2016-02-09 74544]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2016-09-18 292704]
R0 nvstor64;nvstor64; C:\Windows\system32\DRIVERS\nvstor64.sys [2009-04-29 239136]
R0 pe3an4ab;Reprobates Environment Driver (pe3an4ab); C:\Windows\system32\drivers\pe3an4ab.sys [2007-11-22 72312]
R0 ps7an4ab;Reprobates Synchronization Driver (ps7an4ab); C:\Windows\system32\drivers\ps7an4ab.sys [2007-11-22 103552]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2016-02-09 37144]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2016-02-09 103064]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2016-03-09 1070904]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2016-02-23 463744]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2016-02-09 37656]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2016-03-09 107792]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2016-02-09 165344]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2015-11-09 311968]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2015-11-09 43168]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-02-17 10657792]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-02-17 334336]
R3 dtlitescsibus;@oem3.inf,%DTLITESCSIBUS.DeviceDesc%;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\System32\drivers\dtlitescsibus.sys [2015-11-08 30264]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2016-05-16 4994304]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2012-12-19 13523816]
R3 RTL8023x64;@netrtl64.inf,%Rtlnicx64.Service.DispName%;Realtek 10/100 NIC Family NDIS x64 Driver; C:\Windows\system32\DRIVERS\Rtnic64.sys [2013-06-18 51712]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360]
S3 cmnxusbser;@oem7.inf,%CMNSUSBSER%;Mobile Connector USB Device for Legacy Serial Communication LCT2053s 20140303; C:\Windows\system32\DRIVERS\cmnxusbser.sys [2015-11-24 146424]
S3 cpuz137;cpuz137; \??\C:\Program Files (x86)\CPUID\PC Wizard 2015\pcwiz_x64.sys [2014-02-17 26856]
S3 dg_ssudbus;@oem9.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2015-12-08 122160]
S3 ssudmdm;@oem10.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2015-12-08 214832]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2014-10-29 44544]
S3 WinUsb;@oem11.inf,%WinUSB_SvcDesc%;SAMSUNG Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2015-10-10 78848]

====== List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-12-19 82640]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-04-29 361984]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-02-09 237096]
R2 BBSvc;BingBar Service; C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BBSvc.exe [2012-02-13 193816]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; %SystemRoot%\System32\svchost.exe -k utcsvc;"ServiceDll" = %SystemRoot%\system32\diagtrack.dll
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-12-07 891240]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-12-19 1258856]
R2 OODefragAgent;O&O Defrag; C:\Program Files\OO Software\Defrag\oodag.exe [2016-11-03 1735368]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [2015-06-18 1268568]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-04-23 154440]
S2 pr2an4ab;Reprobates Drivers Auto Removal (pr2an4ab); C:\Windows\system32\pr2an4ab.exe [2007-11-22 777592]
S3 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\SeaPort.exe [2012-02-13 240408]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; %SystemRoot%\System32\svchost.exe -k LocalServiceAndNoImpersonation;"ServiceDll" = %SystemRoot%\System32\BthHFSrv.dll
S3 EasyAntiCheat;EasyAntiCheat; C:\Windows\syswow64\EasyAntiCheat.exe [2016-07-21 227104]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-04-23 154440]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2016-04-23 194032]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-01-23 178760]

-----------------EOF-----------------

Re: Problémy s PC

Napsal: 08 bře 2017 18:14
od Rudy
Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Program Files (x86)\Google\Google Toolbar
C:\Program Files (x86)\Microsoft\BingBar
C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore
C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA

:reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]/64
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{656e2a25-8226-470b-9a67-b2a60f657630}]/64
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]/64
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]/64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]/64
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]/64
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]/64

:services
BBSvc
BBUpdate

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.

Re: Problémy s PC

Napsal: 08 bře 2017 20:22
od r.o.s.t.a.c.k.a
Logfile of random's system information tool 1.15 (written by random/random)
Run by aky3746 at 2017-03-08 20:21:45
Microsoft Windows 8.1 Pro
System drive C: has 52 GB (11%) free of 477 GB
Total RAM: 3839 MB (69% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:21:53, on 8. 3. 2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe
C:\Users\aky3746\AppData\Roaming\uTorrent\uTorrent.exe
D:\game\World_of_Tanks\WargamingGameUpdater.exe
C:\Users\aky3746\AppData\Roaming\uTorrent\updates\3.4.9_43295\utorrentie.exe
C:\Users\aky3746\AppData\Roaming\uTorrent\updates\3.4.9_43295\utorrentie.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\trend micro\aky3746_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkI ... id=UE12DHP
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {1046a206-5101-4a81-8358-1dbb63ae3210} - C:\Program Files (x86)\PConverter_dz\bar\1.bin\dzSrcAs.dll (file missing)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKCU\..\Run: [uTorrent] "C:\Users\aky3746\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [World of Tanks] "D:\game\World_of_Tanks\WargamingGameUpdater.exe"
O4 - Global Startup: O&O Defrag Tray.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Windows\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: O&O Defrag (OODefragAgent) - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe
O23 - Service: Reprobates Drivers Auto Removal (pr2an4ab) (pr2an4ab) - Unknown owner - C:\Windows\system32\pr2an4ab.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9269 bytes

====== Enumerating Processes ======

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\dwm.exe
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\WSLicense\dllhost.exe
C:\Windows\system32\taskhostex.exe
"C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe" /backup /iavs
"C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe" /STARTUP
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
C:\Windows\System32\svchost.exe -k utcsvc
C:\Windows\system32\dashost.exe
"C:\Program Files\OO Software\Defrag\oodag.exe"
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-5e7c9118-2458-4cc5-a87c-daa1667ab7e9 -SystemEventPortName:HostProcess-7f24b3ca-5e91-4153-9e9b-982aae0413bd -IoCancelEventPortName:HostProcess-191f9aac-aabd-4774-8177-6e1d6556b459 -NonStateChangingEventPortName:HostProcess-0305a1c3-876d-4880-bfe7-89ef5c4a7e47 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:e06ae782-1aa5-4041-8394-258fe894758e -DeviceGroupId:WpdFsGroup
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\WSLicense\WmiPrvSE.exe
"C:\Windows\system32\SearchFilterHost.exe" 0 564 568 576 65536 572
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.18384_none_fa1d93c39b41b41a\TiWorker.exe -Embedding
"C:\Program Files\NVIDIA Corporation\Raid\nvraidservice.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\OO Software\Defrag\oodtray.exe"
"C:\Users\aky3746\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
"D:\game\World_of_Tanks\WargamingGameUpdater.exe"
"C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe"
C:\Program Files\CCleaner\CCleaner64.exe
"C:\Users\aky3746\AppData\Roaming\uTorrent\updates\3.4.9_43295\utorrentie.exe" uTorrent_2912_00A663B0_1604738661 µTorrent4823DF041B09 uTorrent
"C:\Users\aky3746\AppData\Roaming\uTorrent\updates\3.4.9_43295\utorrentie.exe" uTorrent_2912_00A65DC0_619483859 µTorrent4823DF041B09 uTorrent
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\system32\SppExtComObj.exe -Embedding
"C:\Users\aky3746\Desktop\RSITx64.exe"

====== Scheduled tasks folder ======

C:\Windows\system32\tasks\Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Windows\system32\tasks\avast! Emergency Update - C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
C:\Windows\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\system32\tasks\SafeZone scheduled Autoupdate 1453222151 - C:\Program Files\AVAST Software\SZBrowser\launcher.exe --scheduledautoupdate $(Arg0)
C:\Windows\system32\tasks\SmartDefrag_AutoDefrag - C:\Program Files (x86)\IObit\Smart Defrag\AutoDefrag.exe /AUTODEFRAG
C:\Windows\system32\tasks\SmartDefrag_Startup - C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe /STARTUP
C:\Windows\system32\tasks\SmartDefrag_Update - C:\Program Files (x86)\IObit\Smart Defrag\AutoUpdate.exe /autorun
C:\Windows\system32\tasks\{185754F9-6C24-4303-A5DE-6067686651FB} - C:\Windows\system32\pcalua.exe -a "C:\Users\aky3746\Downloads\Heavy Metal - FAKK2\autorun.exe" -d "C:\Users\aky3746\Downloads\Heavy Metal - FAKK2"
C:\Windows\system32\tasks\{661932E9-3F7C-42FE-A942-869622740FBA} - C:\Windows\system32\pcalua.exe -a J:\SETUP.EXE -d J:\
C:\Windows\system32\tasks\Microsoft\Windows\WS\License Validation - rundll32.exe WSClient.dll,WSpTLR licensing
C:\Windows\system32\tasks\Microsoft\Windows\WS\WSLicenses - %WinDir%\ServiceProfiles\LocalService\AppData\Local\Microsoft\WSLicense\WmiPrvSE.exe
C:\Windows\system32\tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask - rundll32.exe WSClient.dll,RefreshBannedAppsList
C:\Windows\system32\tasks\Microsoft\Windows\WS\WSSync - %WinDir%\ServiceProfiles\LocalService\AppData\Local\Microsoft\WSLicense\dllhost.exe
C:\Windows\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join - %SystemRoot%\System32\AutoWorkplace.exe join
C:\Windows\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start - C:\Windows\system32\sc.exe start wuauserv
C:\Windows\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network - C:\Windows\system32\sc.exe start wuauserv
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone - %windir%\system32\tzsync.exe
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\srtasks.exe ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask - %windir%\system32\rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
C:\Windows\system32\tasks\Microsoft\Windows\SpacePort\SpaceAgentTask - %windir%\system32\SpaceAgent.exe
C:\Windows\system32\tasks\Microsoft\Windows\Shell\FamilySafetyMonitor - %windir%\System32\wpcmon.exe
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers - %SystemRoot%\System32\drvinst.exe 6
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser - %SystemRoot%\System32\MbaeParserTask.exe
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskCleanup\SilentCleanup - %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive%
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c -h -o -$
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup - %windir%\system32\rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
C:\Windows\system32\tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState - %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent /increment
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattel\DiagTrackRunner.exe /UploadEtlFilesOnly
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\rundll32.exe %windir%\system32\invagent.dll,RunUpdate
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\StartupAppTask - %windir%\system32\rundll32.exe Startupscan.dll,SusRunTask
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\Windows\system32\tasks\Microsoft\Office\Office 15 Subscription Heartbeat - %ProgramFiles%\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
C:\Windows\system32\tasks\Microsoft\Office\OfficeTelemetryAgentFallBack - "C:\Program Files\Microsoft Office\Office15\msoia.exe" scan upload mininterval:2880
C:\Windows\system32\tasks\Microsoft\Office\OfficeTelemetryAgentLogOn - "C:\Program Files\Microsoft Office\Office15\msoia.exe" scan upload
C:\Windows\system32\tasks\AVAST Software\Avast settings backup - C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe /backup /iavs

=========Google Chrome=========

C:\Users\aky3746\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapocclcgogkmnckokdopfmhonfmgoek 1 Prezentace Google 0.9
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Obchod Chrome 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Dokumenty Google 0.9
Extension apdfllckaahabafndbhieahigkjlhalf 1 Disk Google 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension ennkphjdgehloodpbhlhldgbnhmacadg 1 Settings 0.2
Extension felcaaldnbdncclmgdcncolpebgiejap
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 1 Dokumenty Google offline 1.4
Extension gomekmidlodglbbmalcneegieacbdmki 1 Avast Online Security 12.0.163
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.46
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mgndgikekgjfcpckkfioiadnlibdjbkf 1 Chrome 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.2
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Platby Internetového obchodu Chrome 1.0.0.1
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 5616.1121.0.3
Homepage:
default_search_provider.search_url:
C:\Users\aky3746\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki]
"Path"=C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx


======Registry dump ======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-12-13 229064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-02-09 901600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2016-11-15 2351920]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2016-12-13 163528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-02-09 678656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2016-11-15 1743664]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NVRaidService"=C:\Program Files\NVIDIA Corporation\Raid\nvraidservice.exe [2010-04-09 291944]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2016-05-16 16475392]
"OODefragTray"=C:\Program Files\OO Software\Defrag\oodtray.exe [2016-11-03 5128904]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Users\aky3746\AppData\Roaming\uTorrent\uTorrent.exe [2017-02-03 2143936]
"DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2015-06-18 4468056]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-08-20 8455960]
"World of Tanks"=D:\game\World_of_Tanks\WargamingGameUpdater.exe [2017-02-28 3135752]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-03-23 7139256]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2013-04-29 642304]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O&O Defrag Tray.lnk - C:\Windows\Installer\{7A170C5C-3573-4EA3-AB02-79A3901B2960}\app_icon.ico

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.LAGS"=lagarith.dll
"VIDC.X264"=x264vfw64.dll
"VIDC.XVID"=xvidvfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.l3codecp"=l3codecp.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

====== File associations ======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

====== List of files/folders created in the last 1 month ======

2017-03-08 19:03:20 ----DC---- C:\_OTM
2017-03-08 16:56:24 ----D---- C:\Program Files (x86)\trend micro
2017-03-07 21:18:34 ----D---- C:\Program Files (x86)\Bulletstorm
2017-03-07 19:51:09 ----RHD---- C:\Users\aky3746\AppData\Roaming\SecuROM
2017-03-07 19:34:51 ----D---- C:\Program Files (x86)\Sierra Entertainment
2017-03-07 19:32:57 ----D---- C:\Users\aky3746\AppData\Roaming\InstallShield
2017-03-07 19:06:50 ----DC---- C:\AdwCleaner
2017-03-06 19:15:01 ----D---- C:\Program Files\trend micro
2017-03-06 19:15:00 ----DC---- C:\rsit
2017-03-06 18:52:04 ----D---- C:\Program Files (x86)\Polda 6
2017-03-05 21:20:26 ----D---- C:\Program Files (x86)\Resident Evil 6
2017-03-04 13:43:03 ----D---- C:\Program Files (x86)\Aliens vs. Predator
2017-03-04 12:41:58 ----A---- C:\Windows\system32\FNTCACHE.DAT
2017-02-28 18:35:04 ----D---- C:\Windows\SYSWOW64\xlive
2017-02-28 18:28:13 ----D---- C:\Program Files (x86)\Empire Interactive
2017-02-26 09:28:41 ----D---- C:\ProgramData\IObit
2017-02-26 09:28:39 ----D---- C:\ProgramData\ProductData
2017-02-26 09:28:38 ----A---- C:\Windows\system32\IObitSmartDefragExtension.dll
2017-02-26 09:28:35 ----A---- C:\Windows\system32\SmartDefragBootTime.exe
2017-02-26 09:28:18 ----D---- C:\Program Files (x86)\IObit
2017-02-26 09:27:11 ----D---- C:\Users\aky3746\AppData\Roaming\IObit
2017-02-25 18:40:11 ----D---- C:\Program Files (x86)\R.G. Freedom
2017-02-22 22:49:32 ----D---- C:\Windows\system32\oodag
2017-02-22 22:49:22 ----D---- C:\Program Files\OO Software
2017-02-22 22:48:51 ----D---- C:\ProgramData\OO Software
2017-02-22 21:05:23 ----D---- C:\Users\aky3746\AppData\Roaming\SpinTires
2017-02-22 20:14:31 ----D---- C:\Users\aky3746\AppData\Roaming\Mount&Blade Warband
2017-02-22 20:11:23 ----D---- C:\Program Files (x86)\Mount&Blade Warband
2017-02-19 20:03:54 ----D---- C:\Program Files (x86)\TopCD

====== List of files/folders modified in the last 1 month ======

2017-03-08 20:20:30 ----D---- C:\Windows\Prefetch
2017-03-08 20:20:04 ----D---- C:\Users\aky3746\AppData\Roaming\uTorrent
2017-03-08 20:19:17 ----D---- C:\Windows\Temp
2017-03-08 20:05:48 ----RD---- C:\Windows\System32
2017-03-08 20:05:48 ----A---- C:\Windows\system32\slmgr.vbs
2017-03-08 20:05:47 ----A---- C:\Windows\SYSWOW64\slmgr.vbs
2017-03-08 20:02:14 ----D---- C:\Windows\system32\sru
2017-03-08 19:41:16 ----D---- C:\Windows\system32\catroot2
2017-03-08 19:39:43 ----D---- C:\Windows
2017-03-08 19:04:04 ----D---- C:\Program Files (x86)\Microsoft
2017-03-08 19:03:23 ----D---- C:\Program Files (x86)\Google
2017-03-08 18:38:10 ----D---- C:\Windows\SoftwareDistribution
2017-03-08 18:35:01 ----D---- C:\Windows\Logs
2017-03-08 18:32:38 ----D---- C:\Windows\Microsoft.NET
2017-03-08 17:18:23 ----D---- C:\Windows\system32\config
2017-03-08 16:56:24 ----RD---- C:\Program Files (x86)
2017-03-08 16:49:18 ----D---- C:\Windows\Inf
2017-03-08 16:47:51 ----D---- C:\Windows\debug
2017-03-07 21:36:18 ----SHD---- C:\Windows\Installer
2017-03-07 20:56:07 ----D---- C:\Windows\system32\drivers
2017-03-07 19:34:50 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2017-03-07 19:34:40 ----SHD---- C:\System Volume Information
2017-03-07 19:11:26 ----HD---- C:\ProgramData
2017-03-06 19:15:01 ----RD---- C:\Program Files
2017-03-06 18:26:12 ----D---- C:\Windows\SYSWOW64\directx
2017-03-06 17:50:23 ----D---- C:\Program Files (x86)\Capcom
2017-03-06 15:47:46 ----SHD---- C:\Windows\ei_temp
2017-03-06 02:42:54 ----D---- C:\Windows\system32\DriverStore
2017-03-05 17:15:36 ----D---- C:\Hry
2017-03-04 13:40:04 ----D---- C:\Users\aky3746\AppData\Roaming\DAEMON Tools Lite
2017-02-28 18:35:04 ----D---- C:\Windows\SysWOW64
2017-02-27 21:04:10 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-02-27 03:10:00 ----D---- C:\Windows\LiveKernelReports
2017-02-26 21:11:56 ----D---- C:\Windows\Panther
2017-02-26 21:10:10 ----D---- C:\Windows\system32\Tasks
2017-02-26 10:29:35 ----D---- C:\Windows\WinSxS
2017-02-26 09:29:10 ----D---- C:\Program Files (x86)\Common Files
2017-02-25 10:35:27 ----D---- C:\ProgramData\Microsoft Help
2017-02-25 10:35:27 ----A---- C:\Windows\win.ini
2017-02-25 10:34:52 ----D---- C:\Windows\system32\MRT
2017-02-25 10:30:09 ----AC---- C:\Windows\system32\MRT.exe
2017-02-22 20:21:07 ----D---- C:\Windows\CbsTemp
2017-02-22 20:06:42 ----D---- C:\Program Files (x86)\Spintires
2017-02-19 19:28:27 ----RSD---- C:\Windows\assembly
2017-02-19 19:19:26 ----D---- C:\Program Files (x86)\City Interactive
2017-02-19 12:41:44 ----D---- C:\GOG Games
2017-02-18 17:31:45 ----D---- C:\Windows\AppReadiness

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\SysWOW64\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed

====== List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2016-02-09 74544]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2016-09-18 292704]
R0 nvstor64;nvstor64; C:\Windows\system32\DRIVERS\nvstor64.sys [2009-04-29 239136]
R0 pe3an4ab;Reprobates Environment Driver (pe3an4ab); C:\Windows\system32\drivers\pe3an4ab.sys [2007-11-22 72312]
R0 ps7an4ab;Reprobates Synchronization Driver (ps7an4ab); C:\Windows\system32\drivers\ps7an4ab.sys [2007-11-22 103552]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2016-02-09 37144]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2016-02-09 103064]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2016-03-09 1070904]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2016-02-23 463744]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2016-02-09 37656]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2016-03-09 107792]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2016-02-09 165344]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2015-11-09 311968]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2015-11-09 43168]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-02-17 10657792]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-02-17 334336]
R3 dtlitescsibus;@oem3.inf,%DTLITESCSIBUS.DeviceDesc%;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\System32\drivers\dtlitescsibus.sys [2015-11-08 30264]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2016-05-16 4994304]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2012-12-19 13523816]
R3 RTL8023x64;@netrtl64.inf,%Rtlnicx64.Service.DispName%;Realtek 10/100 NIC Family NDIS x64 Driver; C:\Windows\system32\DRIVERS\Rtnic64.sys [2013-06-18 51712]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360]
S3 cmnxusbser;@oem7.inf,%CMNSUSBSER%;Mobile Connector USB Device for Legacy Serial Communication LCT2053s 20140303; C:\Windows\system32\DRIVERS\cmnxusbser.sys [2015-11-24 146424]
S3 cpuz137;cpuz137; \??\C:\Program Files (x86)\CPUID\PC Wizard 2015\pcwiz_x64.sys [2014-02-17 26856]
S3 dg_ssudbus;@oem9.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2015-12-08 122160]
S3 ssudmdm;@oem10.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2015-12-08 214832]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2014-10-29 44544]
S3 WinUsb;@oem11.inf,%WinUSB_SvcDesc%;SAMSUNG Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2015-10-10 78848]

====== List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-12-19 82640]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-04-29 361984]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-02-09 237096]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; %SystemRoot%\System32\svchost.exe -k utcsvc;"ServiceDll" = %SystemRoot%\system32\diagtrack.dll
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-12-07 891240]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-12-19 1258856]
R2 OODefragAgent;O&O Defrag; C:\Program Files\OO Software\Defrag\oodag.exe [2016-11-03 1735368]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [2015-06-18 1268568]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-04-23 154440]
S2 pr2an4ab;Reprobates Drivers Auto Removal (pr2an4ab); C:\Windows\system32\pr2an4ab.exe [2007-11-22 777592]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; %SystemRoot%\System32\svchost.exe -k LocalServiceAndNoImpersonation;"ServiceDll" = %SystemRoot%\System32\BthHFSrv.dll
S3 EasyAntiCheat;EasyAntiCheat; C:\Windows\syswow64\EasyAntiCheat.exe [2016-07-21 227104]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-04-23 154440]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2016-04-23 194032]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-01-23 178760]

-----------------EOF-----------------

Re: Problémy s PC

Napsal: 08 bře 2017 20:47
od Rudy
Dvouklikem na soubor C:\Program Files\trend micro\aky3746_RSITx64.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:
R3 - URLSearchHook: (no name) - {1046a206-5101-4a81-8358-1dbb63ae3210} - C:\Program Files (x86)\PConverter_dz\bar\1.bin\dzSrcAs.dll (file missing)
Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.

Re: Problémy s PC

Napsal: 08 bře 2017 21:47
od r.o.s.t.a.c.k.a
Hotovo..

Logfile of random's system information tool 1.15 (written by random/random)
Run by aky3746 at 2017-03-08 21:40:40
Microsoft Windows 8.1 Pro
System drive C: has 37 GB (8%) free of 477 GB
Total RAM: 3839 MB (64% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:40:42, on 8. 3. 2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe
C:\Users\aky3746\AppData\Roaming\uTorrent\uTorrent.exe
D:\game\World_of_Tanks\WargamingGameUpdater.exe
C:\Users\aky3746\AppData\Roaming\uTorrent\updates\3.4.9_43295\utorrentie.exe
C:\Users\aky3746\AppData\Roaming\uTorrent\updates\3.4.9_43295\utorrentie.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\trend micro\aky3746_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkI ... id=UE12DHP
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKCU\..\Run: [uTorrent] "C:\Users\aky3746\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [World of Tanks] "D:\game\World_of_Tanks\WargamingGameUpdater.exe"
O4 - Global Startup: O&O Defrag Tray.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Windows\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: O&O Defrag (OODefragAgent) - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe
O23 - Service: Reprobates Drivers Auto Removal (pr2an4ab) (pr2an4ab) - Unknown owner - C:\Windows\system32\pr2an4ab.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9059 bytes

====== Enumerating Processes ======

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\dwm.exe
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskhostex.exe
"C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe" /STARTUP
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
C:\Windows\System32\svchost.exe -k utcsvc
C:\Windows\system32\dashost.exe
"C:\Program Files\OO Software\Defrag\oodag.exe"
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-98b7486e-a6ae-4fde-a630-c27006485092 -SystemEventPortName:HostProcess-fc9d4da9-2917-4ede-96d3-fbf2a66ae15e -IoCancelEventPortName:HostProcess-3120f340-923e-4e58-8ac3-4d1ee874349a -NonStateChangingEventPortName:HostProcess-629d979a-dc70-4e61-af56-85377dd90ea7 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:cbee4e18-044f-4dff-8c0b-b221ea99fb94 -DeviceGroupId:WpdFsGroup
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\NVIDIA Corporation\Raid\nvraidservice.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\OO Software\Defrag\oodtray.exe"
"C:\Users\aky3746\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
"D:\game\World_of_Tanks\WargamingGameUpdater.exe"
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe"
"C:\Users\aky3746\AppData\Roaming\uTorrent\updates\3.4.9_43295\utorrentie.exe" uTorrent_2932_00BA9AD0_224431082 µTorrent4823DF041B09 uTorrent
C:\Program Files\CCleaner\CCleaner64.exe
"C:\Users\aky3746\AppData\Roaming\uTorrent\updates\3.4.9_43295\utorrentie.exe" uTorrent_2932_00BA97D8_508622990 µTorrent4823DF041B09 uTorrent
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Windows\system32\taskeng.exe
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\aky3746\Desktop\RSITx64.exe"

====== Scheduled tasks folder ======

C:\Windows\system32\tasks\Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Windows\system32\tasks\avast! Emergency Update - C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
C:\Windows\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\system32\tasks\SafeZone scheduled Autoupdate 1453222151 - C:\Program Files\AVAST Software\SZBrowser\launcher.exe --scheduledautoupdate $(Arg0)
C:\Windows\system32\tasks\SmartDefrag_AutoDefrag - C:\Program Files (x86)\IObit\Smart Defrag\AutoDefrag.exe /AUTODEFRAG
C:\Windows\system32\tasks\SmartDefrag_Startup - C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe /STARTUP
C:\Windows\system32\tasks\SmartDefrag_Update - C:\Program Files (x86)\IObit\Smart Defrag\AutoUpdate.exe /autorun
C:\Windows\system32\tasks\{185754F9-6C24-4303-A5DE-6067686651FB} - C:\Windows\system32\pcalua.exe -a "C:\Users\aky3746\Downloads\Heavy Metal - FAKK2\autorun.exe" -d "C:\Users\aky3746\Downloads\Heavy Metal - FAKK2"
C:\Windows\system32\tasks\{661932E9-3F7C-42FE-A942-869622740FBA} - C:\Windows\system32\pcalua.exe -a J:\SETUP.EXE -d J:\
C:\Windows\system32\tasks\Microsoft\Windows\WS\License Validation - rundll32.exe WSClient.dll,WSpTLR licensing
C:\Windows\system32\tasks\Microsoft\Windows\WS\WSLicenses - %WinDir%\ServiceProfiles\LocalService\AppData\Local\Microsoft\WSLicense\WmiPrvSE.exe
C:\Windows\system32\tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask - rundll32.exe WSClient.dll,RefreshBannedAppsList
C:\Windows\system32\tasks\Microsoft\Windows\WS\WSSync - %WinDir%\ServiceProfiles\LocalService\AppData\Local\Microsoft\WSLicense\dllhost.exe
C:\Windows\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join - %SystemRoot%\System32\AutoWorkplace.exe join
C:\Windows\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start - C:\Windows\system32\sc.exe start wuauserv
C:\Windows\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network - C:\Windows\system32\sc.exe start wuauserv
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone - %windir%\system32\tzsync.exe
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\srtasks.exe ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask - %windir%\system32\rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
C:\Windows\system32\tasks\Microsoft\Windows\SpacePort\SpaceAgentTask - %windir%\system32\SpaceAgent.exe
C:\Windows\system32\tasks\Microsoft\Windows\Shell\FamilySafetyMonitor - %windir%\System32\wpcmon.exe
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers - %SystemRoot%\System32\drvinst.exe 6
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser - %SystemRoot%\System32\MbaeParserTask.exe
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskCleanup\SilentCleanup - %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive%
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c -h -o -$
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup - %windir%\system32\rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
C:\Windows\system32\tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState - %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent /increment
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattel\DiagTrackRunner.exe /UploadEtlFilesOnly
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\rundll32.exe %windir%\system32\invagent.dll,RunUpdate
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\StartupAppTask - %windir%\system32\rundll32.exe Startupscan.dll,SusRunTask
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\Windows\system32\tasks\Microsoft\Office\Office 15 Subscription Heartbeat - %ProgramFiles%\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
C:\Windows\system32\tasks\Microsoft\Office\OfficeTelemetryAgentFallBack - "C:\Program Files\Microsoft Office\Office15\msoia.exe" scan upload mininterval:2880
C:\Windows\system32\tasks\Microsoft\Office\OfficeTelemetryAgentLogOn - "C:\Program Files\Microsoft Office\Office15\msoia.exe" scan upload
C:\Windows\system32\tasks\AVAST Software\Avast settings backup - C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe /backup /iavs

=========Google Chrome=========

C:\Users\aky3746\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapocclcgogkmnckokdopfmhonfmgoek 1 Prezentace Google 0.9
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Obchod Chrome 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Dokumenty Google 0.9
Extension apdfllckaahabafndbhieahigkjlhalf 1 Disk Google 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension ennkphjdgehloodpbhlhldgbnhmacadg 1 Settings 0.2
Extension felcaaldnbdncclmgdcncolpebgiejap
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 1 Dokumenty Google offline 1.4
Extension gomekmidlodglbbmalcneegieacbdmki 1 Avast Online Security 12.0.163
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.46
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mgndgikekgjfcpckkfioiadnlibdjbkf 1 Chrome 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.2
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Platby Internetového obchodu Chrome 1.0.0.1
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 5616.1121.0.3
Homepage:
default_search_provider.search_url:
C:\Users\aky3746\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki]
"Path"=C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx


======Registry dump ======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-12-13 229064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-02-09 901600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2016-11-15 2351920]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2016-12-13 163528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-02-09 678656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2016-11-15 1743664]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NVRaidService"=C:\Program Files\NVIDIA Corporation\Raid\nvraidservice.exe [2010-04-09 291944]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2016-05-16 16475392]
"OODefragTray"=C:\Program Files\OO Software\Defrag\oodtray.exe [2016-11-03 5128904]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Users\aky3746\AppData\Roaming\uTorrent\uTorrent.exe [2017-02-03 2143936]
"DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2015-06-18 4468056]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-08-20 8455960]
"World of Tanks"=D:\game\World_of_Tanks\WargamingGameUpdater.exe [2017-02-28 3135752]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-03-23 7139256]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2013-04-29 642304]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O&O Defrag Tray.lnk - C:\Windows\Installer\{7A170C5C-3573-4EA3-AB02-79A3901B2960}\app_icon.ico

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.LAGS"=lagarith.dll
"VIDC.X264"=x264vfw64.dll
"VIDC.XVID"=xvidvfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.l3codecp"=l3codecp.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

====== File associations ======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

====== List of files/folders created in the last 1 month ======

2017-03-08 21:40:40 ----DC---- C:\rsit
2017-03-08 20:41:31 ----D---- C:\Program Files (x86)\Bethesda Softworks
2017-03-08 16:56:24 ----D---- C:\Program Files (x86)\trend micro
2017-03-07 21:18:34 ----D---- C:\Program Files (x86)\Bulletstorm
2017-03-07 19:51:09 ----RHD---- C:\Users\aky3746\AppData\Roaming\SecuROM
2017-03-07 19:34:51 ----D---- C:\Program Files (x86)\Sierra Entertainment
2017-03-07 19:32:57 ----D---- C:\Users\aky3746\AppData\Roaming\InstallShield
2017-03-07 19:06:50 ----DC---- C:\AdwCleaner
2017-03-06 19:15:01 ----D---- C:\Program Files\trend micro
2017-03-06 18:52:04 ----D---- C:\Program Files (x86)\Polda 6
2017-03-05 21:20:26 ----D---- C:\Program Files (x86)\Resident Evil 6
2017-03-04 13:43:03 ----D---- C:\Program Files (x86)\Aliens vs. Predator
2017-03-04 12:41:58 ----A---- C:\Windows\system32\FNTCACHE.DAT
2017-02-28 18:35:04 ----D---- C:\Windows\SYSWOW64\xlive
2017-02-28 18:28:13 ----D---- C:\Program Files (x86)\Empire Interactive
2017-02-26 09:28:41 ----D---- C:\ProgramData\IObit
2017-02-26 09:28:39 ----D---- C:\ProgramData\ProductData
2017-02-26 09:28:38 ----A---- C:\Windows\system32\IObitSmartDefragExtension.dll
2017-02-26 09:28:35 ----A---- C:\Windows\system32\SmartDefragBootTime.exe
2017-02-26 09:28:18 ----D---- C:\Program Files (x86)\IObit
2017-02-26 09:27:11 ----D---- C:\Users\aky3746\AppData\Roaming\IObit
2017-02-25 18:40:11 ----D---- C:\Program Files (x86)\R.G. Freedom
2017-02-22 22:49:32 ----D---- C:\Windows\system32\oodag
2017-02-22 22:49:22 ----D---- C:\Program Files\OO Software
2017-02-22 22:48:51 ----D---- C:\ProgramData\OO Software
2017-02-22 21:05:23 ----D---- C:\Users\aky3746\AppData\Roaming\SpinTires
2017-02-22 20:14:31 ----D---- C:\Users\aky3746\AppData\Roaming\Mount&Blade Warband
2017-02-22 20:11:23 ----D---- C:\Program Files (x86)\Mount&Blade Warband
2017-02-19 20:03:54 ----D---- C:\Program Files (x86)\TopCD

====== List of files/folders modified in the last 1 month ======

2017-03-08 21:40:43 ----D---- C:\Users\aky3746\AppData\Roaming\uTorrent
2017-03-08 21:33:18 ----RD---- C:\Windows\System32
2017-03-08 21:33:18 ----A---- C:\Windows\SYSWOW64\slmgr.vbs
2017-03-08 21:33:18 ----A---- C:\Windows\system32\slmgr.vbs
2017-03-08 21:30:50 ----D---- C:\Windows\Prefetch
2017-03-08 21:20:53 ----D---- C:\Windows
2017-03-08 21:20:34 ----SHD---- C:\Windows\Installer
2017-03-08 21:20:34 ----D---- C:\Windows\Temp
2017-03-08 21:18:10 ----RSD---- C:\Windows\assembly
2017-03-08 21:17:09 ----SHD---- C:\System Volume Information
2017-03-08 21:16:13 ----D---- C:\Windows\Logs
2017-03-08 21:00:13 ----D---- C:\Windows\system32\sru
2017-03-08 20:59:50 ----D---- C:\Windows\system32\drivers
2017-03-08 20:41:31 ----RD---- C:\Program Files (x86)
2017-03-08 19:41:16 ----D---- C:\Windows\system32\catroot2
2017-03-08 19:04:04 ----D---- C:\Program Files (x86)\Microsoft
2017-03-08 19:03:23 ----D---- C:\Program Files (x86)\Google
2017-03-08 18:38:10 ----D---- C:\Windows\SoftwareDistribution
2017-03-08 18:32:38 ----D---- C:\Windows\Microsoft.NET
2017-03-08 17:18:23 ----D---- C:\Windows\system32\config
2017-03-08 16:49:18 ----D---- C:\Windows\Inf
2017-03-08 16:47:51 ----D---- C:\Windows\debug
2017-03-07 19:34:50 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2017-03-07 19:11:26 ----HD---- C:\ProgramData
2017-03-06 19:15:01 ----RD---- C:\Program Files
2017-03-06 18:26:12 ----D---- C:\Windows\SYSWOW64\directx
2017-03-06 17:50:23 ----D---- C:\Program Files (x86)\Capcom
2017-03-06 15:47:46 ----SHD---- C:\Windows\ei_temp
2017-03-06 02:42:54 ----D---- C:\Windows\system32\DriverStore
2017-03-05 17:15:36 ----D---- C:\Hry
2017-03-04 13:40:04 ----D---- C:\Users\aky3746\AppData\Roaming\DAEMON Tools Lite
2017-02-28 18:35:04 ----D---- C:\Windows\SysWOW64
2017-02-27 21:04:10 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-02-27 03:10:00 ----D---- C:\Windows\LiveKernelReports
2017-02-26 21:11:56 ----D---- C:\Windows\Panther
2017-02-26 21:10:10 ----D---- C:\Windows\system32\Tasks
2017-02-26 10:29:35 ----D---- C:\Windows\WinSxS
2017-02-26 09:29:10 ----D---- C:\Program Files (x86)\Common Files
2017-02-25 10:35:27 ----D---- C:\ProgramData\Microsoft Help
2017-02-25 10:35:27 ----A---- C:\Windows\win.ini
2017-02-25 10:34:52 ----D---- C:\Windows\system32\MRT
2017-02-25 10:30:09 ----AC---- C:\Windows\system32\MRT.exe
2017-02-22 20:21:07 ----D---- C:\Windows\CbsTemp
2017-02-22 20:06:42 ----D---- C:\Program Files (x86)\Spintires
2017-02-19 19:19:26 ----D---- C:\Program Files (x86)\City Interactive
2017-02-19 12:41:44 ----D---- C:\GOG Games
2017-02-18 17:31:45 ----D---- C:\Windows\AppReadiness

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\SysWOW64\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed

====== List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2016-02-09 74544]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2016-09-18 292704]
R0 nvstor64;nvstor64; C:\Windows\system32\DRIVERS\nvstor64.sys [2009-04-29 239136]
R0 pe3an4ab;Reprobates Environment Driver (pe3an4ab); C:\Windows\system32\drivers\pe3an4ab.sys [2007-11-22 72312]
R0 ps7an4ab;Reprobates Synchronization Driver (ps7an4ab); C:\Windows\system32\drivers\ps7an4ab.sys [2007-11-22 103552]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2016-02-09 37144]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2016-02-09 103064]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2016-03-09 1070904]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2016-02-23 463744]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2016-02-09 37656]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2016-03-09 107792]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2016-02-09 165344]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2015-11-09 311968]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2015-11-09 43168]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-02-17 10657792]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-02-17 334336]
R3 dtlitescsibus;@oem3.inf,%DTLITESCSIBUS.DeviceDesc%;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\System32\drivers\dtlitescsibus.sys [2015-11-08 30264]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2016-05-16 4994304]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2012-12-19 13523816]
R3 RTL8023x64;@netrtl64.inf,%Rtlnicx64.Service.DispName%;Realtek 10/100 NIC Family NDIS x64 Driver; C:\Windows\system32\DRIVERS\Rtnic64.sys [2013-06-18 51712]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360]
S3 cmnxusbser;@oem7.inf,%CMNSUSBSER%;Mobile Connector USB Device for Legacy Serial Communication LCT2053s 20140303; C:\Windows\system32\DRIVERS\cmnxusbser.sys [2015-11-24 146424]
S3 cpuz137;cpuz137; \??\C:\Program Files (x86)\CPUID\PC Wizard 2015\pcwiz_x64.sys [2014-02-17 26856]
S3 dg_ssudbus;@oem9.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2015-12-08 122160]
S3 ssudmdm;@oem10.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2015-12-08 214832]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2014-10-29 44544]
S3 WinUsb;@oem11.inf,%WinUSB_SvcDesc%;SAMSUNG Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2015-10-10 78848]

====== List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-12-19 82640]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-04-29 361984]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-02-09 237096]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; %SystemRoot%\System32\svchost.exe -k utcsvc;"ServiceDll" = %SystemRoot%\system32\diagtrack.dll
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-12-07 891240]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-12-19 1258856]
R2 OODefragAgent;O&O Defrag; C:\Program Files\OO Software\Defrag\oodag.exe [2016-11-03 1735368]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [2015-06-18 1268568]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-04-23 154440]
S2 pr2an4ab;Reprobates Drivers Auto Removal (pr2an4ab); C:\Windows\system32\pr2an4ab.exe [2007-11-22 777592]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; %SystemRoot%\System32\svchost.exe -k LocalServiceAndNoImpersonation;"ServiceDll" = %SystemRoot%\System32\BthHFSrv.dll
S3 EasyAntiCheat;EasyAntiCheat; C:\Windows\syswow64\EasyAntiCheat.exe [2016-07-21 227104]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-04-23 154440]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2016-04-23 194032]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-01-23 178760]

-----------------EOF-----------------

Re: Problémy s PC

Napsal: 08 bře 2017 22:02
od Rudy
OK. Nastala nějaká změna?
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz