host process for windows tasks

[Fixed]

Zdravím, nevím jestli mám v počítači vir. Ale řekl jsem si že je lepší se zeptat něž aby mi ten "vir"
napáchal škodu. Tento "program" nejde ukončit protože se nejspíše vypne Pc. Zkoušet to nebudu protože to píše varování že mohu přijít o data, Takže to vyzkouším až po radě odborníka.
Takže Když otevřu správce úloh tak mi ta vyskočí host process for windows tasks
http://www.imgup.cz/image/XcV
http://www.imgup.cz/image/XcG
A dále to má přístupové práva k viz. Obr. :http://www.imgup.cz/image/XcX

Mám operační systém Windows 8 + úprava na Plochu

Předem děkuji za pomoc. A doufám že se nebude jednat o vir.
Fixed.

[vyosek]

Zdravim

Tema jsem presunul do spravne sekce

Dejte pro zacatek log z RSIT http://forum.viry.cz/viewtopic.php?f=13&t=130786

[Fixed]

Logfile of random's system information tool 1.08 (written by random/random)
Run by Vítek at 2014-08-21 21:41:18
Microsoft Windows 8 Pro
System drive C: has 629 GB (66%) free of 954 GB
Total RAM: 3994 MB (35% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:41:20, on 21. 8. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.16384)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe
C:\Program Files (x86)\Avg Secure Update\AVG-Secure-Search-Update_0414c.exe
C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
C:\Program Files (x86)\AVG\AVG2014\avgui.exe
C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe
C:\Windows\SysWOW64\ctfmon.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Vítek.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://terra.im/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://terra.im/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\9.6\iobitappsToolbarIE.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: MediaWatchV1home963 - {008e1d81-91ee-4c64-83d2-81ef2a970c52} - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home963\ie\MediaWatchV1home963.dll
O2 - BHO: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\9.6\iobitappsToolbarIE.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: ArcPluginIEBHO - {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} - (no file)
O2 - BHO: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\18.1.9.786\AVG SafeGuard toolbar_toolbar.dll
O2 - BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL
O2 - BHO: MediaViewerV1alpha1257 - {c47910e5-c741-4c09-a7a8-c7904c0f6007} - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha1257\ie\MediaViewerV1alpha1257.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\18.1.9.786\AVG SafeGuard toolbar_toolbar.dll
O3 - Toolbar: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\9.6\iobitappsToolbarIE.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [BtTray] "C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
O4 - HKLM\..\Run: [YouCam Service] "C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe" /s
O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [BMISR] C:\Program Files (x86)\KYE\FaceCam 320X\Genius_Utility.exe
O4 - HKLM\..\Run: [SearchSettings] "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Google Update] "C:\Users\Vítek\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [BitTorrent] "C:\Users\Vítek\AppData\Roaming\BitTorrent\BitTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [AVG-Secure-Search-Update_0414c] "C:\Program Files (x86)\Avg Secure Update\AVG-Secure-Search-Update_0414c.exe" /PROMPT /CMPID=0414c
O4 - HKCU\..\Run: [Slick Savings] "C:\Users\Vítek\AppData\Roaming\Slick Savings\CouponsHelper.exe"
O4 - HKCU\..\Run: [Raptr] C:\PROGRA~2\Raptr\raptrstub.exe --startup
O4 - HKCU\..\Run: [HydraVisionDesktopManager] "C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
O4 - HKCU\..\Run: [Advanced SystemCare 7] "C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe" /Auto
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - HKCU\..\Run: [Browser Extensions] "C:\Users\Vítek\AppData\Roaming\Slick Savings\CouponsHelper.exe"
O4 - HKCU\..\Run: [SetMyHomePage] C:\Users\Vítek\AppData\Roaming\SetMyHomePage\setmyhomepage.exe
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_14_0_0_145_Plugin.exe -update plugin
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Spustit klienta k monitoru &1 - C:\Windows\web\AOpenClient.htm
O8 - Extra context menu item: Spustit klienta k monitoru &2 - C:\Windows\web\AOpenClient.htm
O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe
O9 - Extra 'Tools' menuitem: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.9\ViProtocol.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 7 (AdvancedSystemCareService7) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgfws.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
O23 - Service: BlueSoleilCS - IVT Corporation - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
O23 - Service: BsHelpCS - IVT Corporation - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater18.1.9 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13470 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
c:\PROGRA~2\AVG\AVG2014\avgrsa.exe /boot
C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe /pipeName=6e1e9704-3508-4938-b32a-4c6ab93bfb03 /coreSdkOptions=4382 /logConfFile="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\63952b40-bbee-4445-ac8c-7f40b506e364-1cc-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2014\" /tempPath="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\" /logPath="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2014\log\"
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE"
"C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgfws.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe"
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe"
taskeng.exe {A38A978D-5F7F-4E8F-9192-3BCAC523DE2B}
dashost.exe {7a700766-2377-48bb-8ffc630b433e13f1}
"C:\Program Files (x86)\Avg Secure Update\AVG-Secure-Search-Update_0414c.exe" --RELAUNCH=1 --CMPID=0414c
"C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\slsvc.exe
C:\Windows\PersonalizeEnabler.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe"
"C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe"
"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\loggingserver.exe" 72648 "C:\ProgramData\AVG Secure Search\Logger\logger.properties"
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgemca.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe /pipeName=2dea2733-d048-4358-a806-174d718a4e1b /coreSdkOptions=4114 /logConfFile="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\2603bb2e-f06d-450a-8cf3-ca2e85a8002e-c24-oopp.tmp" /loggerName=AVG.NS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2014\" /tempPath="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
taskeng.exe {828ECC26-37D1-402E-80D3-114D191D771C}
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\System32\WinLogon.exe -SpecialSession
-hiberboot
atieclxx
taskhostex.exe
"C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
C:\Windows\Explorer.EXE
taskeng.exe {71E1DC86-7768-4976-ABEE-6C499126CE81}
ClassicStartMenu.exe -startup
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Avg Secure Update\AVG-Secure-Search-Update_0414c.exe" /PROMPT /CMPID=0414c
"C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
HydraDM64.exe -h:131698 "Maximalizovat na celou plochu" "Maximalizovat k rohům okna" "Obnovit pracovní plochu"
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
"C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe" /s
"C:\Windows\system32\igfxsrvc.exe" -Embedding
"C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
ctfmon.exe
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\Steam\Steam.exe" "-silent"
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" -cefhost -cachedir "C:\Program Files (x86)\Steam\config\htmlcache" -cookiepath "C:\Program Files (x86)\Steam\config\cookies" -steampid 6792 --blacklist-accelerated-compositing --process-per-tab
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" --type=renderer --disable-delegated-renderer --disable-gpu-compositing --disable-threaded-compositing --enable-pinch --enable-software-compositing --no-sandbox --lang=en-US --lang=en-US --product-version="Valve Steam Client" --enable-pinch --disable-accelerated-compositing --disable-gpu-compositing --channel="2060.1.1966538682\1735600760" /prefetch:673131151
"C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe"
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" --type=renderer --disable-delegated-renderer --disable-gpu-compositing --disable-threaded-compositing --enable-pinch --enable-software-compositing --no-sandbox --lang=en-US --lang=en-US --product-version="Valve Steam Client" --enable-pinch --disable-accelerated-compositing --disable-gpu-compositing --channel="2060.6.1061124938\1440232305" /prefetch:673131151
taskhost.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="1468.0.144332886\1724234663" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,5,16 --gpu-vendor-id=0x8086 --gpu-device-id=0x0156 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3345 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_23/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --channel="1468.2.1248389508\190239878" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_23/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --channel="1468.5.190271697\1974786491" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_23/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --channel="1468.6.922722813\1517838233" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_23/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --channel="1468.8.1808691694\368207122" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_23/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --channel="1468.11.1682927423\721084969" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="1468.12.1807010522\1114340070" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Windows\System32\Taskmgr.exe" /3
C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe46_ Global\UsGthrCtrlFltPipeMssGthrPipe46 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 552 556 564 65536 560
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Vítek\Downloads\RSITx64 (1).exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\ASC7_SkipUac_Vítek.job
C:\Windows\tasks\AVG-Secure-Search-Update_0414c_rel.job
C:\Windows\tasks\AVG-Secure-Search-Update_0414c_rmv.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2853416472-2825147005-2372363208-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2853416472-2825147005-2372363208-1001UA.job
C:\Windows\tasks\Uninstaller_SkipUac_Administrator.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
ExplorerWnd Helper - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll [2014-05-28 2471744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-11-28 553384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-11-28 210856]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{008e1d81-91ee-4c64-83d2-81ef2a970c52}]
Media Watch - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home963\ie\MediaWatchV1home963.dll [2014-03-20 87040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
IObit Apps Toolbar - C:\Program Files (x86)\IObit Apps Toolbar\IE\9.6\iobitappsToolbarIE.dll [2014-07-28 1400128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-11-10 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84BFE29A-8139-402a-B2A4-C23AE9E1A75F}]
ArcPluginIEBHO Class

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG SafeGuard toolbar - C:\Program Files (x86)\AVG SafeGuard toolbar\18.1.9.786\AVG SafeGuard toolbar_toolbar.dll [2014-08-12 3627032]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}]
Advanced SystemCare Browser Protection - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL [2014-02-20 669504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c47910e5-c741-4c09-a7a8-c7904c0f6007}]
Media Viewer - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha1257\ie\MediaViewerV1alpha1257.dll [2014-02-23 87040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-11-10 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{03EB0E9C-7A91-4381-A220-9B52B641CDB1} - IObit Apps Toolbar - C:\Program Files (x86)\IObit Apps Toolbar\IE\9.6\iobitappsToolbarIE64.dll [2014-07-28 1998656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{95B7759C-8C7F-4BF1-B163-73684A933233} - AVG SafeGuard toolbar - C:\Program Files (x86)\AVG SafeGuard toolbar\18.1.9.786\AVG SafeGuard toolbar_toolbar.dll [2014-08-12 3627032]
{03EB0E9C-7A91-4381-A220-9B52B641CDB1} - IObit Apps Toolbar - C:\Program Files (x86)\IObit Apps Toolbar\IE\9.6\iobitappsToolbarIE.dll [2014-07-28 1400128]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2013-03-26 7165000]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-04-10 36352]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2013-11-15 391152]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2013-11-15 771056]
"Persistence"=C:\Windows\system32\igfxpers.exe [2013-11-15 770032]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2014-08-14 1937600]
"Google Update"=C:\Users\Vítek\AppData\Local\Google\Update\GoogleUpdate.exe [2014-01-09 116648]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-05-08 21446272]
"BitTorrent"=C:\Users\Vítek\AppData\Roaming\BitTorrent\BitTorrent.exe [2014-07-05 1267032]
"AVG-Secure-Search-Update_0414c"=C:\Program Files (x86)\Avg Secure Update\AVG-Secure-Search-Update_0414c.exe [2014-04-25 2725912]
"Slick Savings"=C:\Users\Vítek\AppData\Roaming\Slick Savings\CouponsHelper.exe [2014-07-29 962408]
"Raptr"=C:\PROGRA~2\Raptr\raptrstub.exe [2014-07-30 55360]
"HydraVisionDesktopManager"=C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [2014-04-17 1967616]
"Advanced SystemCare 7"=C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe [2014-04-21 2295584]
"EADM"=C:\Program Files (x86)\Origin\Origin.exe [2014-08-06 3600728]
"Browser Extensions"=C:\Users\Vítek\AppData\Roaming\Slick Savings\CouponsHelper.exe [2014-07-29 962408]
"SetMyHomePage"=C:\Users\Vítek\AppData\Roaming\SetMyHomePage\setmyhomepage.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"=C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_14_0_0_145_Plugin.exe [2014-07-08 851632]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"AVG_UI"=C:\Program Files (x86)\AVG\AVG2014\avgui.exe [2014-08-11 5187088]
"BtTray"=C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [2013-05-14 387832]
"YouCam Service"=C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [2013-08-01 267224]
"vProt"=C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe [2014-08-12 2640408]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2014-04-17 767200]
"BMISR"=C:\Program Files (x86)\KYE\FaceCam 320X\Genius_Utility.exe [2012-01-06 217088]
"SearchSettings"=C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe [2014-07-28 1436480]
"HP Software Update"=C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2013-05-30 96056]
""= []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2013-10-28 623616]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicDisplay.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicRender.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BrokerInfrastructure]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DeviceInstall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dxgkrnl.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\FsDepends.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LSM]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicDisplay.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicRender.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BrokerInfrastructure]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DeviceInstall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dxgkrnl.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\FsDepends.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LSM]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SmartcardSimulator]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VirtualSmartcardReader]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wcmsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"EnableUIADesktopToggle"=0
"EnableCursorSuppression"=1
"ConsentPromptBehaviorUser"=3
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktopChanges"=1
"NoActiveDesktop"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2014-08-21 21:35:22 ----D---- C:\Program Files\trend micro
2014-08-21 21:35:21 ----D---- C:\rsit
2014-08-21 10:31:35 ----A---- C:\Windows\system32\netcfg-129298125.txt
2014-08-21 10:31:31 ----A---- C:\Windows\system32\netcfg-129294015.txt
2014-08-20 09:15:40 ----A---- C:\Windows\system32\netcfg-38347671.txt
2014-08-20 09:15:39 ----A---- C:\Windows\system32\netcfg-38346437.txt
2014-08-19 22:37:46 ----A---- C:\Windows\system32\netcfg-77140.txt
2014-08-19 22:35:57 ----A---- C:\Windows\system32\netcfg-632319625.txt
2014-08-19 21:55:28 ----A---- C:\Windows\system32\netcfg-629889781.txt
2014-08-19 21:55:25 ----A---- C:\Windows\system32\netcfg-629887390.txt
2014-08-19 21:55:19 ----A---- C:\Windows\system32\netcfg-629880890.txt
2014-08-19 20:10:22 ----D---- C:\Users\Vítek\AppData\Roaming\SetMyHomePage
2014-08-19 09:22:50 ----A---- C:\Windows\system32\netcfg-584732156.txt
2014-08-19 09:22:49 ----A---- C:\Windows\system32\netcfg-584730875.txt
2014-08-18 10:07:03 ----D---- C:\Windows\Hewlett-Packard
2014-08-18 09:52:39 ----A---- C:\Windows\system32\netcfg-500121312.txt
2014-08-18 09:52:38 ----A---- C:\Windows\system32\netcfg-500120359.txt
2014-08-17 09:29:24 ----A---- C:\Windows\system32\netcfg-412330828.txt
2014-08-17 09:29:22 ----A---- C:\Windows\system32\netcfg-412328203.txt
2014-08-15 10:54:32 ----A---- C:\Windows\system32\netcfg-244643140.txt
2014-08-15 10:54:31 ----A---- C:\Windows\system32\netcfg-244642359.txt
2014-08-14 09:27:03 ----A---- C:\Windows\system32\netcfg-153004828.txt
2014-08-14 09:27:01 ----A---- C:\Windows\system32\netcfg-153002390.txt
2014-08-13 09:38:14 ----A---- C:\Windows\system32\netcfg-67280109.txt
2014-08-13 09:38:13 ----A---- C:\Windows\system32\netcfg-67279218.txt
2014-08-12 19:56:38 ----A---- C:\Windows\unins000.exe
2014-08-12 18:55:39 ----A---- C:\Windows\system32\netcfg-14329171.txt
2014-08-12 14:57:35 ----A---- C:\Windows\system32\netcfg-44703.txt
2014-08-12 14:56:34 ----A---- C:\Windows\system32\netcfg-92824125.txt
2014-08-11 12:48:56 ----D---- C:\Users\Vítek\AppData\Roaming\.creativeportal
2014-08-11 07:54:13 ----A---- C:\Windows\system32\netcfg-464918531.txt
2014-08-11 07:54:13 ----A---- C:\Windows\system32\netcfg-464918140.txt
2014-08-10 18:50:56 ----A---- C:\Windows\system32\netcfg-417921234.txt
2014-08-10 18:50:50 ----A---- C:\Windows\system32\netcfg-417915171.txt
2014-08-10 09:40:34 ----A---- C:\Windows\system32\netcfg-384899171.txt
2014-08-10 09:40:33 ----A---- C:\Windows\system32\netcfg-384898250.txt
2014-08-09 18:57:06 ----A---- C:\Windows\system32\netcfg-331896734.txt
2014-08-09 18:57:03 ----A---- C:\Windows\system32\netcfg-331893468.txt
2014-08-09 08:53:54 ----A---- C:\Windows\system32\netcfg-295708500.txt
2014-08-09 08:53:51 ----A---- C:\Windows\system32\netcfg-295705515.txt
2014-08-08 10:00:51 ----A---- C:\Windows\system32\netcfg-213343515.txt
2014-08-08 10:00:50 ----A---- C:\Windows\system32\netcfg-213342750.txt
2014-08-07 20:15:44 ----D---- C:\Users\Vítek\AppData\Roaming\McTitan Dinocraft
2014-08-07 08:28:35 ----A---- C:\Windows\system32\netcfg-121411562.txt
2014-08-07 08:28:35 ----A---- C:\Windows\system32\netcfg-121410843.txt
2014-08-06 11:26:02 ----D---- C:\Users\Vítek\AppData\Roaming\HeroesAndGeneralsDesktop
2014-08-06 08:14:56 ----SHD---- C:\ProgramData\{D1D4879F-2279-49C9-AEBF-3B95C84EAA8F}
2014-08-06 08:07:38 ----A---- C:\Windows\system32\netcfg-33758406.txt
2014-08-06 08:07:38 ----A---- C:\Windows\system32\netcfg-33758250.txt
2014-08-05 17:52:36 ----A---- C:\Windows\system32\netcfg-292314343.txt
2014-08-05 17:39:30 ----A---- C:\Windows\system32\netcfg-291528796.txt
2014-08-05 17:28:38 ----A---- C:\Windows\system32\netcfg-290877000.txt
2014-08-05 17:27:33 ----A---- C:\Windows\system32\netcfg-290811218.txt
2014-08-05 17:15:18 ----A---- C:\Windows\system32\netcfg-290076156.txt
2014-08-05 16:49:10 ----A---- C:\Windows\system32\netcfg-288508625.txt
2014-08-05 16:24:42 ----A---- C:\Windows\system32\netcfg-287040656.txt
2014-08-05 16:14:36 ----A---- C:\Windows\system32\netcfg-286434953.txt
2014-08-05 15:26:49 ----A---- C:\Windows\system32\netcfg-283568062.txt
2014-08-05 15:13:55 ----A---- C:\Windows\system32\netcfg-282793234.txt
2014-08-05 11:18:06 ----A---- C:\Windows\system32\netcfg-268644671.txt
2014-08-05 11:18:02 ----A---- C:\Windows\system32\netcfg-268640921.txt
2014-08-04 18:19:25 ----A---- C:\Windows\system32\netcfg-207527390.txt
2014-08-04 18:17:23 ----A---- C:\Windows\system32\netcfg-207405375.txt
2014-08-04 13:45:57 ----A---- C:\Windows\system32\netcfg-191118906.txt
2014-08-04 13:42:53 ----A---- C:\Windows\system32\netcfg-190934968.txt
2014-08-04 09:56:56 ----A---- C:\Windows\system32\netcfg-177378593.txt
2014-08-04 09:56:53 ----A---- C:\Windows\system32\netcfg-177375453.txt
2014-08-03 08:40:58 ----A---- C:\Windows\system32\netcfg-86423421.txt
2014-08-03 08:37:56 ----A---- C:\Windows\system32\netcfg-86241265.txt
2014-08-03 08:14:34 ----A---- C:\Windows\system32\netcfg-84839296.txt
2014-08-03 08:14:31 ----A---- C:\Windows\system32\netcfg-84837093.txt
2014-08-02 08:52:22 ----A---- C:\Windows\system32\netcfg-711921.txt
2014-08-02 08:48:16 ----A---- C:\Windows\system32\netcfg-465843.txt
2014-08-02 08:41:20 ----A---- C:\Windows\system32\netcfg-50156.txt
2014-08-02 08:40:09 ----A---- C:\Windows\system32\netcfg-67749250.txt
2014-08-02 08:27:14 ----A---- C:\Windows\system32\netcfg-66973531.txt
2014-08-02 08:27:14 ----A---- C:\Windows\system32\netcfg-66973406.txt
2014-08-02 08:27:04 ----A---- C:\Windows\system32\netcfg-66963625.txt
2014-08-02 08:27:03 ----A---- C:\Windows\system32\netcfg-66962937.txt
2014-08-01 08:51:16 ----A---- C:\Windows\system32\netcfg-41168125.txt
2014-08-01 08:51:14 ----A---- C:\Windows\system32\netcfg-41166531.txt
2014-07-31 08:40:14 ----A---- C:\Windows\system32\netcfg-82742484.txt
2014-07-31 08:40:10 ----A---- C:\Windows\system32\netcfg-82738890.txt
2014-07-30 15:21:37 ----A---- C:\Windows\system32\netcfg-20429109.txt
2014-07-30 15:21:35 ----A---- C:\Windows\system32\netcfg-20427281.txt
2014-07-30 15:20:55 ----A---- C:\Windows\system32\netcfg-20387218.txt
2014-07-30 15:20:53 ----A---- C:\Windows\system32\netcfg-20385421.txt
2014-07-30 14:20:53 ----A---- C:\Windows\system32\netcfg-16784984.txt
2014-07-30 14:20:48 ----A---- C:\Windows\system32\netcfg-16780406.txt
2014-07-30 14:01:00 ----A---- C:\Windows\system32\netcfg-15592234.txt
2014-07-30 14:00:58 ----A---- C:\Windows\system32\netcfg-15589921.txt
2014-07-30 13:51:24 ----A---- C:\Windows\system32\netcfg-15016500.txt
2014-07-30 13:51:23 ----A---- C:\Windows\system32\netcfg-15015203.txt
2014-07-30 09:47:34 ----D---- C:\Program Files (x86)\IObit Apps Toolbar
2014-07-30 09:47:34 ----D---- C:\Program Files (x86)\Application Updater
2014-07-30 09:41:46 ----A---- C:\Windows\system32\netcfg-38093.txt
2014-07-30 09:40:37 ----A---- C:\Windows\system32\netcfg-241538281.txt
2014-07-30 09:39:30 ----A---- C:\Windows\system32\netcfg-241471187.txt
2014-07-30 09:39:30 ----A---- C:\Windows\system32\netcfg-241470718.txt
2014-07-30 08:39:10 ----A---- C:\Windows\system32\netcfg-237851093.txt
2014-07-30 08:39:06 ----A---- C:\Windows\system32\netcfg-237847125.txt
2014-07-29 14:07:02 ----D---- C:\Users\Vítek\AppData\Roaming\BANDISOFT
2014-07-29 14:05:32 ----D---- C:\Program Files (x86)\BandiMPEG1
2014-07-29 12:16:56 ----D---- C:\ProgramData\DriverGenius
2014-07-29 12:13:13 ----D---- C:\Program Files (x86)\KYE
2014-07-29 05:01:33 ----A---- C:\Windows\system32\netcfg-138394656.txt
2014-07-29 05:01:32 ----A---- C:\Windows\system32\netcfg-138393312.txt
2014-07-28 09:28:50 ----A---- C:\Windows\system32\netcfg-68031328.txt
2014-07-28 09:28:47 ----A---- C:\Windows\system32\netcfg-68028218.txt
2014-07-28 09:28:32 ----A---- C:\Windows\system32\netcfg-68013625.txt
2014-07-28 09:28:31 ----A---- C:\Windows\system32\netcfg-68011796.txt
2014-07-27 14:28:42 ----A---- C:\Windows\system32\netcfg-935113343.txt
2014-07-27 14:27:01 ----A---- C:\Windows\system32\netcfg-935012375.txt
2014-07-27 07:43:03 ----A---- C:\Windows\system32\netcfg-910774671.txt
2014-07-27 07:43:01 ----A---- C:\Windows\system32\netcfg-910772781.txt
2014-07-26 19:50:50 ----A---- C:\Windows\system32\netcfg-868041531.txt
2014-07-26 19:48:42 ----A---- C:\Windows\system32\netcfg-867913359.txt
2014-07-26 09:57:12 ----A---- C:\Windows\system32\netcfg-832429671.txt
2014-07-26 09:57:09 ----A---- C:\Windows\system32\netcfg-832426984.txt
2014-07-25 10:50:03 ----A---- C:\Windows\system32\netcfg-749200718.txt
2014-07-25 10:50:02 ----A---- C:\Windows\system32\netcfg-749199968.txt
2014-07-24 12:14:48 ----A---- C:\Windows\system32\netcfg-667885937.txt
2014-07-24 12:14:47 ----A---- C:\Windows\system32\netcfg-667885343.txt
2014-07-23 07:07:53 ----A---- C:\Windows\system32\netcfg-563071484.txt
2014-07-23 07:04:47 ----A---- C:\Windows\system32\netcfg-562885500.txt
2014-07-23 01:20:59 ----A---- C:\Windows\system32\netcfg-542256796.txt
2014-07-23 01:20:58 ----A---- C:\Windows\system32\netcfg-542256640.txt
2014-07-23 00:59:10 ----A---- C:\Windows\system32\netcfg-540947734.txt
2014-07-23 00:59:06 ----A---- C:\Windows\system32\netcfg-540944515.txt
2014-07-22 09:13:34 ----A---- C:\Windows\system32\netcfg-484211750.txt
2014-07-22 09:13:30 ----A---- C:\Windows\system32\netcfg-484208437.txt

======List of files/folders modified in the last 1 months======

2014-08-21 21:41:16 ----D---- C:\Windows\Prefetch
2014-08-21 21:40:35 ----D---- C:\Windows\Temp
2014-08-21 21:35:22 ----RD---- C:\Program Files
2014-08-21 21:03:14 ----D---- C:\ProgramData\MFAData
2014-08-21 21:02:00 ----D---- C:\Windows\system32\sru
2014-08-21 20:20:24 ----D---- C:\Program Files (x86)\Steam
2014-08-21 19:53:02 ----D---- C:\Users\Vítek\AppData\Roaming\TS3Client
2014-08-21 19:39:06 ----D---- C:\Users\Vítek\AppData\Roaming\ClassicShell
2014-08-21 12:52:13 ----D---- C:\Windows\system32\config
2014-08-21 12:42:49 ----D---- C:\Windows\Microsoft.NET
2014-08-21 10:39:55 ----D---- C:\Users\Vítek\AppData\Roaming\BitTorrent
2014-08-21 10:39:52 ----D---- C:\Users\Vítek\AppData\Roaming\Skype
2014-08-21 10:39:43 ----D---- C:\ProgramData\Origin
2014-08-21 10:38:24 ----D---- C:\Users\Vítek\AppData\Roaming\Raptr
2014-08-21 10:35:45 ----D---- C:\Program Files (x86)\Origin
2014-08-21 10:32:58 ----A---- C:\Windows\SYSWOW64\LOCALSERVICE.INI
2014-08-21 10:31:36 ----A---- C:\Windows\SYSWOW64\bscs.ini
2014-08-21 10:31:35 ----RD---- C:\Windows\System32
2014-08-21 10:31:33 ----A---- C:\Windows\SYSWOW64\LOCALDEVICE.INI
2014-08-21 01:17:03 ----A---- C:\Windows\SYSWOW64\REMOTEDEVICE.INI
2014-08-19 22:47:31 ----D---- C:\Users\Vítek\AppData\Roaming\AIMP3
2014-08-19 22:38:41 ----D---- C:\ProgramData\ProductData
2014-08-19 21:56:07 ----SHD---- C:\Windows\Installer
2014-08-19 21:55:21 ----D---- C:\Windows\system32\Drivers
2014-08-19 21:55:20 ----D---- C:\Windows\Inf
2014-08-19 21:55:16 ----D---- C:\Windows\system32\DriverStore
2014-08-19 19:37:39 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-08-19 19:37:34 ----D---- C:\Windows
2014-08-19 19:37:30 ----RD---- C:\Program Files (x86)
2014-08-19 19:36:37 ----SHD---- C:\System Volume Information
2014-08-19 19:35:52 ----D---- C:\Program Files\City Life Super Deluxe
2014-08-18 10:08:04 ----D---- C:\Program Files (x86)\HP
2014-08-18 10:07:53 ----D---- C:\Users\Vítek\AppData\Roaming\HpUpdate
2014-08-18 10:03:30 ----D---- C:\Windows\SysWOW64
2014-08-14 09:31:47 ----D---- C:\Windows\AUInstallAgent
2014-08-14 09:30:58 ----HD---- C:\Program Files\WindowsApps
2014-08-12 19:13:59 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-08-12 19:07:23 ----D---- C:\Windows\Logs
2014-08-12 02:13:31 ----D---- C:\Program Files (x86)\AVG SafeGuard toolbar
2014-08-11 15:46:15 ----D---- C:\Users\Vítek\AppData\Roaming\.minecraft
2014-08-11 13:24:20 ----SD---- C:\Users\Vítek\AppData\Roaming\Microsoft
2014-08-10 11:18:33 ----D---- C:\Program Files\TeamSpeak 3 Client
2014-08-09 08:57:07 ----D---- C:\Users\Vítek\AppData\Roaming\Slick Savings
2014-08-08 11:11:38 ----D---- C:\Program Files (x86)\Origin Games
2014-08-06 19:14:37 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2014-08-06 09:08:39 ----D---- C:\Program Files (x86)\AVG
2014-08-06 08:16:22 ----D---- C:\Users\Vítek\AppData\Roaming\AVG
2014-08-06 08:15:14 ----D---- C:\ProgramData\AVG
2014-08-06 08:14:56 ----HD---- C:\ProgramData
2014-08-02 08:31:03 ----D---- C:\Program Files (x86)\Raptr
2014-07-31 11:22:58 ----A---- C:\Windows\SYSWOW64\SHORTCUT.INI
2014-07-29 13:08:35 ----SD---- C:\ProgramData\Microsoft
2014-07-29 08:59:15 ----RSD---- C:\Windows\assembly

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ACPI;@acpi.inf,%ACPI.SvcDesc%;Microsoft ACPI Driver; C:\Windows\System32\drivers\ACPI.sys [2012-07-26 424688]
R0 acpiex;Microsoft ACPIEx Driver; C:\Windows\System32\Drivers\acpiex.sys [2012-07-26 77040]
R0 amdkmpfd;@oem27.inf,%AMDKMPFD_svcdesc%;AMD PCI Root Bus Lower Filter; C:\Windows\System32\drivers\amdkmpfd.sys [2013-12-13 36608]
R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2014-06-17 190744]
R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [2014-06-17 328984]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2014-06-17 123672]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2014-06-17 31512]
R0 CLFS;@%SystemRoot%\system32\drivers\clfs.sys,-100; C:\Windows\System32\drivers\CLFS.sys [2012-07-26 361200]
R0 CNG;CNG; C:\Windows\System32\Drivers\cng.sys [2012-07-26 562400]
R0 disk;@disk.inf,%disk_ServiceDesc%;Disk Driver; C:\Windows\System32\drivers\disk.sys [2012-07-26 102640]
R0 EhStorClass;@%SystemRoot%\system32\drivers\EhStorClass.sys,-100; C:\Windows\System32\drivers\EhStorClass.sys [2012-07-26 81136]
R0 FileInfo;@%SystemRoot%\system32\drivers\fileinfo.sys,-100; C:\Windows\System32\drivers\fileinfo.sys [2012-07-26 71920]
R0 FltMgr;@%SystemRoot%\system32\drivers\fltmgr.sys,-10001; C:\Windows\system32\drivers\fltmgr.sys [2012-07-26 374512]
R0 fvevol;@%SystemRoot%\system32\drivers\fvevol.sys,-100; C:\Windows\System32\DRIVERS\fvevol.sys [2012-07-26 465136]
R0 iaStorA;iaStorA; C:\Windows\System32\drivers\iaStorA.sys [2013-04-10 653808]
R0 KSecDD;KSecDD; C:\Windows\System32\Drivers\ksecdd.sys [2012-07-26 100080]
R0 KSecPkg;KSecPkg; C:\Windows\System32\Drivers\ksecpkg.sys [2012-07-26 172272]
R0 mountmgr;@%SystemRoot%\system32\drivers\mountmgr.sys,-100; C:\Windows\System32\drivers\mountmgr.sys [2012-07-26 93936]
R0 msisadrv;msisadrv; C:\Windows\System32\drivers\msisadrv.sys [2012-07-26 17136]
R0 Mup;@%systemroot%\system32\drivers\mup.sys,-101; C:\Windows\System32\Drivers\mup.sys [2012-07-26 83696]
R0 NDIS;@%SystemRoot%\system32\drivers\ndis.sys,-200; C:\Windows\system32\drivers\ndis.sys [2012-07-26 1000688]
R0 partmgr;@%SystemRoot%\system32\drivers\partmgr.sys,-100; C:\Windows\System32\drivers\partmgr.sys [2012-07-26 91888]
R0 pci;@machine.inf,%pci_svcdesc%;Řadič sběrnice PCI; C:\Windows\System32\drivers\pci.sys [2012-07-26 234224]
R0 pcw;Performance Counters for Windows Driver; C:\Windows\System32\drivers\pcw.sys [2012-07-26 52464]
R0 pdc;@%SystemRoot%\system32\drivers\pdc.sys,-100; C:\Windows\system32\drivers\pdc.sys [2012-07-26 68848]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2012-07-26 217328]
R0 spaceport;@spaceport.inf,%Spaceport_ServiceDesc%;Storage Spaces Driver; C:\Windows\System32\drivers\spaceport.sys [2012-07-26 283888]
R0 Tcpip;@%SystemRoot%\system32\tcpipcfg.dll,-50003; C:\Windows\System32\drivers\tcpip.sys [2012-07-26 2224880]
R0 vdrvroot;@vdrvroot.inf,%vdrvroot_svcdesc%;Microsoft Virtual Drive Enumerator; C:\Windows\System32\drivers\vdrvroot.sys [2012-07-26 36080]
R0 volmgr;@volmgr.inf,%volmgr_svcdesc%;Volume Manager Driver; C:\Windows\System32\drivers\volmgr.sys [2012-07-26 83184]
R0 volmgrx;@%SystemRoot%\system32\drivers\volmgrx.sys,-100; C:\Windows\System32\drivers\volmgrx.sys [2012-07-26 378608]
R0 volsnap;@volume.inf,%VolumeClassName%;Storage volumes; C:\Windows\System32\drivers\volsnap.sys [2012-07-26 332016]
R0 Wd;@wd.inf,%WdServiceDisplayName%;Microsoft Watchdog Timer Driver; C:\Windows\System32\drivers\wd.sys [2012-07-26 23792]
R1 AFD;@%systemroot%\system32\drivers\afd.sys,-1000; C:\Windows\system32\drivers\afd.sys [2012-07-26 561152]
R1 Avgdiska;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiska.sys [2014-06-30 152344]
R1 Avgfwfd;@oem48.inf,%AvgfwfdService_Desc%;AVG network filter service; C:\Windows\system32\DRIVERS\avgfwd6a.sys [2013-09-26 57144]
R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2014-06-17 242968]
R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2014-06-17 235800]
R1 avgtp;avgtp; \??\C:\Windows\system32\drivers\avgtpx64.sys [2014-08-12 50976]
R1 Avgwfpa;AVG Firewall Driver; C:\Windows\system32\DRIVERS\avgwfpa.sys [2014-06-30 270104]
R1 BasicDisplay;BasicDisplay; C:\Windows\System32\drivers\BasicDisplay.sys [2012-07-26 48640]
R1 BasicRender;BasicRender; C:\Windows\System32\drivers\BasicRender.sys [2012-07-26 29696]
R1 Beep;Beep; C:\Windows\system32\drivers\Beep.sys [2012-07-26 7680]
R1 cdrom;@cdrom.inf,%cdrom_ServiceDesc%;CD-ROM Driver; C:\Windows\System32\drivers\cdrom.sys [2012-07-26 174080]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2012-07-26 571392]
R1 Dfsc;@%systemroot%\system32\wkssvc.dll,-1008; C:\Windows\System32\Drivers\dfsc.sys [2012-07-26 118784]
R1 discache;@%systemroot%\system32\drivers\discache.sys,-102; C:\Windows\System32\drivers\discache.sys [2012-07-26 50688]
R1 dtsoftbus01;@oem20.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\Windows\System32\drivers\dtsoftbus01.sys [2013-11-08 283200]
R1 Msfs;Msfs; C:\Windows\system32\drivers\Msfs.sys [2012-07-26 26112]
R1 mssmbios;@mssmbios.inf,%mssmbios_svcdesc%;Microsoft System Management BIOS Driver; C:\Windows\System32\drivers\mssmbios.sys [2012-07-26 37616]
R1 NetBIOS;@netnb.inf,%NetBIOS_Desc%;NetBIOS Interface; C:\Windows\system32\DRIVERS\netbios.sys [2012-07-26 46080]
R1 NetBT;@%SystemRoot%\system32\drivers\netbt.sys,-2; C:\Windows\System32\DRIVERS\netbt.sys [2012-07-26 331776]
R1 Npfs;Npfs; C:\Windows\system32\drivers\Npfs.sys [2012-07-26 49152]
R1 npsvctrig;@npsvctrig.inf,%NPSVCTRIG.SvcDisplayName%;Named pipe service trigger provider; C:\Windows\System32\drivers\npsvctrig.sys [2012-07-26 23552]
R1 nsiproxy;@%SystemRoot%\system32\drivers\nsiproxy.sys,-2; C:\Windows\system32\drivers\nsiproxy.sys [2012-07-26 34304]
R1 Null;Null; C:\Windows\system32\drivers\Null.sys [2012-07-26 5632]
R1 Psched;@%SystemRoot%\System32\drivers\pacer.sys,-101; C:\Windows\system32\DRIVERS\pacer.sys [2012-07-26 145408]
R1 rdbss;@%systemroot%\system32\wkssvc.dll,-1000; C:\Windows\system32\DRIVERS\rdbss.sys [2012-07-26 423936]
R1 tdx;@%SystemRoot%\system32\tcpipcfg.dll,-50004; C:\Windows\system32\DRIVERS\tdx.sys [2012-07-26 117248]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [2012-07-26 64000]
R1 Wanarpv6;@%systemroot%\system32\rascfg.dll,-32012; C:\Windows\system32\DRIVERS\wanarp.sys [2012-07-26 83456]
R2 lltdio;@%SystemRoot%\system32\lltdres.dll,-6; C:\Windows\system32\DRIVERS\lltdio.sys [2012-07-26 60416]
R2 luafv;@%systemroot%\system32\drivers\luafv.sys,-100; C:\Windows\system32\drivers\luafv.sys [2012-07-26 134144]
R2 NativeWifiP;@%SystemRoot%\System32\drivers\nwifi.sys,-101; C:\Windows\system32\DRIVERS\nwifi.sys [2012-07-26 427520]
R2 Ndu;@%SystemRoot%\system32\drivers\Ndu.sys,-10001; C:\Windows\system32\drivers\Ndu.sys [2012-07-26 97792]
R2 PEAUTH;PEAUTH; C:\Windows\system32\drivers\peauth.sys [2012-07-26 804864]
R2 rspndr;@%SystemRoot%\system32\lltdres.dll,-5; C:\Windows\system32\DRIVERS\rspndr.sys [2012-07-26 78848]
R2 secdrv;Security Driver; C:\Windows\system32\drivers\secdrv.sys [2012-07-26 23040]
R2 tcpipreg;TCP/IP Registry Compatibility; C:\Windows\System32\drivers\tcpipreg.sys [2012-07-26 45056]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2014-04-18 15376384]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2014-04-18 638976]
R3 bowser;@%systemroot%\system32\browser.dll,-102; C:\Windows\system32\DRIVERS\bowser.sys [2012-07-26 101888]
R3 BtAudioBusSrv;@oem5.inf,%SvcDesc%;Ralink Bluetooth Audio Bus Service; C:\Windows\System32\Drivers\BtAudioBus.sys [2012-06-15 23136]
R3 BthEnum;@tdibth.inf,%BthEnum.DisplayName%;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2012-07-26 51712]
R3 BthL2caScoIfSrv;Bluetooth Profile Interface Driver Service; C:\Windows\System32\Drivers\BtL2caScoIf.sys [2013-04-26 54064]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\Windows\system32\DRIVERS\BthLEEnum.sys [2012-07-26 202752]
R3 BTHMODEM;@bthspp.inf,%BthSerial.DisplayName%;Ovladač pro sériovou komunikaci protokolem Bluetooth; C:\Windows\System32\drivers\bthmodem.sys [2012-07-26 65536]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2012-07-26 119808]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2012-07-26 74752]
R3 btUrbFilterDrv;IVT URB Bluetooth Filter Driver Service; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [2013-03-25 49584]
R3 clwvd;@oem21.inf,%clwvd.DeviceDesc%;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys [2013-03-05 41408]
R3 CmBatt;@cmbatt.inf,%CmBatt.SvcDesc%;Microsoft ACPI Control Method Battery Driver; C:\Windows\System32\drivers\CmBatt.sys [2012-07-26 25600]
R3 CompositeBus;@CompositeBus.inf,%CompositeBus.SVCDESC%;Composite Bus Enumerator Driver; C:\Windows\System32\drivers\CompositeBus.sys [2012-07-26 36352]
R3 condrv;Console Driver; C:\Windows\System32\drivers\condrv.sys [2012-07-26 33792]
R3 DXGKrnl;LDDM Graphics Subsystem; C:\Windows\System32\drivers\dxgkrnl.sys [2012-07-26 1448688]
R3 HDAudBus;@hdaudbus.inf,%HDAudBus.SVCDESC%;Microsoft UAA Bus Driver for High Definition Audio; C:\Windows\System32\drivers\HDAudBus.sys [2012-07-26 71168]
R3 HidUsb;@input.inf,%HID.SvcDesc%;Microsoft HID Class Driver; C:\Windows\System32\drivers\hidusb.sys [2012-07-26 27648]
R3 HTTP;@%SystemRoot%\system32\drivers\http.sys,-1; C:\Windows\system32\drivers\HTTP.sys [2012-07-26 859136]
R3 i8042prt;@msmouse.inf,%i8042prt.SvcDesc%;Ovladač portu klávesnice a myši PS/2; C:\Windows\System32\drivers\i8042prt.sys [2012-07-26 112640]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2013-10-28 4195840]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2013-03-26 3376200]
R3 IntcDAud;@oem25.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2013-10-28 449496]
R3 intelppm;@cpu.inf,%IntelPPM.SvcDesc%;Intel Processor Driver; C:\Windows\System32\drivers\intelppm.sys [2012-07-26 89088]
R3 kbdclass;@keyboard.inf,%kbdclass.SvcDesc%;Keyboard Class Driver; C:\Windows\System32\drivers\kbdclass.sys [2012-07-26 48368]
R3 kbdhid;@keyboard.inf,%KBDHID.SvcDesc%;Keyboard HID Driver; C:\Windows\System32\drivers\kbdhid.sys [2012-07-26 29184]
R3 kdnic;@kdnic.inf,%KdNic.Service.DispName%;Miniport ladění jádra společnosti Microsoft (NDIS 6.20); C:\Windows\system32\DRIVERS\kdnic.sys [2012-07-26 18432]
R3 ksthunk;Kernel Streaming Thunks; C:\Windows\system32\drivers\ksthunk.sys [2012-07-26 21376]
R3 monitor;@monitor.inf,%Monitor.SVCDESC%;Služba ovladače funkce třídy monitorů Microsoft; C:\Windows\system32\DRIVERS\monitor.sys [2012-07-26 30720]
R3 mouclass;@msmouse.inf,%mouclass.SvcDesc%;Mouse Class Driver; C:\Windows\System32\drivers\mouclass.sys [2012-07-26 45808]
R3 mouhid;@msmouse.inf,%MOUHID.SvcDesc%;Mouse HID Driver; C:\Windows\System32\drivers\mouhid.sys [2012-07-26 26112]
R3 mpsdrv;@%SystemRoot%\system32\FirewallAPI.dll,-23092; C:\Windows\System32\drivers\mpsdrv.sys [2012-07-26 74752]
R3 mrxsmb;@%systemroot%\system32\wkssvc.dll,-1002; C:\Windows\system32\DRIVERS\mrxsmb.sys [2012-07-26 368128]
R3 mrxsmb10;@%systemroot%\system32\wkssvc.dll,-1004; C:\Windows\system32\DRIVERS\mrxsmb10.sys [2012-07-26 279552]
R3 mrxsmb20;@%systemroot%\system32\wkssvc.dll,-1006; C:\Windows\system32\DRIVERS\mrxsmb20.sys [2012-07-26 214016]
R3 NdisTapi;@%systemroot%\system32\rascfg.dll,-32001; C:\Windows\system32\DRIVERS\ndistapi.sys [2012-07-26 25088]
R3 Ndisuio;@ndisuio.inf,%NDISUIO_Desc%;NDIS Usermode I/O Protocol; C:\Windows\system32\DRIVERS\ndisuio.sys [2012-07-26 58880]
R3 NdisWan;@%systemroot%\system32\rascfg.dll,-32002; C:\Windows\system32\DRIVERS\ndiswan.sys [2012-07-26 174080]
R3 NDProxy;NDIS Proxy; C:\Windows\system32\drivers\NDProxy.sys [2012-07-26 60416]
R3 netr28x;@oem19.inf,%Generic.Service.DispName%;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2013-03-07 2480400]
R3 Ntfs;Ntfs; C:\Windows\system32\drivers\Ntfs.sys [2012-07-26 1934064]
R3 PptpMiniport;@%systemroot%\system32\rascfg.dll,-32006; C:\Windows\system32\DRIVERS\raspptp.sys [2012-07-26 114176]
R3 RasAgileVpn;@netavpna.inf,%Svc-Mp-AgileVpn-DispName%;Připojení WAN Miniport (IKEv2); C:\Windows\system32\DRIVERS\AgileVpn.sys [2012-07-26 68608]
R3 Rasl2tp;@%systemroot%\system32\rascfg.dll,-32005; C:\Windows\system32\DRIVERS\rasl2tp.sys [2012-07-26 124928]
R3 RasPppoe;@%systemroot%\system32\rascfg.dll,-32007; C:\Windows\system32\DRIVERS\raspppoe.sys [2012-07-26 81920]
R3 RasSstp;@%systemroot%\system32\sstpsvc.dll,-202; C:\Windows\system32\DRIVERS\rassstp.sys [2012-07-26 92672]
R3 rdpbus;@rdpbus.inf,%rdpbus_svcdesc%;Remote Desktop Device Redirector Bus Driver; C:\Windows\System32\drivers\rdpbus.sys [2012-07-26 22528]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-07-26 27888]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2012-07-26 156672]
R3 RSP2STOR;@oem8.inf,%Rts5229%;Realtek PCIE CardReader Driver - P2; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [2013-01-24 288328]
R3 rtbth;@oem2.inf,%General.Service.DispName%;RTBTH Bluetooth Device Driver; C:\Windows\System32\drivers\rtbth.sys [2013-07-13 1162952]
R3 RTL8168;@oem14.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2012-10-25 723088]
R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2013-04-24 33008]
R3 srv;@%systemroot%\system32\srvsvc.dll,-102; C:\Windows\System32\DRIVERS\srv.sys [2012-07-26 416768]
R3 srv2;@%systemroot%\system32\srvsvc.dll,-104; C:\Windows\System32\DRIVERS\srv2.sys [2012-07-26 619520]
R3 srvnet;srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [2012-07-26 248832]
R3 swenum;@swenum.inf,%SWENUM.SVCDESC%;Software Bus Driver; C:\Windows\System32\drivers\swenum.sys [2012-07-26 13680]
R3 SynTP;@oem18.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2013-04-24 495856]
R3 TPM;@tpm.inf,%TPM%;TPM; C:\Windows\system32\drivers\tpm.sys [2012-07-26 148720]
R3 tunnel;@nettun.inf,%TUNNEL.Service.DisplayName%;Microsoft Tunnel Miniport Adapter Driver; C:\Windows\system32\DRIVERS\tunnel.sys [2012-07-26 149504]
R3 UCX01000;USB Controller Extension; C:\Windows\System32\drivers\ucx01000.sys [2012-07-26 212208]
R3 umbus;@umbus.inf,%umbus.SVCDESC%;UMBus Enumerator Driver; C:\Windows\System32\drivers\umbus.sys [2012-07-26 48128]
R3 usbccgp;@usb.inf,%GenericParent.SvcDesc%;Microsoft USB Generic Parent Driver; C:\Windows\System32\drivers\usbccgp.sys [2012-07-26 120832]
R3 usbehci;@usbport.inf,%EHCIMP.SvcDesc%;Ovladač miniportu vylepšeného hostitelského řadiče Microsoft USB 2.0; C:\Windows\System32\drivers\usbehci.sys [2012-07-26 78576]
R3 usbhub;@usbport.inf,%ROOTHUB.SvcDesc%;Microsoft USB Standard Hub Driver; C:\Windows\System32\drivers\usbhub.sys [2012-07-26 496368]
R3 USBHUB3;@usbhub3.inf,%UsbHub3.SVCDESC%;SuperSpeed Hub; C:\Windows\System32\drivers\UsbHub3.sys [2012-07-26 445168]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2012-07-26 210304]
R3 USBXHCI;@usbxhci.inf,%PCI\CC_0C0330.DeviceDesc%;USB xHCI Compliant Host Controller; C:\Windows\System32\drivers\USBXHCI.SYS [2012-07-26 337136]
R3 vwifibus;@%SystemRoot%\System32\drivers\vwifibus.sys,-257; C:\Windows\System32\drivers\vwifibus.sys [2012-07-26 24064]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [2012-07-26 17920]
R4 cdfs;CD/DVD File System Reader; C:\Windows\system32\DRIVERS\cdfs.sys [2012-07-26 108544]
S0 3ware;3ware; C:\Windows\System32\drivers\3ware.sys [2012-07-26 106736]
S0 adp94xx;adp94xx; C:\Windows\System32\drivers\adp94xx.sys [2012-07-26 492272]
S0 adpahci;adpahci; C:\Windows\System32\drivers\adpahci.sys [2012-07-26 340720]
S0 adpu320;adpu320; C:\Windows\System32\drivers\adpu320.sys [2012-07-26 184048]
S0 agp440;@machine.inf,%agp440_svcdesc%;Intel AGP Bus Filter; C:\Windows\System32\drivers\agp440.sys [2012-07-26 63216]
S0 amdsata;amdsata; C:\Windows\System32\drivers\amdsata.sys [2012-07-26 76016]
S0 amdsbs;amdsbs; C:\Windows\System32\drivers\amdsbs.sys [2012-07-26 258288]
S0 amdxata;amdxata; C:\Windows\System32\drivers\amdxata.sys [2012-07-26 26352]
S0 arc;arc; C:\Windows\System32\drivers\arc.sys [2012-07-26 104688]
S0 arcsas;@arcsas.inf,%arcsas_ServiceName%;Adaptec SAS/SATA-II RAID Windows Inbox Miniport Driver; C:\Windows\System32\drivers\arcsas.sys [2012-07-26 108272]
S0 atapi;@mshdc.inf,%idechannel.DeviceDesc%;IDE Channel; C:\Windows\System32\drivers\atapi.sys [2012-07-26 25840]
S0 Avgboota;AVG Early Launch Anti-Malware Driver; C:\Windows\system32\DRIVERS\avgboota.sys [2013-09-04 20496]
S0 b06bdrv;@netbvbda.inf,%vbd_srv_desc%;Broadcom NetXtreme II VBD; C:\Windows\System32\drivers\bxvbda.sys [2012-07-26 539376]
S0 ebdrv;@netevbda.inf,%vbd_srv_desc%;Broadcom NetXtreme II 10 GigE VBD; C:\Windows\System32\drivers\evbda.sys [2012-07-26 3295984]
S0 EhStorTcgDrv;@ehstortcgdrv.inf,%EhStorTcgDrv.Desc%;Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols; C:\Windows\System32\drivers\EhStorTcgDrv.sys [2012-07-26 113904]
S0 gagp30kx;@machine.inf,%gagp30kx_svcdesc%;Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms; C:\Windows\System32\drivers\gagp30kx.sys [2012-07-26 66800]
S0 HpSAMD;HpSAMD; C:\Windows\System32\drivers\HpSAMD.sys [2012-07-26 64752]
S0 hwpolicy;@%systemroot%\system32\drivers\hwpolicy.sys,-101; C:\Windows\System32\drivers\hwpolicy.sys [2012-07-26 24816]
S0 iaStorV;@iastorv.inf,%*PNP0600.DeviceDesc%;Intel RAID Controller Windows 7; C:\Windows\System32\drivers\iaStorV.sys [2012-07-26 411888]
S0 iirsp;iirsp; C:\Windows\System32\drivers\iirsp.sys [2012-07-26 45296]
S0 intelide;intelide; C:\Windows\System32\drivers\intelide.sys [2012-07-26 18672]
S0 isapnp;isapnp; C:\Windows\System32\drivers\isapnp.sys [2012-07-26 22256]
S0 LSI_SAS;LSI_SAS; C:\Windows\System32\drivers\lsi_sas.sys [2012-07-26 108784]
S0 LSI_SAS2;LSI_SAS2; C:\Windows\System32\drivers\lsi_sas2.sys [2012-07-26 92400]
S0 LSI_SCSI;LSI_SCSI; C:\Windows\System32\drivers\lsi_scsi.sys [2012-07-26 116976]
S0 LSI_SSS;LSI_SSS; C:\Windows\System32\drivers\lsi_sss.sys [2012-07-26 81136]
S0 megasas;megasas; C:\Windows\System32\drivers\megasas.sys [2012-07-26 51952]
S0 MegaSR;MegaSR; C:\Windows\System32\drivers\MegaSR.sys [2012-07-26 353008]
S0 mvumis;mvumis; C:\Windows\System32\drivers\mvumis.sys [2012-07-26 64240]
S0 nfrd960;nfrd960; C:\Windows\System32\drivers\nfrd960.sys [2012-07-26 52464]
S0 nv_agp;@machine.inf,%agpnvidia_svcdesc%;NVIDIA nForce AGP Bus Filter; C:\Windows\System32\drivers\nv_agp.sys [2012-07-26 125168]
S0 nvraid;nvraid; C:\Windows\System32\drivers\nvraid.sys [2012-07-26 150256]
S0 nvstor;nvstor; C:\Windows\System32\drivers\nvstor.sys [2012-07-26 168176]
S0 pciide;pciide; C:\Windows\System32\drivers\pciide.sys [2012-07-26 14064]
S0 pcmcia;pcmcia; C:\Windows\System32\drivers\pcmcia.sys [2012-07-26 237808]
S0 sbp2port;@sbp2.inf,%sbp2_ServiceDesc%;SBP-2 Transport/Protocol Bus Driver; C:\Windows\System32\drivers\sbp2port.sys [2012-07-26 107760]
S0 SiSRaid2;SiSRaid2; C:\Windows\System32\drivers\SiSRaid2.sys [2012-07-26 44784]
S0 SiSRaid4;SiSRaid4; C:\Windows\System32\drivers\sisraid4.sys [2012-07-26 81648]
S0 stexstor;stexstor; C:\Windows\System32\drivers\stexstor.sys [2012-07-26 30960]
S0 storahci;@mshdc.inf,%storahci_ServiceDescription%;Standardní ovladač SATA AHCI společnosti Microsoft; C:\Windows\System32\drivers\storahci.sys [2012-07-26 77552]
S0 storflt;@%SystemRoot%\system32\vmstorfltres.dll,-1000; C:\Windows\system32\DRIVERS\vmstorfl.sys [2012-07-26 45160]
S0 storvsc;storvsc; C:\Windows\System32\drivers\storvsc.sys [2012-07-26 37992]
S0 uagp35;@machine.inf,%uagp35_svcdesc%;Microsoft AGPv3.5 Filter; C:\Windows\System32\drivers\uagp35.sys [2012-07-26 65776]
S0 uliagpkx;@machine.inf,%uliagpkx_svcdesc%;Uli AGP Bus Filter; C:\Windows\System32\drivers\uliagpkx.sys [2012-07-26 66800]
S0 viaide;viaide; C:\Windows\System32\drivers\viaide.sys [2012-07-26 19184]
S0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\System32\drivers\vmbus.sys [2012-07-26 137832]
S0 vsmraid;vsmraid; C:\Windows\System32\drivers\vsmraid.sys [2012-07-26 164080]
S0 VSTXRAID;@vstxraid.inf,%Driver.DeviceDesc%;VIA StorX Storage Controller Windows Driver; C:\Windows\System32\drivers\vstxraid.sys [2012-07-26 322800]
S1 dam;@%SystemRoot%\system32\drivers\dam.sys,-100; C:\Windows\system32\drivers\dam.sys [2012-07-26 55024]
S3 1394ohci;@1394.inf,%PCI\CC_0C0010.DeviceDesc%;1394 OHCI Compliant Host Controller; C:\Windows\System32\drivers\1394ohci.sys [2012-07-26 226304]
S3 acpipagr;@acpipagr.inf,%SvcDesc%;ACPI Processor Aggregator Driver; C:\Windows\System32\drivers\acpipagr.sys [2012-07-26 10240]
S3 AcpiPmi;@acpipmi.inf,%AcpiPmi.SvcDesc%;ACPI Power Meter Driver; C:\Windows\System32\drivers\acpipmi.sys [2012-07-26 12288]
S3 acpitime;@acpitime.inf,%AcpiTime.SvcDesc%;ACPI Wake Alarm Driver; C:\Windows\System32\drivers\acpitime.sys [2012-07-26 10752]
S3 AmdK8;@cpu.inf,%AmdK8.SvcDesc%;AMD K8 Processor Driver; C:\Windows\System32\drivers\amdk8.sys [2012-07-26 90624]
S3 AmdPPM;@cpu.inf,%AmdPPM.SvcDesc%;AMD Processor Driver; C:\Windows\System32\drivers\amdppm.sys [2012-07-26 88064]
S3 AndNetDiag;@oem34.inf,%Lgsi.Service.Name%;LGE AndroidNet USB Serial Port; C:\Windows\system32\DRIVERS\lgandnetdiag64.sys [2012-07-03 29184]
S3 ANDNetModem;@oem36.inf,%LGSI.Service.Name%;LGE AndroidNet USB Modem; C:\Windows\system32\DRIVERS\lgandnetmodem64.sys [2012-07-03 36352]
S3 AppID;@%systemroot%\system32\appidsvc.dll,-102; C:\Windows\system32\drivers\appid.sys [2012-07-26 79360]
S3 AsyncMac;@%systemroot%\system32\rascfg.dll,-32000; C:\Windows\system32\DRIVERS\asyncmac.sys [2012-07-26 26624]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-26 1170944]
S3 circlass;@circlass.inf,%circlass.SVCDESC%;Consumer IR Devices; C:\Windows\System32\drivers\circlass.sys [2012-07-26 45056]
S3 dmvsc;dmvsc; C:\Windows\System32\drivers\dmvsc.sys [2012-07-26 33280]
S3 drmkaud;@wdmaudio.inf,%drmkaud.SvcDesc%;Ovladače zvuku považované společností Microsoft za důvěryhodné; C:\Windows\system32\drivers\drmkaud.sys [2012-07-26 5632]
S3 EagleX64;EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys []
S3 ErrDev;@errdev.inf,%ERRDEV.SvcDesc%;Microsoft Hardware Error Device Driver; C:\Windows\System32\drivers\errdev.sys [2012-07-26 10240]
S3 exfat;exFAT File System Driver; C:\Windows\system32\drivers\exfat.sys [2012-07-26 194560]
S3 fastfat;FAT12/16/32 File System Driver; C:\Windows\system32\drivers\fastfat.sys [2012-07-26 210672]
S3 fdc;@fdc.inf,%fdc_ServiceDesc%;Floppy Disk Controller Driver; C:\Windows\System32\drivers\fdc.sys [2012-07-26 30720]
S3 Filetrace;@%SystemRoot%\system32\drivers\filetrace.sys,-10001; C:\Windows\system32\drivers\filetrace.sys [2012-07-26 34816]
S3 flpydisk;@flpydisk.inf,%floppy_ServiceDesc%;Floppy Disk Driver; C:\Windows\System32\drivers\flpydisk.sys [2012-07-26 24576]
S3 FsDepends;@%SystemRoot%\system32\drivers\fsdepends.sys,-10001; C:\Windows\System32\drivers\FsDepends.sys [2012-07-26 57584]
S3 FxPPM;@cpu.inf,%FxPPM.SvcDesc%;Power Framework Processor Driver; C:\Windows\System32\drivers\fxppm.sys [2012-07-26 22528]
S3 gencounter;@wgencounter.inf,%GenCounter.SVCDESC%;Microsoft Hyper-V Generation Counter; C:\Windows\System32\drivers\vmgencounter.sys [2012-07-26 12288]
S3 GPIOClx0101;Microsoft GPIO Class Extension Driver; C:\Windows\System32\Drivers\msgpioclx.sys [2012-07-26 120048]
S3 Hamachi;LogMeIn Hamachi Virtual Miniport); C:\Windows\system32\DRIVERS\Hamdrv.sys [2014-04-15 46136]
S3 HdAudAddService;@hdaudio.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2012-07-26 339968]
S3 HidBatt;@hidbatt.inf,%HidBatt.SvcDesc%;HID UPS Battery Driver; C:\Windows\System32\drivers\HidBatt.sys [2012-07-26 27136]
S3 HidBth;@hidbth.inf,%HIDBTH.SvcDesc%;Microsoft Bluetooth HID Miniport; C:\Windows\System32\drivers\hidbth.sys [2012-07-26 95744]
S3 hidi2c;@hidi2c.inf,%hidi2c.SVCDESC%;Microsoft I2C HID Miniport Driver; C:\Windows\System32\drivers\hidi2c.sys [2012-07-26 38400]
S3 HidIr;@hidir.inf,%HIDIR.SvcDesc%;Microsoft Infrared HID Driver; C:\Windows\System32\drivers\hidir.sys [2012-07-26 46080]
S3 hyperkbd;hyperkbd; C:\Windows\System32\drivers\hyperkbd.sys [2012-07-26 11776]
S3 HyperVideo;HyperVideo; C:\Windows\system32\DRIVERS\HyperVideo.sys [2012-07-26 24576]
S3 IpFilterDriver;@%systemroot%\system32\rascfg.dll,-32013; C:\Windows\system32\DRIVERS\ipfltdrv.sys [2012-07-26 89088]
S3 IPMIDRV;IPMIDRV; C:\Windows\System32\drivers\IPMIDrv.sys [2012-07-26 78336]
S3 IPNAT;IP Network Address Translator; C:\Windows\System32\drivers\ipnat.sys [2012-07-26 145920]
S3 IRENUM;@%SystemRoot%\system32\drivers\irenum.sys,-100; C:\Windows\system32\drivers\irenum.sys [2012-07-26 17920]
S3 iScsiPrt;@iscsi.inf,%iScsiPortName%;iScsiPort Driver; C:\Windows\System32\drivers\msiscsi.sys [2012-07-26 277744]
S3 Modem;Modem; C:\Windows\system32\drivers\modem.sys [2012-07-26 40448]
S3 MRxDAV;@%systemroot%\system32\webclnt.dll,-104; C:\Windows\system32\drivers\mrxdav.sys [2012-07-26 141312]
S3 MsBridge;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2012-07-26 129536]
S3 msgpiowin32;@msgpiowin32.inf,%GPIO.SvcDesc%;GPIO Buttons Driver; C:\Windows\System32\drivers\msgpiowin32.sys [2012-07-26 28400]
S3 mshidkmdf;@%SystemRoot%\system32\drivers\mshidkmdf.sys,-100; C:\Windows\System32\drivers\mshidkmdf.sys [2012-07-26 8704]
S3 mshidumdf;@%SystemRoot%\system32\drivers\mshidumdf.sys,-100; C:\Windows\System32\drivers\mshidumdf.sys [2012-07-26 10752]
S3 MSKSSRV;@ksfilter.inf,%MSKSSRV.DeviceDesc%;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2012-07-26 11008]
S3 MsLldp;@C:\Windows\system32\DRIVERS\mslldp.sys,-200; C:\Windows\system32\DRIVERS\mslldp.sys [2012-07-26 68608]
S3 MSPCLOCK;@ksfilter.inf,%MSPCLOCK.DeviceDesc%;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2012-07-26 7168]
S3 MSPQM;@ksfilter.inf,%MSPQM.DeviceDesc%;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2012-07-26 6912]
S3 MsRPC;MsRPC; C:\Windows\system32\drivers\MsRPC.sys [2012-07-26 390896]
S3 MSTEE;@ksfilter.inf,%MSTEE.DeviceDesc%;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2012-07-26 8192]
S3 MTConfig;@mtconfig.inf,%MTConfig.SVCDESC%;Microsoft Input Configuration Driver; C:\Windows\System32\drivers\MTConfig.sys [2012-07-26 14848]
S3 NdisCap;@%SystemRoot%\System32\drivers\ndiscap.sys,-5000; C:\Windows\system32\DRIVERS\ndiscap.sys [2012-07-26 46592]
S3 NdisImPlatform;@%SystemRoot%\System32\drivers\ndisimplatform.sys,-501; C:\Windows\system32\DRIVERS\NdisImPlatform.sys [2012-07-26 126464]
S3 NDISWANLEGACY;@%systemroot%\system32\rascfg.dll,-32014; C:\Windows\system32\DRIVERS\ndiswan.sys [2012-07-26 174080]
S3 Parport;@msports.inf,%Parport.SVCDESC%;Parallel port driver; C:\Windows\System32\drivers\parport.sys [2012-07-26 105984]
S3 Processor;@cpu.inf,%Processor.SvcDesc%;Processor Driver; C:\Windows\System32\drivers\processr.sys [2012-07-26 87552]
S3 QWAVEdrv;@%SystemRoot%\system32\drivers\qwavedrv.sys,-1; C:\Windows\system32\drivers\qwavedrv.sys [2012-07-26 46592]
S3 RasAcd;Remote Access Auto Connection Driver; C:\Windows\System32\DRIVERS\rasacd.sys [2012-07-26 16384]
S3 RDPDR;@%SystemRoot%\System32\DRIVERS\rdpdr.sys,-100; C:\Windows\System32\drivers\rdpdr.sys [2012-07-26 179712]
S3 RDPWD;RDP Winstation Driver; C:\Windows\system32\drivers\RDPWD.sys [2012-07-26 208384]
S3 RTSPER;Realtek PCIe CardReader Driver; C:\Windows\system32\DRIVERS\RtsPer.sys [2013-02-02 448072]
S3 s3cap;s3cap; C:\Windows\System32\drivers\vms3cap.sys [2012-07-26 7168]
S3 scfilter;@%SystemRoot%\System32\drivers\scfilter.sys,-11; C:\Windows\System32\DRIVERS\scfilter.sys [2012-07-26 36864]
S3 sdbus;sdbus; C:\Windows\System32\drivers\sdbus.sys [2012-07-26 193264]
S3 sdstor;@sdstor.inf,%sdstor_ServiceDesc%;SD Storage Port Driver; C:\Windows\System32\drivers\sdstor.sys [2012-07-26 56560]
S3 SerCx;Serial UART Support Library; C:\Windows\system32\drivers\SerCx.sys [2012-07-26 62976]
S3 Serenum;@msports.inf,%Serenum.SVCDESC%;Serenum Filter Driver; C:\Windows\System32\drivers\serenum.sys [2012-07-26 23040]
S3 Serial;@msports.inf,%Serial.SVCDESC%;Serial port driver; C:\Windows\System32\drivers\serial.sys [2012-07-26 76800]
S3 sermouse;@msmouse.inf,%sermouse.SvcDesc%;Serial Mouse Driver; C:\Windows\System32\drivers\sermouse.sys [2012-07-26 27136]
S3 sfloppy;@flpydisk.inf,%sfloppy_devdesc%;High-Capacity Floppy Disk Drive; C:\Windows\System32\drivers\sfloppy.sys [2012-07-26 16896]
S3 SpbCx;Simple Peripheral Bus Support Library; C:\Windows\system32\drivers\SpbCx.sys [2012-07-26 59392]
S3 storvsp;storvsp; C:\Windows\System32\drivers\storvsp.sys [2012-07-26 67584]
S3 TCPIP6;@netip6.inf,%MS_TCPIP6.TCPIP6.ServiceDescription%;Microsoft IPv6 Protocol Driver; C:\Windows\system32\DRIVERS\tcpip.sys [2012-07-26 2224880]
S3 terminpt;@termmou.inf,%TermInpt.SVCDESC%;Microsoft Remote Desktop Input Driver; C:\Windows\System32\drivers\terminpt.sys [2012-07-26 36592]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-07-26 57344]
S3 TsUsbGD;@tsgenericusbdriver.inf,%TsUsbGD.DeviceDesc.Generic%;Remote Desktop Generic USB Device; C:\Windows\System32\drivers\TsUsbGD.sys [2012-07-26 30208]
S3 UASPStor;@uaspstor.inf,%UASPortName%;USB Attached SCSI (UAS) Driver; C:\Windows\System32\drivers\uaspstor.sys [2012-07-26 97008]
S3 UmPass;@umpass.inf,%UmPass.SVCDESC%;Microsoft UMPass Driver; C:\Windows\System32\drivers\umpass.sys [2012-07-26 11776]
S3 usbaudio;@wdma_usb.inf,%USBAudio.SvcDesc%;Ovladač zvuků USB (WDM); C:\Windows\system32\drivers\usbaudio.sys [2012-07-26 121856]
S3 usbcir;@usbcir.inf,%usbcir.SVCDESC%;eHome Infrared Receiver (USBCIR); C:\Windows\System32\drivers\usbcir.sys [2012-07-26 99328]
S3 usbohci;@usbport.inf,%OHCIMP.SvcDesc%;Microsoft USB Open Host Controller Miniport Driver; C:\Windows\System32\drivers\usbohci.sys [2012-07-26 27136]
S3 usbprint;@usbprint.inf,%USBPRINT.SvcDesc%;Microsoft USB PRINTER Class; C:\Windows\System32\drivers\usbprint.sys [2012-07-26 25600]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2012-07-26 42496]
S3 USBSTOR;@usbstor.inf,%USBSTOR.SvcDesc%;USB Mass Storage Driver; C:\Windows\System32\drivers\USBSTOR.SYS [2012-07-26 119024]
S3 usbuhci;@usbport.inf,%UHCIMP.SvcDesc%;Microsoft USB Universal Host Controller Miniport Driver; C:\Windows\System32\drivers\usbuhci.sys [2012-07-26 32256]
S3 VerifierExt;@%SystemRoot%\system32\drivers\VerifierExt.sys,-1000; C:\Windows\system32\drivers\VerifierExt.sys [2012-07-26 106224]
S3 vhdmp;vhdmp; C:\Windows\System32\drivers\vhdmp.sys [2012-07-26 496368]
S3 Vid;Vid; C:\Windows\System32\drivers\Vid.sys [2012-07-26 203776]
S3 VMBusHID;VMBusHID; C:\Windows\System32\drivers\VMBusHID.sys [2012-07-26 22144]
S3 vmbusr;@%SystemRoot%\system32\vmbusres.dll,-1001; C:\Windows\System32\drivers\vmbusr.sys [2012-07-26 117248]
S3 vpci;@wvpci.inf,%vpci.SVCDESC%;Microsoft Hyper-V Virtual PCI Bus; C:\Windows\System32\drivers\vpci.sys [2012-07-26 67824]
S3 vpcivsp;@wvpcivsp.inf,%vpcivsp.SVCDESC%;Microsoft Hyper-V PCI Server; C:\Windows\System32\drivers\vpcivsp.sys [2012-07-26 66048]
S3 WacomPen;@hiddigi.inf,%WacomPen.SVCDESC%;Wacom Serial Pen HID Driver; C:\Windows\System32\drivers\wacompen.sys [2012-07-26 27008]
S3 Wanarp;@%systemroot%\system32\rascfg.dll,-32011; C:\Windows\system32\DRIVERS\wanarp.sys [2012-07-26 83456]
S3 WdBoot;@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-390; C:\Windows\system32\drivers\WdBoot.sys [2012-07-26 34216]
S4 udfs;udfs; C:\Windows\system32\DRIVERS\udfs.sys [2012-07-26 321024]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

1 část

[Fixed]

část 2

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 AdvancedSystemCareService7;Advanced SystemCare Service 7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [2014-01-14 881952]
R2 AERTFilters;Andrea RT Filters Service; C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE [2009-11-17 98208]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2014-04-18 239616]
R2 Application Updater;Application Updater; C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe [2014-07-28 811384]
R2 AudioEndpointBuilder;@%SystemRoot%\system32\AudioEndpointBuilder.dll,-204; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R2 Audiosrv;@%SystemRoot%\system32\audiosrv.dll,-200; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R2 avgfws;AVG Firewall; C:\Program Files (x86)\AVG\AVG2014\avgfws.exe [2014-08-11 1417160]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [2014-08-11 3244048]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [2014-08-11 289328]
R2 BFE;@%SystemRoot%\system32\bfe.dll,-1001; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 BlueSoleilCS;BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [2013-06-07 1630456]
R2 BrokerInfrastructure;@%windir%\system32\bisrv.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 CryptSvc;@%SystemRoot%\system32\cryptsvc.dll,-1001; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 DcomLaunch;@combase.dll,-5012; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 DeviceAssociationService;@%SystemRoot%\system32\das.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 Dhcp;@%SystemRoot%\system32\dhcpcore.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 Dnscache;@%SystemRoot%\System32\dnsapi.dll,-101; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 DPS;@%systemroot%\system32\dps.dll,-500; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R2 EventLog;@%SystemRoot%\system32\wevtsvc.dll,-200; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R2 EventSystem;@comres.dll,-2450; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 gpsvc;@gpapi.dll,-112; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 HiPatchService;Hi-Rez Studios Authenticate and Update Service; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [2014-02-28 9216]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-04-10 15344]
R2 IKEEXT;@%SystemRoot%\system32\ikeext.dll,-501; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 iphlpsvc;@%SystemRoot%\system32\iphlpsvc.dll,-500; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R2 LanmanServer;@%systemroot%\system32\srvsvc.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 LanmanWorkstation;@%systemroot%\system32\wkssvc.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R2 lmhosts;@%SystemRoot%\system32\lmhsvc.dll,-101; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 LSM;@%windir%\system32\lsm.dll,-1001; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 MMCSS;@%systemroot%\system32\mmcss.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 MpsSvc;@%SystemRoot%\system32\FirewallAPI.dll,-23090; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 NlaSvc;@%SystemRoot%\System32\nlasvc.dll,-1; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R2 nsi;@%SystemRoot%\system32\nsisvc.dll,-200; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 PcaSvc;@%SystemRoot%\system32\pcasvc.dll,-1; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2014-07-09 76152]
R2 Power;@%SystemRoot%\system32\umpo.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 ProfSvc;@%systemroot%\system32\profsvc.dll,-300; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 RpcEptMapper;@%windir%\system32\RpcEpMap.dll,-1001; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 RpcSs;@combase.dll,-5010; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2013-02-19 239176]
R2 SamSs;@%SystemRoot%\system32\samsrv.dll,-1; C:\Windows\system32\lsass.exe [2012-07-26 35840]
R2 SENS;@%SystemRoot%\system32\Sens.dll,-200; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 ShellHWDetection;@%SystemRoot%\System32\shsvcs.dll,-12288; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R2 Schedule;@%SystemRoot%\system32\schedsvc.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 slsvc;Software Licensing Service; C:\Windows\slsvc.exe [2012-09-25 10240]
R2 Spooler;@%systemroot%\system32\spoolsv.exe,-1; C:\Windows\System32\spoolsv.exe [2012-07-26 769024]
R2 stisvc;@%SystemRoot%\system32\wiaservc.dll,-9; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 SysMain;@%SystemRoot%\system32\sysmain.dll,-1000; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 Themes;@%SystemRoot%\System32\themeservice.dll,-8192; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R2 TrkWks;@%SystemRoot%\system32\trkwks.dll,-1; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R2 vToolbarUpdater18.1.9;vToolbarUpdater18.1.9; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe [2014-08-12 1820184]
R2 Wcmsvc;@%SystemRoot%\System32\wcmsvc.dll,-4097; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 AeLookupSvc;@%SystemRoot%\system32\aelupsvc.dll,-1; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 Appinfo;@%systemroot%\system32\appinfo.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 BITS;@%SystemRoot%\system32\qmgr.dll,-1000; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R3 Browser;@%systemroot%\system32\browser.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R3 BsHelpCS;BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [2013-05-14 145656]
R3 bthserv;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 fdPHost;@%systemroot%\system32\fdPHost.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 FDResPub;@%systemroot%\system32\fdrespub.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 hidserv;@%SystemRoot%\System32\hidserv.dll,-101; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 HomeGroupProvider;@%SystemRoot%\System32\provsvc.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
R3 NcdAutoSetup;@%SystemRoot%\system32\NcdAutoSetup.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R3 Netman;@%SystemRoot%\system32\netman.dll,-109; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R3 netprofm;@%SystemRoot%\system32\netprofmsvc.dll,-202; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R3 PlugPlay;@%SystemRoot%\system32\umpnpmgr.dll,-200; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 PolicyAgent;@%SystemRoot%\System32\polstore.dll,-5010; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 SSDPSRV;@%systemroot%\system32\ssdpsrv.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-08-14 833728]
R3 SystemEventsBroker;@%windir%\system32\SystemEventsBrokerServer.dll,-1001; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 TimeBroker;@%windir%\system32\TimeBrokerServer.dll,-1001; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 upnphost;@%systemroot%\system32\upnphost.dll,-213; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 W32Time;@%SystemRoot%\system32\w32time.dll,-200; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-10 116648]
S2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2014-05-04 2152736]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S2 sppsvc;@%SystemRoot%\system32\sppsvc.exe,-101; C:\Windows\system32\sppsvc.exe [2012-07-26 4881408]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-08 262320]
S3 ALG;@%SystemRoot%\system32\Alg.exe,-112; C:\Windows\System32\alg.exe [2012-07-26 94208]
S3 AllUserInstallAgent;@%SystemRoot%\System32\AUInstallAgent.dll,-101; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 AppIDSvc;@%systemroot%\system32\appidsvc.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 AxInstSV;@%SystemRoot%\system32\AxInstSV.dll,-103; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 BDESVC;@%SystemRoot%\system32\bdesvc.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 CertPropSvc;@%SystemRoot%\System32\certprop.dll,-11; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 COMSysApp;@comres.dll,-947; C:\Windows\system32\dllhost.exe [2012-07-26 10752]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2013-11-15 279024]
S3 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 defragsvc;@%SystemRoot%\system32\defragsvc.dll,-101; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 DeviceInstall;@%SystemRoot%\system32\umpnpmgr.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 dot3svc;@%systemroot%\system32\dot3svc.dll,-1102; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 DsmSvc;@%SystemRoot%\system32\DeviceSetupManager.dll,-1000; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 Eaphost;@%systemroot%\system32\eapsvc.dll,-1; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 EFS;@%SystemRoot%\system32\efssvc.dll,-100; C:\Windows\System32\lsass.exe [2012-07-26 35840]
S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; C:\Windows\system32\fxssvc.exe [2012-07-26 669696]
S3 fhsvc;@%systemroot%\system32\fhsvc.dll,-101; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2012-07-06 43616]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-10 116648]
S3 hkmsvc;@%SystemRoot%\system32\kmsvc.dll,-6; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 HomeGroupListener;@%SystemRoot%\System32\ListSvc.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 KeyIso;@keyiso.dll,-100; C:\Windows\system32\lsass.exe [2012-07-26 35840]
S3 KtmRm;@comres.dll,-2946; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 lltdsvc;@%SystemRoot%\system32\lltdres.dll,-1; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-02-23 118896]
S3 MSDTC;@comres.dll,-2797; C:\Windows\System32\msdtc.exe [2012-07-26 144384]
S3 MSiSCSI;@%SystemRoot%\system32\iscsidsc.dll,-5000; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 msiserver;@%SystemRoot%\system32\msimsg.dll,-27; C:\Windows\system32\msiexec.exe [2012-07-26 124416]
S3 napagent;@%SystemRoot%\system32\qagentrt.dll,-6; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 NcaSvc;@%SystemRoot%\system32\ncasvc.dll,-3009; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 Netlogon;@%SystemRoot%\System32\netlogon.dll,-102; C:\Windows\system32\lsass.exe [2012-07-26 35840]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 p2pimsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8004; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 p2psvc;@%SystemRoot%\system32\p2psvc.dll,-8006; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\Windows\SysWow64\perfhost.exe [2012-07-26 20992]
S3 pla;@%systemroot%\system32\pla.dll,-500; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 PNRPAutoReg;@%SystemRoot%\system32\pnrpauto.dll,-8002; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 PNRPsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8000; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 PrintNotify;@C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll,-1; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 QWAVE;@%SystemRoot%\system32\qwave.dll,-1; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 RasAuto;@%Systemroot%\system32\rasauto.dll,-200; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 RasMan;@%Systemroot%\system32\rasmans.dll,-200; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 RpcLocator;@%systemroot%\system32\Locator.exe,-2; C:\Windows\system32\locator.exe [2012-07-26 9728]
S3 SCPolicySvc;@%SystemRoot%\System32\certprop.dll,-13; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 SDRSVC;@%SystemRoot%\system32\sdrsvc.dll,-107; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 seclogon;@%SystemRoot%\system32\seclogon.dll,-7001; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 SensrSvc;@%SystemRoot%\System32\sensrsvc.dll,-1000; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 SessionEnv;@%SystemRoot%\System32\SessEnv.dll,-1026; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 SharedAccess;@%SystemRoot%\system32\ipnathlp.dll,-106; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 SNMPTRAP;@%SystemRoot%\system32\snmptrap.exe,-3; C:\Windows\System32\snmptrap.exe [2012-07-26 14848]
S3 SstpSvc;@%SystemRoot%\system32\sstpsvc.dll,-200; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 svsvc;@%SystemRoot%\system32\svsvc.dll,-101; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 swprv;@%SystemRoot%\System32\swprv.dll,-103; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 TabletInputService;@%SystemRoot%\system32\TabSvc.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 TapiSrv;@%SystemRoot%\system32\tapisrv.dll,-10100; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 TermService;@%SystemRoot%\System32\termsrv.dll,-268; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 THREADORDER;@%systemroot%\system32\mmcss.dll,-102; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 TrustedInstaller;@%SystemRoot%\servicing\TrustedInstaller.exe,-100; C:\Windows\servicing\TrustedInstaller.exe [2012-07-26 94208]
S3 UI0Detect;@%SystemRoot%\system32\ui0detect.exe,-101; C:\Windows\system32\UI0Detect.exe [2012-07-26 40960]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 VaultSvc;@%SystemRoot%\system32\vaultsvc.dll,-1003; C:\Windows\system32\lsass.exe [2012-07-26 35840]
S3 vds;@%SystemRoot%\system32\vds.exe,-100; C:\Windows\System32\vds.exe [2012-07-26 680960]
S3 vmickvpexchange;@%systemroot%\system32\vmicres.dll,-201; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 vmicrdv;@%systemroot%\system32\vmicres.dll,-601; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 vmicshutdown;@%systemroot%\system32\vmicres.dll,-301; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 vmictimesync;@%systemroot%\system32\vmicres.dll,-401; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 vmicvss;@%systemroot%\system32\vmicres.dll,-501; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 vmicheartbeat;@%systemroot%\system32\vmicres.dll,-101; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 VSS;@%systemroot%\system32\vssvc.exe,-102; C:\Windows\system32\vssvc.exe [2012-07-26 1482752]
S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; C:\Windows\system32\wbengine.exe [2012-07-26 1616896]
S3 WbioSrvc;@%systemroot%\system32\wbiosrvc.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 wcncsvc;@%SystemRoot%\system32\wcncsvc.dll,-3; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 WcsPlugInService;@%SystemRoot%\system32\WcsPlugInService.dll,-200; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S4 BthAvrcpTg;@bthaudhid.inf,%BthAvrcpTg_SvcDesc%;Bluetooth Audio/Video Remote Control HID; C:\Windows\System32\drivers\BthAvrcpTg.sys [2012-07-26 31104]
S4 BthHFEnum;@bthhfenum.inf,%BthHFEnum.SVCDESC%;Bluetooth Hands-Free Audio and Call Control HID Enumerator; C:\Windows\System32\drivers\bthhfenum.sys [2012-07-26 51200]
S4 bthhfhid;@bthaudhid.inf,%BthAudioHFHid.SVCDESC%;Bluetooth Hands-Free Call Control HID; C:\Windows\System32\drivers\BthHFHid.sys [2012-07-26 29952]
S4 NetTcpPortSharing;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8201; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-12 139696]
S4 RemoteAccess;@%Systemroot%\system32\mprdim.dll,-200; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S4 RemoteRegistry;@regsvc.dll,-1; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S4 SCardSvr;@%SystemRoot%\System32\SCardSvr.dll,-1; C:\Windows\system32\svchost.exe [2012-07-26 30208]

-----------------EOF-----------------

Doufám že to nebude nic závažného

[vyosek]

Bordelu tam mate opravdu hodne

Odinstalujte Advanced SystemCare a nasledne i vse od IOBit - jsou to cinske smejdy a spise jen skodi nez jsou uzitkem. Hledaji nesmyslne a neexistujici problemy, databazi haveti ukradli jine renomovane spolecnosti

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

[Fixed]

Dobře hned to udělám

[vyosek]

OK, rano na to mrknu

[Fixed]

# AdwCleaner v3.308 - Report created 21/08/2014 at 22:16:48
# Updated 20/08/2014 by Xplode
# Operating System : Windows 8 Pro (64 bits)
# Username : Vítek - PC1
# Running from : C:\Users\Vítek\Downloads\adwcleaner_3.308.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : Application Updater

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\AVG SafeGuard toolbar
Folder Deleted : C:\ProgramData\AVG Secure Search
Folder Deleted : C:\ProgramData\AVG Security Toolbar
Folder Deleted : C:\Program Files (x86)\Application Updater
Folder Deleted : C:\Program Files (x86)\AVG SafeGuard toolbar
Folder Deleted : C:\Program Files (x86)\IObit Apps Toolbar
Folder Deleted : C:\Program Files (x86)\MediaBuzzV1
Folder Deleted : C:\Program Files (x86)\MediaViewerV1
Folder Deleted : C:\Program Files (x86)\MediaWatchV1
Folder Deleted : C:\Program Files (x86)\Mobogenie
Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search
Folder Deleted : C:\Program Files (x86)\Common Files\Spigot
[!] Folder Deleted : C:\Users\Vítek\AppData\Local\AVG SafeGuard toolbar
Folder Deleted : C:\Users\Vítek\AppData\Local\GCC
Folder Deleted : C:\Users\Vítek\AppData\Local\genienext
Folder Deleted : C:\Users\Vítek\AppData\Local\Mobogenie
Folder Deleted : C:\Users\Vítek\AppData\Local\Oxy
Folder Deleted : C:\Users\Vítek\AppData\Local\Slick Savings
Folder Deleted : C:\Users\Vítek\AppData\Local\SwvUpdater
Folder Deleted : C:\Users\Vítek\AppData\LocalLow\AVG SafeGuard toolbar
Folder Deleted : C:\Users\Vítek\AppData\LocalLow\Search Settings
Folder Deleted : C:\Users\Vítek\AppData\Roaming\newnext.me
Folder Deleted : C:\Users\Vítek\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Vítek\AppData\Roaming\Oxy
Folder Deleted : C:\Users\Vítek\AppData\Roaming\Slick Savings
Folder Deleted : C:\Users\Vítek\Documents\Mobogenie
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\safeguard-secure-search.xml
File Deleted : C:\Users\Vítek\AppData\Roaming\Mozilla\Firefox\Profiles\9k0u6qx2.default\user.js

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\cikkkfooompgefbcjlgdjejfdknkheaj
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\gpiifgmgnfdiblgpaepbmfdkcheicgof
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\hbcennhacfaagdopikcegfcobcadeocj
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pfndaklgolladniicklehhancnlgocpp
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Slick Savings]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.BrowserWndAPI
Key Deleted : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.BrowserWndAPI.1
Key Deleted : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.PugiObj
Key Deleted : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.PugiObj.1
Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Classes\S
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE\Classes\Updater.AmiUpd
Key Deleted : HKLM\SOFTWARE\Classes\Updater.AmiUpd.1
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SearchSettings]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\AVG SafeGuard toolbar
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Escolade
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\Search Settings
Key Deleted : HKCU\Software\AppDataLow\Software\Search Settings
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKLM\SOFTWARE\Application Updater
Key Deleted : HKLM\SOFTWARE\AVG SafeGuard toolbar
Key Deleted : HKLM\SOFTWARE\AVG Security Toolbar
Key Deleted : HKLM\SOFTWARE\Conduit
Key Deleted : HKLM\SOFTWARE\Driver-Soft
Key Deleted : HKLM\SOFTWARE\MediaBuzzV1
Key Deleted : HKLM\SOFTWARE\MediaViewerV1
Key Deleted : HKLM\SOFTWARE\MediaWatchV1
Key Deleted : HKLM\SOFTWARE\Search Settings
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2A4641B4-EDDB-46D1-B34B-F93E19A8B3DB}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3A787631-66A2-4634-B928-A37E73B58FB6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3A787631-66A2-4634-B928-A37E73B58FB6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\30C16B15B255BD349A1157B8A83E2AF9
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1CAE30F47D14B41B5FC8FA53658044

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16384


-\\ Mozilla Firefox v27.0.1 (cs)

[ File : C:\Users\Vítek\AppData\Roaming\Mozilla\Firefox\Profiles\9k0u6qx2.default\prefs.js ]


-\\ Google Chrome v36.0.1985.143

*************************

AdwCleaner[R0].txt - [10905 octets] - [21/08/2014 22:15:04]
AdwCleaner[S0].txt - [10247 octets] - [21/08/2014 22:16:48]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [10308 octets] ##########

[vyosek]

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  emptyclsid;
  iedefaults;
  FFdefaults;
  CHRdefaults;
  emptyalltemp;
  resethosts;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

[Fixed]

Zoek.exe v5.0.0.0 Updated 21-08-2014
Tool run by Vˇtek on źt 21. 08. 2014 at 22:40:08,92.
Microsoft Windows 8 Pro 6.2.9200 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\VTEK~1\Desktop\zoek.exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2014-08-21-203029.log 1281 bytes

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2853416472-2825147005-2372363208-1001\Software\Microsoft\Internet Explorer\SearchScopes\{9851A9D6-01C6-45D4-9C55-DC6F43C1172B} deleted successfully
HKEY_USERS\S-1-5-21-2853416472-2825147005-2372363208-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{c47910e5-c741-4c09-a7a8-c7904c0f6007} deleted successfully
HKEY_USERS\S-1-5-21-2853416472-2825147005-2372363208-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{c47910e5-c741-4c09-a7a8-c7904c0f6007} deleted successfully
HKEY_USERS\S-1-5-21-2853416472-2825147005-2372363208-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{008e1d81-91ee-4c64-83d2-81ef2a970c52} deleted successfully
HKEY_USERS\S-1-5-21-2853416472-2825147005-2372363208-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{008e1d81-91ee-4c64-83d2-81ef2a970c52} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{c47910e5-c741-4c09-a7a8-c7904c0f6007} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c47910e5-c741-4c09-a7a8-c7904c0f6007} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{008e1d81-91ee-4c64-83d2-81ef2a970c52} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{008e1d81-91ee-4c64-83d2-81ef2a970c52} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-2853416472-2825147005-2372363208-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{c47910e5-c741-4c09-a7a8-c7904c0f6007} deleted successfully
HKEY_USERS\S-1-5-21-2853416472-2825147005-2372363208-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{008e1d81-91ee-4c64-83d2-81ef2a970c52} deleted successfully
HKEY_USERS\S-1-5-21-2853416472-2825147005-2372363208-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{b4de3d86-cefc-4932-88c5-88aa17c4486b} deleted successfully
HKEY_USERS\S-1-5-21-2853416472-2825147005-2372363208-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{8c2d9e9d-c6c1-4586-8a6e-4a2f8dec614e} deleted successfully
HKEY_USERS\S-1-5-21-2853416472-2825147005-2372363208-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} deleted successfully
HKEY_USERS\S-1-5-21-2853416472-2825147005-2372363208-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{03EB0E9C-7A91-4381-A220-9B52B641CDB1} deleted successfully
HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\ext@MediaViewerV1alpha1257.net deleted successfully
HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\ext@MediaWatchV1home963.net deleted successfully
HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\ext@MediaWatchV1home3600.net deleted successfully
HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\ext@MediaBuzzV1mode884.net deleted successfully

==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vToolbarUpdater18.1.9 deleted successfully

==== FireFox Fix ======================

Deleted from C:\Users\VTEK~1\AppData\Roaming\Mozilla\Firefox\Profiles\9k0u6qx2.default\prefs.js:
user_pref("browser.startup.homepage", "http://mysearch.avg.com?cid={0004A5A3-0 ... 2013-12-18 17:15:57&v=18.0.5.292&pid=safeguard&sg=&sap=hp");
user_pref("browser.search.defaultenginename", "terra.im");
user_pref("browser.search.selectedEngine", "terra.im");

Added to C:\Users\VTEK~1\AppData\Roaming\Mozilla\Firefox\Profiles\9k0u6qx2.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Users\VTEK~1\AppData\Roaming\Mozilla\Firefox\Profiles\9k0u6qx2.default

user.js not found
---- Lines mybrowserbar modified from prefs.js ----

user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"avg@toolbar\":{\"descriptor\":\"C:\\\\ProgramData\\\\AVG SafeGuar
---- Lines browser.startup.page removed from prefs.js ----
user_pref("browser.startup.page", 1);
---- Lines ext@MediaViewerV1alpha1257.net modified from prefs.js ----

user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"avg@toolbar\":{\"descriptor\":\"C:\\\\ProgramData\\\\AVG SafeGuar
---- Lines ext@MediaWatchV1home963.net modified from prefs.js ----

user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"avg@toolbar\":{\"descriptor\":\"C:\\\\ProgramData\\\\AVG SafeGuar
---- Lines ext@MediaWatchV1home3600.net modified from prefs.js ----

user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"avg@toolbar\":{\"descriptor\":\"C:\\\\ProgramData\\\\AVG SafeGuar
---- Lines ext@MediaBuzzV1mode884.net modified from prefs.js ----

user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"avg@toolbar\":{\"descriptor\":\"C:\\\\ProgramData\\\\AVG SafeGuar
---- FireFox user.js and prefs.js backups ----

prefs_201421.08._2253_.backup

==== Deleting Files \ Folders ======================

C:\Users\Vítek\.android not found
C:\Users\Vítek\AppData\Local\AVG SafeGuard toolbar not found
C:\Users\Vítek\AppData\Local\cache not found
C:\PROGRA~3\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} deleted
C:\PROGRA~3\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D} deleted
C:\PROGRA~2\COMMON~1\DVDVideoSoft\bin deleted
C:\PROGRA~3\Avg_Update_0414c deleted
C:\PROGRA~3\ProductData deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\VTEK~1\Searches deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\AVG SafeGuard toolbar deleted
C:\windows\SysNative\tasks\RunAsStdUser Task deleted
C:\Windows\tasks\AVG-Secure-Search-Update_0414c_rel.job deleted
C:\Windows\tasks\AVG-Secure-Search-Update_0414c_rmv.job deleted
C:\windows\SysNative\tasks\AVG-Secure-Search-Update_0414c_rel deleted
C:\windows\SysNative\tasks\AVG-Secure-Search-Update_0414c_rmv deleted
C:\Users\VTEK~1\AppData\Roaming\Mozilla\Firefox\Profiles\9k0u6qx2.default\searchplugins\defaultsearch.xml deleted
C:\Users\VTEK~1\AppData\Roaming\Mozilla\Firefox\Profiles\9k0u6qx2.default\CT1750559 deleted
C:\Users\VTEK~1\launch.exe deleted
"C:\Windows\Installer\56421.msi" deleted
"C:\Users\VTEK~1\AppData\Roaming\Mozilla\Firefox\Profiles\9k0u6qx2.default\extensions\iobitapps@mybrowserbar.com" deleted

==== Firefox Extensions ======================

ProfilePath: C:\Users\VTEK~1\AppData\Roaming\Mozilla\Firefox\Profiles\9k0u6qx2.default
- Undetermined - C:\Users\VĂ­tek\AppData\Roaming\Mozilla\Firefox\Profiles\9k0u6qx2.default\extensions\ascsurfingprotection@iobit.com
- Undetermined - C:\Users\Vítek\AppData\Roaming\Mozilla\Firefox\Profiles\9k0u6qx2.default\extensions\ascsurfingprotection@iobit.com
- Advanced SystemCare Surfing Protection - %ProfilePath%\extensions\ascsurfingprotection@iobit.com

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
jaiiacfgbfflocmhmieiaiohdmfknokd - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home963\ch\MediaWatchV1home963.crx[]
mkehclcaiojahahfcokdgcllblggplcf - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home3600\ch\MediaWatchV1home3600.crx[]
nbhneibceonieflgkgmipbidikjkcedd - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha1257\ch\MediaViewerV1alpha1257.crx[]
nlfeoofalggnhgbakolekleconcnkjim - C:\Program Files (x86)\MediaBuzzV1\MediaBuzzV1mode884\ch\MediaBuzzV1mode884.crx[]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.seznam.cz/"
"Search Page"="http://terra.im/"
"Search Bar"="http://terra.im/"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://www.seznam.cz/"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{4187F0FC-AF41-4E4B-AE67-84C8FD35A0AE} terra.im Url="http://terra.im/search?q={searchTerms}"

==== Reset Google Chrome ======================

Nothing found to reset

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3C31F2A42C5FB614BA5786AE4A5ACB66 deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\jaiiacfgbfflocmhmieiaiohdmfknokd deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\mkehclcaiojahahfcokdgcllblggplcf deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\nbhneibceonieflgkgmipbidikjkcedd deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\nlfeoofalggnhgbakolekleconcnkjim deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4A2F13C3-F5C2-416B-AB75-68EAA4A5BC66} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\3C31F2A42C5FB614BA5786AE4A5ACB66 deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Vítek\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Vítek\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=198 folders=52 45320659 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Vítek\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\VTEK~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on źt 21. 08. 2014 at 22:57:56,95 ======================

[vyosek]

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

[Fixed]

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-08-2014
Ran by Vítek (administrator) on PC1 on 22-08-2014 10:45:37
Running from C:\Users\Vítek\Desktop
Platform: Windows 8 Pro (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 10
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Windows\slsvc.exe
() C:\Windows\PersonalizeEnabler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
() C:\Program Files (x86)\Avg Secure Update\AVG-Secure-Search-Update_0414c.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(forum.viry.cz) C:\Users\Vítek\Desktop\FRSTLauncher (1).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7165000 2013-03-26] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-04-10] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2014\avgui.exe [5187088 2014-08-11] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [387832 2013-05-14] (IVT Corporation)
HKLM-x32\...\Run: [YouCam Service] => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [267224 2013-08-01] (CyberLink Corp.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-04-17] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [BMISR] => C:\Program Files (x86)\KYE\FaceCam 320X\Genius_Utility.exe [217088 2012-01-06] ()
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [1937600 2014-08-14] (Valve Corporation)
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [Google Update] => C:\Users\Vítek\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-01-09] (Google Inc.)
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21446272 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [BitTorrent] => C:\Users\Vítek\AppData\Roaming\BitTorrent\BitTorrent.exe [1267032 2014-07-05] (BitTorrent Inc.)
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [AVG-Secure-Search-Update_0414c] => C:\Program Files (x86)\Avg Secure Update\AVG-Secure-Search-Update_0414c.exe [2725912 2014-04-25] ()
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2014-08-20] (Raptr, Inc)
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [1967616 2014-04-17] (AMD)
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3600728 2014-08-06] (Electronic Arts)
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [Browser Extensions] => "C:\Users\Vítek\AppData\Roaming\Slick Savings\CouponsHelper.exe"
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [SetMyHomePage] => C:\Users\Vítek\AppData\Roaming\SetMyHomePage\setmyhomepage.exe
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\MountPoints2: {82e3fe25-08c8-11e4-be9f-0c84dcabaa2e} - "D:\LG_PC_Programs.exe"
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
SearchScopes: HKCU - DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {4187F0FC-AF41-4E4B-AE67-84C8FD35A0AE} URL = http://terra.im/search?q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> No File
BHO-x32: Advanced SystemCare Browser Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 109.72.0.1 109.72.2.30

FireFox:
========
FF ProfilePath: C:\Users\Vítek\AppData\Roaming\Mozilla\Firefox\Profiles\9k0u6qx2.default
FF NewTab: hxxp://www.google.com/
FF DefaultSearchEngine: Google
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1207148.dll (Adobe Systems, Inc.)
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nexon.net/NxGame -> C:\ProgramData\NexonUS\NGM\npNxGameUS.dll (Nexon)
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin -> C:\Users\Vítek\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin -> C:\Users\Vítek\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Vítek\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Vítek\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Vítek\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll No File
FF Plugin ProgramFiles/Appdata: C:\Users\Vítek\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Vítek\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Users\Vítek\AppData\Roaming\Mozilla\Firefox\Profiles\9k0u6qx2.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Vítek\AppData\Roaming\Mozilla\Firefox\Profiles\9k0u6qx2.default\Extensions\ascsurfingprotection@iobit.com [2014-05-28]

Chrome:
=======
CHR Extension: (Dokumenty Google) - C:\Users\Vítek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-21]
CHR Extension: (Peněženka Google) - C:\Users\Vítek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-26]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 avgfws; C:\Program Files (x86)\AVG\AVG2014\avgfws.exe [1417160 2014-08-11] (AVG Technologies CZ, s.r.o.)
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3244048 2014-08-11] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [289328 2014-08-11] (AVG Technologies CZ, s.r.o.)
R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1630456 2013-06-07] (IVT Corporation)
R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [145656 2013-05-14] (IVT Corporation)
R2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2014-02-28] (Hi-Rez Studios) [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-04-10] (Intel Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2152736 2014-05-04] (IObit)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-07-09] ()
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [239176 2013-02-19] (Realtek Semiconductor)
R2 slsvc; C:\Windows\slsvc.exe [10240 2012-09-25] (Microsoft Corporation) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [15440 2012-07-26] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36608 2013-12-13] (Advanced Micro Devices, Inc.)
S3 AndNetDiag; C:\Windows\system32\DRIVERS\lgandnetdiag64.sys [29184 2012-07-03] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\system32\DRIVERS\lgandnetmodem64.sys [36352 2012-07-03] (LG Electronics Inc.)
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [20496 2013-09-04] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [152344 2014-06-30] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\system32\DRIVERS\avgfwd6a.sys [57144 2013-09-26] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [242968 2014-06-17] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [190744 2014-06-17] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [235800 2014-06-17] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [328984 2014-06-17] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123672 2014-06-17] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-17] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-08-12] (AVG Technologies)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [270104 2014-06-30] (AVG Technologies CZ, s.r.o.)
U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [33968 2012-12-19] (IVT Corporation)
R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)
U4 BthAvrcpTg;
U4 BthHFEnum;
U4 bthhfhid;
R3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [54064 2013-04-26] (Ralink Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [49584 2013-03-25] (Ralink Corporation)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-11-08] (DT Soft Ltd)
S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2014-04-15] (LogMeIn Inc.)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [288328 2013-01-24] (Realtek Semiconductor Corp.)
R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [1162952 2013-07-13] (Ralink Technology, Corp.)
S3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [448072 2013-02-02] (RTS Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [33008 2013-04-24] (Synaptics Incorporated)
U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [33968 2012-12-19] (IVT Corporation)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-22 10:45 - 2014-08-22 10:45 - 00112640 _____ (forum.viry.cz) C:\Users\Vítek\Downloads\FRSTLauncher (1).exe
2014-08-22 10:45 - 2014-08-22 10:45 - 00112640 _____ (forum.viry.cz) C:\Users\Vítek\Desktop\FRSTLauncher (1).exe
2014-08-22 10:41 - 2014-08-22 10:45 - 00018508 _____ () C:\Users\Vítek\Desktop\FRST.txt
2014-08-22 10:39 - 2014-08-22 10:45 - 00000000 ____D () C:\FRST
2014-08-22 10:36 - 2014-08-22 10:36 - 02101760 _____ (Farbar) C:\Users\Vítek\Downloads\FRST64.exe
2014-08-22 10:36 - 2014-08-22 10:36 - 02101760 _____ (Farbar) C:\Users\Vítek\Desktop\FRST64.exe
2014-08-22 10:36 - 2014-08-22 10:36 - 00000000 _____ () C:\Users\Vítek\Downloads\FRSTLauncher.exe
2014-08-22 10:35 - 2014-08-22 10:35 - 00000000 _____ () C:\Users\Vítek\Downloads\VerzeOS.exe
2014-08-22 10:31 - 2014-08-22 10:31 - 00000117 _____ () C:\Windows\system32\netcfg-41664453.txt
2014-08-22 10:31 - 2014-08-22 10:31 - 00000117 _____ () C:\Windows\system32\netcfg-41661265.txt
2014-08-22 01:09 - 2014-08-22 01:09 - 00000117 _____ () C:\Windows\system32\netcfg-7959671.txt
2014-08-22 01:09 - 2014-08-22 01:09 - 00000117 _____ () C:\Windows\system32\netcfg-7958906.txt
2014-08-21 22:57 - 2014-08-21 22:57 - 00000117 _____ () C:\Windows\system32\netcfg-46078.txt
2014-08-21 22:56 - 2014-08-21 22:56 - 00000117 _____ () C:\Windows\system32\netcfg-1278890.txt
2014-08-21 22:56 - 2014-08-21 22:56 - 00000000 ____D () C:\Users\VÝtek\AppData\Roaming\Macromedia
2014-08-21 22:56 - 2014-08-21 22:56 - 00000000 ____D () C:\Users\VÝtek
2014-08-21 22:56 - 2014-08-21 22:39 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-08-21 22:52 - 2014-08-21 22:57 - 00000000 ____D () C:\zoek
2014-08-21 22:43 - 2014-08-21 22:30 - 00001281 _____ () C:\zoek-results2014-08-21-203029.log
2014-08-21 22:35 - 2014-08-21 22:35 - 00000117 _____ () C:\Windows\system32\netcfg-43968.txt
2014-08-21 22:34 - 2014-08-21 22:34 - 00000117 _____ () C:\Windows\system32\netcfg-992031.txt
2014-08-21 22:28 - 2014-08-21 22:57 - 00013875 _____ () C:\zoek-results.log
2014-08-21 22:27 - 2014-08-21 22:27 - 01288704 _____ () C:\Users\Vítek\Downloads\zoek (1).exe
2014-08-21 22:25 - 2014-08-21 22:53 - 00000000 ____D () C:\zoek_backup
2014-08-21 22:25 - 2014-08-21 22:26 - 04245477 _____ () C:\Users\Vítek\Downloads\zoek.rar
2014-08-21 22:25 - 2014-08-21 22:25 - 01288704 _____ () C:\Users\Vítek\zoek.exe
2014-08-21 22:19 - 2014-08-21 22:19 - 00000117 _____ () C:\Windows\system32\netcfg-49046.txt
2014-08-21 22:17 - 2014-08-21 22:17 - 00000117 _____ () C:\Windows\system32\netcfg-171677468.txt
2014-08-21 22:16 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-08-21 22:13 - 2014-08-21 22:17 - 00000000 ____D () C:\AdwCleaner
2014-08-21 22:13 - 2014-08-21 22:13 - 01364531 _____ () C:\Users\Vítek\Downloads\adwcleaner_3.308.exe
2014-08-21 21:41 - 2014-08-21 21:41 - 00832273 _____ () C:\Users\Vítek\Downloads\RSITx64 (1).exe
2014-08-21 21:35 - 2014-08-21 21:41 - 00000000 ____D () C:\Program Files\trend micro
2014-08-21 21:35 - 2014-08-21 21:35 - 01222144 _____ () C:\Users\Vítek\Downloads\RSITx64.exe
2014-08-21 21:35 - 2014-08-21 21:35 - 00000000 ____D () C:\rsit
2014-08-21 10:31 - 2014-08-21 10:31 - 00000117 _____ () C:\Windows\system32\netcfg-129298125.txt
2014-08-21 10:31 - 2014-08-21 10:31 - 00000117 _____ () C:\Windows\system32\netcfg-129294015.txt
2014-08-20 21:14 - 2014-08-20 21:14 - 08734941 _____ () C:\Users\Vítek\Downloads\16774-lamborghini-gallardo-lp560-4-gt3-v20.zip
2014-08-20 10:03 - 2014-08-20 10:03 - 00029296 _____ () C:\Users\Vítek\Downloads\[CzT]The_Sims_3.torrent
2014-08-20 09:15 - 2014-08-20 09:15 - 00000117 _____ () C:\Windows\system32\netcfg-38347671.txt
2014-08-20 09:15 - 2014-08-20 09:15 - 00000117 _____ () C:\Windows\system32\netcfg-38346437.txt
2014-08-19 22:37 - 2014-08-19 22:37 - 00000117 _____ () C:\Windows\system32\netcfg-77140.txt
2014-08-19 22:35 - 2014-08-19 22:35 - 00000117 _____ () C:\Windows\system32\netcfg-632319625.txt
2014-08-19 21:55 - 2014-08-19 21:55 - 00000250 _____ () C:\Windows\system32\netcfg-629880890.txt
2014-08-19 21:55 - 2014-08-19 21:55 - 00000117 _____ () C:\Windows\system32\netcfg-629889781.txt
2014-08-19 21:55 - 2014-08-19 21:55 - 00000117 _____ () C:\Windows\system32\netcfg-629887390.txt
2014-08-19 20:10 - 2014-08-19 20:10 - 00000000 ____D () C:\Users\Vítek\AppData\Roaming\SetMyHomePage
2014-08-19 20:10 - 2014-08-19 20:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\www.GameModding.net
2014-08-19 20:07 - 2014-08-19 20:07 - 01895041 _____ () C:\Users\Vítek\Downloads\129685-anticrasher-for-samp-0.3z-by-fyp-gtasa.zip
2014-08-19 09:22 - 2014-08-19 09:22 - 00000117 _____ () C:\Windows\system32\netcfg-584732156.txt
2014-08-19 09:22 - 2014-08-19 09:22 - 00000117 _____ () C:\Windows\system32\netcfg-584730875.txt
2014-08-18 10:07 - 2014-08-18 10:07 - 00000000 ____D () C:\Windows\Hewlett-Packard
2014-08-18 09:52 - 2014-08-18 09:52 - 00000117 _____ () C:\Windows\system32\netcfg-500121312.txt
2014-08-18 09:52 - 2014-08-18 09:52 - 00000117 _____ () C:\Windows\system32\netcfg-500120359.txt
2014-08-17 09:29 - 2014-08-17 09:29 - 00000117 _____ () C:\Windows\system32\netcfg-412330828.txt
2014-08-17 09:29 - 2014-08-17 09:29 - 00000117 _____ () C:\Windows\system32\netcfg-412328203.txt
2014-08-15 10:54 - 2014-08-15 10:54 - 00000117 _____ () C:\Windows\system32\netcfg-244643140.txt
2014-08-15 10:54 - 2014-08-15 10:54 - 00000117 _____ () C:\Windows\system32\netcfg-244642359.txt
2014-08-14 09:27 - 2014-08-14 09:27 - 00000117 _____ () C:\Windows\system32\netcfg-153004828.txt
2014-08-14 09:27 - 2014-08-14 09:27 - 00000117 _____ () C:\Windows\system32\netcfg-153002390.txt
2014-08-13 19:47 - 2014-08-13 19:50 - 00000000 ____D () C:\Users\Vítek\GTA San Andreas
2014-08-13 09:38 - 2014-08-13 09:38 - 00000117 _____ () C:\Windows\system32\netcfg-67280109.txt
2014-08-13 09:38 - 2014-08-13 09:38 - 00000117 _____ () C:\Windows\system32\netcfg-67279218.txt
2014-08-12 19:56 - 2014-08-12 19:56 - 00007141 _____ () C:\Windows\unins000.dat
2014-08-12 19:56 - 2014-08-12 19:55 - 01197921 _____ () C:\Windows\unins000.exe
2014-08-12 18:55 - 2014-08-12 18:55 - 00000117 _____ () C:\Windows\system32\netcfg-14329171.txt
2014-08-12 18:04 - 2014-08-12 18:07 - 00000000 ____D () C:\Users\Vítek\AppData\Local\Mato_Technologies
2014-08-12 14:57 - 2014-08-12 14:57 - 00000117 _____ () C:\Windows\system32\netcfg-44703.txt
2014-08-12 14:56 - 2014-08-12 14:56 - 00000117 _____ () C:\Windows\system32\netcfg-92824125.txt
2014-08-11 22:52 - 2014-08-19 19:38 - 00000000 ____D () C:\Users\Vítek\Desktop\SG-1
2014-08-11 12:48 - 2014-08-11 12:53 - 00000000 ____D () C:\Users\Vítek\AppData\Roaming\.creativeportal
2014-08-11 10:06 - 2014-08-11 10:06 - 00000327 _____ () C:\Users\Vítek\Desktop\Diagnostické nástroje pro tiskárny HP.url
2014-08-11 07:54 - 2014-08-11 07:54 - 00000117 _____ () C:\Windows\system32\netcfg-464918531.txt
2014-08-11 07:54 - 2014-08-11 07:54 - 00000117 _____ () C:\Windows\system32\netcfg-464918140.txt
2014-08-10 18:50 - 2014-08-10 18:50 - 00000117 _____ () C:\Windows\system32\netcfg-417921234.txt
2014-08-10 18:50 - 2014-08-10 18:50 - 00000117 _____ () C:\Windows\system32\netcfg-417915171.txt
2014-08-10 09:40 - 2014-08-10 09:40 - 00000117 _____ () C:\Windows\system32\netcfg-384899171.txt
2014-08-10 09:40 - 2014-08-10 09:40 - 00000117 _____ () C:\Windows\system32\netcfg-384898250.txt
2014-08-09 18:57 - 2014-08-09 18:57 - 00000117 _____ () C:\Windows\system32\netcfg-331896734.txt
2014-08-09 18:57 - 2014-08-09 18:57 - 00000117 _____ () C:\Windows\system32\netcfg-331893468.txt
2014-08-09 08:53 - 2014-08-09 08:53 - 00000117 _____ () C:\Windows\system32\netcfg-295708500.txt
2014-08-09 08:53 - 2014-08-09 08:53 - 00000117 _____ () C:\Windows\system32\netcfg-295705515.txt
2014-08-08 10:00 - 2014-08-08 10:00 - 00000117 _____ () C:\Windows\system32\netcfg-213343515.txt
2014-08-08 10:00 - 2014-08-08 10:00 - 00000117 _____ () C:\Windows\system32\netcfg-213342750.txt
2014-08-07 20:15 - 2014-08-19 19:30 - 00000000 ____D () C:\Users\Vítek\AppData\Roaming\McTitan Dinocraft
2014-08-07 08:28 - 2014-08-07 08:28 - 00000117 _____ () C:\Windows\system32\netcfg-121411562.txt
2014-08-07 08:28 - 2014-08-07 08:28 - 00000117 _____ () C:\Windows\system32\netcfg-121410843.txt
2014-08-06 08:14 - 2014-08-06 08:14 - 00000000 __SHD () C:\ProgramData\{D1D4879F-2279-49C9-AEBF-3B95C84EAA8F}
2014-08-06 08:07 - 2014-08-06 08:07 - 00000117 _____ () C:\Windows\system32\netcfg-33758406.txt
2014-08-06 08:07 - 2014-08-06 08:07 - 00000117 _____ () C:\Windows\system32\netcfg-33758250.txt
2014-08-05 17:52 - 2014-08-05 17:52 - 00000117 _____ () C:\Windows\system32\netcfg-292314343.txt
2014-08-05 17:39 - 2014-08-05 17:39 - 00000117 _____ () C:\Windows\system32\netcfg-291528796.txt
2014-08-05 17:28 - 2014-08-05 17:28 - 00000117 _____ () C:\Windows\system32\netcfg-290877000.txt
2014-08-05 17:27 - 2014-08-05 17:27 - 00000117 _____ () C:\Windows\system32\netcfg-290811218.txt
2014-08-05 17:15 - 2014-08-05 17:15 - 00000117 _____ () C:\Windows\system32\netcfg-290076156.txt
2014-08-05 16:49 - 2014-08-05 16:49 - 00000117 _____ () C:\Windows\system32\netcfg-288508625.txt
2014-08-05 16:24 - 2014-08-05 16:24 - 00000117 _____ () C:\Windows\system32\netcfg-287040656.txt
2014-08-05 16:14 - 2014-08-05 16:14 - 00000117 _____ () C:\Windows\system32\netcfg-286434953.txt
2014-08-05 15:26 - 2014-08-05 15:26 - 00000117 _____ () C:\Windows\system32\netcfg-283568062.txt
2014-08-05 15:13 - 2014-08-05 15:13 - 00000117 _____ () C:\Windows\system32\netcfg-282793234.txt
2014-08-05 11:18 - 2014-08-05 11:18 - 00000117 _____ () C:\Windows\system32\netcfg-268644671.txt
2014-08-05 11:18 - 2014-08-05 11:18 - 00000117 _____ () C:\Windows\system32\netcfg-268640921.txt
2014-08-04 18:19 - 2014-08-04 18:19 - 00000117 _____ () C:\Windows\system32\netcfg-207527390.txt
2014-08-04 18:17 - 2014-08-04 18:17 - 00000117 _____ () C:\Windows\system32\netcfg-207405375.txt
2014-08-04 13:45 - 2014-08-04 13:45 - 00000117 _____ () C:\Windows\system32\netcfg-191118906.txt
2014-08-04 13:42 - 2014-08-04 13:42 - 00000117 _____ () C:\Windows\system32\netcfg-190934968.txt
2014-08-04 09:56 - 2014-08-04 09:56 - 00000117 _____ () C:\Windows\system32\netcfg-177378593.txt
2014-08-04 09:56 - 2014-08-04 09:56 - 00000117 _____ () C:\Windows\system32\netcfg-177375453.txt
2014-08-03 08:40 - 2014-08-03 08:40 - 00000117 _____ () C:\Windows\system32\netcfg-86423421.txt
2014-08-03 08:37 - 2014-08-03 08:37 - 00000117 _____ () C:\Windows\system32\netcfg-86241265.txt
2014-08-03 08:14 - 2014-08-03 08:14 - 00000117 _____ () C:\Windows\system32\netcfg-84839296.txt
2014-08-03 08:14 - 2014-08-03 08:14 - 00000117 _____ () C:\Windows\system32\netcfg-84837093.txt
2014-08-02 08:52 - 2014-08-02 08:52 - 00000117 _____ () C:\Windows\system32\netcfg-711921.txt
2014-08-02 08:48 - 2014-08-02 08:48 - 00000117 _____ () C:\Windows\system32\netcfg-465843.txt
2014-08-02 08:41 - 2014-08-02 08:41 - 00000117 _____ () C:\Windows\system32\netcfg-50156.txt
2014-08-02 08:40 - 2014-08-02 08:40 - 00000117 _____ () C:\Windows\system32\netcfg-67749250.txt
2014-08-02 08:27 - 2014-08-02 08:27 - 00000117 _____ () C:\Windows\system32\netcfg-66973531.txt
2014-08-02 08:27 - 2014-08-02 08:27 - 00000117 _____ () C:\Windows\system32\netcfg-66973406.txt
2014-08-02 08:27 - 2014-08-02 08:27 - 00000117 _____ () C:\Windows\system32\netcfg-66963625.txt
2014-08-02 08:27 - 2014-08-02 08:27 - 00000117 _____ () C:\Windows\system32\netcfg-66962937.txt
2014-08-01 08:51 - 2014-08-01 08:51 - 00000117 _____ () C:\Windows\system32\netcfg-41168125.txt
2014-08-01 08:51 - 2014-08-01 08:51 - 00000117 _____ () C:\Windows\system32\netcfg-41166531.txt
2014-07-31 22:59 - 2014-07-31 22:59 - 00000000 ____D () C:\Users\Vítek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2014-07-31 08:40 - 2014-07-31 08:40 - 00000117 _____ () C:\Windows\system32\netcfg-82742484.txt
2014-07-31 08:40 - 2014-07-31 08:40 - 00000117 _____ () C:\Windows\system32\netcfg-82738890.txt
2014-07-30 15:21 - 2014-07-30 15:21 - 00000117 _____ () C:\Windows\system32\netcfg-20429109.txt
2014-07-30 15:21 - 2014-07-30 15:21 - 00000117 _____ () C:\Windows\system32\netcfg-20427281.txt
2014-07-30 15:20 - 2014-07-30 15:20 - 00000117 _____ () C:\Windows\system32\netcfg-20387218.txt
2014-07-30 15:20 - 2014-07-30 15:20 - 00000117 _____ () C:\Windows\system32\netcfg-20385421.txt
2014-07-30 14:20 - 2014-07-30 14:20 - 00000117 _____ () C:\Windows\system32\netcfg-16784984.txt
2014-07-30 14:20 - 2014-07-30 14:20 - 00000117 _____ () C:\Windows\system32\netcfg-16780406.txt
2014-07-30 14:01 - 2014-07-30 14:01 - 00000117 _____ () C:\Windows\system32\netcfg-15592234.txt
2014-07-30 14:00 - 2014-07-30 14:00 - 00000117 _____ () C:\Windows\system32\netcfg-15589921.txt
2014-07-30 13:51 - 2014-07-30 13:51 - 00000117 _____ () C:\Windows\system32\netcfg-15016500.txt
2014-07-30 13:51 - 2014-07-30 13:51 - 00000117 _____ () C:\Windows\system32\netcfg-15015203.txt
2014-07-30 09:41 - 2014-07-30 09:41 - 00000117 _____ () C:\Windows\system32\netcfg-38093.txt
2014-07-30 09:40 - 2014-07-30 09:40 - 00000117 _____ () C:\Windows\system32\netcfg-241538281.txt
2014-07-30 09:39 - 2014-07-30 09:39 - 00000117 _____ () C:\Windows\system32\netcfg-241471187.txt
2014-07-30 09:39 - 2014-07-30 09:39 - 00000117 _____ () C:\Windows\system32\netcfg-241470718.txt
2014-07-30 08:39 - 2014-07-30 08:39 - 00000117 _____ () C:\Windows\system32\netcfg-237851093.txt
2014-07-30 08:39 - 2014-07-30 08:39 - 00000117 _____ () C:\Windows\system32\netcfg-237847125.txt
2014-07-29 14:07 - 2014-07-29 14:07 - 00000000 ____D () C:\Users\Vítek\AppData\Roaming\BANDISOFT
2014-07-29 14:06 - 2014-07-29 14:06 - 00000000 ____D () C:\Users\Vítek\Documents\Bandicam
2014-07-29 14:05 - 2014-07-29 14:05 - 00000000 ____D () C:\Program Files (x86)\BandiMPEG1
2014-07-29 12:16 - 2014-07-29 12:17 - 00000000 ____D () C:\ProgramData\DriverGenius
2014-07-29 12:13 - 2014-07-29 12:13 - 00000000 ____D () C:\Program Files (x86)\KYE
2014-07-29 05:01 - 2014-07-29 05:01 - 00000117 _____ () C:\Windows\system32\netcfg-138394656.txt
2014-07-29 05:01 - 2014-07-29 05:01 - 00000117 _____ () C:\Windows\system32\netcfg-138393312.txt
2014-07-28 09:28 - 2014-07-28 09:28 - 00000117 _____ () C:\Windows\system32\netcfg-68031328.txt
2014-07-28 09:28 - 2014-07-28 09:28 - 00000117 _____ () C:\Windows\system32\netcfg-68028218.txt
2014-07-28 09:28 - 2014-07-28 09:28 - 00000117 _____ () C:\Windows\system32\netcfg-68013625.txt
2014-07-28 09:28 - 2014-07-28 09:28 - 00000117 _____ () C:\Windows\system32\netcfg-68011796.txt
2014-07-27 14:28 - 2014-07-27 14:28 - 00000117 _____ () C:\Windows\system32\netcfg-935113343.txt
2014-07-27 14:27 - 2014-07-27 14:27 - 00000117 _____ () C:\Windows\system32\netcfg-935012375.txt
2014-07-27 07:50 - 2014-08-01 10:53 - 00000000 ____D () C:\Users\Vítek\Desktop\Garrys mod E2
2014-07-27 07:43 - 2014-07-27 07:43 - 00000117 _____ () C:\Windows\system32\netcfg-910774671.txt
2014-07-27 07:43 - 2014-07-27 07:43 - 00000117 _____ () C:\Windows\system32\netcfg-910772781.txt
2014-07-26 19:50 - 2014-07-26 19:50 - 00000117 _____ () C:\Windows\system32\netcfg-868041531.txt
2014-07-26 19:48 - 2014-07-26 19:48 - 00000117 _____ () C:\Windows\system32\netcfg-867913359.txt
2014-07-26 09:57 - 2014-07-26 09:57 - 00000117 _____ () C:\Windows\system32\netcfg-832429671.txt
2014-07-26 09:57 - 2014-07-26 09:57 - 00000117 _____ () C:\Windows\system32\netcfg-832426984.txt
2014-07-25 10:50 - 2014-07-25 10:50 - 00000117 _____ () C:\Windows\system32\netcfg-749200718.txt
2014-07-25 10:50 - 2014-07-25 10:50 - 00000117 _____ () C:\Windows\system32\netcfg-749199968.txt
2014-07-24 12:14 - 2014-07-24 12:14 - 00000117 _____ () C:\Windows\system32\netcfg-667885937.txt
2014-07-24 12:14 - 2014-07-24 12:14 - 00000117 _____ () C:\Windows\system32\netcfg-667885343.txt
2014-07-23 07:07 - 2014-07-23 07:07 - 00000117 _____ () C:\Windows\system32\netcfg-563071484.txt
2014-07-23 07:04 - 2014-07-23 07:04 - 00000117 _____ () C:\Windows\system32\netcfg-562885500.txt
2014-07-23 01:20 - 2014-07-23 01:20 - 00000117 _____ () C:\Windows\system32\netcfg-542256796.txt
2014-07-23 01:20 - 2014-07-23 01:20 - 00000117 _____ () C:\Windows\system32\netcfg-542256640.txt
2014-07-23 00:59 - 2014-07-23 00:59 - 00000117 _____ () C:\Windows\system32\netcfg-540947734.txt
2014-07-23 00:59 - 2014-07-23 00:59 - 00000117 _____ () C:\Windows\system32\netcfg-540944515.txt

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-22 10:45 - 2014-08-22 10:45 - 00112640 _____ (forum.viry.cz) C:\Users\Vítek\Downloads\FRSTLauncher (1).exe
2014-08-22 10:45 - 2014-08-22 10:45 - 00112640 _____ (forum.viry.cz) C:\Users\Vítek\Desktop\FRSTLauncher (1).exe
2014-08-22 10:45 - 2014-08-22 10:41 - 00018508 _____ () C:\Users\Vítek\Desktop\FRST.txt
2014-08-22 10:45 - 2014-08-22 10:39 - 00000000 ____D () C:\FRST
2014-08-22 10:43 - 2013-11-08 19:10 - 00000000 ____D () C:\Users\Vítek\AppData\Roaming\ClassicShell
2014-08-22 10:37 - 2013-11-08 19:45 - 00000000 ____D () C:\ProgramData\MFAData
2014-08-22 10:36 - 2014-08-22 10:36 - 02101760 _____ (Farbar) C:\Users\Vítek\Downloads\FRST64.exe
2014-08-22 10:36 - 2014-08-22 10:36 - 02101760 _____ (Farbar) C:\Users\Vítek\Desktop\FRST64.exe
2014-08-22 10:36 - 2014-08-22 10:36 - 00000000 _____ () C:\Users\Vítek\Downloads\FRSTLauncher.exe
2014-08-22 10:36 - 2014-03-09 17:21 - 01610288 _____ () C:\Windows\WindowsUpdate.log
2014-08-22 10:36 - 2013-11-08 17:57 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2853416472-2825147005-2372363208-1001
2014-08-22 10:35 - 2014-08-22 10:35 - 00000000 _____ () C:\Users\Vítek\Downloads\VerzeOS.exe
2014-08-22 10:33 - 2013-11-10 18:13 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-08-22 10:32 - 2014-05-10 08:58 - 00000000 ____D () C:\Users\Vítek\AppData\Roaming\Raptr
2014-08-22 10:32 - 2014-03-05 23:01 - 00000000 ____D () C:\Users\Vítek\AppData\Roaming\Skype
2014-08-22 10:32 - 2013-11-11 14:02 - 00000000 ____D () C:\Users\Vítek\AppData\Roaming\BitTorrent
2014-08-22 10:32 - 2013-11-10 15:37 - 00000954 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-22 10:32 - 2013-11-08 20:38 - 00000000 ____D () C:\Users\Vítek\Documents\Youcam
2014-08-22 10:31 - 2014-08-22 10:31 - 00000117 _____ () C:\Windows\system32\netcfg-41664453.txt
2014-08-22 10:31 - 2014-08-22 10:31 - 00000117 _____ () C:\Windows\system32\netcfg-41661265.txt
2014-08-22 10:31 - 2014-05-29 15:24 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-08-22 10:31 - 2013-11-08 20:13 - 00003620 _____ () C:\Windows\SysWOW64\LOCALSERVICE.INI
2014-08-22 10:31 - 2013-11-08 20:13 - 00000043 _____ () C:\Windows\SysWOW64\LOCALDEVICE.INI
2014-08-22 10:31 - 2013-09-13 18:20 - 00001017 _____ () C:\Windows\SysWOW64\bscs.ini
2014-08-22 10:31 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\sru
2014-08-22 01:24 - 2013-11-14 17:34 - 00000316 _____ () C:\Windows\SysWOW64\REMOTEDEVICE.INI
2014-08-22 01:11 - 2013-11-10 15:37 - 00000958 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-22 01:09 - 2014-08-22 01:09 - 00000117 _____ () C:\Windows\system32\netcfg-7959671.txt
2014-08-22 01:09 - 2014-08-22 01:09 - 00000117 _____ () C:\Windows\system32\netcfg-7958906.txt
2014-08-22 01:06 - 2014-01-09 10:31 - 00000970 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2853416472-2825147005-2372363208-1001UA.job
2014-08-22 01:06 - 2013-11-08 20:03 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-22 01:01 - 2013-11-28 16:17 - 00000000 ____D () C:\Users\Vítek\AppData\Roaming\TS3Client
2014-08-21 23:04 - 2012-07-26 12:01 - 00728526 _____ () C:\Windows\system32\perfh005.dat
2014-08-21 23:04 - 2012-07-26 12:01 - 00148542 _____ () C:\Windows\system32\perfc005.dat
2014-08-21 23:04 - 2012-07-26 09:28 - 01717852 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-21 23:02 - 2013-11-08 17:45 - 00000000 ___RD () C:\Users\Vítek
2014-08-21 22:57 - 2014-08-21 22:57 - 00000117 _____ () C:\Windows\system32\netcfg-46078.txt
2014-08-21 22:57 - 2014-08-21 22:52 - 00000000 ____D () C:\zoek
2014-08-21 22:57 - 2014-08-21 22:28 - 00013875 _____ () C:\zoek-results.log
2014-08-21 22:57 - 2014-06-27 21:01 - 00011870 _____ () C:\Windows\PFRO.log
2014-08-21 22:57 - 2012-07-26 09:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-21 22:56 - 2014-08-21 22:56 - 00000117 _____ () C:\Windows\system32\netcfg-1278890.txt
2014-08-21 22:56 - 2014-08-21 22:56 - 00000000 ____D () C:\Users\VÝtek\AppData\Roaming\Macromedia
2014-08-21 22:56 - 2014-08-21 22:56 - 00000000 ____D () C:\Users\VÝtek
2014-08-21 22:56 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-08-21 22:53 - 2014-08-21 22:25 - 00000000 ____D () C:\zoek_backup
2014-08-21 22:39 - 2014-08-21 22:56 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-08-21 22:35 - 2014-08-21 22:35 - 00000117 _____ () C:\Windows\system32\netcfg-43968.txt
2014-08-21 22:34 - 2014-08-21 22:34 - 00000117 _____ () C:\Windows\system32\netcfg-992031.txt
2014-08-21 22:30 - 2014-08-21 22:43 - 00001281 _____ () C:\zoek-results2014-08-21-203029.log
2014-08-21 22:27 - 2014-08-21 22:27 - 01288704 _____ () C:\Users\Vítek\Downloads\zoek (1).exe
2014-08-21 22:26 - 2014-08-21 22:25 - 04245477 _____ () C:\Users\Vítek\Downloads\zoek.rar
2014-08-21 22:25 - 2014-08-21 22:25 - 01288704 _____ () C:\Users\Vítek\zoek.exe
2014-08-21 22:22 - 2014-05-10 08:58 - 00000000 ____D () C:\Program Files (x86)\Raptr
2014-08-21 22:19 - 2014-08-21 22:19 - 00000117 _____ () C:\Windows\system32\netcfg-49046.txt
2014-08-21 22:18 - 2013-12-18 18:16 - 00000000 ____D () C:\Users\Vítek\AppData\Local\AVG SafeGuard toolbar
2014-08-21 22:17 - 2014-08-21 22:17 - 00000117 _____ () C:\Windows\system32\netcfg-171677468.txt
2014-08-21 22:17 - 2014-08-21 22:13 - 00000000 ____D () C:\AdwCleaner
2014-08-21 22:13 - 2014-08-21 22:13 - 01364531 _____ () C:\Users\Vítek\Downloads\adwcleaner_3.308.exe
2014-08-21 22:00 - 2013-12-30 00:54 - 00000000 ____D () C:\Users\Vítek\Documents\Visual Studio 2008
2014-08-21 21:41 - 2014-08-21 21:41 - 00832273 _____ () C:\Users\Vítek\Downloads\RSITx64 (1).exe
2014-08-21 21:41 - 2014-08-21 21:35 - 00000000 ____D () C:\Program Files\trend micro
2014-08-21 21:35 - 2014-08-21 21:35 - 01222144 _____ () C:\Users\Vítek\Downloads\RSITx64.exe
2014-08-21 21:35 - 2014-08-21 21:35 - 00000000 ____D () C:\rsit
2014-08-21 13:06 - 2014-01-09 10:31 - 00000918 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2853416472-2825147005-2372363208-1001Core.job
2014-08-21 10:39 - 2014-05-25 17:08 - 00000000 ____D () C:\ProgramData\Origin
2014-08-21 10:31 - 2014-08-21 10:31 - 00000117 _____ () C:\Windows\system32\netcfg-129298125.txt
2014-08-21 10:31 - 2014-08-21 10:31 - 00000117 _____ () C:\Windows\system32\netcfg-129294015.txt
2014-08-20 21:14 - 2014-08-20 21:14 - 08734941 _____ () C:\Users\Vítek\Downloads\16774-lamborghini-gallardo-lp560-4-gt3-v20.zip
2014-08-20 10:03 - 2014-08-20 10:03 - 00029296 _____ () C:\Users\Vítek\Downloads\[CzT]The_Sims_3.torrent
2014-08-20 09:15 - 2014-08-20 09:15 - 00000117 _____ () C:\Windows\system32\netcfg-38347671.txt
2014-08-20 09:15 - 2014-08-20 09:15 - 00000117 _____ () C:\Windows\system32\netcfg-38346437.txt
2014-08-19 22:47 - 2014-04-24 17:43 - 00000000 ____D () C:\Users\Vítek\AppData\Roaming\AIMP3
2014-08-19 22:37 - 2014-08-19 22:37 - 00000117 _____ () C:\Windows\system32\netcfg-77140.txt
2014-08-19 22:35 - 2014-08-19 22:35 - 00000117 _____ () C:\Windows\system32\netcfg-632319625.txt
2014-08-19 21:55 - 2014-08-19 21:55 - 00000250 _____ () C:\Windows\system32\netcfg-629880890.txt
2014-08-19 21:55 - 2014-08-19 21:55 - 00000117 _____ () C:\Windows\system32\netcfg-629889781.txt
2014-08-19 21:55 - 2014-08-19 21:55 - 00000117 _____ () C:\Windows\system32\netcfg-629887390.txt
2014-08-19 21:55 - 2014-03-31 16:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2014-08-19 20:10 - 2014-08-19 20:10 - 00000000 ____D () C:\Users\Vítek\AppData\Roaming\SetMyHomePage
2014-08-19 20:10 - 2014-08-19 20:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\www.GameModding.net
2014-08-19 20:07 - 2014-08-19 20:07 - 01895041 _____ () C:\Users\Vítek\Downloads\129685-anticrasher-for-samp-0.3z-by-fyp-gtasa.zip
2014-08-19 19:38 - 2014-08-11 22:52 - 00000000 ____D () C:\Users\Vítek\Desktop\SG-1
2014-08-19 19:37 - 2013-11-08 20:07 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-08-19 19:35 - 2013-12-29 17:15 - 00000000 ____D () C:\Program Files\City Life Super Deluxe
2014-08-19 19:30 - 2014-08-07 20:15 - 00000000 ____D () C:\Users\Vítek\AppData\Roaming\McTitan Dinocraft
2014-08-19 19:26 - 2014-05-10 09:14 - 00000000 ____D () C:\Users\Vítek\Downloads\soubory
2014-08-19 09:22 - 2014-08-19 09:22 - 00000117 _____ () C:\Windows\system32\netcfg-584732156.txt
2014-08-19 09:22 - 2014-08-19 09:22 - 00000117 _____ () C:\Windows\system32\netcfg-584730875.txt
2014-08-18 10:08 - 2013-11-20 15:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-08-18 10:08 - 2013-11-20 15:21 - 00000000 ____D () C:\Program Files (x86)\HP
2014-08-18 10:07 - 2014-08-18 10:07 - 00000000 ____D () C:\Windows\Hewlett-Packard
2014-08-18 10:07 - 2013-11-20 15:21 - 00000000 ____D () C:\Users\Vítek\AppData\Roaming\HpUpdate
2014-08-18 09:52 - 2014-08-18 09:52 - 00000117 _____ () C:\Windows\system32\netcfg-500121312.txt
2014-08-18 09:52 - 2014-08-18 09:52 - 00000117 _____ () C:\Windows\system32\netcfg-500120359.txt
2014-08-17 09:35 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-08-17 09:29 - 2014-08-17 09:29 - 00000117 _____ () C:\Windows\system32\netcfg-412330828.txt
2014-08-17 09:29 - 2014-08-17 09:29 - 00000117 _____ () C:\Windows\system32\netcfg-412328203.txt
2014-08-15 12:00 - 2014-05-05 16:46 - 00000977 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-08-15 10:54 - 2014-08-15 10:54 - 00000117 _____ () C:\Windows\system32\netcfg-244643140.txt
2014-08-15 10:54 - 2014-08-15 10:54 - 00000117 _____ () C:\Windows\system32\netcfg-244642359.txt
2014-08-14 20:15 - 2014-04-26 19:50 - 00002183 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-08-14 09:31 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\AUInstallAgent
2014-08-14 09:27 - 2014-08-14 09:27 - 00000117 _____ () C:\Windows\system32\netcfg-153004828.txt
2014-08-14 09:27 - 2014-08-14 09:27 - 00000117 _____ () C:\Windows\system32\netcfg-153002390.txt
2014-08-13 22:57 - 2014-04-18 12:15 - 00000000 ____D () C:\Users\Vítek\GTA Skiny
2014-08-13 19:50 - 2014-08-13 19:47 - 00000000 ____D () C:\Users\Vítek\GTA San Andreas
2014-08-13 09:38 - 2014-08-13 09:38 - 00000117 _____ () C:\Windows\system32\netcfg-67280109.txt
2014-08-13 09:38 - 2014-08-13 09:38 - 00000117 _____ () C:\Windows\system32\netcfg-67279218.txt
2014-08-12 22:36 - 2014-05-11 18:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2014-08-12 19:56 - 2014-08-12 19:56 - 00007141 _____ () C:\Windows\unins000.dat
2014-08-12 19:55 - 2014-08-12 19:56 - 01197921 _____ () C:\Windows\unins000.exe
2014-08-12 18:55 - 2014-08-12 18:55 - 00000117 _____ () C:\Windows\system32\netcfg-14329171.txt
2014-08-12 18:50 - 2014-06-14 14:21 - 00010526 _____ () C:\Windows\setupact.log
2014-08-12 18:07 - 2014-08-12 18:04 - 00000000 ____D () C:\Users\Vítek\AppData\Local\Mato_Technologies
2014-08-12 14:57 - 2014-08-12 14:57 - 00000117 _____ () C:\Windows\system32\netcfg-44703.txt
2014-08-12 14:56 - 2014-08-12 14:56 - 00000117 _____ () C:\Windows\system32\netcfg-92824125.txt
2014-08-12 02:13 - 2013-12-18 18:15 - 00050976 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2014-08-11 15:46 - 2014-04-16 13:04 - 00000000 ____D () C:\Users\Vítek\AppData\Roaming\.minecraft
2014-08-11 12:53 - 2014-08-11 12:48 - 00000000 ____D () C:\Users\Vítek\AppData\Roaming\.creativeportal
2014-08-11 10:06 - 2014-08-11 10:06 - 00000327 _____ () C:\Users\Vítek\Desktop\Diagnostické nástroje pro tiskárny HP.url
2014-08-11 07:54 - 2014-08-11 07:54 - 00000117 _____ () C:\Windows\system32\netcfg-464918531.txt
2014-08-11 07:54 - 2014-08-11 07:54 - 00000117 _____ () C:\Windows\system32\netcfg-464918140.txt
2014-08-11 07:54 - 2014-02-12 17:25 - 00000000 ___RD () C:\Users\Vítek\Desktop\Hry
2014-08-10 18:50 - 2014-08-10 18:50 - 00000117 _____ () C:\Windows\system32\netcfg-417921234.txt
2014-08-10 18:50 - 2014-08-10 18:50 - 00000117 _____ () C:\Windows\system32\netcfg-417915171.txt
2014-08-10 11:18 - 2014-01-11 19:17 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-08-10 09:40 - 2014-08-10 09:40 - 00000117 _____ () C:\Windows\system32\netcfg-384899171.txt
2014-08-10 09:40 - 2014-08-10 09:40 - 00000117 _____ () C:\Windows\system32\netcfg-384898250.txt
2014-08-09 18:57 - 2014-08-09 18:57 - 00000117 _____ () C:\Windows\system32\netcfg-331896734.txt
2014-08-09 18:57 - 2014-08-09 18:57 - 00000117 _____ () C:\Windows\system32\netcfg-331893468.txt
2014-08-09 08:53 - 2014-08-09 08:53 - 00000117 _____ () C:\Windows\system32\netcfg-295708500.txt
2014-08-09 08:53 - 2014-08-09 08:53 - 00000117 _____ () C:\Windows\system32\netcfg-295705515.txt
2014-08-08 11:11 - 2014-05-29 15:28 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-08-08 10:00 - 2014-08-08 10:00 - 00000117 _____ () C:\Windows\system32\netcfg-213343515.txt
2014-08-08 10:00 - 2014-08-08 10:00 - 00000117 _____ () C:\Windows\system32\netcfg-213342750.txt
2014-08-07 08:28 - 2014-08-07 08:28 - 00000117 _____ () C:\Windows\system32\netcfg-121411562.txt
2014-08-07 08:28 - 2014-08-07 08:28 - 00000117 _____ () C:\Windows\system32\netcfg-121410843.txt
2014-08-06 19:14 - 2014-04-27 18:30 - 00297088 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-08-06 19:14 - 2014-04-24 19:09 - 00297088 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-08-06 19:14 - 2014-04-24 19:09 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-08-06 11:34 - 2013-11-10 18:35 - 00000000 ____D () C:\Users\Vítek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-08-06 09:08 - 2013-11-08 19:48 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-08-06 09:00 - 2013-11-10 15:37 - 00003930 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-08-06 09:00 - 2013-11-10 15:37 - 00003694 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-08-06 08:23 - 2014-05-10 22:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-08-06 08:16 - 2014-03-05 23:10 - 00000000 ____D () C:\Users\Vítek\AppData\Roaming\AVG
2014-08-06 08:15 - 2014-03-05 23:08 - 00000000 ____D () C:\ProgramData\AVG
2014-08-06 08:14 - 2014-08-06 08:14 - 00000000 __SHD () C:\ProgramData\{D1D4879F-2279-49C9-AEBF-3B95C84EAA8F}
2014-08-06 08:07 - 2014-08-06 08:07 - 00000117 _____ () C:\Windows\system32\netcfg-33758406.txt
2014-08-06 08:07 - 2014-08-06 08:07 - 00000117 _____ () C:\Windows\system32\netcfg-33758250.txt
2014-08-05 17:52 - 2014-08-05 17:52 - 00000117 _____ () C:\Windows\system32\netcfg-292314343.txt
2014-08-05 17:39 - 2014-08-05 17:39 - 00000117 _____ () C:\Windows\system32\netcfg-291528796.txt
2014-08-05 17:28 - 2014-08-05 17:28 - 00000117 _____ () C:\Windows\system32\netcfg-290877000.txt
2014-08-05 17:27 - 2014-08-05 17:27 - 00000117 _____ () C:\Windows\system32\netcfg-290811218.txt
2014-08-05 17:15 - 2014-08-05 17:15 - 00000117 _____ () C:\Windows\system32\netcfg-290076156.txt
2014-08-05 16:49 - 2014-08-05 16:49 - 00000117 _____ () C:\Windows\system32\netcfg-288508625.txt
2014-08-05 16:24 - 2014-08-05 16:24 - 00000117 _____ () C:\Windows\system32\netcfg-287040656.txt
2014-08-05 16:14 - 2014-08-05 16:14 - 00000117 _____ () C:\Windows\system32\netcfg-286434953.txt
2014-08-05 15:26 - 2014-08-05 15:26 - 00000117 _____ () C:\Windows\system32\netcfg-283568062.txt
2014-08-05 15:13 - 2014-08-05 15:13 - 00000117 _____ () C:\Windows\system32\netcfg-282793234.txt
2014-08-05 11:18 - 2014-08-05 11:18 - 00000117 _____ () C:\Windows\system32\netcfg-268644671.txt
2014-08-05 11:18 - 2014-08-05 11:18 - 00000117 _____ () C:\Windows\system32\netcfg-268640921.txt
2014-08-04 18:19 - 2014-08-04 18:19 - 00000117 _____ () C:\Windows\system32\netcfg-207527390.txt
2014-08-04 18:17 - 2014-08-04 18:17 - 00000117 _____ () C:\Windows\system32\netcfg-207405375.txt
2014-08-04 13:45 - 2014-08-04 13:45 - 00000117 _____ () C:\Windows\system32\netcfg-191118906.txt
2014-08-04 13:42 - 2014-08-04 13:42 - 00000117 _____ () C:\Windows\system32\netcfg-190934968.txt
2014-08-04 09:56 - 2014-08-04 09:56 - 00000117 _____ () C:\Windows\system32\netcfg-177378593.txt
2014-08-04 09:56 - 2014-08-04 09:56 - 00000117 _____ () C:\Windows\system32\netcfg-177375453.txt
2014-08-03 08:40 - 2014-08-03 08:40 - 00000117 _____ () C:\Windows\system32\netcfg-86423421.txt
2014-08-03 08:37 - 2014-08-03 08:37 - 00000117 _____ () C:\Windows\system32\netcfg-86241265.txt
2014-08-03 08:14 - 2014-08-03 08:14 - 00000117 _____ () C:\Windows\system32\netcfg-84839296.txt
2014-08-03 08:14 - 2014-08-03 08:14 - 00000117 _____ () C:\Windows\system32\netcfg-84837093.txt
2014-08-02 08:52 - 2014-08-02 08:52 - 00000117 _____ () C:\Windows\system32\netcfg-711921.txt
2014-08-02 08:48 - 2014-08-02 08:48 - 00000117 _____ () C:\Windows\system32\netcfg-465843.txt
2014-08-02 08:41 - 2014-08-02 08:41 - 00000117 _____ () C:\Windows\system32\netcfg-50156.txt
2014-08-02 08:40 - 2014-08-02 08:40 - 00000117 _____ () C:\Windows\system32\netcfg-67749250.txt
2014-08-02 08:27 - 2014-08-02 08:27 - 00000117 _____ () C:\Windows\system32\netcfg-66973531.txt
2014-08-02 08:27 - 2014-08-02 08:27 - 00000117 _____ () C:\Windows\system32\netcfg-66973406.txt
2014-08-02 08:27 - 2014-08-02 08:27 - 00000117 _____ () C:\Windows\system32\netcfg-66963625.txt
2014-08-02 08:27 - 2014-08-02 08:27 - 00000117 _____ () C:\Windows\system32\netcfg-66962937.txt
2014-08-01 10:53 - 2014-07-27 07:50 - 00000000 ____D () C:\Users\Vítek\Desktop\Garrys mod E2
2014-08-01 08:51 - 2014-08-01 08:51 - 00000117 _____ () C:\Windows\system32\netcfg-41168125.txt
2014-08-01 08:51 - 2014-08-01 08:51 - 00000117 _____ () C:\Windows\system32\netcfg-41166531.txt
2014-07-31 22:59 - 2014-07-31 22:59 - 00000000 ____D () C:\Users\Vítek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2014-07-31 11:22 - 2013-11-14 17:35 - 00003413 _____ () C:\Windows\SysWOW64\SHORTCUT.INI
2014-07-31 08:40 - 2014-07-31 08:40 - 00000117 _____ () C:\Windows\system32\netcfg-82742484.txt
2014-07-31 08:40 - 2014-07-31 08:40 - 00000117 _____ () C:\Windows\system32\netcfg-82738890.txt
2014-07-30 15:21 - 2014-07-30 15:21 - 00000117 _____ () C:\Windows\system32\netcfg-20429109.txt
2014-07-30 15:21 - 2014-07-30 15:21 - 00000117 _____ () C:\Windows\system32\netcfg-20427281.txt
2014-07-30 15:20 - 2014-07-30 15:20 - 00000117 _____ () C:\Windows\system32\netcfg-20387218.txt
2014-07-30 15:20 - 2014-07-30 15:20 - 00000117 _____ () C:\Windows\system32\netcfg-20385421.txt
2014-07-30 14:20 - 2014-07-30 14:20 - 00000117 _____ () C:\Windows\system32\netcfg-16784984.txt
2014-07-30 14:20 - 2014-07-30 14:20 - 00000117 _____ () C:\Windows\system32\netcfg-16780406.txt
2014-07-30 14:01 - 2014-07-30 14:01 - 00000117 _____ () C:\Windows\system32\netcfg-15592234.txt
2014-07-30 14:00 - 2014-07-30 14:00 - 00000117 _____ () C:\Windows\system32\netcfg-15589921.txt
2014-07-30 13:51 - 2014-07-30 13:51 - 00000117 _____ () C:\Windows\system32\netcfg-15016500.txt
2014-07-30 13:51 - 2014-07-30 13:51 - 00000117 _____ () C:\Windows\system32\netcfg-15015203.txt
2014-07-30 09:41 - 2014-07-30 09:41 - 00000117 _____ () C:\Windows\system32\netcfg-38093.txt
2014-07-30 09:40 - 2014-07-30 09:40 - 00000117 _____ () C:\Windows\system32\netcfg-241538281.txt
2014-07-30 09:39 - 2014-07-30 09:39 - 00000117 _____ () C:\Windows\system32\netcfg-241471187.txt
2014-07-30 09:39 - 2014-07-30 09:39 - 00000117 _____ () C:\Windows\system32\netcfg-241470718.txt
2014-07-30 08:39 - 2014-07-30 08:39 - 00000117 _____ () C:\Windows\system32\netcfg-237851093.txt
2014-07-30 08:39 - 2014-07-30 08:39 - 00000117 _____ () C:\Windows\system32\netcfg-237847125.txt
2014-07-29 14:07 - 2014-07-29 14:07 - 00000000 ____D () C:\Users\Vítek\AppData\Roaming\BANDISOFT
2014-07-29 14:06 - 2014-07-29 14:06 - 00000000 ____D () C:\Users\Vítek\Documents\Bandicam
2014-07-29 14:05 - 2014-07-29 14:05 - 00000000 ____D () C:\Program Files (x86)\BandiMPEG1
2014-07-29 12:17 - 2014-07-29 12:16 - 00000000 ____D () C:\ProgramData\DriverGenius
2014-07-29 12:13 - 2014-07-29 12:13 - 00000000 ____D () C:\Program Files (x86)\KYE
2014-07-29 08:59 - 2014-06-06 15:02 - 00074006 _____ () C:\Windows\DirectX.log
2014-07-29 05:01 - 2014-07-29 05:01 - 00000117 _____ () C:\Windows\system32\netcfg-138394656.txt
2014-07-29 05:01 - 2014-07-29 05:01 - 00000117 _____ () C:\Windows\system32\netcfg-138393312.txt
2014-07-28 09:28 - 2014-07-28 09:28 - 00000117 _____ () C:\Windows\system32\netcfg-68031328.txt
2014-07-28 09:28 - 2014-07-28 09:28 - 00000117 _____ () C:\Windows\system32\netcfg-68028218.txt
2014-07-28 09:28 - 2014-07-28 09:28 - 00000117 _____ () C:\Windows\system32\netcfg-68013625.txt
2014-07-28 09:28 - 2014-07-28 09:28 - 00000117 _____ () C:\Windows\system32\netcfg-68011796.txt
2014-07-27 14:28 - 2014-07-27 14:28 - 00000117 _____ () C:\Windows\system32\netcfg-935113343.txt
2014-07-27 14:27 - 2014-07-27 14:27 - 00000117 _____ () C:\Windows\system32\netcfg-935012375.txt
2014-07-27 07:43 - 2014-07-27 07:43 - 00000117 _____ () C:\Windows\system32\netcfg-910774671.txt
2014-07-27 07:43 - 2014-07-27 07:43 - 00000117 _____ () C:\Windows\system32\netcfg-910772781.txt
2014-07-26 19:50 - 2014-07-26 19:50 - 00000117 _____ () C:\Windows\system32\netcfg-868041531.txt
2014-07-26 19:48 - 2014-07-26 19:48 - 00000117 _____ () C:\Windows\system32\netcfg-867913359.txt
2014-07-26 09:57 - 2014-07-26 09:57 - 00000117 _____ () C:\Windows\system32\netcfg-832429671.txt
2014-07-26 09:57 - 2014-07-26 09:57 - 00000117 _____ () C:\Windows\system32\netcfg-832426984.txt
2014-07-25 10:50 - 2014-07-25 10:50 - 00000117 _____ () C:\Windows\system32\netcfg-749200718.txt
2014-07-25 10:50 - 2014-07-25 10:50 - 00000117 _____ () C:\Windows\system32\netcfg-749199968.txt
2014-07-24 12:14 - 2014-07-24 12:14 - 00000117 _____ () C:\Windows\system32\netcfg-667885937.txt
2014-07-24 12:14 - 2014-07-24 12:14 - 00000117 _____ () C:\Windows\system32\netcfg-667885343.txt
2014-07-23 07:07 - 2014-07-23 07:07 - 00000117 _____ () C:\Windows\system32\netcfg-563071484.txt
2014-07-23 07:04 - 2014-07-23 07:04 - 00000117 _____ () C:\Windows\system32\netcfg-562885500.txt
2014-07-23 01:20 - 2014-07-23 01:20 - 00000117 _____ () C:\Windows\system32\netcfg-542256796.txt
2014-07-23 01:20 - 2014-07-23 01:20 - 00000117 _____ () C:\Windows\system32\netcfg-542256640.txt
2014-07-23 00:59 - 2014-07-23 00:59 - 00000117 _____ () C:\Windows\system32\netcfg-540947734.txt
2014-07-23 00:59 - 2014-07-23 00:59 - 00000117 _____ () C:\Windows\system32\netcfg-540944515.txt

Files to move or delete:
====================
C:\Users\Vítek\zoek.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-15 12:02




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:931.17 GB) (Free:614.72 GB) NTFS

Available physical RAM: 2545.39 MB
Total physical RAM: 3994.35 MB
Percentage of memory in use: 36%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 710FD2B4)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.2 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2853416472-2825147005-2372363208-1001Core.job => C:\Users\Vítek\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2853416472-2825147005-2372363208-1001UA.job => C:\Users\Vítek\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: AVG Internet Security 2014 (Disabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG Internet Security 2014 (Disabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
FW: AVG Internet Security 2014 (Disabled) {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\V�tek\Desktop" je 76798 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

[vyosek]

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Start
  HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
  HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
  HKLM-x32\...\Run: [] => [X]
  HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
  HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [1937600 2014-08-14] (Valve Corporation)
  HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [Google Update] => C:\Users\Vítek\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-01-09] (Google Inc.)
  HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21446272 2014-05-08] (Skype Technologies S.A.)
  HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [BitTorrent] => C:\Users\Vítek\AppData\Roaming\BitTorrent\BitTorrent.exe [1267032 2014-07-05] (BitTorrent Inc.)
  HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [AVG-Secure-Search-Update_0414c] => C:\Program Files (x86)\Avg Secure Update\AVG-Secure-Search-Update_0414c.exe [2725912 2014-04-25] ()
   C:\Program Files (x86)\Avg Secure Update
  HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3600728 2014-08-06] (Electronic Arts)
  HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [Browser Extensions] => "C:\Users\Vítek\AppData\Roaming\Slick Savings\CouponsHelper.exe"
  HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [SetMyHomePage] => C:\Users\Vítek\AppData\Roaming\SetMyHomePage\setmyhomepage.exe
  HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\MountPoints2: {82e3fe25-08c8-11e4-be9f-0c84dcabaa2e} - "D:\LG_PC_Programs.exe"
  ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
  GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
  
  SearchScopes: HKCU - {4187F0FC-AF41-4E4B-AE67-84C8FD35A0AE} URL = http://terra.im/search?q={searchTerms}
  BHO-x32: Advanced SystemCare Browser Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
  
  FF SearchPlugin: C:\Users\Vítek\AppData\Roaming\Mozilla\Firefox\Profiles\9k0u6qx2.default\searchplugins\yahoo_ff.xml
  FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Vítek\AppData\Roaming\Mozilla\Firefox\Profiles\9k0u6qx2.default\Extensions\ascsurfingprotection@iobit.com [2014-05-28]
  
  CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
  
  S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2152736 2014-05-04] (IObit)
  
  C:\Program Files (x86)\IObit
  2014-08-22 10:45 - 2014-08-22 10:45 - 00112640 _____ (forum.viry.cz) C:\Users\Vítek\Downloads\FRSTLauncher (1).exe
  2014-08-22 10:45 - 2014-08-22 10:45 - 00112640 _____ (forum.viry.cz) C:\Users\Vítek\Desktop\FRSTLauncher (1).exe
  2014-08-22 10:41 - 2014-08-22 10:45 - 00018508 _____ () C:\Users\Vítek\Desktop\FRST.txt
  2014-08-22 10:36 - 2014-08-22 10:36 - 00000000 _____ () C:\Users\Vítek\Downloads\FRSTLauncher.exe
  2014-08-22 10:35 - 2014-08-22 10:35 - 00000000 _____ () C:\Users\Vítek\Downloads\VerzeOS.exe
  2014-08-22 10:31 - 2014-08-22 10:31 - 00000117 _____ () C:\Windows\system32\netcfg-41664453.txt
  2014-08-22 10:31 - 2014-08-22 10:31 - 00000117 _____ () C:\Windows\system32\netcfg-41661265.txt
  2014-08-22 01:09 - 2014-08-22 01:09 - 00000117 _____ () C:\Windows\system32\netcfg-7959671.txt
  2014-08-22 01:09 - 2014-08-22 01:09 - 00000117 _____ () C:\Windows\system32\netcfg-7958906.txt
  2014-08-21 22:57 - 2014-08-21 22:57 - 00000117 _____ () C:\Windows\system32\netcfg-46078.txt
  2014-08-21 22:56 - 2014-08-21 22:56 - 00000117 _____ () C:\Windows\system32\netcfg-1278890.txt
  2014-08-21 22:56 - 2014-08-21 22:39 - 00024064 _____ () C:\Windows\zoek-delete.exe
  2014-08-21 22:52 - 2014-08-21 22:57 - 00000000 ____D () C:\zoek
  2014-08-21 22:43 - 2014-08-21 22:30 - 00001281 _____ () C:\zoek-results2014-08-21-203029.log
  2014-08-21 22:35 - 2014-08-21 22:35 - 00000117 _____ () C:\Windows\system32\netcfg-43968.txt
  2014-08-21 22:34 - 2014-08-21 22:34 - 00000117 _____ () C:\Windows\system32\netcfg-992031.txt
  2014-08-21 22:28 - 2014-08-21 22:57 - 00013875 _____ () C:\zoek-results.log
  2014-08-21 22:27 - 2014-08-21 22:27 - 01288704 _____ () C:\Users\Vítek\Downloads\zoek (1).exe
  2014-08-21 22:25 - 2014-08-21 22:53 - 00000000 ____D () C:\zoek_backup
  2014-08-21 22:25 - 2014-08-21 22:26 - 04245477 _____ () C:\Users\Vítek\Downloads\zoek.rar
  2014-08-21 22:25 - 2014-08-21 22:25 - 01288704 _____ () C:\Users\Vítek\zoek.exe
  2014-08-21 22:19 - 2014-08-21 22:19 - 00000117 _____ () C:\Windows\system32\netcfg-49046.txt
  2014-08-21 22:17 - 2014-08-21 22:17 - 00000117 _____ () C:\Windows\system32\netcfg-171677468.txt
  2014-08-21 22:16 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
  2014-08-21 22:13 - 2014-08-21 22:17 - 00000000 ____D () C:\AdwCleaner
  2014-08-21 22:13 - 2014-08-21 22:13 - 01364531 _____ () C:\Users\Vítek\Downloads\adwcleaner_3.308.exe
  2014-08-21 21:41 - 2014-08-21 21:41 - 00832273 _____ () C:\Users\Vítek\Downloads\RSITx64 (1).exe
  2014-08-21 21:35 - 2014-08-21 21:41 - 00000000 ____D () C:\Program Files\trend micro
  2014-08-21 21:35 - 2014-08-21 21:35 - 01222144 _____ () C:\Users\Vítek\Downloads\RSITx64.exe
  2014-08-21 21:35 - 2014-08-21 21:35 - 00000000 ____D () C:\rsit
  2014-08-21 10:31 - 2014-08-21 10:31 - 00000117 _____ () C:\Windows\system32\netcfg-129298125.txt
  2014-08-21 10:31 - 2014-08-21 10:31 - 00000117 _____ () C:\Windows\system32\netcfg-129294015.txt
  
  Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
  Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2853416472-2825147005-2372363208-1001Core.job => C:\Users\Vítek\AppData\Local\Google\Update\GoogleUpdate.exe
  Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2853416472-2825147005-2372363208-1001UA.job => C:\Users\Vítek\AppData\Local\Google\Update\GoogleUpdate.exe
  
  CMD: del /a /f /q "C:\Windows\system32\netcfg-*.txt"
  
  Hosts:
  Reboot:
  End
  

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

[Fixed]

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 24-08-2014 02
Ran by Vítek at 2014-08-24 17:37:19 Run:1
Running from C:\Users\Vítek\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
tart
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [1937600 2014-08-14] (Valve Corporation)
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [Google Update] => C:\Users\Vítek\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-01-09] (Google Inc.)
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21446272 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [BitTorrent] => C:\Users\Vítek\AppData\Roaming\BitTorrent\BitTorrent.exe [1267032 2014-07-05] (BitTorrent Inc.)
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [AVG-Secure-Search-Update_0414c] => C:\Program Files (x86)\Avg Secure Update\AVG-Secure-Search-Update_0414c.exe [2725912 2014-04-25] ()
C:\Program Files (x86)\Avg Secure Update
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3600728 2014-08-06] (Electronic Arts)
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [Browser Extensions] => "C:\Users\Vítek\AppData\Roaming\Slick Savings\CouponsHelper.exe"
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\Run: [SetMyHomePage] => C:\Users\Vítek\AppData\Roaming\SetMyHomePage\setmyhomepage.exe
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\...\MountPoints2: {82e3fe25-08c8-11e4-be9f-0c84dcabaa2e} - "D:\LG_PC_Programs.exe"
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

SearchScopes: HKCU - {4187F0FC-AF41-4E4B-AE67-84C8FD35A0AE} URL = http://terra.im/search?q={searchTerms}
BHO-x32: Advanced SystemCare Browser Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)

FF SearchPlugin: C:\Users\Vítek\AppData\Roaming\Mozilla\Firefox\Profiles\9k0u6qx2.default\searchplugins\yahoo_ff.xml
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Vítek\AppData\Roaming\Mozilla\Firefox\Profiles\9k0u6qx2.default\Extensions\ascsurfingprotection@iobit.com [2014-05-28]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2152736 2014-05-04] (IObit)

C:\Program Files (x86)\IObit
2014-08-22 10:45 - 2014-08-22 10:45 - 00112640 _____ (forum.viry.cz) C:\Users\Vítek\Downloads\FRSTLauncher (1).exe
2014-08-22 10:45 - 2014-08-22 10:45 - 00112640 _____ (forum.viry.cz) C:\Users\Vítek\Desktop\FRSTLauncher (1).exe
2014-08-22 10:41 - 2014-08-22 10:45 - 00018508 _____ () C:\Users\Vítek\Desktop\FRST.txt
2014-08-22 10:36 - 2014-08-22 10:36 - 00000000 _____ () C:\Users\Vítek\Downloads\FRSTLauncher.exe
2014-08-22 10:35 - 2014-08-22 10:35 - 00000000 _____ () C:\Users\Vítek\Downloads\VerzeOS.exe
2014-08-22 10:31 - 2014-08-22 10:31 - 00000117 _____ () C:\Windows\system32\netcfg-41664453.txt
2014-08-22 10:31 - 2014-08-22 10:31 - 00000117 _____ () C:\Windows\system32\netcfg-41661265.txt
2014-08-22 01:09 - 2014-08-22 01:09 - 00000117 _____ () C:\Windows\system32\netcfg-7959671.txt
2014-08-22 01:09 - 2014-08-22 01:09 - 00000117 _____ () C:\Windows\system32\netcfg-7958906.txt
2014-08-21 22:57 - 2014-08-21 22:57 - 00000117 _____ () C:\Windows\system32\netcfg-46078.txt
2014-08-21 22:56 - 2014-08-21 22:56 - 00000117 _____ () C:\Windows\system32\netcfg-1278890.txt
2014-08-21 22:56 - 2014-08-21 22:39 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-08-21 22:52 - 2014-08-21 22:57 - 00000000 ____D () C:\zoek
2014-08-21 22:43 - 2014-08-21 22:30 - 00001281 _____ () C:\zoek-results2014-08-21-203029.log
2014-08-21 22:35 - 2014-08-21 22:35 - 00000117 _____ () C:\Windows\system32\netcfg-43968.txt
2014-08-21 22:34 - 2014-08-21 22:34 - 00000117 _____ () C:\Windows\system32\netcfg-992031.txt
2014-08-21 22:28 - 2014-08-21 22:57 - 00013875 _____ () C:\zoek-results.log
2014-08-21 22:27 - 2014-08-21 22:27 - 01288704 _____ () C:\Users\Vítek\Downloads\zoek (1).exe
2014-08-21 22:25 - 2014-08-21 22:53 - 00000000 ____D () C:\zoek_backup
2014-08-21 22:25 - 2014-08-21 22:26 - 04245477 _____ () C:\Users\Vítek\Downloads\zoek.rar
2014-08-21 22:25 - 2014-08-21 22:25 - 01288704 _____ () C:\Users\Vítek\zoek.exe
2014-08-21 22:19 - 2014-08-21 22:19 - 00000117 _____ () C:\Windows\system32\netcfg-49046.txt
2014-08-21 22:17 - 2014-08-21 22:17 - 00000117 _____ () C:\Windows\system32\netcfg-171677468.txt
2014-08-21 22:16 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-08-21 22:13 - 2014-08-21 22:17 - 00000000 ____D () C:\AdwCleaner
2014-08-21 22:13 - 2014-08-21 22:13 - 01364531 _____ () C:\Users\Vítek\Downloads\adwcleaner_3.308.exe
2014-08-21 21:41 - 2014-08-21 21:41 - 00832273 _____ () C:\Users\Vítek\Downloads\RSITx64 (1).exe
2014-08-21 21:35 - 2014-08-21 21:41 - 00000000 ____D () C:\Program Files\trend micro
2014-08-21 21:35 - 2014-08-21 21:35 - 01222144 _____ () C:\Users\Vítek\Downloads\RSITx64.exe
2014-08-21 21:35 - 2014-08-21 21:35 - 00000000 ____D () C:\rsit
2014-08-21 10:31 - 2014-08-21 10:31 - 00000117 _____ () C:\Windows\system32\netcfg-129298125.txt
2014-08-21 10:31 - 2014-08-21 10:31 - 00000117 _____ () C:\Windows\system32\netcfg-129294015.txt

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2853416472-2825147005-2372363208-1001Core.job => C:\Users\Vítek\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2853416472-2825147005-2372363208-1001UA.job => C:\Users\Vítek\AppData\Local\Google\Update\GoogleUpdate.exe

CMD: del /a /f /q "C:\Windows\system32\netcfg-*.txt"

Hosts:
Reboot:
End
*****************

tart => Error: No automatic fix found for this entry.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\HP Software Update => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => value deleted successfully.
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Steam => value deleted successfully.
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update => value deleted successfully.
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => value deleted successfully.
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\Software\Microsoft\Windows\CurrentVersion\Run\\BitTorrent => value deleted successfully.
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\Software\Microsoft\Windows\CurrentVersion\Run\\AVG-Secure-Search-Update_0414c => value deleted successfully.
C:\Program Files (x86)\Avg Secure Update => Moved successfully.
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\Software\Microsoft\Windows\CurrentVersion\Run\\EADM => value deleted successfully.
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Browser Extensions => value deleted successfully.
HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\Software\Microsoft\Windows\CurrentVersion\Run\\SetMyHomePage => value deleted successfully.
"HKU\S-1-5-21-2853416472-2825147005-2372363208-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{82e3fe25-08c8-11e4-be9f-0c84dcabaa2e}" => Key deleted successfully.
"HKCR\CLSID\{82e3fe25-08c8-11e4-be9f-0c84dcabaa2e}" => Key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => Key deleted successfully.
"HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}" => Key not found.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{4187F0FC-AF41-4E4B-AE67-84C8FD35A0AE}" => Key deleted successfully.
"HKCR\CLSID\{4187F0FC-AF41-4E4B-AE67-84C8FD35A0AE}" => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}" => Key deleted successfully.
C:\Users\Vítek\AppData\Roaming\Mozilla\Firefox\Profiles\9k0u6qx2.default\searchplugins\yahoo_ff.xml => Moved successfully.
C:\Users\Vítek\AppData\Roaming\Mozilla\Firefox\Profiles\9k0u6qx2.default\Extensions\ascsurfingprotection@iobit.com => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
LiveUpdateSvc => Service deleted successfully.
C:\Program Files (x86)\IObit => Moved successfully.
"C:\Users\Vítek\Downloads\FRSTLauncher (1).exe" => File/Directory not found.
"C:\Users\Vítek\Desktop\FRSTLauncher (1).exe" => File/Directory not found.
"C:\Users\Vítek\Desktop\FRST.txt" => File/Directory not found.
C:\Users\Vítek\Downloads\FRSTLauncher.exe => Moved successfully.
C:\Users\Vítek\Downloads\VerzeOS.exe => Moved successfully.
C:\Windows\system32\netcfg-41664453.txt => Moved successfully.
C:\Windows\system32\netcfg-41661265.txt => Moved successfully.
C:\Windows\system32\netcfg-7959671.txt => Moved successfully.
C:\Windows\system32\netcfg-7958906.txt => Moved successfully.
C:\Windows\system32\netcfg-46078.txt => Moved successfully.
C:\Windows\system32\netcfg-1278890.txt => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek => Moved successfully.
C:\zoek-results2014-08-21-203029.log => Moved successfully.
C:\Windows\system32\netcfg-43968.txt => Moved successfully.
C:\Windows\system32\netcfg-992031.txt => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\Users\Vítek\Downloads\zoek (1).exe => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Vítek\Downloads\zoek.rar => Moved successfully.
C:\Users\Vítek\zoek.exe => Moved successfully.
C:\Windows\system32\netcfg-49046.txt => Moved successfully.
C:\Windows\system32\netcfg-171677468.txt => Moved successfully.
C:\Windows\SysWOW64\sqlite3.dll => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\Vítek\Downloads\adwcleaner_3.308.exe => Moved successfully.
C:\Users\Vítek\Downloads\RSITx64 (1).exe => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\Users\Vítek\Downloads\RSITx64.exe => Moved successfully.
C:\rsit => Moved successfully.
C:\Windows\system32\netcfg-129298125.txt => Moved successfully.
C:\Windows\system32\netcfg-129294015.txt => Moved successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2853416472-2825147005-2372363208-1001Core.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2853416472-2825147005-2372363208-1001UA.job => Moved successfully.

========= del /a /f /q "C:\Windows\system32\netcfg-*.txt" =========


========= End of CMD: =========

C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.


The system needed a reboot.

==== End of Fixlog ====

[vyosek]

Jak se chova PC??