Černá obrazovka po startu-logy

[Karrex]

Zdravím, nějakou dobu řeším problém, že po obrazovce Vítejte, kdy se má zobrazit plocha, zůstane jen černá obrazovka. Už jsou spuštěné nějaké aplikace a vypadá to, jako by to čekalo, až se něco spustí, po té chvilce, naběhne zbytek programů a zobrazí se plocha.

Prosím tedy o kontrolu, díky moc, jste nejlepší .

Používám Chrome, TFC už jsem použil, .

Hijack
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:49:55, on 30.7.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17910)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
D:\Programy\Steam\Steam.exe
C:\Program Files (x86)\Gyazo\GyStation.exe
C:\Program Files (x86)\Gmail Notifier Pro\GmailNotifierPro.exe
C:\Users\LM\AppData\Local\FluxSoftware\Flux\flux.exe
C:\Users\LM\AppData\Local\MEGAsync\MEGAsync.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\PROGRA~2\Raptr\raptr.exe
C:\PROGRA~2\Raptr\raptr_im.exe
D:\Programy\Steam\bin\steamwebhelper.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamresearch.exe
C:\Users\LM\Desktop\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Raptr] "C:\Program Files (x86)\Raptr\raptrstub.exe" --startup
O4 - HKLM\..\RunOnce: [vcredist_x86] C:\Users\LM\AppData\Local\Microsoft\Redist\vcredist_x86.exe
O4 - HKLM\..\RunOnce: [PreRun] C:\Program Files (x86)\Gigabyte\AppCenter\PreRun.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "D:\Programy\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Steam] "D:\Programy\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Gyazo] C:\Program Files (x86)\Gyazo\GyStation.exe
O4 - HKCU\..\Run: [GmailNotifierPro] C:\Program Files (x86)\Gmail Notifier Pro\GmailNotifierPro.exe /minimized
O4 - HKCU\..\Run: [f.lux] "C:\Users\LM\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
O4 - HKCU\..\Run: [EPSON SX410 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFCE.EXE /FU "C:\Windows\TEMP\E_S9E97.tmp" /EF "HKCU"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Startup: MEGAsync.lnk = LM\AppData\Local\MEGAsync\MEGAsync.exe
O8 - Extra context menu item: E&xportovat do Microsoft Excelu - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - D:\Programy\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Windows\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Futuremark SystemInfo Service - Futuremark - C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe
O23 - Service: GIGABYTE Adjust (gadjservice) - Unknown owner - C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HwmRecordService - GIGA-BYTE TECHNOLOGY CO., LTD. - C:\Program Files (x86)\GIGABYTE\SIV\HwmRecordService.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LAN-HAM - Keen Software House - D:\Stažené soubory\Space_Engineers_v01.085.008\DedicatedServer64\SpaceEngineersDedicated.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - D:\Programy\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Samsung RAPID Mode Service (SamsungRapidSvc) - Unknown owner - C:\Windows\system32\RAPID\SamsungRapidSvc.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) Extreme Tuning Utility Service (XTU3SERVICE) - Intel(R) Corporation - C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe

--
End of file - 12172 bytes


ADW
# AdwCleaner v4.208 - Log vytvořen 30/07/2015 v 17:54:06
# Aktualizováno 09/07/2015 by Xplode
# Databáze : 2015-07-26.2 [Server]
# Operační system : Windows 7 Ultimate Service Pack 1 (x64)
# Uživatelské jméno : LM - LM-PC
# Spuštěno z : C:\Users\LM\Desktop\AdwCleaner.exe
# Nastavení : Sken

***** [ Služby ] *****


***** [ Soubory / Složky ] *****


***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Nalezeno : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
Klíč Nalezeno : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Klíč Nalezeno : HKLM\SOFTWARE\3378f6f9-92a0-4fa8-ab82-a687f118c9be
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{26d866bb}

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17909


-\\ Google Chrome v44.0.2403.125


*************************

AdwCleaner[R1].txt - [1072 bytů] - [30/07/2015 17:52:53]
AdwCleaner[R2].txt - [996 bytů] - [30/07/2015 17:54:06]

########## EOF - C:\AdwCleaner\AdwCleaner[R2].txt - [1053 bytů] ##########

MBAM
Malwarebytes Anti-Malware
http://www.malwarebytes.org

Datum skenování: 30.7.2015
Čas skenování: 17:55
Protokol:
Správce: Ano

Verze: 2.1.8.1057
Databáze malwaru: v2015.07.30.04
Databáze rootkitů: v2015.07.29.02
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: LM

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 346783
Uplynulý čas: 4 min, 15 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 1
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{26d866bb}, , [6b81a3447119a69044ed6537b25256aa],

Hodnoty registru: 1
Trojan.Inject, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE|vcredist_x86, C:\Users\LM\AppData\Local\Microsoft\Redist\vcredist_x86.exe, , [b23a63846426e84e29b30bbd6e93946c]

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 1
Trojan.Inject, C:\Users\LM\AppData\Local\Microsoft\Redist\vcredist_x86.exe, , [b23a63846426e84e29b30bbd6e93946c],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

[Reklama]

[jaro3]

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

. spusť znovu MbAM a dej Skenovat nyní
- po proběhnutí programu se ti objeví hláška tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.

Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

[Karrex]

Díky za pomoc, ještě dodám, dnes se mi po startu začala otvírat ruská stránka v Chromu, kde se přehrává nějaký zvuk a jsou tam reklamy na hry.
Když jsem vypl AV, zavíraly se mi jen tak procesy, teď mi ale stále nejde spustit MBAM. Klikám a nic.

ADWC
# AdwCleaner v4.208 - Log vytvořen 31/07/2015 v 12:01:27
# Aktualizováno 09/07/2015 by Xplode
# Databáze : 2015-07-26.2 [Server]
# Operační system : Windows 7 Ultimate Service Pack 1 (x64)
# Uživatelské jméno : LM - LM-PC
# Spuštěno z : C:\Users\LM\Desktop\AdwCleaner.exe
# Nastavení : Čištění

***** [ Služby ] *****


***** [ Soubory / Složky ] *****


***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\3378f6f9-92a0-4fa8-ab82-a687f118c9be
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{26d866bb}
Klíč Smazáno : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Klíč Smazáno : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17909


-\\ Google Chrome v44.0.2403.125


*************************

AdwCleaner[R1].txt - [1072 bytů] - [30/07/2015 17:52:53]
AdwCleaner[R2].txt - [1131 bytů] - [30/07/2015 17:54:06]
AdwCleaner[R3].txt - [1190 bytů] - [31/07/2015 12:00:37]
AdwCleaner[S0].txt - [1111 bytů] - [31/07/2015 12:01:27]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1169 bytů] ##########

JRT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.5.4 (07.27.2015:1)
OS: Windows 7 Ultimate x64
Ran by LM on p  31.07.2015 at 12:07:11,20
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\cmd



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] C:\Users\LM\Appdata\Local\crashrpt



~~~ Chrome


[C:\Users\LM\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\LM\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\LM\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\LM\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on p  31.07.2015 at 12:08:41,14
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

ROGUE

RogueKiller V10.9.4.0 (x64) [Jul 30 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno : Normální režim
Uživatel : LM [Práva správce]
Started from : C:\Users\LM\Desktop\RogueKillerX64.exe
Mód : Prohledat -- Datum : 07/31/2015 12:15:16

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 8 ¤¤¤
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 213.211.50.1 213.211.50.2 ([-][CZ]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 213.211.50.1 213.211.50.2 ([-][CZ]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : 213.211.50.1 213.211.50.2 ([-][CZ]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{B7E9DF6C-6744-46C7-8376-D69A49B69FD0} | DhcpNameServer : 213.211.50.1 213.211.50.2 ([-][CZ]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{B7E9DF6C-6744-46C7-8376-D69A49B69FD0} | DhcpNameServer : 213.211.50.1 213.211.50.2 ([-][CZ]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{B7E9DF6C-6744-46C7-8376-D69A49B69FD0} | DhcpNameServer : 213.211.50.1 213.211.50.2 ([-][CZ]) -> Nalezeno
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-3685760754-3291027860-3652961857-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Nalezeno
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-3685760754-3291027860-3652961857-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Nalezeno

¤¤¤ Úlohy : 2 ¤¤¤
[Suspicious.Path] \GoogleUpdate -- C:\Users\LM\AppData\Roaming\Google\downloader.exe (/VERYSILENT) -> Nalezeno
[Suspicious.Path] \GoogleUpdateClient -- C:\Users\LM\AppData\Roaming\Google\downloader.exe (/VERYSILENT) -> Nalezeno

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 1 ¤¤¤
[C:\Windows\System32\drivers\etc\hosts] 127.0.0.1 api.gameanalytics.com

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: Samsung SSD 840 EVO 120G SCSI Disk Device +++++
--- User ---
[MBR] 6e1cbbac4fdce79b754d357673701a8d
[BSP] c3d70c372c99fac63e6d5d9e9a4fcbd6 : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 102924 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: ST1000DM 003-1CH162 SCSI Disk Device +++++
--- User ---
[MBR] 2b5dd762acf04da95d32d4d60be5e4ff
[BSP] 43438e7fd30420a4d26f0629eac47869 : Empty|VT.Unknown MBR Code
Partition table:
0 - Microsoft reserved partition | Offset (sectors): 34 | Size: 128 MB
1 - | Offset (sectors): 264192 | Size: 487 MB
2 - Basic data partition | Offset (sectors): 1261568 | Size: 953252 MB
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive2: WDC WD5000AVDS-63U7B SCSI Disk Device +++++
--- User ---
[MBR] 27116db04dc866c8b54d4d9c9d171ae9
[BSP] 3cb4fef93fc223b4dbba5206337942b1 : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 476937 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive3: EPSON Stylus Storage USB Device +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

[jaro3]

. spusť znovu MbAM a dej Skenovat nyní
- po proběhnutí programu se ti objeví hláška tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB (kromě myši s klávesnice) nebo externí disky z počítače před spuštěním tohoto programu.
Spusť znovu RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Pak klikni na "Prohledat " ,po jeho skončení:

- V záložkách (Registry , Tasks , Web Browser apod.) vše zatrhni (dej zatržítka)
(musíš dát myší zatržítko do toho čtverečku vlevo od registru ap.)

- Klikni na "Smazat"
- Počkej, dokud Status box nezobrazí " Mazání dokončeno "
- Klikni na "Zpráva " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Vypni antivir i firewall.
Stáhni
Zoek.exe

a uloz si ho na plochu.
Zavři všechny ostatní programy , okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
- pozor , náběh programu může trvat déle.

Do okna programu vlož skript níže:

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;

klikni na Run Script
Program provede sken , opravu, sken i oprava může trvat i více minut ,je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .

Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů , jinak se sám ukládá do:
C:\zoek-results.log
Zkopíruj sem celý obsah toho logu.

[Karrex]

MBAM nejde stále spustit jak tu je i v jiných tématech... V rootkitech jsou taky záznamy, to je v pořádku, že to není v logu?

Problém je stále.

ROGUE
RogueKiller V10.9.4.0 (x64) [Jul 30 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno : Normální režim
Uživatel : LM [Práva správce]
Started from : C:\Users\LM\Desktop\RogueKillerX64.exe
Mód : Smazat -- Datum : 08/05/2015 12:29:34

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 8 ¤¤¤
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 213.211.50.1 213.211.50.2 ([-][CZ]) -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 213.211.50.1 213.211.50.2 ([-][CZ]) -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : 213.211.50.1 213.211.50.2 ([-][CZ]) -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{B7E9DF6C-6744-46C7-8376-D69A49B69FD0} | DhcpNameServer : 213.211.50.1 213.211.50.2 ([-][CZ]) -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{B7E9DF6C-6744-46C7-8376-D69A49B69FD0} | DhcpNameServer : 213.211.50.1 213.211.50.2 ([-][CZ]) -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{B7E9DF6C-6744-46C7-8376-D69A49B69FD0} | DhcpNameServer : 213.211.50.1 213.211.50.2 ([-][CZ]) -> Nahrazeno ()
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-3685760754-3291027860-3652961857-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Nahrazeno (1)
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-3685760754-3291027860-3652961857-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Nahrazeno (1)

¤¤¤ Úlohy : 2 ¤¤¤
[Suspicious.Path] \GoogleUpdate -- C:\Users\LM\AppData\Roaming\Google\downloader.exe (/VERYSILENT) -> Smazáno
[Suspicious.Path] \GoogleUpdateClient -- C:\Users\LM\AppData\Roaming\Google\downloader.exe (/VERYSILENT) -> Smazáno

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 1 ¤¤¤
[C:\Windows\System32\drivers\etc\hosts] 127.0.0.1 api.gameanalytics.comSmazáno

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: Samsung SSD 840 EVO 120G SCSI Disk Device +++++
--- User ---
[MBR] 6e1cbbac4fdce79b754d357673701a8d
[BSP] c3d70c372c99fac63e6d5d9e9a4fcbd6 : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 102924 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: ST1000DM 003-1CH162 SCSI Disk Device +++++
--- User ---
[MBR] 2b5dd762acf04da95d32d4d60be5e4ff
[BSP] 43438e7fd30420a4d26f0629eac47869 : Empty MBR Code
Partition table:
0 - Microsoft reserved partition | Offset (sectors): 34 | Size: 128 MB
1 - | Offset (sectors): 264192 | Size: 487 MB
2 - Basic data partition | Offset (sectors): 1261568 | Size: 953252 MB
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive2: WDC WD5000AVDS-63U7B SCSI Disk Device +++++
--- User ---
[MBR] 27116db04dc866c8b54d4d9c9d171ae9
[BSP] 3cb4fef93fc223b4dbba5206337942b1 : Windows Vista/7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 476937 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive3: EPSON Stylus Storage USB Device +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

ZOEK
Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by LM on st 05.08.2015 at 12:32:52,45.
Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\LM\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

5.8.2015 12:33:05 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\Program Files\Rockstar Games deleted successfully
C:\Users\LM\AppData\Local\EmieBrowserModeList deleted successfully
C:\Users\LM\AppData\Local\EmieSiteList deleted successfully
C:\Users\LM\AppData\Local\EmieUserList deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Files \ Folders ======================

C:\PROGRA~2\SteamHelper deleted
C:\PROGRA~3\Package Cache deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted

==== Chromium Look ======================

SIH - LM\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl
AdBlock - LM\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom

==== Chromium Startpages ======================

C:\Users\LM\AppData\Local\Google\Chrome\User Data\Default\Preferences
/mail/ca/#settings","permissions":["notifications"],"update_url":"http://clients2.google.com/service/update2/crx","version":"8.1"},"page_ordinal":"n","path":"pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0","preferences":{},"regular_only_preferences":{},"state":1,"was_installed_by_default":true,"was_installed_by_oem":false}}},"google":{"services":{"account_id":"lucikmucikmb@gmail.com","last_username":"lucikmucik.mb@gmail.com"}},"homepage":"","pinned_tabs":[],"protection":{"macs":{"browser":{"show_home_button":"2AA067943536BC819854B67877109FFF733EA9F1ACB1CC7FBDAE25877DCF0322"},"default_search_provider":{"keyword":"CF59CC0543B4CC0E8E38A9ECCC55052C1CC3C52C484655FA1883B637438624F4","name":"4538A1357F807B5AA2208F76AD2296BC959203C43463CF1484DE33F7F2432948","search_url":"E1A0773793B79A617E5B87514D4F3F27F66271A96727E4888023149525C9A3C0"},"default_search_provider_data":{"template_url_data":"1BE4D05EB79FE5C1F3128BCC878EF19DEA024F1CE49B18F6283A3FB8D5DAFCEC"},"extensions":{"settings":{"aapocclcgogkmnckokdopfmhonfmgoek":"921D78691C72B553A41BC6F60DD9EDCDAF5F67515E37041D66C89CD5254DED15","ahfgeienlihckogmohjhadlkjgocpleb":"91339592CC4E99F3B037731EC8ACBE40F784786E2A990093B2CAE985F5C16342","aohghmighlieiainnegkcijnfilokake":"DB4F85A78598D3C40BE36FECDC33C9383C03A795A8FCC7EB12CB064B1938FDA5","apdfllckaahabafndbhieahigkjlhalf":"F397F6FF9244FCF5D851E905FBBDB36D53D493984663264A69DB77CD8A337D53","bepbmhgboaologfdajaanbcjmnhjmhfn":"DDECE154EDE215808CAD10E2552F5DA3DE9D269E968F26C2AC1792D98EFA2E3E","blpcfgokakmgnkcojhhkbfbldkacnbeo":"B2673FABD839F3BAA875890326F99380DCEFFB5475542311CCBA624F568EEBC3","cmeakgjggjdlcpncigglobpjbkabhmjl":"A07C95D12BB9CE1DB806ECF379BBD5ACBBF2291C8569B88D443859DFBF87B6C1","coobgpohoikkiipiblmjeljniedjpjpf":"84D5D2E72D6C2CEBACE3F40E3249111CE5C635DAF013C7C604875F6412BD54AD","eemcgdkfndhakfknompkggombfjjjeno":"6A7D97CD9DD12FC80E10FEB4C4990CE6C85DD665519A8B97C4500D9C6D22FF48","ennkphjdgehloodpbhlhldgbnhmacadg":"5471240BCD944EC922D5E3E95E5701F069AE5F874B2A9260FCB8D12AA4C69039","felcaaldnbdncclmgdcncolpebgiejap":"1780113EAE85D1F1C82140DCD6466D8B9F38FC88F53D6FBE8865F3AC136D77D6","gfdkimpbcpahaombhbimeihdjnejgicl":"7EB4346201EE04032318BB843B4181F0E8D1BAD4E8C4AE93BC6D3D4121E5FFFC","gighmmpiobklfepjocnamgkkbiglidom":"C69A1C09698A9AA0A6F6417A5EDD5624C4202B66B86B6DA96E72FB28E1F775E3","kmendfapggjehodndflmmgagdbamhnfd":"F5DD555AD92CDC55C169614A210F9F8C7BF6AC8F439BE0E954BD006DC7D83D20","mfehgcgbbipciphmccgaenjidiccnmng":"AA4D78B2E0FDB13BC3D7A5EADC2A3DF081EF3993C6E68621633B2D8841CB40EE","mfffpogegjflfpflabcdkioaeobkgjik":"2998B239ADB0E3E393E9E5CDD5A9CF8F3ACBEA432A2D1C534AE165ED26E953A1","mgndgikekgjfcpckkfioiadnlibdjbkf":"11A4655683A1512EF0FB4A8DAE125FD421CAB72A442E862ADD69138700F22536","mhjfbmdgcfjbbpaeojofohoefgiehjai":"4ECB6DD37901C1F3C85DF8F75233C243E019C4BC408802E9B17D170064F75153","neajdppkdcdipfabeoofebfddakdcjhd":"85168E23845BB0F923DB644D92506B51D6690C9931B11ADC0EFC535059A069B0","nkeimhogjdpnpccoofpliimaahmaaome":"0DCC4EE44A6ED2F564EF21D470CDB20067C3E35405710CED8CC60953AD4B95AB","nmmhkkegccagdldgiimedpiccmgmieda":"CB20D805DB85BF16373E69F47190A1A01315ED070C0860C5C0ECFAE3017466D2","pafkbggdmjlpgkdkcbjmhmfcdpncadgh":"A1B207F6DC471ADF8DCFE78B767F6BE646D2F96F9475697B8E312408E5CF977C","pjkljhegncpnkpknbcohdijeoejaedia":"28785D2245BF9459BB80B543F0968711C926C2F8B27F5854B6469040950440AA"}},"google":{"services":{"account_id":"DB3D5AEA174FA952ECB9A7E73BAAF3C112BCBB737EF2B5DECAC2E5B941C3C1EC","last_username":"036B44D3EE241751B5EFA69AEB66D954EACB409A10AFFC7F2402E7601F7C893D","username":"EED0252F6131BF2843E9F739A849830EF27ED5713A3B0E1F65DA332832F4F6D8"}},"homepage":"CEA35B23A6D89FB90F3DF4ED9CD7FA4A1AFE9252A7A32F200C6FC756CE37C618","homepage_is_newtabpage":"7F181134669161926D96635E93FBD6387BC632F60A416D0A184FCDE1D435937D","pinned_tabs":"C7BBA0006A9C62B29207A8745449F5E205FDBB53B477F9A40F0C264D87E9FCB9","prefs":{"preference_reset_time":"F93E2048D2F7028BD8470E33215B1CA2694AF3A3D38B7299C4949C3DDA6F3BED"},"profile":{"reset_prompt_memento":"7E56E8CEF21ED1A8C3A443DB354D5ED379DB180EC1E04BFBF09413AD8D702E31"},"safebrowsing":{"incidents_sent":"D1C950EAE94A33F371339F71243FCC1CA9CCEC5F29A5F73A3E4D39C84D5A7CF3"},"search_provider_overrides":"79017C702CF3649FFC9FCC632B1ADEB3FC94C40735B82363328BA6233B787D9F","session":{"restore_on_startup":"619CE0853D4C33FF91D01290D0175E95B0C1BDA0D2924B27DACB8BCF8DC0E626","startup_urls":"5BA8979AE2A9DB2F0087B00CD3DD47F390D7F998702C41E575FD82826A5C0DA6"},"software_reporter":{"prompt_reason":"DA84DF9BB9886E4037EC1D7FEE9B24174ECA5EB8B7169FCD55183ADB7F51740C","prompt_seed":"9522C8ACB765E4AA694B9A52DD157E4EDCC04AE2EBB0254944ED73E545D40ED7","prompt_version":"3F18852D3F480CF3C73CB2A602F7CDBCDC56160CC51BA9140A3A0201445C3AD3"},"sync":{"remaining_rollback_tries":"C188309708C982849159D7009068BDC270BC95390AF3D5BFA3F14B5C80AC99D5"}},"super_mac":"E00A67DE5B63B67834B2A81311E8D1C9A06F65E2914C08068278F278A26CBD04"},"sync":{"remaining_rollback_tries":0}}


==== Set IE to Default ======================

Old Values:

New Values:

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

==== Reset Google Chrome ======================

C:\Users\LM\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\LM\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\LM\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\LM\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\adwcleaner_4.207.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\adwcleaner_4.208.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AnVir.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AutoLogger.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avz.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CCleaner.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CCleaner64.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FRST.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FRST64.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\HiJackThis.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mbam.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RegWorks.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RSIT.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RSITx64.exe deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\LM\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\LM\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=58 folders=36 99547118 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\LM\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\LM\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on st 05.08.2015 at 12:40:19,49 ======================

[jaro3]

rootkity RK , to je OK.

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

[Karrex]

ComboFix 15-08-03.01 - LM 05.08.2015 17:47:36.1.8 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.8133.4706 [GMT 2:00]
Spuštěný z: c:\users\LM\Desktop\ComboFix.exe
AV: ESET Smart Security 8.0 *Disabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
FW: ESET Personální firewall *Disabled* {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
SP: ESET Smart Security 8.0 *Disabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\srchasst\srchasm.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2015-07-05 do 2015-08-05 )))))))))))))))))))))))))))))))
.
.
2015-08-05 15:50 . 2015-08-05 15:50 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-08-05 10:38 . 2015-08-05 10:32 24064 ----a-w- c:\windows\zoek-delete.exe
2015-08-05 10:38 . 2015-08-05 15:50 -------- d-----w- c:\users\LM\AppData\Local\Temp
2015-08-05 10:32 . 2015-08-05 10:37 -------- d-----w- C:\zoek_backup
2015-08-04 11:05 . 2015-07-15 01:12 12222168 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{99BCA92E-7FCA-47B2-8813-5B4E0740B365}\mpengine.dll
2015-08-02 15:10 . 2015-08-02 15:10 -------- d-----w- c:\users\LM\AppData\Roaming\7DaysToDie
2015-08-01 20:08 . 2015-08-01 20:08 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2015-08-01 20:08 . 2015-06-18 06:41 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2015-08-01 20:08 . 2015-06-18 06:41 109272 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-08-01 20:08 . 2015-06-18 06:41 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-08-01 17:39 . 2015-08-01 17:39 -------- d-----w- c:\users\LM\AppData\Local\Skyrim
2015-07-31 14:35 . 2015-07-31 14:35 -------- d-----w- c:\users\LM\AppData\Local\CrashDumps
2015-07-31 10:06 . 2015-08-05 10:26 37624 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2015-07-31 10:06 . 2015-07-31 10:07 -------- d-----w- c:\programdata\RogueKiller
2015-07-30 13:48 . 2015-08-05 10:25 -------- d-----w- C:\AdwCleaner
2015-07-30 13:48 . 2015-07-30 13:48 -------- d-----w- c:\programdata\Malwarebytes
2015-07-29 15:09 . 2015-06-17 09:10 40280 ----a-w- c:\windows\system32\nvhdap64.dll
2015-07-29 14:52 . 2015-07-23 04:06 1898128 ----a-w- c:\windows\system32\nvdispco6435362.dll
2015-07-29 14:52 . 2015-07-23 04:06 1557648 ----a-w- c:\windows\system32\nvdispgenco6435362.dll
2015-07-29 14:48 . 2015-07-03 04:28 47976 ----a-w- c:\windows\system32\drivers\nvvad64v.sys
2015-07-29 14:48 . 2015-07-03 04:28 65896 ----a-w- c:\windows\SysWow64\nvaudcap32v.dll
2015-07-28 18:11 . 2015-07-25 18:07 17856 ----a-w- c:\windows\system32\CompatTelRunner.exe
2015-07-28 18:11 . 2015-07-25 18:04 726528 ----a-w- c:\windows\system32\generaltel.dll
2015-07-28 18:11 . 2015-07-25 18:04 765440 ----a-w- c:\windows\system32\invagent.dll
2015-07-28 18:11 . 2015-07-25 18:03 433664 ----a-w- c:\windows\system32\devinv.dll
2015-07-28 18:11 . 2015-07-25 18:03 1085440 ----a-w- c:\windows\system32\appraiser.dll
2015-07-28 18:11 . 2015-07-25 18:03 67584 ----a-w- c:\windows\system32\acmigration.dll
2015-07-28 18:11 . 2015-07-25 18:03 227328 ----a-w- c:\windows\system32\aepdu.dll
2015-07-28 18:11 . 2015-07-25 17:55 1145856 ----a-w- c:\windows\system32\aeinv.dll
2015-07-27 14:17 . 2015-07-27 14:17 -------- d-----w- c:\users\LM\AppData\Roaming\Milestone
2015-07-25 19:32 . 2015-07-25 19:32 -------- d-----w- c:\users\LM\AppData\Roaming\dvdcss
2015-07-22 13:06 . 2015-07-22 13:06 -------- d-----w- c:\users\LM\AppData\Local\CEF
2015-07-21 14:14 . 2015-08-05 15:49 -------- d-----w- c:\windows\srchasst
2015-07-21 12:59 . 2015-07-15 03:19 41984 ----a-w- c:\windows\system32\lpk.dll
2015-07-21 12:59 . 2015-07-15 03:19 100864 ----a-w- c:\windows\system32\fontsub.dll
2015-07-21 12:59 . 2015-07-15 03:19 14336 ----a-w- c:\windows\system32\dciman32.dll
2015-07-21 12:59 . 2015-07-15 03:19 46080 ----a-w- c:\windows\system32\atmlib.dll
2015-07-21 12:59 . 2015-07-15 02:55 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2015-07-21 12:59 . 2015-07-15 02:55 10240 ----a-w- c:\windows\SysWow64\dciman32.dll
2015-07-21 12:59 . 2015-07-15 02:55 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2015-07-21 12:59 . 2015-07-15 02:54 25600 ----a-w- c:\windows\SysWow64\lpk.dll
2015-07-21 12:59 . 2015-07-15 01:59 372224 ----a-w- c:\windows\system32\atmfd.dll
2015-07-21 12:59 . 2015-07-15 01:52 299008 ----a-w- c:\windows\SysWow64\atmfd.dll
2015-07-20 17:09 . 2015-07-20 17:09 -------- d-----w- c:\users\LM\AppData\Roaming\HD Tune Pro
2015-07-20 17:08 . 2015-07-20 17:08 -------- d-----w- c:\program files (x86)\HD Tune Pro
2015-07-20 17:01 . 2015-07-20 17:01 -------- d-----w- c:\programdata\Binarysense
2015-07-20 17:01 . 2015-07-20 17:01 -------- d-----w- c:\program files (x86)\BinarySense
2015-07-19 17:15 . 2015-07-19 17:20 -------- d-----w- c:\users\LM\AppData\Roaming\Command and Conquer 4
2015-07-19 11:20 . 2015-07-19 11:31 -------- d-----w- c:\users\LM\AppData\Roaming\Command & Conquer 3 Tiberium Wars
2015-07-19 09:49 . 2015-07-19 09:49 -------- d-----w- c:\users\LM\AppData\Local\Futuremark
2015-07-19 09:04 . 2015-07-19 09:04 -------- d-----w- c:\program files (x86)\SystemRequirementsLab
2015-07-16 14:07 . 2015-07-16 14:07 -------- d-----w- c:\users\LM\cloudincache
2015-07-15 18:38 . 2015-07-15 18:45 -------- d-----w- c:\users\LM\Valley
2015-07-15 17:12 . 2015-07-15 17:12 -------- d-----w- c:\program files (x86)\Common Files\Java
2015-07-15 12:38 . 2015-07-03 06:23 293072 ----a-w- c:\program files\Internet Explorer\sqmapi.dll
2015-07-14 09:08 . 2015-07-14 09:44 33856 ---ha-w- c:\windows\system32\hamachi.sys
2015-07-12 19:54 . 2015-07-12 19:54 -------- d-----w- c:\users\LM\AppData\Local\Logitech
2015-07-12 19:54 . 2015-07-12 19:54 -------- d-----w- c:\programdata\LogiShrd
2015-07-12 19:54 . 2015-07-12 19:54 18960 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
2015-07-12 19:54 . 2015-07-12 19:54 -------- d-----w- c:\program files\Logitech Gaming Software
2015-07-12 19:52 . 2015-07-12 19:52 -------- d-----w- c:\users\LM\AppData\Roaming\Logitech
2015-07-12 19:52 . 2015-07-12 19:52 -------- d-----w- c:\users\LM\AppData\Roaming\Logishrd
2015-07-12 14:46 . 2015-07-12 14:46 -------- d-----w- c:\programdata\Codemasters
2015-07-11 22:00 . 2015-07-11 22:00 -------- d-----w- c:\users\LM\AppData\Roaming\LolClient
2015-07-10 16:24 . 2015-07-29 13:18 -------- d-----w- C:\$Windows.~BT
2015-07-10 11:03 . 2015-07-10 11:03 466456 ----a-w- c:\windows\system32\wrap_oal.dll
2015-07-10 11:03 . 2015-07-10 11:03 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2015-07-10 11:03 . 2015-07-10 11:03 -------- d-----w- c:\program files (x86)\OpenAL
2015-07-09 17:39 . 2015-07-09 17:39 -------- d-----w- c:\programdata\Riot Games
2015-07-09 17:38 . 2008-07-12 06:18 467984 ----a-w- c:\windows\SysWow64\d3dx10_39.dll
2015-07-09 17:38 . 2008-07-12 06:18 3851784 ----a-w- c:\windows\SysWow64\D3DX9_39.dll
2015-07-09 17:38 . 2008-07-12 06:18 1493528 ----a-w- c:\windows\SysWow64\D3DCompiler_39.dll
2015-07-09 17:37 . 2015-07-09 17:39 -------- d-----w- c:\users\LM\AppData\Roaming\Riot Games
2015-07-09 16:34 . 2015-07-09 16:34 -------- d-----w- c:\users\LM\AppData\Local\Funcom
2015-07-09 15:56 . 2015-07-09 15:59 -------- d-----w- c:\users\LM\ikov
2015-07-09 15:56 . 2015-07-09 15:56 -------- d-----w- c:\users\LM\.ikov_cache
2015-07-09 15:54 . 2015-07-15 17:11 97888 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2015-07-09 15:54 . 2015-07-15 17:12 -------- d-----w- c:\program files (x86)\Java
2015-07-09 12:25 . 2015-07-09 12:25 -------- d-----w- c:\users\LM\AppData\Local\EMU
2015-07-08 14:32 . 2015-07-08 14:32 -------- d-----w- c:\program files (x86)\Futuremark
2015-07-08 10:29 . 2015-07-08 10:29 -------- d-----w- c:\programdata\Gyazo
2015-07-06 17:03 . 2015-07-06 17:03 -------- d-----w- c:\users\LM\AppData\Local\Blizzard Entertainment
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-08-05 10:45 . 2015-06-02 16:18 25640 ----a-w- c:\windows\gdrv.sys
2015-07-28 13:01 . 2015-06-02 16:24 25640 ----a-w- c:\windows\etdrv.sys
2015-07-24 04:21 . 2015-06-02 16:13 1423304 ----a-w- c:\windows\SysWow64\nvspcap.dll
2015-07-24 04:21 . 2015-06-02 16:13 1316000 ----a-w- c:\windows\SysWow64\nvspbridge.dll
2015-07-24 04:21 . 2015-06-02 16:13 1756608 ----a-w- c:\windows\system32\nvspbridge64.dll
2015-07-24 04:21 . 2015-06-02 16:13 1710568 ----a-w- c:\windows\system32\nvspcap64.dll
2015-07-10 11:03 . 2015-06-19 16:39 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2015-07-10 11:03 . 2015-06-19 16:39 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2015-07-05 12:27 . 2015-07-05 12:28 235744 ----a-w- c:\windows\SysWow64\EasyAntiCheat.exe
2015-07-03 14:38 . 2015-07-03 14:38 1634816 ----a-w- c:\windows\rstcli.exe
2015-07-03 14:38 . 2015-06-02 16:24 27 ----a-w- c:\windows\cli.bat
2015-07-03 06:43 . 2015-06-02 15:56 130333168 ----a-w- c:\windows\system32\MRT.exe
2015-07-03 04:28 . 2015-06-02 15:37 69992 ----a-w- c:\windows\system32\nvaudcap64v.dll
2015-07-01 20:49 . 2015-07-15 12:38 342016 ----a-w- c:\windows\system32\schannel.dll
2015-07-01 20:30 . 2015-07-15 12:38 248832 ----a-w- c:\windows\SysWow64\schannel.dll
2015-06-23 11:30 . 2015-06-02 15:35 300704 ------w- c:\windows\system32\MpSigStub.exe
2015-06-16 14:31 . 2015-06-16 14:31 1691816 ----a-w- c:\windows\system32\FM20.DLL
2015-06-10 23:33 . 2015-06-10 23:33 68384 ----a-w- c:\windows\system32\drivers\LGJoyXlCore.sys
2015-06-10 23:33 . 2015-06-10 23:33 26912 ----a-w- c:\windows\system32\drivers\LGVirHid.sys
2015-06-10 23:33 . 2015-06-10 23:33 37408 ----a-w- c:\windows\system32\drivers\LGBusEnum.sys
2015-06-08 14:15 . 2015-06-08 14:15 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
2015-06-06 15:03 . 2015-06-06 10:46 226680 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2015-06-06 15:03 . 2015-06-06 10:46 214392 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2015-06-06 14:57 . 2015-06-06 14:57 76152 ----a-w- c:\windows\system32\PnkBstrA.exe
2015-06-06 12:32 . 2015-06-06 12:32 30264 ----a-w- c:\windows\system32\drivers\dtlitescsibus.sys
2015-06-06 10:56 . 2015-06-06 10:46 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2015-06-03 07:21 . 2015-06-03 07:21 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2015-06-03 07:21 . 2015-06-03 07:21 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2015-06-03 07:21 . 2015-06-03 07:21 235008 ----a-w- c:\windows\system32\elshyph.dll
2015-06-03 07:21 . 2015-06-03 07:21 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2015-06-03 07:21 . 2015-06-03 07:21 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2015-06-03 07:21 . 2015-06-03 07:21 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2015-06-03 07:21 . 2015-06-03 07:21 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2015-06-03 07:21 . 2015-06-03 07:21 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2015-06-03 07:21 . 2015-06-03 07:21 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2015-06-03 07:21 . 2015-06-03 07:21 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2015-06-03 07:21 . 2015-06-03 07:21 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2015-06-03 07:21 . 2015-06-03 07:21 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2015-06-03 07:21 . 2015-06-03 07:21 942592 ----a-w- c:\windows\system32\jsIntl.dll
2015-06-03 07:21 . 2015-06-03 07:21 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2015-06-03 07:21 . 2015-06-03 07:21 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2015-06-03 07:21 . 2015-06-03 07:21 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2015-06-03 07:21 . 2015-06-03 07:21 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2015-06-03 07:21 . 2015-06-03 07:21 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2015-06-03 07:21 . 2015-06-03 07:21 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2015-06-03 07:21 . 2015-06-03 07:21 48640 ----a-w- c:\windows\system32\mshtmler.dll
2015-06-03 07:21 . 2015-06-03 07:21 247808 ----a-w- c:\windows\system32\msls31.dll
2015-06-03 07:21 . 2015-06-03 07:21 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2015-06-03 07:21 . 2015-06-03 07:21 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2015-06-03 07:21 . 2015-06-03 07:21 105984 ----a-w- c:\windows\system32\iesysprep.dll
2015-06-03 07:21 . 2015-06-03 07:21 81408 ----a-w- c:\windows\system32\icardie.dll
2015-06-03 07:21 . 2015-06-03 07:21 77312 ----a-w- c:\windows\system32\tdc.ocx
2015-06-03 07:21 . 2015-06-03 07:21 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2015-06-03 07:21 . 2015-06-03 07:21 30208 ----a-w- c:\windows\system32\licmgr10.dll
2015-06-03 07:21 . 2015-06-03 07:21 243200 ----a-w- c:\windows\system32\webcheck.dll
2015-06-03 07:21 . 2015-06-03 07:21 235520 ----a-w- c:\windows\system32\url.dll
2015-06-03 07:21 . 2015-06-03 07:21 167424 ----a-w- c:\windows\system32\iexpress.exe
2015-06-03 07:21 . 2015-06-03 07:21 143872 ----a-w- c:\windows\system32\wextract.exe
2015-06-03 07:21 . 2015-06-03 07:21 101376 ----a-w- c:\windows\system32\inseng.dll
2015-06-03 07:21 . 2015-06-03 07:21 62464 ----a-w- c:\windows\system32\pngfilt.dll
2015-06-03 07:21 . 2015-06-03 07:21 48128 ----a-w- c:\windows\system32\imgutil.dll
2015-06-03 07:21 . 2015-06-03 07:21 147968 ----a-w- c:\windows\system32\occache.dll
2015-06-03 07:21 . 2015-06-03 07:21 13824 ----a-w- c:\windows\system32\mshta.exe
2015-06-03 07:21 . 2015-06-03 07:21 135680 ----a-w- c:\windows\system32\iepeers.dll
2015-06-03 07:20 . 2015-06-03 07:20 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 522752 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2015-06-03 07:20 . 2015-06-03 07:20 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 364544 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2015-06-03 07:20 . 2015-06-03 07:20 363008 ----a-w- c:\windows\system32\dxgi.dll
2015-06-03 07:20 . 2015-06-03 07:20 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 2560 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 220160 ----a-w- c:\windows\SysWow64\d3d10core.dll
2015-06-03 07:20 . 2015-06-03 07:20 1682432 ----a-w- c:\windows\system32\XpsPrint.dll
2015-06-03 07:20 . 2015-06-03 07:20 1158144 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2015-06-03 07:20 . 2015-06-03 07:20 1080832 ----a-w- c:\windows\SysWow64\d3d10.dll
2015-06-03 07:20 . 2015-06-03 07:20 10752 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 10752 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 648192 ----a-w- c:\windows\system32\d3d10level9.dll
2015-06-03 07:20 . 2015-06-03 07:20 604160 ----a-w- c:\windows\SysWow64\d3d10level9.dll
2015-06-03 07:20 . 2015-06-03 07:20 333312 ----a-w- c:\windows\system32\d3d10_1core.dll
2015-06-03 07:20 . 2015-06-03 07:20 296960 ----a-w- c:\windows\system32\d3d10core.dll
2015-06-03 07:20 . 2015-06-03 07:20 293376 ----a-w- c:\windows\SysWow64\dxgi.dll
2015-06-03 07:20 . 2015-06-03 07:20 249856 ----a-w- c:\windows\SysWow64\d3d10_1core.dll
2015-06-03 07:20 . 2015-06-03 07:20 245248 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2015-06-03 07:20 . 2015-06-03 07:20 221184 ----a-w- c:\windows\system32\UIAnimation.dll
2015-06-03 07:20 . 2015-06-03 07:20 207872 ----a-w- c:\windows\SysWow64\WindowsCodecsExt.dll
2015-06-03 07:20 . 2015-06-03 07:20 194560 ----a-w- c:\windows\system32\d3d10_1.dll
2015-06-03 07:20 . 2015-06-03 07:20 187392 ----a-w- c:\windows\SysWow64\UIAnimation.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2015-06-16 14:34 1730264 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2015-06-16 14:34 1730264 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2015-06-16 14:34 1730264 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\###MegaShellExtPending]
@="{056D528D-CE28-4194-9BA3-BA2E9197FF8C}"
[HKEY_CLASSES_ROOT\CLSID\{056D528D-CE28-4194-9BA3-BA2E9197FF8C}]
2014-05-01 14:15 463360 ----a-w- c:\users\LM\AppData\Local\MEGAsync\ShellExtX32.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\###MegaShellExtSynced]
@="{05B38830-F4E9-4329-978B-1DD28605D202}"
[HKEY_CLASSES_ROOT\CLSID\{05B38830-F4E9-4329-978B-1DD28605D202}]
2014-05-01 14:15 463360 ----a-w- c:\users\LM\AppData\Local\MEGAsync\ShellExtX32.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\###MegaShellExtSyncing]
@="{0596C850-7BDD-4C9D-AFDF-873BE6890637}"
[HKEY_CLASSES_ROOT\CLSID\{0596C850-7BDD-4C9D-AFDF-873BE6890637}]
2014-05-01 14:15 463360 ----a-w- c:\users\LM\AppData\Local\MEGAsync\ShellExtX32.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite Automount"="d:\programy\DAEMON Tools Lite\DTAgent.exe" [2015-05-21 4471536]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2015-06-01 8358680]
"Steam"="d:\programy\Steam\steam.exe" [2015-07-23 2895552]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2015-06-29 53282944]
"Gyazo"="c:\program files (x86)\Gyazo\GyStation.exe" [2015-07-16 3097912]
"GmailNotifierPro"="c:\program files (x86)\Gmail Notifier Pro\GmailNotifierPro.exe" [2015-01-04 2871616]
"f.lux"="c:\users\LM\AppData\Local\FluxSoftware\Flux\flux.exe" [2013-10-23 1017224]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"PreRun"="c:\program files (x86)\Gigabyte\AppCenter\PreRun.exe" [2013-04-29 8192]
.
c:\users\LM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
MEGAsync.lnk - c:\users\LM\AppData\Local\MEGAsync\MEGAsync.exe [2015-2-27 4701128]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 DIRECTIO;DIRECTIO;c:\program files\PerformanceTest\DirectIo64.sys;c:\program files\PerformanceTest\DirectIo64.sys [x]
R3 EasyAntiCheat;EasyAntiCheat;c:\windows\system32\EasyAntiCheat.exe;c:\windows\SYSNATIVE\EasyAntiCheat.exe [x]
R3 etdrv;etdrv;c:\windows\etdrv.sys;c:\windows\etdrv.sys [x]
R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Futuremark\SystemInfo\FMSISvc.exe;c:\program files (x86)\Futuremark\SystemInfo\FMSISvc.exe [x]
R3 HwmRecordService;HwmRecordService;c:\program files (x86)\GIGABYTE\SIV\HwmRecordService.exe;c:\program files (x86)\GIGABYTE\SIV\HwmRecordService.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
R3 Origin Client Service;Origin Client Service;d:\programy\Origin\OriginClientService.exe;d:\programy\Origin\OriginClientService.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
žS0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorA.sys [x]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorF.sys [x]
S0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S0 SamsungRapidDiskFltr;SAMSUNG RAPID Mode Disk Filter Driver;c:\windows\system32\DRIVERS\SamsungRapidDiskFltr.sys;c:\windows\SYSNATIVE\DRIVERS\SamsungRapidDiskFltr.sys [x]
S0 SamsungRapidFSFltr;SamsungRapidFSFltr;c:\windows\system32\DRIVERS\SamsungRapidFSFltr.sys;c:\windows\SYSNATIVE\DRIVERS\SamsungRapidFSFltr.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
S2 gadjservice;GIGABYTE Adjust;c:\program files (x86)\Gigabyte\AppCenter\AdjustService.exe;c:\program files (x86)\Gigabyte\AppCenter\AdjustService.exe [x]
S2 GfExperienceService;NVIDIA GeForce Experience Service;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 iocbios2;iocbios2;c:\program files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys;c:\program files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [x]
S2 LGCoreTemp;Logitech CPU Core Tempurature;c:\program files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys;c:\program files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [x]
S2 SamsungRapidSvc;Samsung RAPID Mode Service;c:\windows\system32\RAPID\SamsungRapidSvc.exe;c:\windows\SYSNATIVE\RAPID\SamsungRapidSvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 XTU3SERVICE;Intel(R) Extreme Tuning Utility Service;c:\program files (x86)\Intel\Extreme Tuning Utility\XtuService.exe;c:\program files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [x]
S3 AcpiCtlDrv;AcpiCtlDrv;c:\windows\system32\DRIVERS\AcpiCtlDrv.sys;c:\windows\SYSNATIVE\DRIVERS\AcpiCtlDrv.sys [x]
S3 BthAvrcp;Bluetooth AVRCP Profile;c:\windows\system32\DRIVERS\BthAvrcp.sys;c:\windows\SYSNATIVE\DRIVERS\BthAvrcp.sys [x]
S3 csr_a2dp;Bluetooth AV Profile;c:\windows\system32\drivers\bthav.sys;c:\windows\SYSNATIVE\drivers\bthav.sys [x]
S3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service;d:\programy\DAEMON Tools Lite\DiscSoftBusService.exe;d:\programy\DAEMON Tools Lite\DiscSoftBusService.exe [x]
S3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus;c:\windows\system32\DRIVERS\dtlitescsibus.sys;c:\windows\SYSNATIVE\DRIVERS\dtlitescsibus.sys [x]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x]
S3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT);c:\windows\system32\DRIVERS\ICCWDT.sys;c:\windows\SYSNATIVE\DRIVERS\ICCWDT.sys [x]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 LGBusEnum;Logitech Gaming Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x]
S3 LGJoyXlCore;Logitech Translation Layer Driver (LGS);c:\windows\system32\drivers\LGJoyXlCore.sys;c:\windows\SYSNATIVE\drivers\LGJoyXlCore.sys [x]
S3 LGSHidFilt;Logitech Gaming KMDF HID Filter Driver;c:\windows\system32\DRIVERS\LGSHidFilt.Sys;c:\windows\SYSNATIVE\DRIVERS\LGSHidFilt.Sys [x]
S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RTCore64;RTCore64;c:\program files (x86)\MSI Afterburner\RTCore64.sys;c:\program files (x86)\MSI Afterburner\RTCore64.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-07-30 13:31 995144 ----a-w- c:\program files (x86)\Google\Chrome\Application\44.0.2403.125\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2015-08-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-01-13 19:32]
.
2015-08-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-01-13 19:32]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\###MegaShellExtPending]
@="{056D528D-CE28-4194-9BA3-BA2E9197FF8C}"
[HKEY_CLASSES_ROOT\CLSID\{056D528D-CE28-4194-9BA3-BA2E9197FF8C}]
2014-05-01 14:13 470016 ----a-w- c:\users\LM\AppData\Local\MEGAsync\ShellExtX64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\###MegaShellExtSynced]
@="{05B38830-F4E9-4329-978B-1DD28605D202}"
[HKEY_CLASSES_ROOT\CLSID\{05B38830-F4E9-4329-978B-1DD28605D202}]
2014-05-01 14:13 470016 ----a-w- c:\users\LM\AppData\Local\MEGAsync\ShellExtX64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\###MegaShellExtSyncing]
@="{0596C850-7BDD-4C9D-AFDF-873BE6890637}"
[HKEY_CLASSES_ROOT\CLSID\{0596C850-7BDD-4C9D-AFDF-873BE6890637}]
2014-05-01 14:13 470016 ----a-w- c:\users\LM\AppData\Local\MEGAsync\ShellExtX64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2015-01-28 5595848]
"SamsungRapidApp"="c:\program files (x86)\Samsung\RAPID\CacheFilter\SamsungRapidApp.exe" [2015-02-04 282288]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2015-07-24 2634896]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2015-07-24 1710568]
"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2015-07-02 14601160]
"IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2014-04-11 36352]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do Microsoft Excelu - c:\progra~1\MICROS~2\Office15\EXCEL.EXE/3000
TCP: DhcpNameServer = 213.211.50.1 213.211.50.2
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
AddRemove-{050d4fc8-5d48-4b8f-8972-47c82c46020f} - c:\programdata\Package Cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\vcredist_x64.exe
AddRemove-{12d6e0d7-21d5-4755-9da2-70352c6f7558} - c:\programdata\Package Cache\{12d6e0d7-21d5-4755-9da2-70352c6f7558}\3dmark-setup.exe
AddRemove-{8409c4f7-2340-4933-a304-5d37db4fb48b} - c:\programdata\Package Cache\{8409c4f7-2340-4933-a304-5d37db4fb48b}\Intel® Driver Update Utility Installer.exe
AddRemove-{95716cce-fc71-413f-8ad5-56c2892d4b3a} - c:\programdata\Package Cache\{95716cce-fc71-413f-8ad5-56c2892d4b3a}\vcredist_x86.exe
AddRemove-{98f335cd-0a32-4b3f-b74c-ef9480e834f0} - c:\programdata\Package Cache\{98f335cd-0a32-4b3f-b74c-ef9480e834f0}\SetupChipset.exe
AddRemove-{a1909659-0a08-4554-8af1-2175904903a1} - c:\programdata\Package Cache\{a1909659-0a08-4554-8af1-2175904903a1}\vcredist_x64.exe
AddRemove-{c39ccdf6-4cad-48b9-87d8-00131589afca} - c:\programdata\Package Cache\{c39ccdf6-4cad-48b9-87d8-00131589afca}\xtu-setup-exe.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3685760754-3291027860-3652961857-1000\Software\SecuROM\License information*]
"datasecu"=hex:c3,ab,26,d7,ed,0b,a8,96,dd,e0,b6,be,a0,54,8e,36,6a,07,2a,e3,09,
74,00,87,e2,d1,8a,36,4e,7d,1b,d8,bc,0b,d1,f3,c0,c9,20,5b,72,17,64,24,f1,c8,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2015-08-05 17:50:48
ComboFix-quarantined-files.txt 2015-08-05 15:50
.
Před spuštěním: Volných bajtů: 39 514 206 208
Po spuštění: Volných bajtů: 39 355 703 296
.
- - End Of File - - 07B0AE6F2F9D64BD9C9CF476725C0883
A36C5E4F47E84449FF07ED3517B43A31

[jaro3]

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

ClearJavaCache::
KillAll::
File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

Folder::
c:\program files (x86)\Skype\Updater
c:\program files (x86)\Google\Update

Driver::
SkypeUpdate

RegLock::
[HKEY_USERS\S-1-5-21-3685760754-3291027860-3652961857-1000\Software\SecuROM\License information*]
"datasecu"=hex:c3,ab,26,d7,ed,0b,a8,96,dd,e0,b6,be,a0,54,8e,36,6a,07,2a,e3,09,
 74,00,87,e2,d1,8a,36,4e,7d,1b,d8,bc,0b,d1,f3,c0,c9,20,5b,72,17,64,24,f1,c8,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)

Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

[Karrex]

COMBO
ComboFix 15-08-03.01 - LM 05.08.2015 21:46:38.2.8 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.8133.4540 [GMT 2:00]
Spuštěný z: c:\users\LM\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\LM\Desktop\CFScript.txt
AV: ESET Smart Security 8.0 *Disabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
FW: ESET Personální firewall *Disabled* {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
SP: ESET Smart Security 8.0 *Disabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Google\Update
c:\program files (x86)\Google\Update\1.3.28.1\GoogleCrashHandler.exe
c:\program files (x86)\Google\Update\1.3.28.1\GoogleCrashHandler64.exe
c:\program files (x86)\Google\Update\1.3.28.1\GoogleUpdate.exe
c:\program files (x86)\Google\Update\1.3.28.1\GoogleUpdateBroker.exe
c:\program files (x86)\Google\Update\1.3.28.1\GoogleUpdateComRegisterShell64.exe
c:\program files (x86)\Google\Update\1.3.28.1\GoogleUpdateHelper.msi
c:\program files (x86)\Google\Update\1.3.28.1\GoogleUpdateOnDemand.exe
c:\program files (x86)\Google\Update\1.3.28.1\GoogleUpdateSetup.exe
c:\program files (x86)\Google\Update\1.3.28.1\GoogleUpdateWebPlugin.exe
c:\program files (x86)\Google\Update\1.3.28.1\goopdate.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_am.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_ar.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_bg.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_bn.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_ca.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_cs.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_da.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_de.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_el.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_en-GB.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_en.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_es-419.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_es.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_et.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_fa.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_fi.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_fil.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_fr.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_gu.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_hi.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_hr.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_hu.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_id.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_is.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_it.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_iw.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_ja.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_kn.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_ko.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_lt.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_lv.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_ml.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_mr.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_ms.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_nl.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_no.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_pl.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_pt-BR.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_pt-PT.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_ro.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_ru.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_sk.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_sl.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_sr.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_sv.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_sw.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_ta.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_te.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_th.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_tr.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_uk.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_ur.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_vi.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_zh-CN.dll
c:\program files (x86)\Google\Update\1.3.28.1\goopdateres_zh-TW.dll
c:\program files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll
c:\program files (x86)\Google\Update\1.3.28.1\psmachine.dll
c:\program files (x86)\Google\Update\1.3.28.1\psmachine_64.dll
c:\program files (x86)\Google\Update\1.3.28.1\psuser.dll
c:\program files (x86)\Google\Update\1.3.28.1\psuser_64.dll
c:\program files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\44.0.2403.125\44.0.2403.125_44.0.2403.107_chrome_updater.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Google\Update\Install\{0DA1476B-7F6B-4990-AFE5-1E7C166C8065}\40.0.2214.115_40.0.2214.111_chrome_updater.exe
c:\program files (x86)\Google\Update\Install\{2054D5FD-CD0B-49C8-BDFD-8C6871772E47}\42.0.2311.152_42.0.2311.135_chrome_updater.exe
c:\program files (x86)\Google\Update\Install\{2DDAEEB1-F43C-46A8-9A7C-5893DA309601}\44.0.2403.125_44.0.2403.107_chrome_updater.exe
c:\program files (x86)\Google\Update\Install\{35D54948-23EA-429C-A1B9-64DFD567AB7C}\GoogleUpdateSetup.exe
c:\program files (x86)\Google\Update\Install\{5CEE6184-A9B5-4197-936D-7500C17D957B}\40.0.2214.111_40.0.2214.94_chrome_updater.exe
c:\program files (x86)\Google\Update\Install\{86DD0BA6-A7EB-4827-A4D7-08D47ACE0983}\GoogleUpdateSetup.exe
c:\program files (x86)\Google\Update\Install\{A1BE1BB1-6AC5-4399-AA3A-621792EFA116}\42.0.2311.135_42.0.2311.90_chrome_updater.exe
c:\program files (x86)\Google\Update\Install\{A27D5874-C766-4103-94C0-57252F6E171C}\44.0.2403.107_43.0.2357.134_chrome_updater.exe
c:\program files (x86)\Google\Update\Install\{A37EEE0B-EF78-4DDB-9683-C096EB5AA2CF}\41.0.2272.101_41.0.2272.89_chrome_updater.exe
c:\program files (x86)\Google\Update\Install\{C9B81F04-C07F-4DB8-8FDA-E9DC5A5C3F30}\42.0.2311.90_41.0.2272.118_chrome_updater.exe
c:\program files (x86)\Google\Update\Install\{D0F7EF56-4C3B-45FE-8060-DF539727BD8A}\41.0.2272.89_40.0.2214.115_chrome_updater.exe
c:\program files (x86)\Google\Update\Install\{D2BFB50C-A33C-4C62-BF96-8B67A8140E7A}\43.0.2357.81_43.0.2357.65_chrome_updater.exe
c:\program files (x86)\Google\Update\Install\{D3FCFA96-D09A-41B3-8397-02C39CCB3114}\43.0.2357.65_42.0.2311.152_chrome_updater.exe
c:\program files (x86)\Google\Update\Install\{D7C2FBA8-E06E-4B02-8AF1-70DAB994DEF1}\43.0.2357.134_chrome_installer.exe
c:\program files (x86)\Google\Update\Install\{FBD83E23-53AC-4655-91E8-A97D998CAB4F}\41.0.2272.118_41.0.2272.101_chrome_updater.exe
c:\program files (x86)\Skype\Updater
c:\program files (x86)\Skype\Updater\Updater.dll
c:\program files (x86)\Skype\Updater\Updater.exe
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_SkypeUpdate
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2015-07-05 do 2015-08-05 )))))))))))))))))))))))))))))))
.
.
2015-08-05 10:38 . 2015-08-05 10:32 24064 ----a-w- c:\windows\zoek-delete.exe
2015-08-05 10:38 . 2015-08-05 19:51 -------- d-----w- c:\users\LM\AppData\Local\Temp
2015-08-05 10:32 . 2015-08-05 10:37 -------- d-----w- C:\zoek_backup
2015-08-04 11:05 . 2015-07-15 01:12 12222168 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{99BCA92E-7FCA-47B2-8813-5B4E0740B365}\mpengine.dll
2015-08-02 15:10 . 2015-08-02 15:10 -------- d-----w- c:\users\LM\AppData\Roaming\7DaysToDie
2015-08-01 20:08 . 2015-08-01 20:08 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2015-08-01 20:08 . 2015-06-18 06:41 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2015-08-01 20:08 . 2015-06-18 06:41 109272 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-08-01 20:08 . 2015-06-18 06:41 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-08-01 17:39 . 2015-08-01 17:39 -------- d-----w- c:\users\LM\AppData\Local\Skyrim
2015-07-31 14:35 . 2015-08-05 16:40 -------- d-----w- c:\users\LM\AppData\Local\CrashDumps
2015-07-31 10:06 . 2015-08-05 10:26 37624 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2015-07-31 10:06 . 2015-07-31 10:07 -------- d-----w- c:\programdata\RogueKiller
2015-07-30 13:48 . 2015-08-05 10:25 -------- d-----w- C:\AdwCleaner
2015-07-30 13:48 . 2015-07-30 13:48 -------- d-----w- c:\programdata\Malwarebytes
2015-07-29 15:09 . 2015-06-17 09:10 40280 ----a-w- c:\windows\system32\nvhdap64.dll
2015-07-29 14:52 . 2015-07-23 04:06 1898128 ----a-w- c:\windows\system32\nvdispco6435362.dll
2015-07-29 14:52 . 2015-07-23 04:06 1557648 ----a-w- c:\windows\system32\nvdispgenco6435362.dll
2015-07-29 14:48 . 2015-07-03 04:28 47976 ----a-w- c:\windows\system32\drivers\nvvad64v.sys
2015-07-29 14:48 . 2015-07-03 04:28 65896 ----a-w- c:\windows\SysWow64\nvaudcap32v.dll
2015-07-28 18:11 . 2015-07-25 18:07 17856 ----a-w- c:\windows\system32\CompatTelRunner.exe
2015-07-28 18:11 . 2015-07-25 18:04 726528 ----a-w- c:\windows\system32\generaltel.dll
2015-07-28 18:11 . 2015-07-25 18:04 765440 ----a-w- c:\windows\system32\invagent.dll
2015-07-28 18:11 . 2015-07-25 18:03 433664 ----a-w- c:\windows\system32\devinv.dll
2015-07-28 18:11 . 2015-07-25 18:03 1085440 ----a-w- c:\windows\system32\appraiser.dll
2015-07-28 18:11 . 2015-07-25 18:03 67584 ----a-w- c:\windows\system32\acmigration.dll
2015-07-28 18:11 . 2015-07-25 18:03 227328 ----a-w- c:\windows\system32\aepdu.dll
2015-07-28 18:11 . 2015-07-25 17:55 1145856 ----a-w- c:\windows\system32\aeinv.dll
2015-07-27 14:17 . 2015-07-27 14:17 -------- d-----w- c:\users\LM\AppData\Roaming\Milestone
2015-07-25 19:32 . 2015-07-25 19:32 -------- d-----w- c:\users\LM\AppData\Roaming\dvdcss
2015-07-22 13:06 . 2015-07-22 13:06 -------- d-----w- c:\users\LM\AppData\Local\CEF
2015-07-21 14:14 . 2015-08-05 15:49 -------- d-----w- c:\windows\srchasst
2015-07-21 12:59 . 2015-07-15 03:19 41984 ----a-w- c:\windows\system32\lpk.dll
2015-07-21 12:59 . 2015-07-15 03:19 100864 ----a-w- c:\windows\system32\fontsub.dll
2015-07-21 12:59 . 2015-07-15 03:19 14336 ----a-w- c:\windows\system32\dciman32.dll
2015-07-21 12:59 . 2015-07-15 03:19 46080 ----a-w- c:\windows\system32\atmlib.dll
2015-07-21 12:59 . 2015-07-15 02:55 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2015-07-21 12:59 . 2015-07-15 02:55 10240 ----a-w- c:\windows\SysWow64\dciman32.dll
2015-07-21 12:59 . 2015-07-15 02:55 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2015-07-21 12:59 . 2015-07-15 02:54 25600 ----a-w- c:\windows\SysWow64\lpk.dll
2015-07-21 12:59 . 2015-07-15 01:59 372224 ----a-w- c:\windows\system32\atmfd.dll
2015-07-21 12:59 . 2015-07-15 01:52 299008 ----a-w- c:\windows\SysWow64\atmfd.dll
2015-07-20 17:09 . 2015-07-20 17:09 -------- d-----w- c:\users\LM\AppData\Roaming\HD Tune Pro
2015-07-20 17:08 . 2015-07-20 17:08 -------- d-----w- c:\program files (x86)\HD Tune Pro
2015-07-20 17:01 . 2015-07-20 17:01 -------- d-----w- c:\programdata\Binarysense
2015-07-20 17:01 . 2015-07-20 17:01 -------- d-----w- c:\program files (x86)\BinarySense
2015-07-19 17:15 . 2015-07-19 17:20 -------- d-----w- c:\users\LM\AppData\Roaming\Command and Conquer 4
2015-07-19 11:20 . 2015-07-19 11:31 -------- d-----w- c:\users\LM\AppData\Roaming\Command & Conquer 3 Tiberium Wars
2015-07-19 09:49 . 2015-07-19 09:49 -------- d-----w- c:\users\LM\AppData\Local\Futuremark
2015-07-19 09:04 . 2015-07-19 09:04 -------- d-----w- c:\program files (x86)\SystemRequirementsLab
2015-07-16 14:07 . 2015-07-16 14:07 -------- d-----w- c:\users\LM\cloudincache
2015-07-15 18:38 . 2015-07-15 18:45 -------- d-----w- c:\users\LM\Valley
2015-07-15 17:12 . 2015-07-15 17:12 -------- d-----w- c:\program files (x86)\Common Files\Java
2015-07-15 12:38 . 2015-07-03 06:23 293072 ----a-w- c:\program files\Internet Explorer\sqmapi.dll
2015-07-14 09:08 . 2015-07-14 09:44 33856 ---ha-w- c:\windows\system32\hamachi.sys
2015-07-12 19:54 . 2015-07-12 19:54 -------- d-----w- c:\users\LM\AppData\Local\Logitech
2015-07-12 19:54 . 2015-07-12 19:54 -------- d-----w- c:\programdata\LogiShrd
2015-07-12 19:54 . 2015-07-12 19:54 18960 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
2015-07-12 19:54 . 2015-07-12 19:54 -------- d-----w- c:\program files\Logitech Gaming Software
2015-07-12 19:52 . 2015-07-12 19:52 -------- d-----w- c:\users\LM\AppData\Roaming\Logitech
2015-07-12 19:52 . 2015-07-12 19:52 -------- d-----w- c:\users\LM\AppData\Roaming\Logishrd
2015-07-12 14:46 . 2015-07-12 14:46 -------- d-----w- c:\programdata\Codemasters
2015-07-11 22:00 . 2015-07-11 22:00 -------- d-----w- c:\users\LM\AppData\Roaming\LolClient
2015-07-10 16:24 . 2015-07-29 13:18 -------- d-----w- C:\$Windows.~BT
2015-07-10 11:03 . 2015-07-10 11:03 466456 ----a-w- c:\windows\system32\wrap_oal.dll
2015-07-10 11:03 . 2015-07-10 11:03 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2015-07-10 11:03 . 2015-07-10 11:03 -------- d-----w- c:\program files (x86)\OpenAL
2015-07-09 17:39 . 2015-07-09 17:39 -------- d-----w- c:\programdata\Riot Games
2015-07-09 17:38 . 2008-07-12 06:18 467984 ----a-w- c:\windows\SysWow64\d3dx10_39.dll
2015-07-09 17:38 . 2008-07-12 06:18 3851784 ----a-w- c:\windows\SysWow64\D3DX9_39.dll
2015-07-09 17:38 . 2008-07-12 06:18 1493528 ----a-w- c:\windows\SysWow64\D3DCompiler_39.dll
2015-07-09 17:37 . 2015-07-09 17:39 -------- d-----w- c:\users\LM\AppData\Roaming\Riot Games
2015-07-09 16:34 . 2015-07-09 16:34 -------- d-----w- c:\users\LM\AppData\Local\Funcom
2015-07-09 15:56 . 2015-07-09 15:59 -------- d-----w- c:\users\LM\ikov
2015-07-09 15:56 . 2015-07-09 15:56 -------- d-----w- c:\users\LM\.ikov_cache
2015-07-09 15:54 . 2015-07-15 17:11 97888 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2015-07-09 15:54 . 2015-07-15 17:12 -------- d-----w- c:\program files (x86)\Java
2015-07-09 12:25 . 2015-07-09 12:25 -------- d-----w- c:\users\LM\AppData\Local\EMU
2015-07-08 14:32 . 2015-07-08 14:32 -------- d-----w- c:\program files (x86)\Futuremark
2015-07-08 10:29 . 2015-07-08 10:29 -------- d-----w- c:\programdata\Gyazo
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-08-05 19:51 . 2015-06-02 16:18 25640 ----a-w- c:\windows\gdrv.sys
2015-07-28 13:01 . 2015-06-02 16:24 25640 ----a-w- c:\windows\etdrv.sys
2015-07-24 04:21 . 2015-06-02 16:13 1423304 ----a-w- c:\windows\SysWow64\nvspcap.dll
2015-07-24 04:21 . 2015-06-02 16:13 1316000 ----a-w- c:\windows\SysWow64\nvspbridge.dll
2015-07-24 04:21 . 2015-06-02 16:13 1756608 ----a-w- c:\windows\system32\nvspbridge64.dll
2015-07-24 04:21 . 2015-06-02 16:13 1710568 ----a-w- c:\windows\system32\nvspcap64.dll
2015-07-10 11:03 . 2015-06-19 16:39 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2015-07-10 11:03 . 2015-06-19 16:39 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2015-07-05 12:27 . 2015-07-05 12:28 235744 ----a-w- c:\windows\SysWow64\EasyAntiCheat.exe
2015-07-03 14:38 . 2015-07-03 14:38 1634816 ----a-w- c:\windows\rstcli.exe
2015-07-03 14:38 . 2015-06-02 16:24 27 ----a-w- c:\windows\cli.bat
2015-07-03 06:43 . 2015-06-02 15:56 130333168 ----a-w- c:\windows\system32\MRT.exe
2015-07-03 04:28 . 2015-06-02 15:37 69992 ----a-w- c:\windows\system32\nvaudcap64v.dll
2015-07-01 20:49 . 2015-07-15 12:38 342016 ----a-w- c:\windows\system32\schannel.dll
2015-07-01 20:30 . 2015-07-15 12:38 248832 ----a-w- c:\windows\SysWow64\schannel.dll
2015-06-23 11:30 . 2015-06-02 15:35 300704 ------w- c:\windows\system32\MpSigStub.exe
2015-06-16 14:31 . 2015-06-16 14:31 1691816 ----a-w- c:\windows\system32\FM20.DLL
2015-06-10 23:33 . 2015-06-10 23:33 68384 ----a-w- c:\windows\system32\drivers\LGJoyXlCore.sys
2015-06-10 23:33 . 2015-06-10 23:33 26912 ----a-w- c:\windows\system32\drivers\LGVirHid.sys
2015-06-10 23:33 . 2015-06-10 23:33 37408 ----a-w- c:\windows\system32\drivers\LGBusEnum.sys
2015-06-08 14:15 . 2015-06-08 14:15 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
2015-06-06 15:03 . 2015-06-06 10:46 226680 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2015-06-06 15:03 . 2015-06-06 10:46 214392 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2015-06-06 14:57 . 2015-06-06 14:57 76152 ----a-w- c:\windows\system32\PnkBstrA.exe
2015-06-06 12:32 . 2015-06-06 12:32 30264 ----a-w- c:\windows\system32\drivers\dtlitescsibus.sys
2015-06-06 10:56 . 2015-06-06 10:46 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2015-06-03 07:21 . 2015-06-03 07:21 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2015-06-03 07:21 . 2015-06-03 07:21 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2015-06-03 07:21 . 2015-06-03 07:21 235008 ----a-w- c:\windows\system32\elshyph.dll
2015-06-03 07:21 . 2015-06-03 07:21 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2015-06-03 07:21 . 2015-06-03 07:21 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2015-06-03 07:21 . 2015-06-03 07:21 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2015-06-03 07:21 . 2015-06-03 07:21 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2015-06-03 07:21 . 2015-06-03 07:21 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2015-06-03 07:21 . 2015-06-03 07:21 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2015-06-03 07:21 . 2015-06-03 07:21 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2015-06-03 07:21 . 2015-06-03 07:21 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2015-06-03 07:21 . 2015-06-03 07:21 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2015-06-03 07:21 . 2015-06-03 07:21 942592 ----a-w- c:\windows\system32\jsIntl.dll
2015-06-03 07:21 . 2015-06-03 07:21 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2015-06-03 07:21 . 2015-06-03 07:21 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2015-06-03 07:21 . 2015-06-03 07:21 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2015-06-03 07:21 . 2015-06-03 07:21 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2015-06-03 07:21 . 2015-06-03 07:21 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2015-06-03 07:21 . 2015-06-03 07:21 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2015-06-03 07:21 . 2015-06-03 07:21 48640 ----a-w- c:\windows\system32\mshtmler.dll
2015-06-03 07:21 . 2015-06-03 07:21 247808 ----a-w- c:\windows\system32\msls31.dll
2015-06-03 07:21 . 2015-06-03 07:21 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2015-06-03 07:21 . 2015-06-03 07:21 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2015-06-03 07:21 . 2015-06-03 07:21 105984 ----a-w- c:\windows\system32\iesysprep.dll
2015-06-03 07:21 . 2015-06-03 07:21 81408 ----a-w- c:\windows\system32\icardie.dll
2015-06-03 07:21 . 2015-06-03 07:21 77312 ----a-w- c:\windows\system32\tdc.ocx
2015-06-03 07:21 . 2015-06-03 07:21 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2015-06-03 07:21 . 2015-06-03 07:21 30208 ----a-w- c:\windows\system32\licmgr10.dll
2015-06-03 07:21 . 2015-06-03 07:21 243200 ----a-w- c:\windows\system32\webcheck.dll
2015-06-03 07:21 . 2015-06-03 07:21 235520 ----a-w- c:\windows\system32\url.dll
2015-06-03 07:21 . 2015-06-03 07:21 167424 ----a-w- c:\windows\system32\iexpress.exe
2015-06-03 07:21 . 2015-06-03 07:21 143872 ----a-w- c:\windows\system32\wextract.exe
2015-06-03 07:21 . 2015-06-03 07:21 101376 ----a-w- c:\windows\system32\inseng.dll
2015-06-03 07:21 . 2015-06-03 07:21 62464 ----a-w- c:\windows\system32\pngfilt.dll
2015-06-03 07:21 . 2015-06-03 07:21 48128 ----a-w- c:\windows\system32\imgutil.dll
2015-06-03 07:21 . 2015-06-03 07:21 147968 ----a-w- c:\windows\system32\occache.dll
2015-06-03 07:21 . 2015-06-03 07:21 13824 ----a-w- c:\windows\system32\mshta.exe
2015-06-03 07:21 . 2015-06-03 07:21 135680 ----a-w- c:\windows\system32\iepeers.dll
2015-06-03 07:20 . 2015-06-03 07:20 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 522752 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2015-06-03 07:20 . 2015-06-03 07:20 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 364544 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2015-06-03 07:20 . 2015-06-03 07:20 363008 ----a-w- c:\windows\system32\dxgi.dll
2015-06-03 07:20 . 2015-06-03 07:20 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 2560 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 220160 ----a-w- c:\windows\SysWow64\d3d10core.dll
2015-06-03 07:20 . 2015-06-03 07:20 1682432 ----a-w- c:\windows\system32\XpsPrint.dll
2015-06-03 07:20 . 2015-06-03 07:20 1158144 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2015-06-03 07:20 . 2015-06-03 07:20 1080832 ----a-w- c:\windows\SysWow64\d3d10.dll
2015-06-03 07:20 . 2015-06-03 07:20 10752 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 10752 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2015-06-03 07:20 . 2015-06-03 07:20 648192 ----a-w- c:\windows\system32\d3d10level9.dll
2015-06-03 07:20 . 2015-06-03 07:20 604160 ----a-w- c:\windows\SysWow64\d3d10level9.dll
2015-06-03 07:20 . 2015-06-03 07:20 333312 ----a-w- c:\windows\system32\d3d10_1core.dll
2015-06-03 07:20 . 2015-06-03 07:20 296960 ----a-w- c:\windows\system32\d3d10core.dll
2015-06-03 07:20 . 2015-06-03 07:20 293376 ----a-w- c:\windows\SysWow64\dxgi.dll
2015-06-03 07:20 . 2015-06-03 07:20 249856 ----a-w- c:\windows\SysWow64\d3d10_1core.dll
2015-06-03 07:20 . 2015-06-03 07:20 245248 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2015-06-03 07:20 . 2015-06-03 07:20 221184 ----a-w- c:\windows\system32\UIAnimation.dll
2015-06-03 07:20 . 2015-06-03 07:20 207872 ----a-w- c:\windows\SysWow64\WindowsCodecsExt.dll
2015-06-03 07:20 . 2015-06-03 07:20 194560 ----a-w- c:\windows\system32\d3d10_1.dll
2015-06-03 07:20 . 2015-06-03 07:20 187392 ----a-w- c:\windows\SysWow64\UIAnimation.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2015-06-16 14:34 1730264 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2015-06-16 14:34 1730264 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2015-06-16 14:34 1730264 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\###MegaShellExtPending]
@="{056D528D-CE28-4194-9BA3-BA2E9197FF8C}"
[HKEY_CLASSES_ROOT\CLSID\{056D528D-CE28-4194-9BA3-BA2E9197FF8C}]
2014-05-01 14:15 463360 ----a-w- c:\users\LM\AppData\Local\MEGAsync\ShellExtX32.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\###MegaShellExtSynced]
@="{05B38830-F4E9-4329-978B-1DD28605D202}"
[HKEY_CLASSES_ROOT\CLSID\{05B38830-F4E9-4329-978B-1DD28605D202}]
2014-05-01 14:15 463360 ----a-w- c:\users\LM\AppData\Local\MEGAsync\ShellExtX32.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\###MegaShellExtSyncing]
@="{0596C850-7BDD-4C9D-AFDF-873BE6890637}"
[HKEY_CLASSES_ROOT\CLSID\{0596C850-7BDD-4C9D-AFDF-873BE6890637}]
2014-05-01 14:15 463360 ----a-w- c:\users\LM\AppData\Local\MEGAsync\ShellExtX32.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite Automount"="d:\programy\DAEMON Tools Lite\DTAgent.exe" [2015-05-21 4471536]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2015-06-01 8358680]
"Steam"="d:\programy\Steam\steam.exe" [2015-07-23 2895552]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2015-06-29 53282944]
"Gyazo"="c:\program files (x86)\Gyazo\GyStation.exe" [2015-07-16 3097912]
"GmailNotifierPro"="c:\program files (x86)\Gmail Notifier Pro\GmailNotifierPro.exe" [2015-01-04 2871616]
"f.lux"="c:\users\LM\AppData\Local\FluxSoftware\Flux\flux.exe" [2013-10-23 1017224]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"PreRun"="c:\program files (x86)\Gigabyte\AppCenter\PreRun.exe" [2013-04-29 8192]
.
c:\users\LM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
MEGAsync.lnk - c:\users\LM\AppData\Local\MEGAsync\MEGAsync.exe [2015-2-27 4701128]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
2;2 LAN-HAM;LAN-HAM;d:\stažené soubory\Space_Engineers_v01.085.008\DedicatedServer64\SpaceEngineersDedicated.exe;d:\stažené soubory\Space_Engineers_v01.085.008\DedicatedServer64\SpaceEngineersDedicated.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
R2 XTU3SERVICE;Intel(R) Extreme Tuning Utility Service;c:\program files (x86)\Intel\Extreme Tuning Utility\XtuService.exe;c:\program files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [x]
R3 DIRECTIO;DIRECTIO;c:\program files\PerformanceTest\DirectIo64.sys;c:\program files\PerformanceTest\DirectIo64.sys [x]
R3 EasyAntiCheat;EasyAntiCheat;c:\windows\system32\EasyAntiCheat.exe;c:\windows\SYSNATIVE\EasyAntiCheat.exe [x]
R3 etdrv;etdrv;c:\windows\etdrv.sys;c:\windows\etdrv.sys [x]
R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Futuremark\SystemInfo\FMSISvc.exe;c:\program files (x86)\Futuremark\SystemInfo\FMSISvc.exe [x]
R3 HwmRecordService;HwmRecordService;c:\program files (x86)\GIGABYTE\SIV\HwmRecordService.exe;c:\program files (x86)\GIGABYTE\SIV\HwmRecordService.exe [x]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
R3 Origin Client Service;Origin Client Service;d:\programy\Origin\OriginClientService.exe;d:\programy\Origin\OriginClientService.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorA.sys [x]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorF.sys [x]
S0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S0 SamsungRapidDiskFltr;SAMSUNG RAPID Mode Disk Filter Driver;c:\windows\system32\DRIVERS\SamsungRapidDiskFltr.sys;c:\windows\SYSNATIVE\DRIVERS\SamsungRapidDiskFltr.sys [x]
S0 SamsungRapidFSFltr;SamsungRapidFSFltr;c:\windows\system32\DRIVERS\SamsungRapidFSFltr.sys;c:\windows\SYSNATIVE\DRIVERS\SamsungRapidFSFltr.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
S2 gadjservice;GIGABYTE Adjust;c:\program files (x86)\Gigabyte\AppCenter\AdjustService.exe;c:\program files (x86)\Gigabyte\AppCenter\AdjustService.exe [x]
S2 GfExperienceService;NVIDIA GeForce Experience Service;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [x]
S2 iocbios2;iocbios2;c:\program files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys;c:\program files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [x]
S2 LGCoreTemp;Logitech CPU Core Tempurature;c:\program files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys;c:\program files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [x]
S2 SamsungRapidSvc;Samsung RAPID Mode Service;c:\windows\system32\RAPID\SamsungRapidSvc.exe;c:\windows\SYSNATIVE\RAPID\SamsungRapidSvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 AcpiCtlDrv;AcpiCtlDrv;c:\windows\system32\DRIVERS\AcpiCtlDrv.sys;c:\windows\SYSNATIVE\DRIVERS\AcpiCtlDrv.sys [x]
S3 BthAvrcp;Bluetooth AVRCP Profile;c:\windows\system32\DRIVERS\BthAvrcp.sys;c:\windows\SYSNATIVE\DRIVERS\BthAvrcp.sys [x]
S3 csr_a2dp;Bluetooth AV Profile;c:\windows\system32\drivers\bthav.sys;c:\windows\SYSNATIVE\drivers\bthav.sys [x]
S3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service;d:\programy\DAEMON Tools Lite\DiscSoftBusService.exe;d:\programy\DAEMON Tools Lite\DiscSoftBusService.exe [x]
S3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus;c:\windows\system32\DRIVERS\dtlitescsibus.sys;c:\windows\SYSNATIVE\DRIVERS\dtlitescsibus.sys [x]
S3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT);c:\windows\system32\DRIVERS\ICCWDT.sys;c:\windows\SYSNATIVE\DRIVERS\ICCWDT.sys [x]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 LGBusEnum;Logitech Gaming Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x]
S3 LGJoyXlCore;Logitech Translation Layer Driver (LGS);c:\windows\system32\drivers\LGJoyXlCore.sys;c:\windows\SYSNATIVE\drivers\LGJoyXlCore.sys [x]
S3 LGSHidFilt;Logitech Gaming KMDF HID Filter Driver;c:\windows\system32\DRIVERS\LGSHidFilt.Sys;c:\windows\SYSNATIVE\DRIVERS\LGSHidFilt.Sys [x]
S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RTCore64;RTCore64;c:\program files (x86)\MSI Afterburner\RTCore64.sys;c:\program files (x86)\MSI Afterburner\RTCore64.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-07-30 13:31 995144 ----a-w- c:\program files (x86)\Google\Chrome\Application\44.0.2403.125\Installer\chrmstp.exe
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\###MegaShellExtPending]
@="{056D528D-CE28-4194-9BA3-BA2E9197FF8C}"
[HKEY_CLASSES_ROOT\CLSID\{056D528D-CE28-4194-9BA3-BA2E9197FF8C}]
2014-05-01 14:13 470016 ----a-w- c:\users\LM\AppData\Local\MEGAsync\ShellExtX64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\###MegaShellExtSynced]
@="{05B38830-F4E9-4329-978B-1DD28605D202}"
[HKEY_CLASSES_ROOT\CLSID\{05B38830-F4E9-4329-978B-1DD28605D202}]
2014-05-01 14:13 470016 ----a-w- c:\users\LM\AppData\Local\MEGAsync\ShellExtX64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\###MegaShellExtSyncing]
@="{0596C850-7BDD-4C9D-AFDF-873BE6890637}"
[HKEY_CLASSES_ROOT\CLSID\{0596C850-7BDD-4C9D-AFDF-873BE6890637}]
2014-05-01 14:13 470016 ----a-w- c:\users\LM\AppData\Local\MEGAsync\ShellExtX64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2015-01-28 5595848]
"SamsungRapidApp"="c:\program files (x86)\Samsung\RAPID\CacheFilter\SamsungRapidApp.exe" [2015-02-04 282288]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2015-07-24 2634896]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2015-07-24 1710568]
"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2015-07-02 14601160]
"IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2014-04-11 36352]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do Microsoft Excelu - c:\progra~1\MICROS~2\Office15\EXCEL.EXE/3000
TCP: DhcpNameServer = 213.211.50.1 213.211.50.2
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-{050d4fc8-5d48-4b8f-8972-47c82c46020f} - c:\programdata\Package Cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\vcredist_x64.exe
AddRemove-{12d6e0d7-21d5-4755-9da2-70352c6f7558} - c:\programdata\Package Cache\{12d6e0d7-21d5-4755-9da2-70352c6f7558}\3dmark-setup.exe
AddRemove-{8409c4f7-2340-4933-a304-5d37db4fb48b} - c:\programdata\Package Cache\{8409c4f7-2340-4933-a304-5d37db4fb48b}\Intel® Driver Update Utility Installer.exe
AddRemove-{95716cce-fc71-413f-8ad5-56c2892d4b3a} - c:\programdata\Package Cache\{95716cce-fc71-413f-8ad5-56c2892d4b3a}\vcredist_x86.exe
AddRemove-{98f335cd-0a32-4b3f-b74c-ef9480e834f0} - c:\programdata\Package Cache\{98f335cd-0a32-4b3f-b74c-ef9480e834f0}\SetupChipset.exe
AddRemove-{a1909659-0a08-4554-8af1-2175904903a1} - c:\programdata\Package Cache\{a1909659-0a08-4554-8af1-2175904903a1}\vcredist_x64.exe
AddRemove-{c39ccdf6-4cad-48b9-87d8-00131589afca} - c:\programdata\Package Cache\{c39ccdf6-4cad-48b9-87d8-00131589afca}\xtu-setup-exe.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3685760754-3291027860-3652961857-1000\Software\SecuROM\License information*]
"datasecu"=hex:c3,ab,26,d7,ed,0b,a8,96,dd,e0,b6,be,a0,54,8e,36,6a,07,2a,e3,09,
74,00,87,e2,d1,8a,36,4e,7d,1b,d8,bc,0b,d1,f3,c0,c9,20,5b,72,17,64,24,f1,c8,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\MSI Afterburner\MSIAfterburner.exe
c:\windows\system32\PnkBstrA.exe
c:\program files (x86)\Samsung\Samsung Magician\Samsung Magician.exe
c:\users\LM\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
c:\program files (x86)\Gigabyte\AppCenter\ApCent.exe
d:\programy\Steam\bin\steamwebhelper.exe
c:\program files (x86)\Common Files\Steam\SteamService.exe
.
**************************************************************************
.
Celkový čas: 2015-08-05 21:52:13 - počítač byl restartován
ComboFix-quarantined-files.txt 2015-08-05 19:52
ComboFix2.txt 2015-08-05 15:50
.
Před spuštěním: Volných bajtů: 39 679 737 856
Po spuštění: Volných bajtů: 39 292 755 968
.
- - End Of File - - BAE48C2779AB4872E3DB994907D76D78
A36C5E4F47E84449FF07ED3517B43A31

ASWMBR
aswMBR version 1.0.1.2290 Copyright(c) 2014 AVAST Software
Run date: 2015-08-05 21:53:59
-----------------------------
21:53:59.836 OS Version: Windows x64 6.1.7601 Service Pack 1
21:53:59.836 Number of processors: 8 586 0x3C03
21:53:59.837 ComputerName: LM-PC UserName: LM
21:53:59.941 Initialize success
21:53:59.961 VM: initialized successfully
21:53:59.961 VM: Intel CPU supported
21:54:05.389 VM: disk I/O iaStorA.sys
21:54:37.932 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000079
21:54:37.941 Disk 0 Vendor: Samsung_ EXT0 Size: 114473MB BusType: 11
21:54:37.946 Disk 1 \Device\Harddisk1\DR1 -> \Device\0000007a
21:54:37.952 Disk 1 Vendor: ST1000DM CC47 Size: 953869MB BusType: 11
21:54:37.957 Disk 2 \Device\Harddisk2\DR2 -> \Device\0000007b
21:54:37.961 Disk 2 Vendor: WDC_____ 01.0 Size: 476940MB BusType: 11
21:54:37.968 Disk 0 MBR read successfully
21:54:37.972 Disk 0 MBR scan
21:54:37.975 Disk 0 Windows 7 default MBR code
21:54:37.979 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
21:54:37.983 Disk 0 Boot: NTFS code=2
21:54:37.988 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 102924 MB offset 206848
21:54:37.996 Disk 0 scanning C:\Windows\system32\drivers
21:54:38.591 Service scanning
21:54:39.064 Service ehdrv C:\Windows\system32\DRIVERS\ehdrv.sys **LOCKED** 5
21:54:39.080 Service epfw C:\Windows\system32\DRIVERS\epfw.sys **LOCKED** 5
21:54:39.085 Service EpfwLWF C:\Windows\system32\DRIVERS\EpfwLWF.sys **LOCKED** 5
21:54:39.090 Service epfwwfp C:\Windows\system32\DRIVERS\epfwwfp.sys **LOCKED** 5
21:54:40.307 Modules scanning
21:54:40.320 Disk 0 trace - called modules:
21:54:40.330 ntoskrnl.exe CLASSPNP.SYS disk.sys iaStorF.sys SamsungRapidDiskFltr.sys hal.dll
21:54:40.339 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8006f11790]
21:54:40.348 3 CLASSPNP.SYS[fffff88001c6843f] -> nt!IofCallDriver -> [0xfffffa8006c95c50]
21:54:40.356 5 iaStorF.sys[fffff880019f2f84] -> nt!IofCallDriver -> [0xfffffa8006c94c10]
21:54:40.361 Disk 0 statistics 95498/0/0 @ 130,25 MB/s
21:54:40.365 Scan finished successfully
21:54:50.041 Disk 0 MBR has been saved successfully to "C:\Users\LM\Desktop\MBR.dat"
21:54:50.055 The log file has been saved successfully to "C:\Users\LM\Desktop\aswMBR.txt"

[jaro3]

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem

Stáhni si OTC

na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.


Vlož nový log z HJT + informuj o problémech.

[Karrex]

Combofix pryč, OTC hotovo, pročištěno CC.

Už se podařilo spustit MBAM.
Zde je log, už to nic nenašlo.

Malwarebytes Anti-Malware
http://www.malwarebytes.org

Datum skenování: 6.8.2015
Čas skenování: 12:27
Protokol:
Správce: Ano

Verze: 2.1.8.1057
Databáze malwaru: v2015.08.06.03
Databáze rootkitů: v2015.08.04.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: LM

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 362599
Uplynulý čas: 4 min, 24 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 0
(Nenalezeny žádné škodlivé položky)

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)


Ale pořád černá obrazovka při startu PC.


HJT
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:37:13, on 6.8.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17910)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Gigabyte\AppCenter\ApCent.exe
D:\Programy\Steam\Steam.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Gyazo\GyStation.exe
C:\Program Files (x86)\Gmail Notifier Pro\GmailNotifierPro.exe
C:\Users\LM\AppData\Local\FluxSoftware\Flux\flux.exe
C:\Users\LM\AppData\Local\MEGAsync\MEGAsync.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
D:\Programy\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\LM\Desktop\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll
O4 - HKLM\..\RunOnce: [PreRun] C:\Program Files (x86)\Gigabyte\AppCenter\PreRun.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "D:\Programy\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Steam] "D:\Programy\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Gyazo] C:\Program Files (x86)\Gyazo\GyStation.exe
O4 - HKCU\..\Run: [GmailNotifierPro] C:\Program Files (x86)\Gmail Notifier Pro\GmailNotifierPro.exe /minimized
O4 - HKCU\..\Run: [f.lux] "C:\Users\LM\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
O4 - Startup: MEGAsync.lnk = LM\AppData\Local\MEGAsync\MEGAsync.exe
O8 - Extra context menu item: E&xportovat do Microsoft Excelu - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - D:\Programy\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Windows\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Futuremark SystemInfo Service - Futuremark - C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe
O23 - Service: GIGABYTE Adjust (gadjservice) - Unknown owner - C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: HwmRecordService - GIGA-BYTE TECHNOLOGY CO., LTD. - C:\Program Files (x86)\GIGABYTE\SIV\HwmRecordService.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LAN-HAM - Keen Software House - D:\Programy\Steam\\Space_Engineers_v01.085.008\DedicatedServer64\SpaceEngineersDedicated.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - D:\Programy\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Samsung RAPID Mode Service (SamsungRapidSvc) - Unknown owner - C:\Windows\system32\RAPID\SamsungRapidSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) Extreme Tuning Utility Service (XTU3SERVICE) - Intel(R) Corporation - C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe

--
End of file - 9858 bytes

[Karrex]

Problémy jsou stále, černá obrazovka při startu.

EDIT: Tak jsem na to přišel, jedná o službu, která se spouští kvůli Dedicated serveru na Space Engineers, starou verzi. Měl jsem pořád jeho složku (nějak nemažu stažené soubory) a v ní jela ta služba, teď jsem ji zakázal a po restartu naběhl normálně i s plochou.
Ovšem pořád mám tu službu i po smazání složky ve Služby. Dá se to nějak odstranit, je to LAN-HAM, je to i v logách.