freesofttoday malware

[alby]

Dobrý den, přítelkyně nainstalovala program "freesofttoday", od té doby je počítač zpomalený, otvírají se sami okna internet prohlížeče a občas se nejde připojit přes prohlížeč k internetu a píše chybu s proxy, jinak např. pošta v Thunderbird funguje. Pouštěli jsme ESET, něco odstranil, ale spíše se to zhoršilo.
Prosíme o pomoc, pokud někdo budete mít chvilku. Děkujeme

Logfile of random's system information tool 1.09 (written by random/random)
Run by Veronika at 2014-05-15 22:43:09
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 128 GB (28%) free of 451 GB
Total RAM: 4006 MB (38% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:43:13, on 15.5.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17041)
Boot mode: Normal

Running processes:
C:\Windows\jmesoft\hotkey.exe
C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Users\Veronika\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Veronika.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hp ... XXW2A85P92
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://istart.webssearches.com/web/?typ ... earchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?typ ... earchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://istart.webssearches.com/?type=hp ... XXW2A85P92
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hp ... XXW2A85P92
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://istart.webssearches.com/web/?typ ... earchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?typ ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://istart.webssearches.com/?type=hp ... XXW2A85P92
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {ad708c09-d51b-45b3-9d28-4eba2681febf} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: WsSVRIEHelper - {1373BA72-5012-496e-9F72-7A426DCF78BB} - C:\Program Files (x86)\Wondershare\AllMyTube\SVRIEPlugin.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [OSD Utility] C:\Program Files (x86)\Lenovo\Lenovo BrgVolOSD\BrgVolOSD.exe
O4 - HKLM\..\Run: [jmekey] C:\Windows\jmesoft\hotkey.exe
O4 - HKLM\..\Run: [jmesoft] C:\Windows\jmesoft\ServiceLoader.exe
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [UpdatePRCShortCut] "C:\Program Files\Lenovo\OneKey App\Lenovo Rescue System\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\Lenovo Rescue System" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe" /s
O4 - HKLM\..\Run: [Lenovo Dynamic Brightness System] C:\Program Files\Lenovo\Lenovo Brightness System\RunLDBS.exe 1
O4 - HKLM\..\Run: [Lenovo Eye Distance System] C:\Program Files\Lenovo\Lenovo Eye Distance System\Lenovo Eye Distance System.exe 1
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [Wondershare Helper Compact.exe] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
O4 - HKLM\..\Run: [BrowserPlugInHelper] C:\Program Files (x86)\Wondershare\AllMyTube\BrowserPlugInHelper.exe
O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Veronika\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Veronika\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Veronika\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [HP Photosmart 5510 series (NET)] "C:\Program Files\HP\HP Photosmart 5510 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN1BU25K5X05NR:NW" -scfn "HP Photosmart 5510 series (NET)" -AutoStart 1
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: SRS Premium Sound.lnk = C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/RACt ... 2655579295
O17 - HKLM\System\CCS\Services\Tcpip\..\{5E12881D-BE81-456F-A467-D6DC79A68BFE}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs:
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: globalUpdate Update Service (globalUpdatem) (globalUpdatem) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: IePlugin Service (IePluginService) - Unknown owner - C:\ProgramData\IePluginService\PluginService.exe (file missing)
O23 - Service: JME Keyboard Driver (JME Keyboard) - Unknown owner - C:\Windows\jmesoft\Service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Wpm Service (Wpm) - Unknown owner - C:\ProgramData\WPM\wprotectmanager.exe (file missing)

--
End of file - 14051 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bonjour\mDNSResponder.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe"
C:\Windows\jmesoft\Service.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"
WLIDSvcM.exe 2672
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files\HP\HP Photosmart 5510 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN1BU25K5X05NR:NW" -scfn "HP Photosmart 5510 series (NET)" -AutoStart 1
"C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe" /h
"C:\Program Files (x86)\Lenovo\Lenovo BrgVolOSD\BrgVolOSD.exe"
"C:\Windows\jmesoft\hotkey.exe"
"C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe"
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
"C:\Windows\jmesoft\JME_LOAD.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
szndesktop.exe default start
"C:\Users\Veronika\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe "245170901-1201326903-1410029423-1706936036-739691194-2115556823-1780339447-1093835677
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --flag-switches-begin --flag-switches-end http://istart.webssearches.com/?type=sc ... XXW2A85P92
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="5012.0.2008162084\1050206907" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,1,5,14,28 --gpu-vendor-id=0x8086 --gpu-device-id=0x0102 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=9.17.10.2932 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Default/OmniboxBundledExperimentV1/NewSuggestType_A3_Stable_R1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group5/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/" --extension-process --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="5012.2.861303690\836005892" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Default/OmniboxBundledExperimentV1/NewSuggestType_A3_Stable_R1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group5/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/" --extension-process --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="5012.4.1832892785\2070121087" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Default/OmniboxBundledExperimentV1/NewSuggestType_A3_Stable_R1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group5/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/" --extension-process --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="5012.6.1987236948\1188821620" /prefetch:673131151
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Default/OmniboxBundledExperimentV1/NewSuggestType_A3_Stable_R1/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group5/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="5012.12.1500861438\1206482072" /prefetch:673131151
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Default/OmniboxBundledExperimentV1/NewSuggestType_A3_Stable_R1/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group5/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="5012.14.1197056886\1210637584" /prefetch:673131151
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="5012.15.734254341\1402548479" --ppapi-flash-args --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/Bootstrap/FlashHardwareVideoDecode/Disabled/GoogleNow/Default/OmniboxBundledExperimentV1/NewSuggestType_A3_Stable_R1/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group5/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="5012.24.2000937973\622415303" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/Bootstrap/FlashHardwareVideoDecode/Disabled/GoogleNow/Default/OmniboxBundledExperimentV1/NewSuggestType_A3_Stable_R1/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group5/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="5012.26.435803709\1342482724" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/Bootstrap/FlashHardwareVideoDecode/Disabled/GoogleNow/Default/OmniboxBundledExperimentV1/NewSuggestType_A3_Stable_R1/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group5/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="5012.27.2147417438\528694033" /prefetch:673131151
"C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe"
"C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version9\TeamViewer9_Logfile.log
"C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version9\TeamViewer9_Logfile.log
"c:\program files (x86)\teamviewer\version9\TeamViewer_Desktop.exe" --IPCport 5939
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/Bootstrap/FlashHardwareVideoDecode/Disabled/GoogleNow/Default/OmniboxBundledExperimentV1/NewSuggestType_A3_Stable_R1/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group5/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --channel="5012.28.69454688\984645897" /prefetch:673131151
"C:\Users\Veronika\Downloads\RSITx64.exe"
"C:\Program Files\HP\HP Photosmart 5510 series\Bin\HPNetworkCommunicator.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\828b7858-3e09-4c6f-bd17-73ad515afec1-1.job
C:\Windows\tasks\828b7858-3e09-4c6f-bd17-73ad515afec1-2.job
C:\Windows\tasks\828b7858-3e09-4c6f-bd17-73ad515afec1-4.job
C:\Windows\tasks\828b7858-3e09-4c6f-bd17-73ad515afec1-5.job
C:\Windows\tasks\828b7858-3e09-4c6f-bd17-73ad515afec1-6.job
C:\Windows\tasks\828b7858-3e09-4c6f-bd17-73ad515afec1-7.job
C:\Windows\tasks\c2093312-aaff-42e9-998f-0cba65d30cb2-1.job
C:\Windows\tasks\c2093312-aaff-42e9-998f-0cba65d30cb2-2.job
C:\Windows\tasks\c2093312-aaff-42e9-998f-0cba65d30cb2-3.job
C:\Windows\tasks\c2093312-aaff-42e9-998f-0cba65d30cb2-4.job
C:\Windows\tasks\c2093312-aaff-42e9-998f-0cba65d30cb2-5.job
C:\Windows\tasks\c2093312-aaff-42e9-998f-0cba65d30cb2-6.job
C:\Windows\tasks\c2093312-aaff-42e9-998f-0cba65d30cb2-7.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3023920303-2912343038-3466715234-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3023920303-2912343038-3466715234-1000UA.job
C:\Windows\tasks\globalUpdateUpdateTaskMachineCore.job
C:\Windows\tasks\globalUpdateUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511311170}]
Pl-usHD

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511421146}]
MediaPlayerplus

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-22 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1373BA72-5012-496e-9F72-7A426DCF78BB}]
Wondershare Allmytube - C:\Program Files (x86)\Wondershare\AllMyTube\SVRIEPlugin.dll [2013-02-04 275744]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-22 439168]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-02-25 11779176]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-12-14 172144]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-12-14 399984]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-12-14 441968]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2013-03-21 6330568]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Facebook Update"=C:\Users\Veronika\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-11-23 138096]
"cz.seznam.software.autoupdate"=C:\Users\Veronika\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Veronika\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
"HP Photosmart 5510 series (NET)"=C:\Program Files\HP\HP Photosmart 5510 series\Bin\ScanToPCActivationApp.exe [2012-10-17 2573416]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"OSD Utility"=C:\Program Files (x86)\Lenovo\Lenovo BrgVolOSD\BrgVolOSD.exe [2011-04-19 18251776]
"jmekey"=C:\Windows\jmesoft\hotkey.exe [2011-05-17 118784]
"jmesoft"=C:\Windows\jmesoft\ServiceLoader.exe [2011-03-16 28672]
"CLMLServer"=C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [2009-12-05 103720]
"UpdateP2GoShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"UpdatePRCShortCut"=C:\Program Files\Lenovo\OneKey App\Lenovo Rescue System\MUITransfer\MUIStartMenu.exe [2009-05-14 222504]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2011-10-13 136488]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [2011-10-13 230696]
"Lenovo Dynamic Brightness System"=C:\Program Files\Lenovo\Lenovo Brightness System\RunLDBS.exe [2011-09-22 1751904]
"Lenovo Eye Distance System"=C:\Program Files\Lenovo\Lenovo Eye Distance System\Lenovo Eye Distance System.exe [2011-08-09 264704]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-03-21 1061960]
"Wondershare Helper Compact.exe"=C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe []
"BrowserPlugInHelper"=C:\Program Files (x86)\Wondershare\AllMyTube\BrowserPlugInHelper.exe [2013-02-04 410912]
"SDTray"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [2013-05-16 3830224]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
SRS Premium Sound.lnk - C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-12-14 442880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-05-15 17:09:52 ----D---- C:\rsit
2014-05-15 17:09:52 ----D---- C:\Program Files\trend micro
2014-05-15 11:23:50 ----D---- C:\Program Files (x86)\Uninstaller
2014-05-15 11:21:11 ----D---- C:\Users\Veronika\AppData\Roaming\SupTab
2014-05-15 11:21:10 ----D---- C:\ProgramData\IePluginService
2014-05-15 11:21:10 ----D---- C:\Program Files (x86)\SupTab
2014-05-15 11:21:01 ----D---- C:\ProgramData\WPM
2014-05-15 11:20:58 ----D---- C:\ProgramData\374311380
2014-05-15 11:18:57 ----D---- C:\Program Files (x86)\MediaPlayerplus
2014-05-15 11:18:42 ----D---- C:\Users\Veronika\AppData\Roaming\webssearches
2014-05-15 11:18:41 ----D---- C:\Program Files (x86)\globalUpdate
2014-05-15 11:18:40 ----D---- C:\Program Files (x86)\Pl-usHD
2014-05-15 11:17:55 ----D---- C:\Program Files (x86)\fst_it_117
2014-05-15 10:04:41 ----D---- C:\Users\Veronika\AppData\Roaming\ViberPC
2014-05-15 03:06:45 ----A---- C:\Windows\system32\mshtmled.dll
2014-05-15 03:06:45 ----A---- C:\Windows\system32\mshtml.dll
2014-05-15 03:06:44 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-05-15 03:06:43 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-05-14 14:40:18 ----A---- C:\Windows\system32\shell32.dll
2014-05-14 14:40:14 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-05-14 14:40:10 ----A---- C:\Windows\system32\aepdu.dll
2014-05-14 14:40:09 ----A---- C:\Windows\system32\aeinv.dll
2014-05-14 14:39:46 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-05-14 14:39:46 ----A---- C:\Windows\system32\lsasrv.dll
2014-05-14 14:39:46 ----A---- C:\Windows\system32\kerberos.dll
2014-05-14 14:39:45 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-05-14 14:39:45 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-05-14 14:39:45 ----A---- C:\Windows\system32\winlogon.exe
2014-05-14 14:39:45 ----A---- C:\Windows\system32\msv1_0.dll
2014-05-14 14:39:44 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-05-14 14:39:44 ----A---- C:\Windows\system32\objsel.dll
2014-05-14 14:39:44 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-05-14 14:39:43 ----A---- C:\Windows\SYSWOW64\objsel.dll
2014-05-14 14:39:43 ----A---- C:\Windows\system32\TSpkg.dll
2014-05-14 14:39:43 ----A---- C:\Windows\system32\KernelBase.dll
2014-05-14 14:39:42 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-05-14 14:39:42 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-05-14 14:39:42 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-05-14 14:39:42 ----A---- C:\Windows\system32\wdigest.dll
2014-05-14 14:39:41 ----A---- C:\Windows\SYSWOW64\wincredprovider.dll
2014-05-14 14:39:41 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-05-14 14:39:41 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-05-14 14:39:41 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-05-14 14:39:41 ----A---- C:\Windows\SYSWOW64\dpapiprovider.dll
2014-05-14 14:39:41 ----A---- C:\Windows\SYSWOW64\dimsroam.dll
2014-05-14 14:39:41 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-05-14 14:39:41 ----A---- C:\Windows\SYSWOW64\cngprovider.dll
2014-05-14 14:39:41 ----A---- C:\Windows\SYSWOW64\capiprovider.dll
2014-05-14 14:39:41 ----A---- C:\Windows\SYSWOW64\adprovider.dll
2014-05-14 14:39:41 ----A---- C:\Windows\system32\wincredprovider.dll
2014-05-14 14:39:41 ----A---- C:\Windows\system32\sspisrv.dll
2014-05-14 14:39:41 ----A---- C:\Windows\system32\sspicli.dll
2014-05-14 14:39:41 ----A---- C:\Windows\system32\schannel.dll
2014-05-14 14:39:41 ----A---- C:\Windows\system32\secur32.dll
2014-05-14 14:39:41 ----A---- C:\Windows\system32\lsass.exe
2014-05-14 14:39:41 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-05-14 14:39:41 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-05-14 14:39:41 ----A---- C:\Windows\system32\dpapiprovider.dll
2014-05-14 14:39:41 ----A---- C:\Windows\system32\dimsroam.dll
2014-05-14 14:39:41 ----A---- C:\Windows\system32\credssp.dll
2014-05-14 14:39:41 ----A---- C:\Windows\system32\cngprovider.dll
2014-05-14 14:39:41 ----A---- C:\Windows\system32\capiprovider.dll
2014-05-14 14:39:41 ----A---- C:\Windows\system32\adprovider.dll
2014-05-10 00:10:19 ----SD---- C:\Windows\system32\CompatTel
2014-04-30 12:56:53 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2014-04-29 03:02:02 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-04-29 03:02:02 ----A---- C:\Windows\system32\ieui.dll
2014-04-29 03:02:01 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-04-29 03:02:01 ----A---- C:\Windows\system32\vbscript.dll
2014-04-29 03:01:56 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-29 03:01:56 ----A---- C:\Windows\system32\iernonce.dll
2014-04-29 03:01:56 ----A---- C:\Windows\system32\ie4uinit.exe
2014-04-29 03:01:55 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-04-29 03:01:53 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-04-29 03:01:53 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-04-29 03:01:53 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-04-29 03:01:53 ----A---- C:\Windows\system32\jscript9diag.dll
2014-04-29 03:01:53 ----A---- C:\Windows\system32\dxtrans.dll
2014-04-29 03:01:53 ----A---- C:\Windows\system32\dxtmsft.dll
2014-04-29 03:01:52 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-04-29 03:01:52 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-04-29 03:01:52 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-04-29 03:01:52 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-04-29 03:01:52 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-04-29 03:01:52 ----A---- C:\Windows\system32\msrating.dll
2014-04-29 03:01:52 ----A---- C:\Windows\system32\msfeeds.dll
2014-04-29 03:01:52 ----A---- C:\Windows\system32\jsproxy.dll
2014-04-29 03:01:52 ----A---- C:\Windows\system32\ieUnatt.exe
2014-04-29 03:01:52 ----A---- C:\Windows\system32\iesetup.dll
2014-04-29 03:01:51 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-04-29 03:01:48 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-04-29 03:01:48 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-04-29 03:01:48 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-04-29 03:01:48 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-29 03:01:48 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-04-29 03:01:48 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-04-29 03:01:48 ----A---- C:\Windows\system32\ieapfltr.dll
2014-04-29 03:01:46 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-04-29 03:01:46 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-04-29 03:01:46 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-04-29 03:01:46 ----A---- C:\Windows\system32\wininet.dll
2014-04-29 03:01:46 ----A---- C:\Windows\system32\urlmon.dll
2014-04-29 03:01:46 ----A---- C:\Windows\system32\iertutil.dll
2014-04-29 03:01:45 ----A---- C:\Windows\system32\ieframe.dll
2014-04-29 03:01:44 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-04-29 03:01:43 ----A---- C:\Windows\system32\jscript9.dll
2014-04-29 03:01:42 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-04-28 14:04:06 ----D---- C:\Program Files (x86)\TeamViewer
2014-04-16 18:45:01 ----D---- C:\ProgramData\Hewlett-Packard
2014-04-16 18:43:51 ----A---- C:\Windows\SYSWOW64\hpcdmc32.DLL
2014-04-16 18:43:51 ----A---- C:\Windows\SYSWOW64\hpcc3093.DLL
2014-04-16 18:43:51 ----A---- C:\Windows\SYSWOW64\fxcompchannel.dll
2014-04-16 18:43:51 ----A---- C:\Windows\system32\hpcpn093.dll
2014-04-16 18:43:51 ----A---- C:\Windows\system32\fxcompchannel_x64.dll

======List of files/folders modified in the last 1 month======

2014-05-15 22:43:13 ----D---- C:\Windows\Prefetch
2014-05-15 22:43:11 ----D---- C:\Windows\Temp
2014-05-15 19:46:46 ----D---- C:\Windows\system32\config
2014-05-15 18:44:07 ----D---- C:\Users\Veronika\AppData\Roaming\Seznam.cz
2014-05-15 18:43:46 ----D---- C:\Windows\inf
2014-05-15 18:43:46 ----AD---- C:\Windows\System32
2014-05-15 18:43:46 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-05-15 18:41:11 ----A---- C:\Windows\SYSWOW64\log.txt
2014-05-15 17:38:51 ----D---- C:\Windows\rescache
2014-05-15 17:09:52 ----RD---- C:\Program Files
2014-05-15 14:59:34 ----RD---- C:\Program Files (x86)
2014-05-15 14:58:14 ----D---- C:\Windows\system32\Tasks
2014-05-15 14:57:45 ----HD---- C:\ProgramData
2014-05-15 14:08:27 ----D---- C:\Users\Veronika\AppData\Roaming\Complitly
2014-05-15 13:26:04 ----D---- C:\Windows\Tasks
2014-05-15 11:19:01 ----SHD---- C:\Windows\Installer
2014-05-15 11:17:44 ----HD---- C:\Windows\system32\GroupPolicy
2014-05-15 11:17:44 ----D---- C:\Windows\SYSWOW64\GroupPolicy
2014-05-15 03:38:04 ----D---- C:\Windows\Microsoft.NET
2014-05-15 03:37:42 ----RSD---- C:\Windows\assembly
2014-05-15 03:29:02 ----D---- C:\Windows\winsxs
2014-05-15 03:26:49 ----D---- C:\Windows\SysWOW64
2014-05-15 03:26:47 ----D---- C:\Windows\system32\drivers
2014-05-15 03:26:47 ----D---- C:\Windows\system32\cs-CZ
2014-05-15 03:26:20 ----D---- C:\Users\Veronika\AppData\Roaming\SoftGrid Client
2014-05-15 03:06:56 ----D---- C:\Windows\system32\catroot
2014-05-15 03:06:55 ----D---- C:\Windows\system32\catroot2
2014-05-15 03:06:29 ----D---- C:\Program Files (x86)\Common Files
2014-05-15 03:05:03 ----D---- C:\Windows\system32\MRT
2014-05-15 03:03:06 ----A---- C:\Windows\system32\MRT.exe
2014-05-15 03:01:42 ----SHD---- C:\System Volume Information
2014-05-13 17:10:13 ----D---- C:\Users\Veronika\AppData\Roaming\Skype
2014-04-30 23:04:48 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-29 03:19:11 ----D---- C:\Windows\SYSWOW64\en-US
2014-04-29 03:19:11 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-04-29 03:19:11 ----D---- C:\Windows\system32\en-US
2014-04-29 03:19:11 ----D---- C:\Windows\PolicyDefinitions
2014-04-29 03:19:11 ----D---- C:\Program Files\Internet Explorer
2014-04-29 03:19:11 ----D---- C:\Program Files (x86)\Internet Explorer
2014-04-29 03:18:27 ----SD---- C:\Users\Veronika\AppData\Roaming\Microsoft
2014-04-28 14:04:15 ----RSD---- C:\Windows\Fonts
2014-04-20 13:54:11 ----D---- C:\Windows\system32\NDF
2014-04-16 18:43:57 ----D---- C:\Windows\system32\DriverStore

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 WinI2C-DDC;WinI2C-DDC Kernel Mode Driver; C:\Windows\system32\drivers\DDCDrv.sys [2008-04-08 20832]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-02-14 213416]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-01-10 150616]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2013-01-10 139768]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys [2011-10-13 31216]
R3 HPFXBULK;HPFXBULK; C:\Windows\system32\drivers\hpfx64bulk.sys [2007-07-16 20504]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-12-14 5353888]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-02-25 2748520]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2011-03-10 317440]
R3 itecir;ITECIR Infrared Receiver; C:\Windows\system32\DRIVERS\itecir.sys [2010-07-14 69736]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2011-04-07 56344]
R3 RSPCIESTOR;Realtek PCIE CardReader Driver; C:\Windows\system32\DRIVERS\RtsPStor.sys [2011-05-04 338536]
R3 RTL8192Ce;Realtek Wireless LAN 802.11n PCI-E NIC Driver; C:\Windows\system32\DRIVERS\rtl8192Ce.sys [2010-12-03 1105000]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 767144]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 273576]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 28840]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 23208]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\drivers\serscan.sys [2009-07-14 12288]
R3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2011-05-13 36328]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2011-05-13 157672]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2011-05-13 16872]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2011-05-13 177640]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2011-05-13 146920]
S3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 38400]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 VMC412;Vimicro Camera Service VMC412; C:\Windows\System32\Drivers\VMC412.sys [2011-07-13 243328]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S3 wsvd;wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [2009-07-22 121840]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-09-03 65640]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2013-03-21 1341664]
R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2011-06-13 2419816]
R2 JME Keyboard;JME Keyboard Driver; C:\Windows\jmesoft\Service.exe [2011-03-16 32768]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-04-07 326168]
R2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2013-07-18 762192]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2013-05-16 1817560]
R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2013-05-16 1033688]
R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [2013-05-15 171928]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]
R2 TeamViewer9;TeamViewer 9; C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-04-25 5024576]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-04-07 2656280]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-22 2286976]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 globalUpdate;globalUpdate Update Service (globalUpdate); C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-05-15 68608]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-02-08 136176]
S2 IePluginService;IePlugin Service; C:\ProgramData\IePluginService\PluginService.exe -service []
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S2 Wpm;Wpm Service; C:\ProgramData\WPM\wprotectmanager.exe -service []
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-12-14 277616]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2013-12-04 654848]
S3 globalUpdatem;globalUpdate Update Service (globalUpdatem); C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-05-15 68608]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-02-08 136176]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-10 136120]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-06 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-04-30 119408]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-05-15 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]

-----------------EOF-----------------

[motji]

Zdravím
No fuj , pěkné to tu máte, vůbec se nedivím, že prohlížeč moc nefunguje.

Stáhněte Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
-Uložte program na plochu a spusťte . Pak se zobrazí se licenční podminky - potvrďte start libovolnou klávesou.
- vytvoří se záloha a proběhne skenování.
Po skončení skenování na Vás vyběhne log (bude uložen v c:\JRT jako JRT.txt) - zkopírujte jej sem

Stáhněte AdwCleaner http://www.bleepingcomputer.com/download/adwcleaner/
-Uložte program na plochu a ukončete všechny spuštěné programy .
-spusťte AdwCleaner, klikněte na Scan a po dokončení skenu na Clean
- provede se oprava, restartuje se pc - (případně restartujte) a objeví se log C:\AdwCleaner\AdwCleaner.txt , obsah logu zkopírujte zde.

Použijte CCleaner http://forum.viry.cz/viewtopic.php?f=46&t=7478

[alby]

Moc děkujeme, omlouvám se za zpoždění a zde posíám první log.:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Veronika on po 19.05.2014 at 18:44:15,13
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\browserpluginhelper
Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\complitly.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{02DD8284-A49F-43E5-9D84-CF19DC9AD21D}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{A43DE495-3D00-47D4-9D2C-303115707939}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\complitly
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\filescout
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\igearsettings
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\installedbrowserextensions
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\crossrider
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\smartbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\installedbrowserextensions
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\suggestmeyes.suggestmeyesbho
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\suggestmeyes.suggestmeyesbho.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\conduitinstaller_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\conduitinstaller_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4ffbb818-b13c-11e0-931d-b2664824019b}_is1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0053170.BHO
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0053170.BHO.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0053170.Sandbox
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0053170.Sandbox.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0054246.BHO
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0054246.BHO.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0054246.Sandbox
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0054246.Sandbox.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110511311170}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110511421146}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220522312270}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220522422246}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550555315570}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550555425546}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660566316670}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660566426646}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440544314470}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440544424446}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{11111111-1111-1111-1111-110511311170}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{11111111-1111-1111-1111-110511421146}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220522312270}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220522422246}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{55555555-5555-5555-5555-550555315570}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{55555555-5555-5555-5555-550555425546}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660566316670}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660566426646}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440544314470}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440544424446}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0053170.BHO
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0053170.BHO.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0053170.Sandbox
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0053170.Sandbox.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0054246.BHO
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0054246.BHO.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0054246.Sandbox
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0054246.Sandbox.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT1269415
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550555315570}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550555425546}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660566316670}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660566426646}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440544314470}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440544424446}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110511311170}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110511421146}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511311170}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511421146}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskSLib_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskSLib_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\TaskScheduler_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\TaskScheduler_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550555315570}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550555425546}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660566316670}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660566426646}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440544314470}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440544424446}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskSLib_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskSLib_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\TaskScheduler_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\TaskScheduler_RASMANCS
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5502B68C-DDF9-4F46-A0C4-F24C42B98C51}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{7B2E52E5-F675-4292-8C41-A8B75183D590}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{84028DA8-B8EE-4E87-90D3-3F815205BC9F}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1373BA72-5012-496E-9F72-7A426DCF78BB}



~~~ Files

Successfully deleted: [File] "C:\end"



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\ibupdaterservice"
Successfully deleted: [Folder] "C:\ProgramData\partner"
Successfully deleted: [Folder] "C:\Users\Veronika\AppData\Roaming\complitly"
Successfully deleted: [Folder] "C:\Users\Veronika\AppData\Roaming\file scout"
Successfully deleted: [Folder] "C:\Users\Veronika\AppData\Roaming\performersoft"
Successfully deleted: [Folder] "C:\Users\Veronika\appdata\locallow\conduit"
Successfully deleted: [Folder] "C:\Program Files (x86)\complitly"
Successfully deleted: [Folder] "C:\Program Files (x86)\conduit"
Successfully deleted: [Folder] "C:\Users\Veronika\documents\optimizer pro"
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{004F1429-54EC-4105-96D8-888DF23914D8}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{02F8F005-1455-4E7C-A229-A5176D3DE097}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{055A5163-2809-4C7B-B9AD-E3B29EE7A3F8}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{05B89A7D-DB25-4563-A8C4-198ED1983C46}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{0A1FC68A-3E81-46B9-AA26-3DCB8D366C36}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{0D224FBC-E7AF-4416-A298-94C76385802E}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{0ED4C2F6-CF29-4CB8-A059-60627FC67B64}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{0FCD2BCB-AEB5-449B-9793-5135AE57B6DE}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{17105AC8-6CE0-46E7-9E9A-0BEB9C5036CA}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{1D8818D4-EA72-4BF4-851C-98AA6BAA21CE}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{22E1F227-E90E-4A06-8DE0-52D0F9BFA586}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{28AAEDE5-1709-4EE2-ACF2-54A8FC00A363}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{2A09D286-0C70-48BC-B13E-532BC51DBDF7}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{402AECCE-902C-4E83-AA3E-2176C3EF16D2}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{42359B09-94D6-448A-B71E-107ACA24368E}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{4AE72083-6889-4159-8122-31064FE2C554}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{4D09DB01-56E8-4A7D-ADB9-FCDF3821B1AB}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{56FB5716-4F5C-4CD5-9DDA-6ED5A5346F5E}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{5CE9A0DB-8F1F-4814-8B92-8A8C32B9CE00}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{640ED888-47DF-45CB-87EF-BA7CA7B94A18}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{6BFB680B-3AAD-44F7-9647-F89EF8075E65}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{6D067EDF-B7B0-4162-98DF-EE883A26AD67}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{6F250B8C-79E2-4E55-8BAA-4A595CE3DBDA}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{73271706-55E6-4CB7-AC1C-30506027D51D}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{7788CEB9-298C-4F86-8EF2-D70516C96DD1}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{78829F66-01A9-4D77-BC82-75A65D514E4A}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{799CA395-4E67-4775-AA9E-BC0C04F5D8DD}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{79DF823C-8C03-4725-89C2-E087E5C1C0BC}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{7A17A0BF-7733-4C05-9149-E2D735E24EFE}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{83769C6D-1B35-4EA2-9666-ECB2F57F3EAE}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{8509E75E-E697-4098-9868-F22275DEC406}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{86A5A22D-AB66-4658-A15B-391D323003A1}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{8E17F549-2DC4-4E6E-82D6-0746501C0A30}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{8EFF0B08-64DD-45A1-94B1-71AE297D4065}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{96B32AAA-6620-4008-992E-7E03FEBE1B8E}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{98BB68BC-1423-4DA5-B498-3BEF29C44EB1}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{99F11F02-B269-4EC8-8AEF-9669BD12EEFF}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{99FBD7B1-5831-432B-AC0F-111B3CA716E5}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{9A0E48F0-CB2E-4380-8B55-30DEA0668802}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{9D36AFB1-F100-4D5C-B74D-BDAA59DE2603}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{A2F99D1F-1390-44C5-9F54-085CD8229127}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{ABA601E5-054E-4FC3-A03D-D5543856A9C7}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{AD110655-75E5-4F9F-9E96-60912EAA3D77}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{B119A4C5-1448-4185-B0CB-63B356B9F241}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{B1FA0463-11B1-422A-BA17-263BDEB9BFFA}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{B409164C-6D49-41C0-BAFF-A4363E8474CE}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{B486AF62-0AFE-4D1D-A5B6-633CBF995A62}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{B948C866-F67E-46D1-A989-03ED60F59C63}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{BAEF4BD6-FF91-493F-84F5-D2C935B187EE}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{BC1B5132-5945-4D00-B966-2B402AD6360E}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{BD296214-F8A5-46E6-B6BD-EB654A26ED4D}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{BDFB9FFE-ABAE-4EE5-99A2-82604D5F1D73}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{C34B2B9F-DAE3-4F04-9935-B14DD960BFC9}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{CD626534-CCC3-48FC-9097-2B5C6A43714A}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{CE362F6B-DDCA-40F7-BA26-AB5DB6CCDB79}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{DA8637D6-03EA-4526-8AA2-B481341A345C}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{DB3C239D-C869-4191-9860-FD43CCAA0386}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{DF111EEC-EA0D-4AB2-9F5F-5599C5A70E3B}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{E71C0F4D-96D5-4677-A8C1-7C5D08842DCB}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{ECCEB1A8-7287-4F4A-85B0-B9169A5A2C08}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{F1934D29-8C4F-401F-BBE6-DA134BC1597D}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{F4A58335-4EA7-44DE-8525-080A7ACEC4FE}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{FA4054CE-AF62-462F-BCCA-0873A302122D}
Successfully deleted: [Empty Folder] C:\Users\Veronika\appdata\local\{FC7D61EB-C74D-4882-946F-41D510A96B09}



~~~ Chrome

Successfully deleted: [Folder] C:\Users\Veronika\appdata\local\Google\Chrome\User Data\Default\Extensions\ifllmjhoijmmhobcnjdhelmboobmenij
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\dlfienamagdnkekbbbocojppncdambda
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\gjajpkikblccgefaibcafkfbanllpefi
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\ifllmjhoijmmhobcnjdhelmboobmenij



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on po 19.05.2014 at 18:50:54,27
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[alby]

Obsah druhého logu:
# AdwCleaner v3.210 - Report created 19/05/2014 at 19:56:07
# Updated 19/05/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Veronika - VERONIKA-PC
# Running from : C:\Users\Veronika\Downloads\AdwCleaner (1).exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : globalUpdate
[#] Service Deleted : globalUpdatem
[#] Service Deleted : IePluginService
[#] Service Deleted : Wpm

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\374311380
Folder Deleted : C:\ProgramData\IePluginService
Folder Deleted : C:\ProgramData\WPM
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freesofttoday
Folder Deleted : C:\Program Files (x86)\globalUpdate
Folder Deleted : C:\Program Files (x86)\MediaPlayerplus
Folder Deleted : C:\Program Files (x86)\SupTab
Folder Deleted : C:\Program Files (x86)\Uninstaller
Folder Deleted : C:\Program Files (x86)\fst_it_117
Folder Deleted : C:\Users\Veronika\AppData\Local\apn
Folder Deleted : C:\Users\Veronika\AppData\Local\Conduit
Folder Deleted : C:\Users\Veronika\AppData\Local\globalUpdate
Folder Deleted : C:\Users\Veronika\AppData\Local\SearchProtect
Folder Deleted : C:\Users\Veronika\AppData\Local\fst_it_117
Folder Deleted : C:\Users\Veronika\AppData\Local\Temp\AskSearch
Folder Deleted : C:\Users\Veronika\AppData\Roaming\7go
Folder Deleted : C:\Users\Veronika\AppData\Roaming\SpeedAnalysis2
Folder Deleted : C:\Users\Veronika\AppData\Roaming\SupTab
Folder Deleted : C:\Users\Veronika\AppData\Roaming\webssearches
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda
File Deleted : C:\Windows\System32\roboot64.exe
File Deleted : C:\Users\Veronika\AppData\Local\Temp\Uninstall.exe
File Deleted : C:\Users\Veronika\AppData\Roaming\speedanalysis.ico
File Deleted : C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
File Deleted : C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
File Deleted : C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
File Deleted : C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
File Deleted : C:\Windows\Tasks\828b7858-3e09-4c6f-bd17-73ad515afec1-1.job
File Deleted : C:\Windows\System32\Tasks\828b7858-3e09-4c6f-bd17-73ad515afec1-1
File Deleted : C:\Windows\Tasks\828b7858-3e09-4c6f-bd17-73ad515afec1-2.job
File Deleted : C:\Windows\System32\Tasks\828b7858-3e09-4c6f-bd17-73ad515afec1-2
File Deleted : C:\Windows\Tasks\828b7858-3e09-4c6f-bd17-73ad515afec1-4.job
File Deleted : C:\Windows\System32\Tasks\828b7858-3e09-4c6f-bd17-73ad515afec1-4
File Deleted : C:\Windows\Tasks\828b7858-3e09-4c6f-bd17-73ad515afec1-5.job
File Deleted : C:\Windows\System32\Tasks\828b7858-3e09-4c6f-bd17-73ad515afec1-5
File Deleted : C:\Windows\Tasks\828b7858-3e09-4c6f-bd17-73ad515afec1-6.job
File Deleted : C:\Windows\System32\Tasks\828b7858-3e09-4c6f-bd17-73ad515afec1-6
File Deleted : C:\Windows\Tasks\828b7858-3e09-4c6f-bd17-73ad515afec1-7.job
File Deleted : C:\Windows\System32\Tasks\828b7858-3e09-4c6f-bd17-73ad515afec1-7
File Deleted : C:\Windows\Tasks\c2093312-aaff-42e9-998f-0cba65d30cb2-1.job
File Deleted : C:\Windows\System32\Tasks\c2093312-aaff-42e9-998f-0cba65d30cb2-1
File Deleted : C:\Windows\Tasks\c2093312-aaff-42e9-998f-0cba65d30cb2-2.job
File Deleted : C:\Windows\System32\Tasks\c2093312-aaff-42e9-998f-0cba65d30cb2-2
File Deleted : C:\Windows\Tasks\c2093312-aaff-42e9-998f-0cba65d30cb2-3.job
File Deleted : C:\Windows\System32\Tasks\c2093312-aaff-42e9-998f-0cba65d30cb2-3
File Deleted : C:\Windows\Tasks\c2093312-aaff-42e9-998f-0cba65d30cb2-4.job
File Deleted : C:\Windows\System32\Tasks\c2093312-aaff-42e9-998f-0cba65d30cb2-4
File Deleted : C:\Windows\Tasks\c2093312-aaff-42e9-998f-0cba65d30cb2-5.job
File Deleted : C:\Windows\System32\Tasks\c2093312-aaff-42e9-998f-0cba65d30cb2-5
File Deleted : C:\Windows\Tasks\c2093312-aaff-42e9-998f-0cba65d30cb2-6.job
File Deleted : C:\Windows\System32\Tasks\c2093312-aaff-42e9-998f-0cba65d30cb2-6
File Deleted : C:\Windows\Tasks\c2093312-aaff-42e9-998f-0cba65d30cb2-7.job
File Deleted : C:\Windows\System32\Tasks\c2093312-aaff-42e9-998f-0cba65d30cb2-7

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\Users\Public\Desktop\Internet Browser.lnk
Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Veronika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\Veronika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Shortcut Disinfected : C:\Users\Veronika\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Veronika\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Shortcut Disinfected : C:\Users\Veronika\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Veronika\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk

***** [ Registry ] *****

Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [7go@7go.com]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [7go@7go.com]
Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [speedanalysis02@SpeedAnalysis.com]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [speedanalysis02@SpeedAnalysis.com]
Key Deleted : HKLM\SOFTWARE\Classes\*\shell\filescout
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{18DBB6CE-3148-4FEC-B481-103CB3290427}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FF103732-4528-4322-AA8B-F7849AB7776B}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511311170}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511421146}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511311170}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511421146}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Key Deleted : HKCU\Software\Tutorials
Key Deleted : HKCU\Software\TutoTag
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKCU\Software\AppDataLow\Software\MediaPlayerplus
Key Deleted : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Deleted : HKLM\Software\FreeSoftToday
Key Deleted : HKLM\Software\MediaPlayerplus
Key Deleted : HKLM\Software\SimplyGen
Key Deleted : HKLM\Software\SupTab
Key Deleted : HKLM\Software\supWPM
Key Deleted : HKLM\Software\Tutorials
Key Deleted : HKLM\Software\webssearchesSoftware
Key Deleted : HKLM\Software\Wpm
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DMUninstaller
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MediaPlayerplus
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\fst_it_117_is1
Key Deleted : [x64] HKLM\SOFTWARE\installedbrowserextensions

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17041

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Google Chrome v34.0.1847.137

[ File : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Extension] : dlfienamagdnkekbbbocojppncdambda

[ File : C:\Users\Veronika\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://search.searchcompletion.com/?q={searchTerms}&site=web&si=26542&tid=0&hi=0&channel=&gsd=&cl=1&safe=off&originalSiteSeachDomain=&prevsite=web&cc=CZ&sts=&bi=57018715&st=sugf&btn=
Deleted [Search Provider] : hxxp://sweetandsaltycz.com/?s={searchTerms}
Deleted [Search Provider] : hxxp://istart.webssearches.com/web/?type=ds&ts=1400145505&from=tugs&uid=ST3500413AS_W2A85P92XXXXW2A85P92&q={searchTerms}
Deleted [Startup_urls] : hxxp://istart.webssearches.com/?type=hp&ts=1400145505&from=tugs&uid=ST3500413AS_W2A85P92XXXXW2A85P92
Deleted [Homepage] : hxxp://istart.webssearches.com/?type=hp&ts=1400145505&from=tugs&uid=ST3500413AS_W2A85P92XXXXW2A85P92
Deleted [Extension] : dlfienamagdnkekbbbocojppncdambda
Deleted [Extension] : ndibdjnfmopecpmkdieinmbadjfpblof

*************************

AdwCleaner[R0].txt - [14053 octets] - [19/05/2014 18:57:01]
AdwCleaner[S0].txt - [11692 octets] - [19/05/2014 19:56:07]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [11753 octets] ##########

[motji]

Hezký , už by to mělo být s pc lepší

Stahněte MBAM http://www.viry.cz/forum/viewtopic.php?f=29&t=115222
-Nainstalujte,dejte úplný sken

NIC NEMAZAT
-MBAM má občas falešné detekce,proto budeme mazat až po kontrole logu.
-Log zkopírujte sem.

[alby]

Opět díky, zde je log níže a omluva za zpoždění, hodně teď kvuli práci cestujeme
P.s. funguje vám ještě někde to dárcovské odesílání SMS? Kdyžtak pošlete nám odkaz na stránku s info
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 29.5.2014
Scan Time: 22:50:34
Logfile:
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.05.29.11
Rootkit Database: v2014.05.21.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Veronika

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 296637
Time Elapsed: 8 min, 11 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 3
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\Pl-usHD, , [969965f2d9a259dddbf9860dfb07d62a],
PUP.Optional.PlusHD.A, HKU\S-1-5-21-3023920303-2912343038-3466715234-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Pl-usHD, , [d75873e4fc7f49ed1eb46e25af5305fb],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Pl-usHD, , [de51332436458caace1d00864bb7db25],

Registry Values: 0
(No malicious items detected)

Registry Data: 1
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[1619ff583f3c3402c344f26ba064a65a]

Folders: 2
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Pl-usHD, , [de51332436458caace1d00864bb7db25],
PUP.Optional.Complitly.A, C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda, , [a08f2b2ca8d3a39323cf058346bc1de3],

Files: 8
PUP.Optional.Koyote.A, C:\Users\Veronika\Downloads\FreeVideoConverterSetup-r135-n-bc.exe, , [de518dca3d3e53e3cf40dc652ed3af51],
PUP.Optional.Superfish.A, C:\Users\Veronika\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal, , [9897d483b2c9aa8c388a2c65a06203fd],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Pl-usHD\background.html, , [de51332436458caace1d00864bb7db25],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Pl-usHD\bgNova.html, , [de51332436458caace1d00864bb7db25],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Pl-usHD\Pl-usHD-bho.dll, , [de51332436458caace1d00864bb7db25],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Pl-usHD\Pl-usHD-nova.dll, , [de51332436458caace1d00864bb7db25],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Pl-usHD\Pl-usHD.ico, , [de51332436458caace1d00864bb7db25],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Pl-usHD\Uninstall.exe, , [de51332436458caace1d00864bb7db25],

Physical Sectors: 0
(No malicious items detected)


(end)

[motji]

V mbamu vše smažte a poprosím o nový log ze Rsitu.

ANo, je možné podpořit forum hned několika způsoby
http://forum.viry.cz/viewtopic.php?f=7&t=78175