Zpomalený počítač, vyskakující reklamní okna

Zpráva

phineas · #1 Příspěvek od **phineas** » 25 Pro 2014 15:22

Dobrý den,

chtěl bych poprosit o pomoc s kamarádovým počítačem, sám nejsem žádný odborník, ale za každou pomoc budu rád, počítač je totiž pořádně zasekaný dokonce blokoval stahování antivirů a až v safe modu to šlo ale nic moc to nepomohlo jen už nevyskakuje po spuštění prohlížeče milion reklam. Načítá se tak čtvrt hodiny, některé programy nelze odinstalovat (sense, ib updater...) a všechny operace trvají strašně dlouho. Za pomoc předem děkuji a přidávám log.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Frantisek at 2014-12-25 14:01:21
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 119 GB (26%) free of 455 GB
Total RAM: 3688 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:01:34 PM, on 25/12/2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17496)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\AVG\AVG2014\avgui.exe
C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe
C:\Program Files (x86)\STOPzilla!\STOPzilla.exe
C:\Program Files\trend micro\Frantisek.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=c:\windows\syswow64\userinit.exe,
O1 - Hosts: ::1 localhost
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - (no file)
O2 - BHO: CrossriderApp0061915 - {11111111-1111-1111-1111-110611191115} - (no file)
O2 - BHO: Movies Toolbar (Dist. by Bandoo Media, Inc.) - {1fa57a3a-80e9-44a5-8032-e995b13643fa} - (no file)
O2 - BHO: (no name) - {5347542D-5636-006A-76A7-7A786E7484D7} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\coIEPlg.dll
O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll
O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\IPS\IPSBHO.DLL
O2 - BHO: TSBHO Class - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - (no file)
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck

\HPNetworkCheckPlugin.dll
O2 - BHO: (no name) - {FCE3FA8B-BA81-467C-81D8-E43C00D1BC71} - (no file)
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\coIEPlg.dll
O3 - Toolbar: (no name) - {C98EE38D-21E4-4A50-907D-2B56FEC7013E} - (no file)
O3 - Toolbar: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
O3 - Toolbar: (no name) - {1fa57a3a-80e9-44a5-8032-e995b13643fa} - (no file)
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
O4 - HKLM\..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
O4 - HKCU\..\Run: [Sony PC Companion] "C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_A4EEEEC2EE29EF9AFB0ED8B7841A357A] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\RunOnce: [Adobe Speed Launcher] 1419509069
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Start Peer2View Client.lnk = C:\Users\Frantisek\AppData\Local\Peer2View\Peer2ViewClient.exe
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows

Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files

(x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-

DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-

DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote

\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote

\EvernoteIE.dll/204 (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.9\ViProtocol.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: STOPzilla Service (szserver) - iS3, Inc. - C:\Program Files (x86)\STOPzilla!\SZServer.exe
O23 - Service: Torch Crash Handler (TorchCrashHandler) - TorchMedia Inc. - C:\Users\Frantisek\AppData\Local\Torch\Update\TorchCrashHandler.exe
O23 - Service: TrueAPI Service component (TrueService) - AuthenTec, Inc. - C:\Program Files\Common Files\AuthenTec\TrueService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater18.1.9 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file

missing)

--
End of file - 14621 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1

ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1

ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
taskeng.exe {B9101618-B4E1-4D02-9543-92FF424C49C6}
C:\Windows\System32\lpksetup.exe -v
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe"
"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe"
"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\loggingserver.exe" 72648 "C:\ProgramData\AVG Secure Search\Logger\logger.properties"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
\??\C:\Windows\system32\conhost.exe "-14939902511776094916-779856380149582081-9258240611308478739791365753-1476137537
WLIDSvcM.exe 2796
"C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe"
"taskhost.exe"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe"
taskeng.exe {B4FF242D-A20B-47C6-9CD1-8BD7C47725D3}
"C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
"C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe" /s "NIS" /m "C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\diMaster.dll" /prefetch:1
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe" /c /a /s UserSession
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Windows\system32\wuauclt.exe"
"C:\Program Files\CCleaner\CCleaner64.exe"
"C:\Program Files\CCleaner\CCleaner64.exe" /monitor
"C:\Program Files (x86)\STOPzilla!\SZServer.exe"
"C:\Program Files (x86)\STOPzilla!\STOPzilla.exe" /service_start
"C:\Users\Frantisek\Downloads\RSITx64.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
taskeng.exe {96BC0DA7-6D9B-4A82-8732-712B6842CD59}
"C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgemca.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe"
C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe /pipeName=8ccd5870-c849-4f6a-802d-72681c2bd53f /coreSdkOptions=4126 /logConfFile="C:\Windows\system32\config\systemprofile

\AppData\Local\Avg2014\temp\66453d08-044e-4728-b5e7-bb19a7d4ad0c-18d0-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2014\" /tempPath="C:

\Windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\" /logPath="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2014\log\"

======Scheduled tasks folder======

C:\Windows\tasks\649291a2-bca7-4bf4-9d38-e7c6bc100244.job - C:\Program Files (x86)\Senses\bc77a20b-4a92-425f-90dd-3e71217eb3b9-4.exe /rawdata=Y6kO2J

+Rzt5V3O/SzHXPikQvAnLJzy7CaeGSpYwN5M/GpcI2Fe/tYKO9w2Hv6QapuhRGe1mZYRi8C62gprRvJGMGDoppl5HZRuAKEFqNnt2FzgGxlVSyQ2yyyEO23/AEroi

+lqVmoQDPv5LP7z5fyUUohAwW0zFsWsTYkwGqa5U8Zij3WTdf2ECBWWlIUz5PnVStPSHReTH1uJRpwtZdd6iGw5zCTv6edu72W6z9k/lf7cFbe0Em7pFeshAfhPI56BxTPxe5LL39kCnE6aLl

UbT89L6CJqYBI1abN2rENbtv+NuZ3d4r5Sl8SGJUtEHURa2guXfiWCouV6xvjbKRTWDsBz6/LGOWKIKr

+b9u2s9uFgxt88mJj8bDMGX1JcPSNSiofYp50tYU584pKP3oI2xQOe0HYZQ9M8pPTq1rlca49KWJu/H+sc6kf8r4eWIZsOutIzHY

+4uni6QAq9BTrhAxWE0JjiEBqVhISMeM22moONy8mhZvhck/nP6oPbf5PxqXv9zv3xjsHVurPO3v4CZZWOjD3nGr/6NPUrhyhO3SLpo

+fQqVAQTv41KZCnalInVBlMptcakBYu/jkQmSempOZTU4H02eP+9ulqACIr509YD0h8mHIY6mUzvhsR4Sx/zwF0a1PFBK000iYDUo3aXAujS

+fIEmiHwOpCVBnld3vuM8nNLW/bt/hHq4zSyubhETE8FyAIgKMLCR1CTmJlSxK3xLQeHw7TTsdCSEMqvLtGHDAn8mgC2am4WJrhnMGtGEhxFTFFI6W6Ig9rcZt70m4zfymdPt53dYsb9qi6Lk

LQUV8BxEzH6EdqT19/FMmPm9wuoeCX5q/IUROY/9UjgO1xR6N8ivNtjeS3xb2wb8HSUXRHdXbe5deRfj

+wQsV18sPWfPKGsvBpfRgAbiiJGvahOWYlkEUnAmg6Cilu6KX7BS5FBNIostQ7PtJOs523iCAWdnvTPJsjFIT3IpZ92ItSlmGSQ9zlRKqeKCbbsTqA9jPdivRTTp/POizQXRFXg0BZSma0PnUbm

ZiI1xvGNd9dsx1Nb8bNUMe6Y/QCb2bMYXdfqVcInHYcEookpZVvMJF36Q3/7p9C1Av00n5Y66rKcKD1J7p3DFFWXtWvHd9tdQBVigj1hBOlCSrlKCYZhDyq3F0jusOjL5SQLR07WKNWOEP5U

7wrQ6kckraioUNhZoWi+Zu88GeVgVn/O0DmA6I5DAWpPwh2hHjtoiDQIxvhUr3AIVtNiV1uXOqxSeK+p1L/1+oU7Z1U03X/D29A2JcnQ+i

+gykdRzTrb1YzqK/iu1GlH0K7BaIW020+XGLUc5sbsOUPt1gV7qcsEXwQRqJGcDPiKX2NU3He2Zx4XJbVMuVx1izGek

+mXvXvKWz3d2MdGLbCLONTsXgmWvyomJ/MdgQzmsjzP9ZTdn6L5ILaFa2lrBDrnprirfXXuiZuYsWq8Ti0EGeMcZ40otxYr2KaU3SUsHkc1iaJY4038fg/0hchwmAsGcNDDRJ/z9FJE6Gbk

+RGpqedCBpj+ldIFuXxWu6mm8nAfu0oh4PhlZelFexpnpKXnXXLLIC9qBTaAmbBYxZl3U1hYptqs6pR

+8W6zBusNxFbMeJJJfOSt3ByUhZzhhhFX2ud6iEj6G6xq7FNblYyEgfJV1xzh9mgbx3UCcYocikJjMW837da7lfwV7fu7hhvQRGkJHXX+IiHoIc/B0UDbQ5+8GfOmaIfmPtgo6e+K17xU

+PdgAgSwhU6NudL2fJBksbG9f4aqK6H2HXq/lB9i3nSq6SwrtCCT4YMzEK0F20Fq7qUGRKzHxzwZ4r63CnHLDlQCNVBSWy3XN6JVl1vTh0S6pMlDhvLULmJ6Bbq6lWwBsLUoH7w==
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job - C:\Windows\TEMP\{15A794E4-8C55-4041-9D9D-FB668D762FEC}.exe --uninstall=1
C:\Windows\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job - C:\Windows\TEMP\{0BD37B14-8EAF-4697-BB3B-4A61B709102A}.exe --uninstall=1
C:\Windows\tasks\bc77a20b-4a92-425f-90dd-3e71217eb3b9-1.job - C:\Program Files (x86)\Senses\Senses-codedownloader.exe /reinstallapp /runfrom=task /agentregpath='Senses'

/appid=61915 /srcid='000805' /subid='0'

/zdata='eyJkYXRhIjp7ImRhdGUiOiJFOFZ3c210eWNsMSw0MmMwZWMzYS0zZTEzLTQ5NjEtODYyMC1iMDAwMzI1MWVlOWUsIiwidW5xIjoiNDJjMGVjM2EtM2UxMy00OTYxLTg2MjAtYjAw

MDMyNTFlZTllIn0=' /bic=8501E1A5ECED4985886C76A7DD52A76AIE /verifier=91989e102c42d7f5371d7efc7640c4ef /installerversion=1_34_08_12 /installerfullversion=1.34.8.12

/installationtime=1409494248 /statsdomain=http://stats.loadclientinputsrv.com /errorsdomain=http://errors.loadclientinputsrv.com /codedownloaddomain=http://js.loadclientinputsrv.com

/defbro=ch /crregname='Senses' /fbcodedownloaddomain=http://js.clientdemocloud.com /allusers /addinfojson='{"asw":[1605635, -2038415099,

570433536],"browser_name":"__BROWSER_NAME__"}' /autoupdateulr='http://update.loadclientinputsrv.com/ie ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\bc77a20b-4a92-425f-90dd-3e71217eb3b9-11.job - C:\Program Files (x86)\Senses\bc77a20b-4a92-425f-90dd-3e71217eb3b9-11.exe /rawdata=aTyUq

+VXbjFkkomdOyahyjKleLrr+TJcXcFt7cjBTLq10JzghPcITUr9L4NIGMbJNAzw87FWmacyd45Z4NXZzi/vkM8P01Q+9v6Qooy

+l6OHUGjpraK3QM2m5MM0Q6xqDgTBtkpbcrV6HsJ22D3fYY0KbKIqfLwvG0EbEKdkSXd8I72rFW4mWZAcJazS9xPjWI+H+8ACJvHt6t9cP4O7UC91Hg0tMLmzY/kRE+WM

+YFq2jfE7PG7T1HT4OG4jZurmdqWMCmijNP3yme/SxBnX7gv0VNg2xzqzhDcVlxo/8wR8DsQT4W6x+OOHhLpRhF++2oPw8RI4sSuXtJKSrcTkYzUzb7KUQseCYB0tpsDLnM

+8ShIoiYcj6FLihvOJ0+NYk6yMrVzuWHTWsAIFCIATkBj7SqsKDoxgZHmtGi9HjMBKAGnuclCUIeovfRn6Rmp0R6kN7/ibSaU80tUUo1OhZqr4/wQfyR/P9/d4hRP2cTLpWFW4Npzi3a2V0/shj

+VlIDq1FxhomnzVAM0khKPTMGBN8lFFgnT0RG4q2C5N2rjm+j

+fNGx5mMXfkjmYUsTZIADu14cVMALy7iEBZsHhfmZTCzmfYf9x8PFd0KZLCyQKvXDkT9RDfkjI/P9W/tlltzjLObrgRnSHop6dfMnvSFNbj1UG5+FPICdIwmGAlek9o1V6grgXVWXKvByvhbHIFfp

9J7GLslDE+bK4CcdaBsYDvN26Os3OduIhlBs4hdP78RicM4N4SnQFqJJcbitx+M1aP7D4+wWijop/2aOUUx4WwfNl7R5cdYt+dJUyFq

+AzfP9ZDDjI0Nllg1rvtG0jaU7XO7s5FJoEpBikVismNYj3PzJm94v

+4hLa97cW9i2K2eruNZ/QOCYbMXpU1SxV6A5h9VpZ/hdqpuhQuYqWycQ1qivp6cM6Mdie58FLm16TIHMG11WfPwohUhQYKHqQZysO/lOvHOUHg3eSj1nf1qrzTef9byCkIX7bFGm/kCfEXFG

6kc7LymH0nyZbknlA+2q2mWdn+WcMkaFn6H0Li6AYHY3BtmvXpd

+DsESC9+8yjK5HIAL4Mf23/HkH4eVHYxQ7fBkfZ7Vpsel4K3AwZNSWy8SaIE7DZK9K06ZDoZiQ2MxanQJ7gY8i97aRtIRvrt+Vxm2orXqTMclutrDQkRNYF+G/NYmi7cYjUX9E+f9lA

+DUBKE4jpbJjXYdg0wAZyJ2fTdY8v+ZoF3CfeKItCFdcJ7vA5L5RnAVyC6W3k7W9N+fPB64BbP4qGFyeTF0qgzCI9IBX2+BQhGx59NH7/8g9Yubfv4fN

+4950IaHe0Kjgp5RLtSdrowGkXSVyd6sYdklxL0vSP26E1zM7XgZkA798x5FW5y0nuIhVaCntBR6RMNiZ/E9ATMl8iidzFXesxxn6dYZwWIDLXYOgu/t8kyiQChoG5zEP228yBeuSsGqblkT

+w2OYM/YC2DpOcbjpp8tfxsSeRCbW6yPZQSLX7jDshwDshOsao9kYXdLosuYH/oCNh5zvgU6kq7vlAeGFckbNFYJ5vcHHzKufEaAA

+rA6r/WOP86sJjhD9et3md0Kz8qwn7kfXPtEQ0cWwERhik8JCDbi/puXbk5dfRrpFZ

+Qyz4SEttXUmZ06umNFpae9a9kPylLf9kAchjNJb7c2M9bir1jDeCOGM4MZbCQ3L9pVrtJ27Dp4t11iPgqrEmMHUf5NGR

+KNpJibL6YEKd3+SOWnYKPk1V1qBoI/ks42BR4diuBOenXY0qAL7p7ICYC4p4OneIXrzN6GqKJUJ46ZYEuiAXicc3/VV6+FgoQxr4TLmvEZ8rGsuBdDIYMRXyfq/vwgW72ajEr9TduSCcJ00gC

zaC97Su993FU3ex/+MR0AxwNKAdXeAgqzdP8LwGvR7X2PQFbJVhrjov2LRjB73iChvW8E90UzcP9ACwZIBSCGt+c03dJQLG0Hm9jon

+uqUfoBZLjNpm9nlmre/jSDph6DhP4JDJvX50nXV5l35LaxesAgeNM0E/JGOCZVaOr3HkbfltM8VkmUZ4v3pIq

+Q15UaiHeCDcyodVrFDC1eN885VpXK2snprDxGRrv6vsut8mWl0+Ci9YOTT1Bz1+wo7+WJHX2A7E7Vn117GzcD/rjgInslo3cWqfctyT2VR5jGr/PBjxf17QX0EJS2bvvWTU0ojwQGafBGoQCuoe

Y0A3/KjPiTB+3FTqy0=
C:\Windows\tasks\bc77a20b-4a92-425f-90dd-3e71217eb3b9-3.job - C:\Program Files (x86)\Senses\bc77a20b-4a92-425f-90dd-3e71217eb3b9-3.exe /rawdata=QJVcweUqvWNkE9rBr1Gk

+hnWecymh9YrVM5yujQgkz9QGEwXoSJWOVGE38iRdHfHM+cnsxY/9oC/DFYGW9nuLOw8Mla7FrqxDn3lT7qdpFYx4wsf6qhdlhbGOjkc/+elvQBkA/cxkVfoYiWX

+YUZV7NKHUyT41gJIg41DNUepEkk/O1CGVwMx80lbzwYXpL6eEMm0AU7bzbH5YWGjLCwmkTokisgjcdEGmHkWiikQLL4bjy7gR1Qip443ntmXIlAIh/TizwJ6ogTz6oNaQYlKAGoTt03nP0Wq

XVXLW3GneQRq/B1gJnleWkLvgOsrJEZoJ6fJxDRu8YfdHOENlxcOpM2ilFOLcsjii1w27YpMT7gzGQBANahYF3aLFLhRa2I1kKznw5WmvA2EhkursEkKfrxmc1JlWovBTo6LE4p2qHNe7+X3cK

u987EskYzT6NoNdLTtgNBCz9dKwyb+AHja8bl6NvFPwUQuYEhgdmAFVa3idsXs7WqGfA0cLv5jZdNm6UPpL

+IXp7emzjacxSvYBmEWODXliRtIfYJIHx5O0BEgOw2RlZk/QUBUF8N62Bh33yDLa6w0/TnpiOcG9ChyYYgUVOIlVVfiHqCysqdrvc39gTqcCJBB32fvHtCK4RqfjphAz/Rg4HUw4lyTQRAvrINIV3

G5nwcDu9HraCgMTQLH++gl2T2zvtFpoI3Sw7Z9+O42q1V3KkqEuC+awLpYEhZ2pR8Zst4oS0LoMkIseFUJVvS/Vf/fRW8PL6dmmL7uu3yB1Dqe6PJWF

+RKKedMMp2ArYF5eNFpT0h8id7p1JzjqRlCnA4bP/WRgoOiMNdUf6l/xgeuahrw7Z3tbL1RZRbwMjplQTFC7+WXvoQguk64ppvRWS6Lbeh9jCPBH7fuEsX7E/7jlS35yU8GfPEsxsDKX7nQKuN4

db6feq1j9uuScv9TiCNKdGBt4uHcqkLa4aYM2u0ZxzmoboMIpoMhMmZxkNhwGZMq/Kevf94pU9FBjzKsk1qf2nRY6WZsiKmrnoYp

+N2kRtLx0in0W090pgpiDDuUKTXXltKj/qIjq6wg6Ayypk8E3iz5AwJFyt3FPpaZCEZ3d9+C/LZe92oQnGSKlVmcHxflu4VLZlaZ9RFA16yHSB8hRb2mjxy

+A0w2IKOd9m2zhuqExQCPWrS3qiOFFnHksx4TUB/DbMXsaUonvVDji+5ewSUhhcfHWpuOL1HzMI87diAvP9zpWeQhgz27xBEOQFQ8hU2iSQN2Zr1mK1mEk7oZBmf

+QfnwBvmLuLcJTzu8DB+1Cm+j8MNTsTKqo5BweZYZjZSMQPAQdyA/IjWIhySxnyoSx+/xevDLGg/2POEw4bKJ4u/8rkDRg==
C:\Windows\tasks\bc77a20b-4a92-425f-90dd-3e71217eb3b9-4.job - C:\Program Files (x86)\Senses\bc77a20b-4a92-425f-90dd-3e71217eb3b9-4.exe /installxpi /agentregpath='Senses'

/extensionfilepath='C:\Program Files (x86)\Senses\bc77a20b-4a92-425f-90dd-3e71217eb3b9.xpi' /appid=61915 /srcid='000805' /subid='0'

/zdata='eyJkYXRhIjp7ImRhdGUiOiJFOFZ3c210eWNsMSw0MmMwZWMzYS0zZTEzLTQ5NjEtODYyMC1iMDAwMzI1MWVlOWUsIiwidW5xIjoiNDJjMGVjM2EtM2UxMy00OTYxLTg2MjAtYjAw

MDMyNTFlZTllIn0=' /bic=8501E1A5ECED4985886C76A7DD52A76AIE /verifier=91989e102c42d7f5371d7efc7640c4ef /installerversion=1_34_08_12 /installerfullversion=1.34.8.12

/installationtime=1409494248 /statsdomain=http://stats.loadclientinputsrv.com /errorsdomain=http://errors.loadclientinputsrv.com /waitforbrowser=300 /extensionid=warnerroberts@hotmail.com

/extensionversion=0.95 /prefsbranch=awarnerrobertshotmailcom61915 /updateurl=https://w9u6a2p6.ssl.hwcdn.net/plugin/f ... /61915.rdf /extensionname='Senses' /extensiondesc='.'

/publishername='Object Browser' /defbro=ch /sid= /addinfojson='{"asw":[1605635, -2038415099, 570433536],"browser_name":"__BROWSER_NAME__"}' /allusers /allprofiles /checkfflist

/autoupdateulr='http://update.loadclientinputsrv.com/ff ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\bc77a20b-4a92-425f-90dd-3e71217eb3b9-5.job - C:\Program Files (x86)\Senses\bc77a20b-4a92-425f-90dd-3e71217eb3b9-5.exe /runupdater /agentregpath='Senses'

/appid=61915 /srcid='000805' /subid='0'

/zdata='eyJkYXRhIjp7ImRhdGUiOiJFOFZ3c210eWNsMSw0MmMwZWMzYS0zZTEzLTQ5NjEtODYyMC1iMDAwMzI1MWVlOWUsIiwidW5xIjoiNDJjMGVjM2EtM2UxMy00OTYxLTg2MjAtYjAw

MDMyNTFlZTllIn0=' /bic=8501E1A5ECED4985886C76A7DD52A76AIE /verifier=91989e102c42d7f5371d7efc7640c4ef /installerversion=1_34_08_12 /installationtime=1409494248

/statsdomain=http://stats.loadclientinputsrv.com /errorsdomain=http://errors.loadclientinputsrv.com /geoserviceurl=http://ipgeoapi.com/ /updatejsondomain=http://update.loadclientinputsrv.com

/sid= /updaterversion=6 /monetizationdomain=http://logs.loadclientinputsrv.com /autoupdateulr='http://update.loadclientinputsrv.com/up ... pdate.json'

/runfrom='task' /externallog=''
C:\Windows\tasks\bc77a20b-4a92-425f-90dd-3e71217eb3b9-5_user.job - C:\Program Files (x86)\Senses\bc77a20b-4a92-425f-90dd-3e71217eb3b9-5.exe /runupdater

/agentregpath='Senses' /appid=61915 /srcid='000805' /subid='0'

/zdata='eyJkYXRhIjp7ImRhdGUiOiJFOFZ3c210eWNsMSw0MmMwZWMzYS0zZTEzLTQ5NjEtODYyMC1iMDAwMzI1MWVlOWUsIiwidW5xIjoiNDJjMGVjM2EtM2UxMy00OTYxLTg2MjAtYjAw

MDMyNTFlZTllIn0=' /bic=8501E1A5ECED4985886C76A7DD52A76AIE /verifier=91989e102c42d7f5371d7efc7640c4ef /installerversion=1_34_08_12 /installationtime=1409494248

/statsdomain=http://stats.loadclientinputsrv.com /errorsdomain=http://errors.loadclientinputsrv.com /geoserviceurl=http://ipgeoapi.com/ /updatejsondomain=http://update.loadclientinputsrv.com

/sid= /updaterversion=6 /monetizationdomain=http://logs.loadclientinputsrv.com /autoupdateulr='http://update.loadclientinputsrv.com/up ... pdate.json' /usertask

/runfrom='task' /externallog=''
C:\Windows\tasks\bc77a20b-4a92-425f-90dd-3e71217eb3b9-6.job - C:\Program Files (x86)\Senses\bc77a20b-4a92-425f-90dd-3e71217eb3b9-6.exe /agentregpath='Senses-nv'

/appid=61915 /srcid='000805' /subid='0'

/zdata='eyJkYXRhIjp7ImRhdGUiOiJFOFZ3c210eWNsMSw0MmMwZWMzYS0zZTEzLTQ5NjEtODYyMC1iMDAwMzI1MWVlOWUsIiwidW5xIjoiNDJjMGVjM2EtM2UxMy00OTYxLTg2MjAtYjAw

MDMyNTFlZTllIn0=' /bic=8501E1A5ECED4985886C76A7DD52A76AIE /verifier=91989e102c42d7f5371d7efc7640c4ef /installerversion=1_34_08_12 /installerfullversion=1.34.8.12

/installationtime=1409494248 /statsdomain=http://stats.loadclientinputsrv.com /errorsdomain=http://errors.loadclientinputsrv.com /codedownloaddomain=http://js.loadclientinputsrv.com

/defbro=ch /DllName32ToInjectToChrome='35b42f86-4d00-4c9b-821a-d70702b4ed9e.dll' /DllName64ToInjectToChrome='f4a3b8bc-185b-4335-ab50-754560c47155.dll'

/nova64bitexe='bc77a20b-4a92-425f-90dd-3e71217eb3b9-64.exe' /browsername='nova' /usehklm /crregname='Senses' /fbcodedownloaddomain=http://js.clientdemocloud.com

/addinfojson='{"asw":[1605635, -2038415099, 570433536],"browser_name":"__BROWSER_NAME__"}' /autoupdateulr='http://update.loadclientinputsrv.com/no ... pdate.json'

/autoupdate64url='http://update.loadclientinputsrv.com/no ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\bc77a20b-4a92-425f-90dd-3e71217eb3b9-7.job - C:\Program Files (x86)\Senses\bc77a20b-4a92-425f-90dd-3e71217eb3b9-7.exe /updateapp /agentregpath='Senses-nv'

/appid=61915 /srcid='000805' /subid='0'

/zdata='eyJkYXRhIjp7ImRhdGUiOiJFOFZ3c210eWNsMSw0MmMwZWMzYS0zZTEzLTQ5NjEtODYyMC1iMDAwMzI1MWVlOWUsIiwidW5xIjoiNDJjMGVjM2EtM2UxMy00OTYxLTg2MjAtYjAw

MDMyNTFlZTllIn0=' /bic=8501E1A5ECED4985886C76A7DD52A76AIE /verifier=91989e102c42d7f5371d7efc7640c4ef /installerversion=1_34_08_12 /installerfullversion=1.34.8.12

/installationtime=1409494248 /statsdomain=http://stats.loadclientinputsrv.com /errorsdomain=http://errors.loadclientinputsrv.com /codedownloaddomain=http://js.loadclientinputsrv.com

/defbro=ch /DllName32ToInjectToChrome='35b42f86-4d00-4c9b-821a-d70702b4ed9e.dll' /DllName64ToInjectToChrome='f4a3b8bc-185b-4335-ab50-754560c47155.dll'

/nova64bitexe='bc77a20b-4a92-425f-90dd-3e71217eb3b9-64.exe' /browsername='nova' /usehklm /crregname='Senses' /fbcodedownloaddomain=http://js.clientdemocloud.com

/addinfojson='{"asw":[1605635, -2038415099, 570433536],"browser_name":"__BROWSER_NAME__"}' /runfrom=task /autoupdateulr='http://update.loadclientinputsrv.com/novacode/

{CAMP_ID}/update.json' /runfrom='task' /externallog=''
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\WpsUpdateTask_Frantisek.job - C:\Program Files (x86)\Kingsoft\Kingsoft Office\office6\wpsupdate.exe -from=task

=========Mozilla firefox=========

ProfilePath - C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\l0cj2w58.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "https://www.google.com/?trackid=sp-006"
prefs.js - "keyword.URL" - "https://www.google.com/search/?trackid=sp-006"

"{336D0C35-8A85-403a-B9D2-65C292C39087}"=C:\Program Files\IB Updater\Firefox
"{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}"=C:\Program Files\IB Updater\Firefox

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.246 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.9\\npsitesafety.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10]
"Description"=globalUpdate Update
"Path"=C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4]
"Description"=globalUpdate Update
"Path"=C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0]
"Description"=WildTangent Games App Presence Detector Plugin
"Path"=C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.246 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_246.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\components\
flashplayer.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\
np32dsw.dll
nppdf32.dll
ShockwavePlugin.class

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
Ask.xml
avg-secure-search.xml

C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\l0cj2w58.default\extensions\
azan-times@hamid.net
staged

C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\l0cj2w58.default\searchplugins\
ask-search.xml
ask-web-search.xml
Ask.xml
firmycz.xml
google-avast.xml
icqplugin-1.xml
icqplugin-2.xml
icqplugin-3.xml
icqplugin-4.xml
icqplugin.xml
mapycz.xml
MyStart Search.xml
Search_Results.xml
seznam.xml
zbocz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611191115}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5347542D-5636-006A-76A7-7A786E7484D7}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-14 81024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8590886E-EC8C-43C1-A32C-E4C2B0B6395B}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-12-24 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28 303416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611191115}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1fa57a3a-80e9-44a5-8032-e995b13643fa}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5347542D-5636-006A-76A7-7A786E7484D7}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Norton Identity Protection - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\coIEPlg.dll [2013-02-01 512408]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-14 69760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Norton Vulnerability Protection - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\IPS\IPSBHO.DLL [2012-06-21 210400]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8590886E-EC8C-43C1-A32C-E4C2B0B6395B}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-12-24 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28 286520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{C98EE38D-21E4-4A50-907D-2B56FEC7013E}
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\coIEPlg.dll [2013-02-01 512408]
{C98EE38D-21E4-4A50-907D-2B56FEC7013E}
{95B7759C-8C7F-4BF1-B163-73684A933233}
{1fa57a3a-80e9-44a5-8032-e995b13643fa}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2012-03-07 6469736]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-02-24 2885904]
"SetDefault"=C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe [2011-12-20 44880]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"NCPluginUpdater"=C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [2014-12-16 21720]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sony PC Companion"=C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [2014-10-15 468192]
"GoogleChromeAutoLaunch_A4EEEEC2EE29EF9AFB0ED8B7841A357A"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2014-08-07 860488]
"SpybotSD TeaTimer"=C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2014-11-21 7063832]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Adobe Speed Launcher"=1419509069 []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-02-15 636032]
""= []
"HP Quick Launch"=C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [2012-03-05 578944]
"HPOSD"=C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [2011-08-19 379960]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-03 1021128]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-12-24 5226600]
"AVG_UI"=C:\Program Files (x86)\AVG\AVG2014\avgui.exe [2014-11-07 5188112]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe

C:\Users\Frantisek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Start Peer2View Client.lnk - C:\Users\Frantisek\AppData\Local\Peer2View\Peer2ViewClient.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe]
"Debugger="tasklist.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-12-25 14:01:21 ----D---- C:\rsit
2014-12-25 14:01:21 ----D---- C:\Program Files\trend micro
2014-12-25 13:37:16 ----RA---- C:\Windows\system32\drivers\sbapifs.sys
2014-12-25 13:36:33 ----RA---- C:\Windows\system32\SBBD.EXE
2014-12-25 13:35:55 ----D---- C:\ProgramData\STOPzilla!
2014-12-25 13:35:55 ----D---- C:\Program Files (x86)\STOPzilla!
2014-12-25 13:20:02 ----D---- C:\Program Files\CCleaner
2014-12-25 12:45:19 ----D---- C:\Windows\system32\appraiser
2014-12-25 02:54:47 ----A---- C:\Windows\wininit.ini
2014-12-25 02:43:11 ----D---- C:\ProgramData\374311380
2014-12-25 02:13:32 ----D---- C:\ProgramData\Spybot - Search & Destroy
2014-12-25 02:13:32 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy
2014-12-24 21:01:59 ----D---- C:\ProgramData\Lavasoft
2014-12-24 20:51:00 ----A---- C:\Windows\ntbtlog.txt
2014-12-24 14:58:58 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-12-24 14:58:58 ----A---- C:\Windows\system32\ieUnatt.exe
2014-12-24 14:31:11 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-12-24 13:50:37 ----A---- C:\Windows\system32\aswBoot.exe
2014-12-24 13:49:57 ----A---- C:\Windows\avastSS.scr
2014-12-24 13:20:09 ----A---- C:\Windows\SYSWOW64\mferror.dll
2014-12-24 13:20:09 ----A---- C:\Windows\system32\mferror.dll
2014-12-24 13:20:08 ----A---- C:\Windows\system32\mfpmp.exe
2014-12-24 13:20:07 ----A---- C:\Windows\system32\rrinstaller.exe
2014-12-24 13:20:06 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2014-12-24 13:20:05 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2014-12-24 13:20:03 ----A---- C:\Windows\SYSWOW64\mfps.dll
2014-12-24 13:20:03 ----A---- C:\Windows\system32\mfps.dll
2014-12-24 13:20:01 ----A---- C:\Windows\SYSWOW64\mf.dll
2014-12-24 13:17:54 ----A---- C:\Windows\system32\mf.dll
2014-12-24 13:06:18 ----D---- C:\ProgramData\16895882340902680145
2014-12-23 16:18:51 ----A---- C:\Windows\system32\generaltel.dll
2014-12-23 16:18:51 ----A---- C:\Windows\system32\aitstatic.exe
2014-12-23 16:18:49 ----A---- C:\Windows\system32\invagent.dll
2014-12-23 16:18:49 ----A---- C:\Windows\system32\devinv.dll
2014-12-23 16:18:49 ----A---- C:\Windows\system32\appraiser.dll
2014-12-23 16:18:49 ----A---- C:\Windows\system32\aepic.dll
2014-12-23 16:18:49 ----A---- C:\Windows\system32\aeinv.dll
2014-12-23 16:18:32 ----A---- C:\Windows\system32\aepdu.dll
2014-12-23 16:18:19 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-12-23 16:18:17 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-12-23 16:18:09 ----A---- C:\Windows\system32\drivers\tdx.sys
2014-12-23 16:17:24 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-12-23 16:17:24 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-12-23 16:17:24 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-12-23 16:17:24 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-12-23 16:17:23 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-12-23 16:17:22 ----A---- C:\Windows\system32\ie4uinit.exe
2014-12-23 16:17:21 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-12-23 16:17:21 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-12-23 16:17:21 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-12-23 16:17:21 ----A---- C:\Windows\system32\iernonce.dll
2014-12-23 16:17:20 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-12-23 16:17:20 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-23 16:17:19 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-12-23 16:17:17 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-12-23 16:17:12 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-12-23 16:17:12 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-12-23 16:17:11 ----A---- C:\Windows\system32\iedkcs32.dll
2014-12-23 16:17:10 ----A---- C:\Windows\system32\urlmon.dll
2014-12-23 16:17:09 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-12-23 16:17:09 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-12-23 16:17:09 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-12-23 16:17:08 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-12-23 16:17:07 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-12-23 16:17:07 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-12-23 16:17:07 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-23 16:17:07 ----A---- C:\Windows\system32\dxtrans.dll
2014-12-23 16:17:06 ----A---- C:\Windows\system32\msfeeds.dll
2014-12-23 16:17:05 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-12-23 16:17:02 ----A---- C:\Windows\system32\iesetup.dll
2014-12-23 16:17:02 ----A---- C:\Windows\system32\ieapfltr.dll
2014-12-23 16:16:59 ----A---- C:\Windows\system32\iertutil.dll
2014-12-23 16:16:56 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-12-23 16:16:56 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-12-23 16:16:55 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-12-23 16:16:55 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-12-23 16:16:54 ----A---- C:\Windows\system32\jsproxy.dll
2014-12-23 16:16:53 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-12-23 16:16:53 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-12-23 16:16:51 ----A---- C:\Windows\system32\dxtmsft.dll
2014-12-23 16:16:50 ----A---- C:\Windows\system32\ieui.dll
2014-12-23 16:16:49 ----A---- C:\Windows\system32\ieframe.dll
2014-12-23 16:16:47 ----A---- C:\Windows\system32\mshtmled.dll
2014-12-23 16:16:46 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-12-23 16:16:45 ----A---- C:\Windows\system32\jscript9diag.dll
2014-12-23 16:16:44 ----A---- C:\Windows\system32\jscript9.dll
2014-12-23 16:16:42 ----A---- C:\Windows\system32\vbscript.dll
2014-12-23 16:16:41 ----A---- C:\Windows\system32\wininet.dll
2014-12-23 16:16:39 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-12-23 16:16:38 ----A---- C:\Windows\system32\msrating.dll
2014-12-23 16:16:36 ----A---- C:\Windows\system32\mshtml.dll
2014-12-23 16:12:11 ----A---- C:\Windows\system32\lsasrv.dll
2014-12-23 16:12:10 ----A---- C:\Windows\system32\kerberos.dll
2014-12-23 16:12:03 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-12-23 16:12:02 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-12-23 16:12:00 ----A---- C:\Windows\SYSWOW64\pku2u.dll
2014-12-23 16:12:00 ----A---- C:\Windows\system32\pku2u.dll
2014-12-23 16:11:58 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-12-23 16:11:56 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-12-23 16:11:27 ----A---- C:\Windows\system32\charmap.exe
2014-12-23 16:11:26 ----A---- C:\Windows\SYSWOW64\charmap.exe
2014-12-23 16:11:23 ----A---- C:\Windows\system32\WsmSvc.dll
2014-12-23 16:11:22 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2014-12-23 16:11:21 ----A---- C:\Windows\system32\WsmWmiPl.dll
2014-12-23 16:11:21 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-23 16:11:21 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
2014-12-23 16:11:19 ----A---- C:\Windows\system32\WsmAuto.dll
2014-12-23 16:11:18 ----A---- C:\Windows\SYSWOW64\WSManMigrationPlugin.dll
2014-12-23 16:11:17 ----A---- C:\Windows\SYSWOW64\WsmWmiPl.dll
2014-12-23 16:11:17 ----A---- C:\Windows\SYSWOW64\WsmAuto.dll
2014-12-23 16:11:17 ----A---- C:\Windows\SYSWOW64\WSManHTTPConfig.exe
2014-12-23 16:11:05 ----A---- C:\Windows\SYSWOW64\tzres.dll
2014-12-23 16:11:05 ----A---- C:\Windows\system32\tzres.dll
2014-12-23 15:47:38 ----A---- C:\Windows\system32\termsrv.dll
2014-12-23 15:47:34 ----A---- C:\Windows\system32\adtschema.dll
2014-12-23 15:47:33 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2014-12-23 15:47:26 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2014-12-23 15:47:25 ----A---- C:\Windows\system32\msaudite.dll
2014-12-23 15:28:28 ----A---- C:\Windows\system32\schannel.dll
2014-12-23 15:28:26 ----A---- C:\Windows\system32\ncrypt.dll
2014-12-23 15:28:25 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-12-23 15:28:24 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-12-23 15:28:20 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-12-23 15:28:19 ----A---- C:\Windows\system32\wdigest.dll
2014-12-23 15:28:19 ----A---- C:\Windows\system32\msv1_0.dll
2014-12-23 15:28:17 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-12-23 15:28:17 ----A---- C:\Windows\system32\TSpkg.dll
2014-12-23 15:28:16 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-12-23 15:28:14 ----A---- C:\Windows\system32\credssp.dll
2014-12-23 15:28:11 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-12-23 15:26:08 ----A---- C:\Windows\system32\msi.dll
2014-12-23 15:26:06 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-12-23 15:24:26 ----A---- C:\Windows\system32\oleaut32.dll
2014-12-23 15:24:24 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2014-12-23 14:51:14 ----A---- C:\Windows\system32\win32k.sys
2014-12-11 20:42:45 ----A---- C:\Windows\system32\msxml3.dll
2014-12-11 20:42:44 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-12-11 20:42:44 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-12-11 20:42:44 ----A---- C:\Windows\system32\msxml3r.dll
2014-12-11 20:42:38 ----A---- C:\Windows\system32\IMJP10K.DLL
2014-12-11 20:42:37 ----A---- C:\Windows\SYSWOW64\IMJP10K.DLL
2014-12-11 20:42:28 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2014-12-11 20:42:28 ----A---- C:\Windows\system32\AUDIOKSE.dll
2014-12-11 20:42:27 ----A---- C:\Windows\system32\audiosrv.dll
2014-12-11 20:42:26 ----A---- C:\Windows\system32\AudioEng.dll
2014-12-11 20:42:25 ----A---- C:\Windows\system32\EncDump.dll
2014-12-11 20:42:24 ----A---- C:\Windows\system32\AudioSes.dll
2014-12-11 20:42:21 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2014-12-11 20:42:20 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2014-12-11 20:41:27 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-12-11 20:41:27 ----A---- C:\Windows\system32\packager.dll

======List of files/folders modified in the last 1 month======

2014-12-25 14:01:34 ----D---- C:\Windows\Prefetch
2014-12-25 14:01:27 ----D---- C:\Windows\Temp
2014-12-25 14:01:21 ----D---- C:\Program Files
2014-12-25 13:52:11 ----D---- C:\Windows\Minidump
2014-12-25 13:52:11 ----D---- C:\Windows
2014-12-25 13:43:19 ----D---- C:\Windows\SYSWOW64\drivers
2014-12-25 13:41:18 ----D---- C:\Windows\system32\config
2014-12-25 13:38:56 ----D---- C:\Windows\system32\drivers
2014-12-25 13:36:35 ----SHD---- C:\Windows\Installer
2014-12-25 13:36:33 ----D---- C:\Windows\System32
2014-12-25 13:35:55 ----RD---- C:\Program Files (x86)
2014-12-25 13:35:55 ----HD---- C:\ProgramData
2014-12-25 13:32:53 ----SHD---- C:\System Volume Information
2014-12-25 13:30:45 ----D---- C:\ProgramData\MFAData
2014-12-25 13:20:53 ----D---- C:\Windows\system32\Tasks
2014-12-25 13:12:08 ----D---- C:\Program Files (x86)\HP SimplePass
2014-12-25 13:12:04 ----D---- C:\Program Files\IB Updater
2014-12-25 13:12:02 ----D---- C:\Program Files (x86)\Senses
2014-12-25 13:11:55 ----D---- C:\Program Files (x86)\AVG Secure Search
2014-12-25 13:10:19 ----D---- C:\Windows\Tasks
2014-12-25 13:01:09 ----D---- C:\ProgramData\TorchCrashHandler
2014-12-25 12:49:24 ----D---- C:\Windows\winsxs
2014-12-25 12:48:24 ----D---- C:\Windows\system32\catroot2
2014-12-25 12:45:20 ----SD---- C:\Windows\system32\CompatTel
2014-12-25 12:45:20 ----D---- C:\Windows\AppCompat
2014-12-25 12:45:19 ----SD---- C:\ProgramData\Microsoft
2014-12-25 12:45:19 ----D---- C:\Windows\SysWOW64
2014-12-25 12:13:28 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-12-25 02:54:51 ----D---- C:\ProgramData\Tarma Installer
2014-12-25 01:31:50 ----HD---- C:\Windows\system32\GroupPolicy
2014-12-25 01:31:50 ----D---- C:\Windows\SYSWOW64\GroupPolicy
2014-12-25 01:31:49 ----D---- C:\Program Files\Common Files
2014-12-24 20:56:55 ----D---- C:\Windows\debug
2014-12-24 20:18:17 ----D---- C:\ProgramData\Wincert
2014-12-24 16:22:15 ----D---- C:\Windows\Microsoft.NET
2014-12-24 15:50:45 ----RSD---- C:\Windows\assembly
2014-12-24 14:45:36 ----D---- C:\Windows\system32\catroot
2014-12-24 13:54:33 ----D---- C:\Windows\SYSWOW64\en-US
2014-12-24 13:54:33 ----D---- C:\Windows\system32\en-US
2014-12-24 13:54:32 ----D---- C:\Program Files\Internet Explorer
2014-12-24 13:54:24 ----D---- C:\Windows\PolicyDefinitions
2014-12-24 13:54:22 ----D---- C:\Program Files (x86)\Internet Explorer
2014-12-24 13:14:02 ----D---- C:\Users\Frantisek\AppData\Roaming\Seznam.cz
2014-12-24 13:05:04 ----D---- C:\Program Files (x86)\Seznam.cz
2014-12-23 20:55:01 ----D---- C:\Program Files (x86)\Sony
2014-12-23 20:51:53 ----D---- C:\Program Files (x86)\Nokia
2014-12-23 20:51:42 ----D---- C:\Windows\system32\DriverStore
2014-12-23 20:51:42 ----D---- C:\Windows\inf
2014-12-23 20:48:13 ----D---- C:\Program Files (x86)\EA SPORTS
2014-12-23 20:43:17 ----A---- C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-12-23 17:42:30 ----D---- C:\Program Files (x86)\Google
2014-12-23 17:35:26 ----D---- C:\ProgramData\Nokia
2014-12-23 17:35:26 ----D---- C:\Program Files (x86)\Common Files
2014-12-23 17:34:16 ----D---- C:\Users\Frantisek\AppData\Roaming\Nokia Suite
2014-12-23 17:34:16 ----D---- C:\Users\Frantisek\AppData\Roaming\Nokia
2014-12-23 17:24:51 ----D---- C:\Program Files (x86)\Microsoft
2014-12-23 17:20:56 ----D---- C:\Program Files (x86)\Comodo
2014-12-23 16:28:18 ----AD---- C:\ProgramData\Temp
2014-12-23 15:44:46 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-12-11 19:13:44 ----HD---- C:\Program Files (x86)\InstallShield Installation Information

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amd_sata;amd_sata; C:\Windows\system32\drivers\amd_sata.sys [2011-12-13 82048]
R0 amd_xata;amd_xata; C:\Windows\system32\drivers\amd_xata.sys [2011-12-13 42624]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-12-24 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-12-24 267632]
R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2014-06-17 190744]
R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [2014-06-17 328984]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2014-10-29 123672]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2014-06-17 31512]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 szkg5;szkg5; C:\Windows\SySWOW64\DRIVERS\szkg64.sys [2014-10-20 74768]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-12-24 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-12-24 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-12-24 436624]
R1 Avgdiska;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiska.sys [2014-06-30 152344]
R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2014-07-21 244504]
R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2014-10-24 237848]
R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2014-10-20 269080]
R1 avgtp;avgtp; \??\C:\Windows\system32\drivers\avgtpx64.sys [2014-08-19 50976]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 AODDriver4.1;AODDriver4.1; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-01-04 55936]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-12-24 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-12-24 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-12-24 116728]
R2 sbapifs;sbapifs; C:\Windows\system32\DRIVERS\sbapifs.sys [2014-10-20 82872]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\drivers\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-02-15 10856960]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-02-15 327680]
R3 athr;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2013-08-25 4017664]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2011-12-06 95248]
R3 BHDrvx64;BHDrvx64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.5.0.145\Definitions\BASHDefs\20121130.005\BHDrvx64.sys [2012-10-24

1384608]
R3 ccSet_NIS;Norton Internet Security Settings Manager; C:\Windows\system32\drivers\NISx64\1309010.00E\ccSetx64.sys [2012-06-07 167072]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys [2010-07-28 31088]
R3 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2012-10-07 484512]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-10-08 138912]
R3 IDSVia64;IDSVia64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.5.0.145\Definitions\IPSDefs\20121205.001\IDSvia64.sys [2012-10-19 513184]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-03-07 4763112]
R3 RSP2STOR;Realtek PCIE CardReader Driver - P2; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [2013-12-25 288840]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2012-12-12 726160]
R3 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\NISx64\1309010.00E\SRTSPX64.SYS [2012-07-06 37536]
R3 SymDS;Symantec Data Store; C:\Windows\system32\drivers\NISx64\1309010.00E\SYMDS64.SYS [2011-08-15 451192]
R3 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\NISx64\1309010.00E\SYMEFA64.SYS [2012-05-22 1129120]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [2012-08-05 175736]
R3 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\NISx64\1309010.00E\Ironx64.SYS [2012-04-18 190072]
R3 SymNetS;Symantec Network Security WFP Driver; C:\Windows\System32\Drivers\NISx64\1309010.00E\SYMNETS.SYS [2012-04-18 405624]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\drivers\SynTP.sys [2012-02-24 425232]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2011-12-14 56448]
R4 F06DEFF2-5B9C-490D-910F-35D3A91196222;F06DEFF2-5B9C-490D-910F-35D3A91196222; \??\C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\setmgrc2.cfg []
S0 is3srv;is3srv; C:\Windows\SySWOW64\drivers\is3srv64.sys [2014-10-20 74768]
S3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2009-06-10 1311232]
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2014-02-15 14448]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2014-02-15 27760]
S3 iaStor;iaStor; C:\Windows\system32\drivers\iaStor.sys [2011-11-30 568600]
S3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.5.0.145\Definitions\VirusDefs\20121206.003\ENG64.SYS [2012-12-06 126112]
S3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.5.0.145\Definitions\VirusDefs\20121206.003\EX64.SYS [2012-12-06 2084000]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x64.sys [2009-06-10 408960]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RimUsb;BlackBerry Smartphone; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [2007-05-14 27520]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
S3 SmbDrv;SmbDrv; C:\Windows\system32\drivers\Smb_driver.sys [2012-02-24 21264]
S3 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\System32\Drivers\NISx64\1309010.00E\SRTSP64.SYS [2012-07-06 737952]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088]
R2 AERTFilters;Andrea RT Filters Service; C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe [2009-11-18 98208]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-02-15 235520]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-02-15 361984]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-12-24 50344]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [2014-11-07 3247120]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [2014-11-07 289328]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2013-11-04 92160]
R2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2012-03-05 35200]
R2 NIS;Norton Internet Security; C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe [2012-06-16 138272]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 szserver;STOPzilla Service; C:\Program Files (x86)\STOPzilla!\SZServer.exe [2014-10-20 57136]
R2 vToolbarUpdater18.1.9;vToolbarUpdater18.1.9; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe [2014-08-19 1820184]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2013-05-13 1129760]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-22 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S2 TorchCrashHandler;Torch Crash Handler; C:\Users\Frantisek\AppData\Local\Torch\Update\TorchCrashHandler.exe [2013-06-20 1205088]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-23 267440]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-22 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-22 114688]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-11-26 114800]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
S3 TrueService;TrueAPI Service component; C:\Program Files\Common Files\AuthenTec\TrueService.exe [2011-12-09 269640]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-10-10 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09

-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-

11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-

11 139856]

-----------------EOF-----------------

#2 Příspěvek od **altrok** » 25 Pro 2014 15:41

Pohodove svatky Vam preju

Odinstalujte Spybot S&D a AVG (jiz mate avast!)

V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/

ukoncete vsechny programy
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Scan, pote na Clean
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

Ulozte na plochu zoek.exe http://hijackthis.nl/smeenk/zoek.htm

spustte jako spravce
do velkeho okna zkopirujte script uvedeny nize
kliknete na Run script
po restartu na Vas vyskoci log (pripadne jej najdete v C:\zoek-results.log) - vlozte mi jej do pristi odpovedi
Kód: Vybrat vše
```
autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;
```

phineas · #3 Příspěvek od **phineas** » 25 Pro 2014 16:20

Příjemné prožití svátků i Vám,

nejprve bych chtěl poděkovat i za pomoc během svátků

. Zatím přidávám log z adwcleaneru. Po provedení 4. kroku pošlu i poslední.

# AdwCleaner v4.106 - Report created 25/12/2014 at 16:08:24
# Updated 21/12/2014 by Xplode
# Database : 2014-12-21.4 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Frantisek - FRANTISEK-HP
# Running from : C:\Users\Frantisek\Desktop\adwcleaner_4.106.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : torchcrashhandler
Service Deleted : vToolbarUpdater18.1.9

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\374311380
Folder Deleted : C:\ProgramData\apn
Folder Deleted : C:\ProgramData\AskPartnerNetwork
Folder Deleted : C:\ProgramData\AVG Secure Search
Folder Deleted : C:\ProgramData\ICQ\ICQToolbar
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\ProgramData\torchcrashhandler
Folder Deleted : C:\ProgramData\wincert
Folder Deleted : C:\ProgramData\greatsaving
Folder Deleted : C:\ProgramData\QueenCoupon
Folder Deleted : C:\ProgramData\ShopperMaster
Folder Deleted : C:\ProgramData\16895882340902680145
Folder Deleted : C:\ProgramData\ea7a3b78884cb651
Folder Deleted : C:\Program Files (x86)\AVG Secure Search
Folder Deleted : C:\Program Files (x86)\AVG Security Toolbar
Folder Deleted : C:\Program Files (x86)\globalUpdate
Folder Deleted : C:\Program Files (x86)\Gophoto.it
Folder Deleted : C:\Program Files (x86)\ICQ6Toolbar
Folder Deleted : C:\Program Files (x86)\Movies Toolbar
Folder Deleted : C:\Program Files (x86)\Senses
Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search
Folder Deleted : C:\Users\FRANTI~1\AppData\Local\Temp\apn
Folder Deleted : C:\Users\FRANTI~1\AppData\Local\Temp\mt_ffx
Folder Deleted : C:\Program Files\IB Updater
Folder Deleted : C:\Users\Frantisek\AppData\Local\AVG Secure Search
Folder Deleted : C:\Users\Frantisek\AppData\Local\globalUpdate
Folder Deleted : C:\Users\Frantisek\AppData\Local\torch
Folder Deleted : C:\Users\Frantisek\AppData\Local\CrashRpt
Folder Deleted : C:\Users\Frantisek\AppData\LocalLow\AVG Secure Search
Folder Deleted : C:\Users\Frantisek\AppData\LocalLow\BabylonToolbar
Folder Deleted : C:\Users\Frantisek\AppData\LocalLow\Funmoods
Folder Deleted : C:\Users\Frantisek\AppData\LocalLow\incredibar.com
Folder Deleted : C:\Users\Frantisek\AppData\LocalLow\searchresultstb
Folder Deleted : C:\Users\Frantisek\AppData\LocalLow\Senses
Folder Deleted : C:\Users\Frantisek\AppData\Roaming\Movies Toolbar
Folder Deleted : C:\Users\Frantisek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Manager
Folder Deleted : C:\Users\Frantisek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\torch
Folder Deleted : C:\Users\Frantisek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com
Folder Deleted : C:\Users\Public\Documents\Goobzo
Folder Deleted : C:\Users\Public\Documents\ShopperPro
Folder Deleted : C:\Users\Public\Documents\YTAHelper
Folder Deleted : C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj
Folder Deleted : C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk
Folder Deleted : C:\Users\Frantisek\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aaaalipaokhkccgmgkdglfinfnfhflko
File Deleted : C:\Users\FRANTI~1\AppData\Local\Temp\OptimizerPro.exe
File Deleted : C:\Users\Frantisek\AppData\Local\funmoods.crx
File Deleted : C:\Users\Frantisek\AppData\Local\funmoods-speeddial_sf.crx
File Deleted : C:\Users\Frantisek\AppData\LocalLow\SkwConfig.bin
File Deleted : C:\Users\Frantisek\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Torch.lnk
File Deleted : C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\l0cj2w58.default\invalidprefs.js
File Deleted : C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\l0cj2w58.default\searchplugins\Ask.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\Ask.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\Ask.xml
File Deleted : C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\l0cj2w58.default\searchplugins\ask-search.xml
File Deleted : C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\l0cj2w58.default\searchplugins\ask-web-search.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg-secure-search.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml
File Deleted : C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\l0cj2w58.default\searchplugins\icqplugin.xml
File Deleted : C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\l0cj2w58.default\searchplugins\icqplugin-1.xml
File Deleted : C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\l0cj2w58.default\searchplugins\icqplugin-2.xml
File Deleted : C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\l0cj2w58.default\searchplugins\icqplugin-3.xml
File Deleted : C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\l0cj2w58.default\searchplugins\icqplugin-4.xml
File Deleted : C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\l0cj2w58.default\searchplugins\MyStart Search.xml
File Deleted : C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\l0cj2w58.default\searchplugins\Search_Results.xml
File Deleted : C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cjpglkicenollcignonpgiafdgfeehoj_0.localstorage
File Deleted : C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Deleted : C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
File Deleted : C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.wajam.com_0.localstorage
File Deleted : C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.wajam.com_0.localstorage-journal
File Deleted : C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage
File Deleted : C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal
File Deleted : C:\Users\Frantisek\AppData\Local\Comodo\Dragon\User Data\Default\Local Storage\chrome-extension_aaaalipaokhkccgmgkdglfinfnfhflko_0.localstorage

***** [ Scheduled Tasks ] *****

Task Deleted : Browser Manager
Task Deleted : Optimizer Pro Schedule
Task Deleted : ShopperPro
Task Deleted : ShopperProJSUpd
Task Deleted : SPDriver
Task Deleted : 649291a2-bca7-4bf4-9d38-e7c6bc100244
Task Deleted : bc77a20b-4a92-425f-90dd-3e71217eb3b9-1
Task Deleted : bc77a20b-4a92-425f-90dd-3e71217eb3b9-11
Task Deleted : bc77a20b-4a92-425f-90dd-3e71217eb3b9-3
Task Deleted : bc77a20b-4a92-425f-90dd-3e71217eb3b9-4
Task Deleted : bc77a20b-4a92-425f-90dd-3e71217eb3b9-5
Task Deleted : bc77a20b-4a92-425f-90dd-3e71217eb3b9-5_user
Task Deleted : bc77a20b-4a92-425f-90dd-3e71217eb3b9-6
Task Deleted : bc77a20b-4a92-425f-90dd-3e71217eb3b9-7

***** [ Shortcuts ] *****

***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
Value Deleted : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [{B64982B1-D112-42B5-B1E4-D3867C4533F8}]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FE1DEEEA-DB6D-44B8-83F0-34FC0F9D1052}]
Value Deleted : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FE1DEEEA-DB6D-44B8-83F0-34FC0F9D1052}]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Key Deleted : HKCU\Software\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
Key Deleted : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Key Deleted : HKCU\Software\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj
Key Deleted : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Key Deleted : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jbpkiefagocgkmemidfngdkamloieekf
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\kiplfnciaokpcennlkldkdaeaaomamof
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk
Key Deleted : HKCU\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\BabylonToolbar
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\babylon.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\Applications\Torch.exe
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Key Deleted : HKLM\SOFTWARE\Classes\esrv.funmoodsESrvc
Key Deleted : HKLM\SOFTWARE\Classes\esrv.funmoodsESrvc.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Classes\S
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x86]
Key Deleted : HKCU\Software\5cedad1b335e513
Key Deleted : HKLM\SOFTWARE\5cedad1b335e513
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0061915.BHO
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0061915.BHO.1
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0061915.Sandbox
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0061915.Sandbox.1
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220022442279}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322552210}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622192215}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550055445579}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355555510}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655195515}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660066446679}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366556610}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666196615}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440044444479}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344554410}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644194415}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{38122A36-83B2-46B8-B39A-EC72A4614A07}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C87FC351-A80D-43E9-9A86-CF1E29DC443A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{D8278076-BC68-4484-9233-6E7F1628B56C}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622192215}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{17B10E59-09E1-4C39-A738-6774D7AB7778}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2263BE11-ACB7-49D9-8313-6B1D5CC42FAA}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{23119123-0854-469D-807A-171568457991}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2D9083CE-8758-4704-BA57-3C891D7452BD}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3E9469AF-E866-4476-B767-810630F1F6E7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{47700C35-9E3E-4DAD-934C-0CE28A87237C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{72063D77-7590-4DA9-A7F8-F5ECAF3632C4}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{7FC87AC5-FA93-476E-A32C-A941229DED0B}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{97FC5555-8BDC-40EA-8DE2-B1E46B9EA629}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{CA17D76B-F91D-4659-A7FD-A9F7ED375CDD}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{CA021789-C8CD-4676-BC40-90077A19D5CD}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550055445579}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355555510}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655195515}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660066446679}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366556610}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666196615}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0A383971-4E14-494B-BE88-D0E53894B442}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{611E37D5-D222-F03D-BEDF-05E85DC3F804}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\AVG Secure Search
Key Deleted : HKCU\Software\Funmoods
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\Goobzo
Key Deleted : HKCU\Software\ilivid
Key Deleted : HKCU\Software\IM
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\torch
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKCU\Software\AppDataLow\Software\Senses
Key Deleted : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Deleted : HKLM\SOFTWARE\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\AVG Security Toolbar
Key Deleted : HKLM\SOFTWARE\Funmoods
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\IB Updater
Key Deleted : HKLM\SOFTWARE\ICQ\ICQToolbar
Key Deleted : HKLM\SOFTWARE\Iminent
Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : HKLM\SOFTWARE\PIP
Key Deleted : HKLM\SOFTWARE\Senses-nv
Key Deleted : HKLM\SOFTWARE\torch
Key Deleted : HKLM\SOFTWARE\Senses
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0E08BAC8-845B-4327-8CDB-4B0F8C9857A5}_is1
Key Deleted : [x64] HKLM\SOFTWARE\IB Updater
Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : [x64] HKLM\SOFTWARE\Senses-nv
Key Deleted : [x64] HKLM\SOFTWARE\ShopperPro
Key Deleted : [x64] HKLM\SOFTWARE\Tarma Installer
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\funmoods.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\incredibar.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\isearch.avg.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\x.tlbron.funmoods.com

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17496

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]

-\\ Mozilla Firefox v34.0.5 (x86 cs)

[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("avg.install.installDirPath", "C:\\ProgramData\\AVG Secure Search\\FireFoxExt\\17.3.0.49");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("avg.install.userHPSettings", "hxxp://www.search.ask.com/?o=APN10645A&gct=hp& ... 96-118&t=4");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("avg.userPreferences.URLBarFocus.whiteList", "bing\\.comgoogle\\.\\w+yahoo\\.\\w+gmail\\.\\w+hotmail\\.\\w+live\\.\\w+isearch\\.avg\\.commysearch\\.avg\\.com");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.5affxtbr@MyWebFace_5a.com.install-event-fired", true);
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%2C%22dealply_p%22%3A%7B%22[...]
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.crossrider.bic", "14990e5a2787991fbb05920ae30aa279");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.aflt", "orgnl");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.dfltLng", "");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.did", "10658");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.excTlbr", false);
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.id", "7848799b00000000000078e3b576ac31");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.installerproductid", "26");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.instlDay", "15709");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.instlRef", "");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.ms_url_id", "");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.newTab", false);
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.ppd", "");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.prdct", "incredibar");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.productid", "26");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.smplGrp", "none");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.tlbrId", "base");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6PQUP4Dhg0&loc=IB_TB&i=26&search=");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.upn2", "6PQUP4Dhg0");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.upn2n", "92544216226367436");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1417:45:21");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.mywebsearch.prevDefaultEngine", "Google");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://dts.search.ask.com/sr?src=ffb&gct=ds&appid=954&systemid=406&v=a13251-118&apn_dtid=BND406&apn_ptnrs=AG6&apn_uid=1543070620644021&o=APN10645&q=");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.mywebsearch.prevSelectedEngine", "Google");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.homepage", "hxxp://home.mywebsearch.com/index.jhtml?ptb=FA75B19F-E335-4AD2-BF62-D37E528B449E&n=77fd5bc8&p2=^HJ^xdm007^S05930^cz&si=CLezkb3i1rcCFXLLt[...]
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.initialized", true);
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.contextKey", "");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.installDate", "2013092808");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.partnerId", "^HJ^xdm007^S05930^cz");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.partnerSubId", "CLezkb3i1rcCFXLLtAodsTwAQA");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.success", true);
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.toolbarId", "FA75B19F-E335-4AD2-BF62-D37E528B449E");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.lastActivePing", "1389466231324");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.options.defaultSearch", false);
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.options.homePageEnabled", false);
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.options.keywordEnabled", false);
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.options.tabEnabled", false);
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.weather.location", "10001");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.browser.startup.homepage.prev", "hxxp://www.search.ask.com/?o=APN10645A&gct=hp& ... 96-118&t=4");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.browser.startup.homepage.savedPrev", "true");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.browser.startup.homepage.tb", "hxxp://home.tb.ask.com/index.jhtml?ptb=875187AB-5634-4195-930A-E6FDE8AFA08E&n=77fd5bc8&p2=^GR^xdm518^YYA^cz");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.browser.startup.page.savedPrev", 1);
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.browser.startup.page.tb", 1);
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=875187AB-5634-4195-930A-E6FDE8AFA08E&n=77fd5bc8&p2=^GR^xdm518^YYA^cz");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.hp.enabled", true);
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.hp.lastGuardTime", -1863998834);
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.hp.numGuards", 1);
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.initialized", true);
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.installation.contextKey", "");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.installation.installDate", "2013092808");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.installation.partnerId", "^GR^xdm518^YYA^cz");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.installation.partnerSubId", "");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.installation.success", true);
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.installation.toolbarId", "875187AB-5634-4195-930A-E6FDE8AFA08E");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.lastActivePing", "1419422078424");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.lastKnownVersion", "5.40.2.32008");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.options.defaultSearch", true);
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.options.homePageEnabled", true);
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.options.keywordEnabled", true);
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.options.tabEnabled", true);
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.toolbarCollapsed", false);
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._5aMembers_.weather.location", "10001");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled", false);
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark.lastInstalled", "mywebface@mindspark.com");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.wajam.affiliate_id", "1401");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.wajam.firstrun", "false");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.wajam.log_send_info", "false");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.wajam.no_trace", "false");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.wajam.server_current_mapping_version", "0.21087");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.wajam.unique_id", "D6721F63D6F06E018867DABA0A50DD56");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.wajam.user_current_mapping_version", "0");
[l0cj2w58.default\prefs.js] - Line Deleted : user_pref("extensions.wajam.version", "1.26");

-\\ Google Chrome v36.0.1985.143

[C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://dts.search.ask.com/sr?src=crb&gct=ds&appid=954&systemid=406&v=a11465-118&apn_uid=1543070620644021&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
[C:\Users\Frantisek\AppData\Local\Comodo\Dragon\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.search.ask.com/web?o=APN10257&q={searchTerms}
[C:\Users\Frantisek\AppData\Local\Comodo\Dragon\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://dts.search.ask.com/sr?src=crb&gct=ds&appid=954&systemid=406&v=a13251-118&apn_uid=1543070620644021&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}

-\\ Comodo Dragon v

[C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://dts.search.ask.com/sr?src=crb&gct=ds&appid=954&systemid=406&v=a11465-118&apn_uid=1543070620644021&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
[C:\Users\Frantisek\AppData\Local\Comodo\Dragon\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.search.ask.com/web?o=APN10257&q={searchTerms}
[C:\Users\Frantisek\AppData\Local\Comodo\Dragon\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://dts.search.ask.com/sr?src=crb&gct=ds&appid=954&systemid=406&v=a13251-118&apn_uid=1543070620644021&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
[C:\Users\Frantisek\AppData\Local\Comodo\Dragon\User Data\Default\preferences] - Deleted [Extension] : aaaalipaokhkccgmgkdglfinfnfhflko
[C:\Users\Frantisek\AppData\Local\Comodo\Dragon\User Data\Default\preferences] - Deleted [Homepage] : hxxp://www.search.ask.com/?o=APN10645A&gct=hp& ... 65-118&t=4

*************************

AdwCleaner[R0].txt - [43798 octets] - [25/12/2014 16:02:47]
AdwCleaner[S0].txt - [43270 octets] - [25/12/2014 16:08:24]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [43331 octets] ##########

phineas · #4 Příspěvek od **phineas** » 25 Pro 2014 16:58

Jen nastal takový problém zoek se nechce spustit vůbec nereaguje jen při prvním spuštění vyskočí okno (viz obrázek https://drive.google.com/file/d/0B6SO0k ... sp=sharing) a pak už jen přesýpací hodiny ale nic se neděje.

#5 Příspěvek od **altrok** » 25 Pro 2014 17:02

Znovu stahnete a pouzijte zoek. Pokud ho ani ted nerozchodite, vlozte logy z FRSTLauncheru (frst.txt i Addition.txt) - http://forum.viry.cz/viewtopic.php?f=13&t=133100

phineas · #6 Příspěvek od **phineas** » 25 Pro 2014 17:26

Zde log FRST a v příloze Addition

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-12-2014
Ran by Frantisek (administrator) on FRANTISEK-HP on 25-12-2014 17:16:26
Running from C:\Users\Frantisek\Desktop
Loaded Profile: Frantisek (Available profiles: Frantisek)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccsvchst.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccsvchst.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\Frantisek\AppData\Local\Peer2View\Peer2ViewClient.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Oracle Corporation) C:\Users\Frantisek\AppData\Local\Peer2View\jre\bin\java.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(forum.viry.cz) C:\Users\Frantisek\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6469736 2012-03-07] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2885904 2012-02-24] (Synaptics Incorporated)
HKLM\...\Run: [SetDefault] => C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe [44880 2011-12-20] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [636032 2012-02-15] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HPOSD] => C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-12-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5226600 2014-12-24] (AVAST Software)
HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2014-12-16] (Hewlett-Packard)
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [468192 2014-10-15] (Sony)
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\...\Run: [GoogleChromeAutoLaunch_A4EEEEC2EE29EF9AFB0ED8B7841A357A] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488 2014-08-07] (Google Inc.)
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7063832 2014-11-21] (Piriform Ltd)
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\...\RunOnce: [Adobe Speed Launcher] => 1419523691
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\...\MountPoints2: F - F:\Startme.exe
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\...\MountPoints2: {b8c0469b-fe55-11e2-8588-78e3b576ac31} - F:\Startme.exe
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\...\MountPoints2: {e5aa4ae2-100e-11e3-8b42-78e3b576ac31} - F:\Startme.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (No File)
Startup: C:\Users\Frantisek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Start Peer2View Client.lnk
ShortcutTarget: Start Peer2View Client.lnk -> C:\Users\Frantisek\AppData\Local\Peer2View\Peer2ViewClient.exe ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.cz/
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDF
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
SearchScopes: HKLM-x32 -> {611E37D5-D222-F03D-BEDF-05E85DC3F804} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://uk.search.yahoo.com/search?p={se ... ype=CPNTDF
SearchScopes: HKLM-x32 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://en.wikipedia.org/wiki/Special:Se ... earchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1026437247-2068624690-2562190202-1001 -> {489AAB21-8022-44F7-A4EC-10DD531EFC7C} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_13415
BHO: No Name -> {11111111-1111-1111-1111-110611191115} -> No File
BHO: No Name -> {5347542D-5636-006A-76A7-7A786E7484D7} -> No File
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: No Name -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> No File
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: No Name -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> No File
BHO-x32: No Name -> {11111111-1111-1111-1111-110611191115} -> No File
BHO-x32: No Name -> {1fa57a3a-80e9-44a5-8032-e995b13643fa} -> No File
BHO-x32: No Name -> {5347542D-5636-006A-76A7-7A786E7484D7} -> No File
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\coIEPlg.dll (Symantec Corporation)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: No Name -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> No File
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - No Name - {C98EE38D-21E4-4A50-907D-2B56FEC7013E} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - No Name - {C98EE38D-21E4-4A50-907D-2B56FEC7013E} - No File
Toolbar: HKLM-x32 - No Name - {1fa57a3a-80e9-44a5-8032-e995b13643fa} - No File
Toolbar: HKU\S-1-5-21-1026437247-2068624690-2562190202-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKU\S-1-5-21-1026437247-2068624690-2562190202-1001 -> No Name - {5347542D-5636-006A-76A7-7A786E7484D7} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 10.255.255.10 10.255.255.20

FireFox:
========
FF ProfilePath: C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\l0cj2w58.default
FF DefaultSearchEngine: Google (avast)
FF DefaultSearchUrl: https://www.google.com/search/?trackid=sp-006
FF SearchEngineOrder.1: Google (avast)
FF SelectedSearchEngine: Google (avast)
FF Homepage: https://www.google.com/?trackid=sp-006
FF Keyword.URL: https://www.google.com/search/?trackid=sp-006
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_246.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np32dsw.dll (Macromedia, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\l0cj2w58.default\searchplugins\firmycz.xml
FF SearchPlugin: C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\l0cj2w58.default\searchplugins\google-avast.xml
FF SearchPlugin: C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\l0cj2w58.default\searchplugins\mapycz.xml
FF SearchPlugin: C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\l0cj2w58.default\searchplugins\zbocz.xml
FF Extension: TrueSuite Website Logon - C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\websitelogon@truesuite.com [2014-12-25]
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.5.0.145\IPSFFPlgn
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.5.0.145\IPSFFPlgn [2012-10-07]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.5.0.145\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.5.0.145\coFFPlgn [2014-12-25]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-12-22]
FF HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF Extension: No Name - wrc@avast.com [Not Found]

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.3.0\\npsitesafety.dll No File
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll No File
CHR Plugin: (Nokia Suite Enabler Plugin) - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll No File
CHR Plugin: (MindSpark Toolbar Platform Plugin Stub) - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll No File
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\Frantisek\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Profile: C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Multi Search) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\afmdpmddiokpdknaeofdnlclbpgehhce [2014-11-17]
CHR Extension: (Tlumočník pro všechny jazyky) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\amdeidgbmcliegnpcbbkhlflkbdpomhk [2014-01-19]
CHR Extension: (American Racing 2) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfpfdjclhabpjncikdngdoldjjjegnbe [2014-01-19]
CHR Extension: (YouTube) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-19]
CHR Extension: (Adblock Plus) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-10-20]
CHR Extension: (TV program) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\eggkgjblbjpigonjpmblphnackhfigbo [2014-01-19]
CHR Extension: (Senses) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli [2014-12-25]
CHR Extension: (Quick Block) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlkpnekpomdbobkdokohimfcbgcpldfp [2014-11-08]
CHR Extension: (Webcam Toy) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfbgimoladefibpklnfmkpknadbklade [2014-01-19]
CHR Extension: (Quick Note) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\mijlebbfndhelmdpmllgcfadlkankhok [2014-01-19]
CHR Extension: (Onlive Clock) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\moddbcckaikhdnigidfcmaeelcobchpm [2014-01-19]
CHR Extension: (Peněženka Google) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21]
CHR Extension: (Deezer) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\npfkoakaabdallkcdbpkkhfilkkngakh [2014-01-19]
CHR Extension: (Fotoaparát) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofmpffnppnlgkgmbgidhhjcglloeejpg [2014-01-19]
CHR Extension: (Bungalow) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogkdmggpdfpodahejeckklcncacambmo [2014-01-19]
CHR Extension: (Seznam Lištička - Rychlá volba) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2014-10-25]
CHR Extension: (Test your Internet speed) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbdiieomklkfdonffibiedlakekboidj [2014-01-19]
CHR Extension: (G calize) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\peconnficnlajdpgfcjfmhjibkoijlbp [2014-10-25]
CHR Extension: (World Clocks 2) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjgoijhajhaahklokegbfnohialajpej [2014-01-19]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-24]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-02-15] (Advanced Micro Devices, Inc.) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-24] (AVAST Software)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe [138272 2012-06-16] (Symantec Corporation)
S3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [269640 2011-12-09] (AuthenTec, Inc.)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [55936 2012-01-04] (Advanced Micro Devices)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-24] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-24] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-24] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-24] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-24] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-24] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-24] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-24] ()
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-08-19] (AVG Technologies)
R3 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.5.0.145\Definitions\BASHDefs\20121130.005\BHDrvx64.sys [1384608 2012-10-24] (Symantec Corporation)
R3 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1309010.00E\ccSetx64.sys [167072 2012-06-07] (Symantec Corporation)
R3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2012-10-07] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [138912 2012-10-08] (Symantec Corporation)
R3 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.5.0.145\Definitions\IPSDefs\20121205.001\IDSvia64.sys [513184 2012-10-19] (Symantec Corporation)
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.5.0.145\Definitions\VirusDefs\20121206.003\ENG64.SYS [126112 2012-12-06] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.5.0.145\Definitions\VirusDefs\20121206.003\EX64.SYS [2084000 2012-12-06] (Symantec Corporation)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
R3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [288840 2013-12-25] (Realtek Semiconductor Corp.)
S3 SmbDrv; C:\Windows\system32\drivers\Smb_driver.sys [21264 2012-02-24] (Synaptics Incorporated)
S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1309010.00E\SRTSP64.SYS [737952 2012-07-06] (Symantec Corporation)
R3 SRTSPX; C:\Windows\system32\drivers\NISx64\1309010.00E\SRTSPX64.SYS [37536 2012-07-06] (Symantec Corporation)
R3 SymDS; C:\Windows\system32\drivers\NISx64\1309010.00E\SYMDS64.SYS [451192 2011-08-15] (Symantec Corporation)
R3 SymEFA; C:\Windows\system32\drivers\NISx64\1309010.00E\SYMEFA64.SYS [1129120 2012-05-22] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [175736 2012-08-05] (Symantec Corporation)
R3 SymIRON; C:\Windows\system32\drivers\NISx64\1309010.00E\Ironx64.SYS [190072 2012-04-18] (Symantec Corporation)
R3 SymNetS; C:\Windows\System32\Drivers\NISx64\1309010.00E\SYMNETS.SYS [405624 2012-04-18] (Symantec Corporation)
S2 sbapifs; system32\DRIVERS\sbapifs.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-25 17:16 - 2014-12-25 17:17 - 00026669 _____ () C:\Users\Frantisek\Desktop\FRST.txt
2014-12-25 17:15 - 2014-12-25 17:16 - 00000000 ____D () C:\FRST
2014-12-25 17:13 - 2014-12-25 17:14 - 00112640 _____ (forum.viry.cz) C:\Users\Frantisek\Desktop\FRSTLauncher.exe
2014-12-25 17:11 - 2014-12-25 17:13 - 02122240 _____ (Farbar) C:\Users\Frantisek\Desktop\FRST64.exe
2014-12-25 17:09 - 2014-12-25 17:09 - 01295360 _____ () C:\Users\Frantisek\Desktop\zoek.exe
2014-12-25 16:47 - 2014-12-25 16:48 - 04134156 _____ () C:\Users\Frantisek\Desktop\zoek.zip
2014-12-25 16:46 - 2014-12-25 16:46 - 00003148 _____ () C:\Windows\System32\Tasks\{E58561EF-F17A-4FD2-BED3-9D7C54B2C038}
2014-12-25 16:24 - 2014-12-25 17:09 - 00000002 _____ () C:\runcheck.txt
2014-12-25 16:23 - 2014-12-25 16:23 - 00000000 ____D () C:\zoek_backup
2014-12-25 16:02 - 2014-12-25 16:09 - 00000000 ____D () C:\AdwCleaner
2014-12-25 15:58 - 2014-12-25 15:58 - 02173952 _____ () C:\Users\Frantisek\Desktop\adwcleaner_4.106.exe
2014-12-25 14:01 - 2014-12-25 14:01 - 00000000 ____D () C:\rsit
2014-12-25 14:01 - 2014-12-25 14:01 - 00000000 ____D () C:\Program Files\trend micro
2014-12-25 13:50 - 2014-12-25 13:50 - 01222144 _____ () C:\Users\Frantisek\Downloads\RSITx64.exe
2014-12-25 13:43 - 2014-12-25 13:43 - 00000168 _____ () C:\Windows\SysWOW64\Drivers\kgpfr2.cfg
2014-12-25 13:38 - 2014-12-25 13:48 - 00001336 _____ () C:\Windows\system32\Drivers\kgpcpy.cfg
2014-12-25 13:35 - 2014-12-25 16:00 - 00000000 ____D () C:\ProgramData\STOPzilla!
2014-12-25 13:28 - 2014-12-25 13:29 - 00593488 _____ () C:\Users\Frantisek\Downloads\STOPzillaAVM_Setup.exe
2014-12-25 13:20 - 2014-12-25 13:20 - 00002780 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-12-25 13:20 - 2014-12-25 13:20 - 00000782 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-12-25 13:20 - 2014-12-25 13:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-12-25 13:20 - 2014-12-25 13:20 - 00000000 ____D () C:\Program Files\CCleaner
2014-12-25 13:18 - 2014-12-25 13:18 - 05162080 _____ (Piriform Ltd) C:\Users\Frantisek\Downloads\ccsetup500.exe
2014-12-25 13:10 - 2014-12-25 13:10 - 00003294 _____ () C:\Windows\System32\Tasks\avastBCLRestartS-1-5-21-1026437247-2068624690-2562190202-1001
2014-12-25 12:45 - 2014-12-25 12:45 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-25 02:54 - 2014-12-25 02:54 - 00001965 _____ () C:\Windows\wininit.ini
2014-12-25 02:47 - 2014-12-25 02:47 - 00000000 __SHD () C:\Users\Frantisek\AppData\Local\EmieBrowserModeList
2014-12-25 02:13 - 2014-12-25 15:56 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-12-25 02:13 - 2014-12-25 15:56 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy
2014-12-25 02:12 - 2014-12-25 02:13 - 16409960 _____ (Safer Networking Limited ) C:\Users\Frantisek\Downloads\spybotsd162.exe
2014-12-24 21:01 - 2014-12-24 21:01 - 00000000 ____D () C:\ProgramData\Lavasoft
2014-12-24 20:53 - 2014-12-24 20:56 - 124988152 _____ (Microsoft Corporation) C:\Users\Frantisek\Downloads\msert.exe
2014-12-24 20:21 - 2014-12-24 20:23 - 05309804 _____ (Piriform Ltd) C:\Users\Frantisek\Downloads\ccsetup501(3).exe
2014-12-24 17:40 - 2014-12-24 17:42 - 00594804 _____ () C:\Users\Frantisek\Downloads\Nepotvrzeno 892725.crdownload
2014-12-24 17:37 - 2014-12-24 17:40 - 05295204 _____ (Piriform Ltd) C:\Users\Frantisek\Downloads\ccsetup501 (1).exe
2014-12-24 17:21 - 2014-12-24 17:23 - 05289364 _____ (Piriform Ltd) C:\Users\Frantisek\Downloads\ccsetup501(1).exe
2014-12-24 17:19 - 2014-12-24 17:21 - 05303964 _____ (Piriform Ltd) C:\Users\Frantisek\Downloads\ccsetup501(2).exe
2014-12-24 17:17 - 2014-12-24 17:19 - 05292284 _____ (Piriform Ltd) C:\Users\Frantisek\Downloads\ccsetup501.exe
2014-12-24 14:58 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-24 14:58 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-24 14:40 - 2014-12-24 14:40 - 00244264 _____ () C:\Users\Frantisek\Downloads\Firefox Setup Stub 34.0.5.exe
2014-12-24 14:31 - 2014-12-25 13:12 - 00001139 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-12-24 14:31 - 2014-12-25 13:12 - 00001139 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-12-24 14:31 - 2014-12-24 20:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-12-24 14:19 - 2014-12-24 14:27 - 00839476 _____ () C:\Users\Frantisek\Downloads\Nepotvrzeno 50911.crdownload
2014-12-24 14:18 - 2014-12-24 14:20 - 39352392 _____ () C:\Users\Frantisek\Downloads\Firefox Setup 34.0.5.exe
2014-12-24 13:51 - 2014-12-24 13:51 - 00001924 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2014-12-24 13:50 - 2014-12-24 13:50 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-12-24 13:49 - 2014-12-24 13:49 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-12-24 13:20 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-12-24 13:20 - 2014-07-07 03:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-12-24 13:20 - 2014-07-07 03:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2014-12-24 13:20 - 2014-07-07 03:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-12-24 13:20 - 2014-07-07 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2014-12-24 13:20 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2014-12-24 13:20 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2014-12-24 13:20 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2014-12-24 13:20 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2014-12-24 13:17 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-12-24 13:01 - 2014-12-24 13:01 - 00000000 ____D () C:\Users\Default\AppData\Roaming\TuneUp Software
2014-12-24 13:01 - 2014-12-24 13:01 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\TuneUp Software
2014-12-24 12:53 - 2014-12-24 12:53 - 00000000 ____D () C:\Users\Frantisek\AppData\Local\Avg
2014-12-23 16:18 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2014-12-23 16:18 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2014-12-23 16:18 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-12-23 16:18 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-12-23 16:18 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-12-23 16:18 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-12-23 16:18 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-12-23 16:18 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2014-12-23 16:18 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-23 16:18 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-23 16:18 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-12-23 16:17 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-23 16:17 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-23 16:17 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-23 16:17 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-12-23 16:17 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-23 16:17 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-12-23 16:17 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-23 16:17 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-12-23 16:17 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-23 16:17 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-23 16:17 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-12-23 16:17 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-23 16:17 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-12-23 16:17 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-12-23 16:17 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-23 16:17 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-23 16:17 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-23 16:17 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-12-23 16:17 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-12-23 16:17 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-12-23 16:17 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-23 16:17 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-23 16:17 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-23 16:17 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-23 16:17 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-23 16:17 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-23 16:17 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-23 16:17 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-23 16:17 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-23 16:17 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-23 16:17 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-23 16:17 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-23 16:17 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-23 16:17 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-23 16:16 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-23 16:16 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-23 16:16 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-23 16:16 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-23 16:16 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-23 16:16 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-23 16:16 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-23 16:16 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-12-23 16:16 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-23 16:16 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-23 16:16 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-23 16:16 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-23 16:16 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-23 16:16 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-12-23 16:16 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-23 16:16 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-12-23 16:16 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-23 16:16 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-23 16:16 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-12-23 16:16 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-23 16:12 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-12-23 16:12 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-12-23 16:12 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-12-23 16:12 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-12-23 16:12 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-12-23 16:12 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-12-23 16:11 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-23 16:11 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-12-23 16:11 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2014-12-23 16:11 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2014-12-23 16:11 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-12-23 16:11 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-12-23 16:11 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-23 16:11 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-23 16:11 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-12-23 16:11 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2014-12-23 16:11 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2014-12-23 16:11 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-23 16:11 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2014-12-23 16:11 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2014-12-23 16:11 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2014-12-23 16:11 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2014-12-23 15:47 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-12-23 15:47 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-12-23 15:47 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-12-23 15:47 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-12-23 15:47 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-12-23 15:28 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-12-23 15:28 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-12-23 15:28 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-12-23 15:28 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-12-23 15:28 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-12-23 15:28 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-12-23 15:28 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-12-23 15:28 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-12-23 15:28 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-12-23 15:28 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-12-23 15:28 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-12-23 15:28 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-12-23 15:26 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-12-23 15:26 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-12-23 15:24 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-12-23 15:24 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-12-23 14:51 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-12-11 20:42 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-12-11 20:42 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-12-11 20:42 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-12-11 20:42 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-12-11 20:42 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-12-11 20:42 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-12-11 20:42 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-12-11 20:42 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-12-11 20:42 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-12-11 20:42 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-12-11 20:42 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-12-11 20:42 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-12-11 20:42 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-12-11 20:42 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2014-12-11 20:41 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-12-11 20:41 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-12-11 19:20 - 2014-12-11 19:20 - 00002026 _____ () C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-25 17:08 - 2013-07-22 22:02 - 00000900 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-25 17:08 - 2013-06-07 21:26 - 00000350 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job
2014-12-25 17:08 - 2013-06-05 18:30 - 00000350 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2014-12-25 17:08 - 2012-10-08 05:50 - 01139742 _____ () C:\Windows\WindowsUpdate.log
2014-12-25 16:53 - 2013-07-22 22:02 - 00000904 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-25 16:48 - 2012-10-07 21:58 - 00003958 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{54BAE4A8-6346-466A-A7D3-2CF2D159CE86}
2014-12-25 16:41 - 2012-04-06 21:46 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-25 16:35 - 2013-01-04 00:12 - 00000382 _____ () C:\Windows\Tasks\WpsUpdateTask_Frantisek.job
2014-12-25 16:26 - 2009-07-14 05:45 - 00031472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-25 16:26 - 2009-07-14 05:45 - 00031472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-25 16:16 - 2013-12-22 11:43 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-12-25 16:12 - 2014-08-31 12:16 - 00000000 ____D () C:\ProgramData\AVG2014
2014-12-25 16:12 - 2014-08-31 12:09 - 00000000 ____D () C:\ProgramData\MFAData
2014-12-25 16:12 - 2012-08-05 14:22 - 00000000 ____D () C:\Program Files (x86)\HP SimplePass
2014-12-25 16:12 - 2010-11-21 04:47 - 00198996 _____ () C:\Windows\PFRO.log
2014-12-25 16:12 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-25 16:12 - 2009-07-14 05:51 - 00199548 _____ () C:\Windows\setupact.log
2014-12-25 16:08 - 2013-01-31 16:49 - 00000000 ____D () C:\ProgramData\ICQ
2014-12-25 15:47 - 2014-08-31 12:16 - 00000000 ___HD () C:\$AVG
2014-12-25 13:52 - 2013-01-11 16:33 - 00000000 ____D () C:\Windows\Minidump
2014-12-25 13:52 - 2012-10-08 15:02 - 00000000 ____D () C:\Users\Frantisek\AppData\Local\CrashDumps
2014-12-25 12:45 - 2014-05-10 20:08 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-12-25 12:45 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-12-25 12:13 - 2013-05-23 20:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-12-25 01:31 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-12-25 01:31 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-12-24 14:00 - 2009-07-14 05:45 - 00268392 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-24 13:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-24 13:51 - 2013-12-22 11:43 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-12-24 13:50 - 2014-08-18 10:17 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-12-24 13:50 - 2013-12-22 11:43 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-12-24 13:50 - 2013-12-22 11:43 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-12-24 13:50 - 2013-12-22 11:43 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-12-24 13:50 - 2013-12-22 11:43 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-12-24 13:50 - 2013-12-22 11:43 - 00083280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-12-24 13:50 - 2013-12-22 11:43 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-12-24 13:14 - 2014-08-31 09:04 - 00000000 ____D () C:\Users\Frantisek\AppData\Roaming\Seznam.cz
2014-12-24 13:05 - 2014-08-31 09:05 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-12-23 20:55 - 2013-08-06 18:16 - 00000000 ____D () C:\Program Files (x86)\Sony
2014-12-23 20:54 - 2013-08-06 18:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2014-12-23 20:51 - 2012-10-08 15:58 - 00000000 ____D () C:\Program Files (x86)\Nokia
2014-12-23 20:48 - 2013-07-06 16:50 - 00000000 ____D () C:\Program Files (x86)\EA SPORTS
2014-12-23 20:43 - 2012-12-12 04:23 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-12-23 20:43 - 2012-10-10 01:44 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-12-23 17:42 - 2013-07-22 22:02 - 00000000 ____D () C:\Program Files (x86)\Google
2014-12-23 17:35 - 2012-10-08 16:03 - 00000000 ____D () C:\ProgramData\Nokia
2014-12-23 17:34 - 2012-10-22 13:39 - 00000000 ____D () C:\Users\Frantisek\AppData\Roaming\Nokia Suite
2014-12-23 17:34 - 2012-10-08 16:22 - 00000000 ____D () C:\Users\Frantisek\AppData\Roaming\Nokia
2014-12-23 17:20 - 2013-06-23 12:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
2014-12-23 17:20 - 2013-06-23 12:02 - 00000000 ____D () C:\Program Files (x86)\Comodo
2014-12-23 17:18 - 2013-10-18 18:59 - 00000000 ____D () C:\Users\Frantisek\Documents\My Games
2014-12-23 16:28 - 2012-08-05 14:16 - 00000000 ____D () C:\ProgramData\Temp
2014-12-23 15:53 - 2014-11-08 20:10 - 00004258 _____ () C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_333739353731333936372d3755556c415a505757414a34
2014-12-23 15:45 - 2012-04-06 21:46 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-23 15:44 - 2012-04-06 21:46 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-12-23 15:44 - 2012-04-06 21:46 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-23 15:25 - 2012-11-30 03:01 - 00000000 ____D () C:\Users\Frantisek\Desktop\filmy
2014-12-11 20:34 - 2012-10-07 21:51 - 00000000 ____D () C:\Users\Frantisek
2014-12-11 19:48 - 2014-08-31 12:09 - 00000000 ____D () C:\Users\Frantisek\AppData\Local\Avg2014
2014-12-11 19:30 - 2013-04-22 15:44 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-12-11 19:20 - 2012-08-05 14:11 - 00713706 _____ () C:\Windows\DPINST.LOG
2014-12-11 19:13 - 2012-04-06 22:30 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

Some content of TEMP:
====================
C:\Users\Frantisek\AppData\Local\Temp\27369uninstall.exe
C:\Users\Frantisek\AppData\Local\Temp\7za.exe
C:\Users\Frantisek\AppData\Local\Temp\APNSetup.exe
C:\Users\Frantisek\AppData\Local\Temp\AutoRun.exe
C:\Users\Frantisek\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Frantisek\AppData\Local\Temp\BundleSweetIMSetup.exe
C:\Users\Frantisek\AppData\Local\Temp\cabex.dll
C:\Users\Frantisek\AppData\Local\Temp\Delta.exe
C:\Users\Frantisek\AppData\Local\Temp\DeltaTB.exe
C:\Users\Frantisek\AppData\Local\Temp\drm_dyndata_7380009.dll
C:\Users\Frantisek\AppData\Local\Temp\EASOUNInstaller.exe
C:\Users\Frantisek\AppData\Local\Temp\eauninstall.exe
C:\Users\Frantisek\AppData\Local\Temp\Extract.exe
C:\Users\Frantisek\AppData\Local\Temp\FreeFrameSDK_1.0.0.3_Setup.exe
C:\Users\Frantisek\AppData\Local\Temp\GomAudDnInstaller.exe
C:\Users\Frantisek\AppData\Local\Temp\hijackthis.exe
C:\Users\Frantisek\AppData\Local\Temp\HPHelpUpdater.exe
C:\Users\Frantisek\AppData\Local\Temp\i4jdel0.exe
C:\Users\Frantisek\AppData\Local\Temp\listicka-partner-13415-1.1.2-offline.exe
C:\Users\Frantisek\AppData\Local\Temp\MybabylonTB.exe
C:\Users\Frantisek\AppData\Local\Temp\NirCmd.exe
C:\Users\Frantisek\AppData\Local\Temp\NOSEventMessages.dll
C:\Users\Frantisek\AppData\Local\Temp\oi_{D1AB95AB-D20B-4001-8683-5617B1B46EE3}.exe
C:\Users\Frantisek\AppData\Local\Temp\optprosetup.exe
C:\Users\Frantisek\AppData\Local\Temp\PartnerInstaller_smtyc.exe
C:\Users\Frantisek\AppData\Local\Temp\PEVZ.EXE
C:\Users\Frantisek\AppData\Local\Temp\propsys.dll
C:\Users\Frantisek\AppData\Local\Temp\proxy_vole7955088110522310336.dll
C:\Users\Frantisek\AppData\Local\Temp\Quarantine.exe
C:\Users\Frantisek\AppData\Local\Temp\remove.exe
C:\Users\Frantisek\AppData\Local\Temp\Resource.exe
C:\Users\Frantisek\AppData\Local\Temp\sed.exe
C:\Users\Frantisek\AppData\Local\Temp\Setup11.exe
C:\Users\Frantisek\AppData\Local\Temp\shortcut.exe
C:\Users\Frantisek\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Frantisek\AppData\Local\Temp\SP57698.exe
C:\Users\Frantisek\AppData\Local\Temp\SP58468.exe
C:\Users\Frantisek\AppData\Local\Temp\SP58803.exe
C:\Users\Frantisek\AppData\Local\Temp\sp58915.exe
C:\Users\Frantisek\AppData\Local\Temp\SP59202.exe
C:\Users\Frantisek\AppData\Local\Temp\SP59724.exe
C:\Users\Frantisek\AppData\Local\Temp\SP60228.exe
C:\Users\Frantisek\AppData\Local\Temp\SP60939.exe
C:\Users\Frantisek\AppData\Local\Temp\SP62229.exe
C:\Users\Frantisek\AppData\Local\Temp\SP63802.exe
C:\Users\Frantisek\AppData\Local\Temp\sp64126.exe
C:\Users\Frantisek\AppData\Local\Temp\SP64801.exe
C:\Users\Frantisek\AppData\Local\Temp\sqlite3.dll
C:\Users\Frantisek\AppData\Local\Temp\swreg.exe
C:\Users\Frantisek\AppData\Local\Temp\swxcacls.exe
C:\Users\Frantisek\AppData\Local\Temp\tbev6rh3.dll
C:\Users\Frantisek\AppData\Local\Temp\tu17p84.exe
C:\Users\Frantisek\AppData\Local\Temp\unelevate.exe
C:\Users\Frantisek\AppData\Local\Temp\UninstallHPSA.exe
C:\Users\Frantisek\AppData\Local\Temp\vlc-2.0.8-win32.exe
C:\Users\Frantisek\AppData\Local\Temp\wajam_install.exe
C:\Users\Frantisek\AppData\Local\Temp\wget.exe
C:\Users\Frantisek\AppData\Local\Temp\WSSetup.exe
C:\Users\Frantisek\AppData\Local\Temp\YontooSetup-S.exe
C:\Users\Frantisek\AppData\Local\Temp\zoek-delete.exe
C:\Users\Frantisek\AppData\Local\Temp\{3ABB4BB6-7C50-48F4-8488-3C484B6322A6}-37.0.2062.120_36.0.1985.143_chrome_updater.exe
C:\Users\Frantisek\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

==================== MBR and Partition Table ==================

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job => C:\Windows\TEMP\{15A794E4-8C55-4041-9D9D-FB668D762FEC}.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{0BD37B14-8EAF-4697-BB3B-4A61B709102A}.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\WpsUpdateTask_Frantisek.job => C:\Program Files (x86)\Kingsoft\Kingsoft Office\office6\wpsupdate.exe

==================== Alternate Data Streams (whitelisted) ==================

==================== Security Center ==================

AV: Norton Internet Security (Disabled - Out of date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
AS: Norton Internet Security (Disabled - Out of date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security (Disabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Frantisek\Desktop" je 245368 MB.

***** Startup Programs *****

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000001

==================== End Of Log ==============================

#7 Příspěvek od **altrok** » 25 Pro 2014 17:48

Odinstalujte

Norton Internet Security
AVG - na odstraneni zbytku pouzijte oficialni odinstalator - http://www.avg.com/cz-cs/utilities
McAfee Security Scan

Velikost plochy by nemela presahovat 200 MB. Snizuje se pak start i samotny chod celeho PC.

Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
znovu spustte FRST a kliknete na Fix

po restartu na Vas vyskoci fixlog (pripadne bude ulozen na Plose), jehoz obsah mi vlozte do pristi odpovedi

Kód: Vybrat vše

Start
CloseProcesses:
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-12-03] (Adobe Systems Incorporated)
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\...\Run: [GoogleChromeAutoLaunch_A4EEEEC2EE29EF9AFB0ED8B7841A357A] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488 2014-08-07] (Google Inc.)
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7063832 2014-11-21] (Piriform Ltd)
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\...\RunOnce: [Adobe Speed Launcher] => 1419523691
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\...\MountPoints2: F - F:\Startme.exe
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\...\MountPoints2: {b8c0469b-fe55-11e2-8588-78e3b576ac31} - F:\Startme.exe
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\...\MountPoints2: {e5aa4ae2-100e-11e3-8b42-78e3b576ac31} - F:\Startme.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (No File)
C:\Program Files\McAfee Security Scan
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKLM-x32 -> {611E37D5-D222-F03D-BEDF-05E85DC3F804} URL = http://www.bing.com/search?q={searchTerms}&form=CPNTDF&pc=CPNTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://uk.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CPNTDF
SearchScopes: HKU\S-1-5-21-1026437247-2068624690-2562190202-1001 -> {489AAB21-8022-44F7-A4EC-10DD531EFC7C} URL = http://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_13415
BHO: No Name -> {11111111-1111-1111-1111-110611191115} -> No File
BHO: No Name -> {5347542D-5636-006A-76A7-7A786E7484D7} -> No File
BHO: No Name -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> No File
BHO-x32: No Name -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> No File
BHO-x32: No Name -> {11111111-1111-1111-1111-110611191115} -> No File
BHO-x32: No Name -> {1fa57a3a-80e9-44a5-8032-e995b13643fa} -> No File
BHO-x32: No Name -> {5347542D-5636-006A-76A7-7A786E7484D7} -> No File
BHO-x32: No Name -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> No File
Toolbar: HKLM - No Name - {C98EE38D-21E4-4A50-907D-2B56FEC7013E} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM-x32 - No Name - {C98EE38D-21E4-4A50-907D-2B56FEC7013E} - No File
Toolbar: HKLM-x32 - No Name - {1fa57a3a-80e9-44a5-8032-e995b13643fa} - No File
Toolbar: HKU\S-1-5-21-1026437247-2068624690-2562190202-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKU\S-1-5-21-1026437247-2068624690-2562190202-1001 -> No Name - {5347542D-5636-006A-76A7-7A786E7484D7} - No File
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF Extension: No Name - wrc@avast.com [Not Found]

CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.3.0\\npsitesafety.dll No File
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll No File
CHR Plugin: (Nokia Suite Enabler Plugin) - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll No File
CHR Plugin: (MindSpark Toolbar Platform Plugin Stub) - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll No File
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\Frantisek\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Extension: (Senses) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli [2014-12-25]
S2 sbapifs; system32\DRIVERS\sbapifs.sys [X]

2014-12-25 17:16 - 2014-12-25 17:17 - 00026669 _____ () C:\Users\Frantisek\Desktop\FRST.txt
2014-12-25 17:13 - 2014-12-25 17:14 - 00112640 _____ (forum.viry.cz) C:\Users\Frantisek\Desktop\FRSTLauncher.exe
2014-12-25 17:09 - 2014-12-25 17:09 - 01295360 _____ () C:\Users\Frantisek\Desktop\zoek.exe
2014-12-25 16:47 - 2014-12-25 16:48 - 04134156 _____ () C:\Users\Frantisek\Desktop\zoek.zip
2014-12-25 16:23 - 2014-12-25 16:23 - 00000000 ____D () C:\zoek_backup
2014-12-25 16:02 - 2014-12-25 16:09 - 00000000 ____D () C:\AdwCleaner
2014-12-25 15:58 - 2014-12-25 15:58 - 02173952 _____ () C:\Users\Frantisek\Desktop\adwcleaner_4.106.exe
2014-12-25 14:01 - 2014-12-25 14:01 - 00000000 ____D () C:\rsit
2014-12-25 14:01 - 2014-12-25 14:01 - 00000000 ____D () C:\Program Files\trend micro
2014-12-25 13:50 - 2014-12-25 13:50 - 01222144 _____ () C:\Users\Frantisek\Downloads\RSITx64.exe
2014-12-25 02:13 - 2014-12-25 15:56 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-12-25 02:13 - 2014-12-25 15:56 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy
2014-12-25 02:12 - 2014-12-25 02:13 - 16409960 _____ (Safer Networking Limited ) C:\Users\Frantisek\Downloads\spybotsd162.exe
2014-12-24 20:21 - 2014-12-24 20:23 - 05309804 _____ (Piriform Ltd) C:\Users\Frantisek\Downloads\ccsetup501(3).exe
2014-12-24 17:37 - 2014-12-24 17:40 - 05295204 _____ (Piriform Ltd) C:\Users\Frantisek\Downloads\ccsetup501 (1).exe
2014-12-24 17:21 - 2014-12-24 17:23 - 05289364 _____ (Piriform Ltd) C:\Users\Frantisek\Downloads\ccsetup501(1).exe
2014-12-24 17:19 - 2014-12-24 17:21 - 05303964 _____ (Piriform Ltd) C:\Users\Frantisek\Downloads\ccsetup501(2).exe
2014-12-24 17:17 - 2014-12-24 17:19 - 05292284 _____ (Piriform Ltd) C:\Users\Frantisek\Downloads\ccsetup501.exe
2014-12-24 17:40 - 2014-12-24 17:42 - 00594804 _____ () C:\Users\Frantisek\Downloads\Nepotvrzeno 892725.crdownload
2014-12-24 13:14 - 2014-08-31 09:04 - 00000000 ____D () C:\Users\Frantisek\AppData\Roaming\Seznam.cz
2014-12-24 13:05 - 2014-08-31 09:05 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-12-25 13:35 - 2014-12-25 16:00 - 00000000 ____D () C:\ProgramData\STOPzilla!
2014-12-25 13:28 - 2014-12-25 13:29 - 00593488 _____ () C:\Users\Frantisek\Downloads\STOPzillaAVM_Setup.exe

REG: reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore" /v "Generalize_DisableSR" /t "REG_DWORD" /d "00000000"

Task: {52836EEE-973E-4404-B296-8B2D5337C5CB} - System32\Tasks\SPBIW_UpdateTask_Time_333739353731333936372d3755556c415a505757414a34 => Wscript.exe //B "C:\ProgramData\ShopperPro\spbihe.js" spbiu.exe /invoke /f:check_services /l:0 <==== ATTENTION
C:\ProgramData\ShopperPro
Task: {5B85ED70-177E-4A87-BABB-1BCB51DE4157} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv => C:\Windows\TEMP\{15A794E4-8C55-4041-9D9D-FB668D762FEC}.exe
Task: {797DCDAD-AB4F-47DE-BE35-5066508F03DB} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{0BD37B14-8EAF-4697-BB3B-4A61B709102A}.exe
Task: {E7D743CF-9323-4313-97B6-D8864F1C980A} - System32\Tasks\{00971CEC-5920-4381-9EE7-24A8B0FFE93B} => pcalua.exe -a "C:\Users\Frantisek\AppData\Local\Temp\Temp3_Need-for-Speed-Underground-2---srz.iplace.cz.zip\Need for Speed Underground 2\makeDesktopIcon.exe"
Task: {FBAE935F-B12E-431B-A8B4-66DB00EEEA92} - System32\Tasks\{E58561EF-F17A-4FD2-BED3-9D7C54B2C038} => pcalua.exe -a C:\Users\Frantisek\Desktop\zoek.exe.com -d C:\Users\Frantisek\Desktop
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job => C:\Windows\TEMP\{15A794E4-8C55-4041-9D9D-FB668D762FEC}.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{0BD37B14-8EAF-4697-BB3B-4A61B709102A}.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\WpsUpdateTask_Frantisek.job => C:\Program Files (x86)\Kingsoft\Kingsoft Office\office6\wpsupdate.exe

Hosts:
EmptyTemp:
End

phineas · #8 Příspěvek od **phineas** » 25 Pro 2014 18:32

zde

(jinak neskutečné zlepšení pc šlape super)

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 25-12-2014
Ran by Frantisek at 2014-12-25 18:19:43 Run:1
Running from C:\Users\Frantisek\Desktop
Loaded Profile: Frantisek (Available profiles: Frantisek)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-12-03] (Adobe Systems Incorporated)
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\...\Run: [GoogleChromeAutoLaunch_A4EEEEC2EE29EF9AFB0ED8B7841A357A] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488 2014-08-07] (Google Inc.)
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7063832 2014-11-21] (Piriform Ltd)
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\...\RunOnce: [Adobe Speed Launcher] => 1419523691
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\...\MountPoints2: F - F:\Startme.exe
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\...\MountPoints2: {b8c0469b-fe55-11e2-8588-78e3b576ac31} - F:\Startme.exe
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\...\MountPoints2: {e5aa4ae2-100e-11e3-8b42-78e3b576ac31} - F:\Startme.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (No File)
C:\Program Files\McAfee Security Scan
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKLM-x32 -> {611E37D5-D222-F03D-BEDF-05E85DC3F804} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://uk.search.yahoo.com/search?p={se ... ype=CPNTDF
SearchScopes: HKU\S-1-5-21-1026437247-2068624690-2562190202-1001 -> {489AAB21-8022-44F7-A4EC-10DD531EFC7C} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_13415
BHO: No Name -> {11111111-1111-1111-1111-110611191115} -> No File
BHO: No Name -> {5347542D-5636-006A-76A7-7A786E7484D7} -> No File
BHO: No Name -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> No File
BHO-x32: No Name -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> No File
BHO-x32: No Name -> {11111111-1111-1111-1111-110611191115} -> No File
BHO-x32: No Name -> {1fa57a3a-80e9-44a5-8032-e995b13643fa} -> No File
BHO-x32: No Name -> {5347542D-5636-006A-76A7-7A786E7484D7} -> No File
BHO-x32: No Name -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> No File
Toolbar: HKLM - No Name - {C98EE38D-21E4-4A50-907D-2B56FEC7013E} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM-x32 - No Name - {C98EE38D-21E4-4A50-907D-2B56FEC7013E} - No File
Toolbar: HKLM-x32 - No Name - {1fa57a3a-80e9-44a5-8032-e995b13643fa} - No File
Toolbar: HKU\S-1-5-21-1026437247-2068624690-2562190202-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKU\S-1-5-21-1026437247-2068624690-2562190202-1001 -> No Name - {5347542D-5636-006A-76A7-7A786E7484D7} - No File
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF Extension: No Name - wrc@avast.com [Not Found]

CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.3.0\\npsitesafety.dll No File
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll No File
CHR Plugin: (Nokia Suite Enabler Plugin) - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll No File
CHR Plugin: (MindSpark Toolbar Platform Plugin Stub) - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll No File
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\Frantisek\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Extension: (Senses) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli [2014-12-25]
S2 sbapifs; system32\DRIVERS\sbapifs.sys [X]

2014-12-25 17:16 - 2014-12-25 17:17 - 00026669 _____ () C:\Users\Frantisek\Desktop\FRST.txt
2014-12-25 17:13 - 2014-12-25 17:14 - 00112640 _____ (forum.viry.cz) C:\Users\Frantisek\Desktop\FRSTLauncher.exe
2014-12-25 17:09 - 2014-12-25 17:09 - 01295360 _____ () C:\Users\Frantisek\Desktop\zoek.exe
2014-12-25 16:47 - 2014-12-25 16:48 - 04134156 _____ () C:\Users\Frantisek\Desktop\zoek.zip
2014-12-25 16:23 - 2014-12-25 16:23 - 00000000 ____D () C:\zoek_backup
2014-12-25 16:02 - 2014-12-25 16:09 - 00000000 ____D () C:\AdwCleaner
2014-12-25 15:58 - 2014-12-25 15:58 - 02173952 _____ () C:\Users\Frantisek\Desktop\adwcleaner_4.106.exe
2014-12-25 14:01 - 2014-12-25 14:01 - 00000000 ____D () C:\rsit
2014-12-25 14:01 - 2014-12-25 14:01 - 00000000 ____D () C:\Program Files\trend micro
2014-12-25 13:50 - 2014-12-25 13:50 - 01222144 _____ () C:\Users\Frantisek\Downloads\RSITx64.exe
2014-12-25 02:13 - 2014-12-25 15:56 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-12-25 02:13 - 2014-12-25 15:56 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy
2014-12-25 02:12 - 2014-12-25 02:13 - 16409960 _____ (Safer Networking Limited ) C:\Users\Frantisek\Downloads\spybotsd162.exe
2014-12-24 20:21 - 2014-12-24 20:23 - 05309804 _____ (Piriform Ltd) C:\Users\Frantisek\Downloads\ccsetup501(3).exe
2014-12-24 17:37 - 2014-12-24 17:40 - 05295204 _____ (Piriform Ltd) C:\Users\Frantisek\Downloads\ccsetup501 (1).exe
2014-12-24 17:21 - 2014-12-24 17:23 - 05289364 _____ (Piriform Ltd) C:\Users\Frantisek\Downloads\ccsetup501(1).exe
2014-12-24 17:19 - 2014-12-24 17:21 - 05303964 _____ (Piriform Ltd) C:\Users\Frantisek\Downloads\ccsetup501(2).exe
2014-12-24 17:17 - 2014-12-24 17:19 - 05292284 _____ (Piriform Ltd) C:\Users\Frantisek\Downloads\ccsetup501.exe
2014-12-24 17:40 - 2014-12-24 17:42 - 00594804 _____ () C:\Users\Frantisek\Downloads\Nepotvrzeno 892725.crdownload
2014-12-24 13:14 - 2014-08-31 09:04 - 00000000 ____D () C:\Users\Frantisek\AppData\Roaming\Seznam.cz
2014-12-24 13:05 - 2014-08-31 09:05 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-12-25 13:35 - 2014-12-25 16:00 - 00000000 ____D () C:\ProgramData\STOPzilla!
2014-12-25 13:28 - 2014-12-25 13:29 - 00593488 _____ () C:\Users\Frantisek\Downloads\STOPzillaAVM_Setup.exe

REG: reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore" /v "Generalize_DisableSR" /t "REG_DWORD" /d "00000000"

Task: {52836EEE-973E-4404-B296-8B2D5337C5CB} - System32\Tasks\SPBIW_UpdateTask_Time_333739353731333936372d3755556c415a505757414a34 => Wscript.exe //B "C:\ProgramData\ShopperPro\spbihe.js" spbiu.exe /invoke /f:check_services /l:0 <==== ATTENTION
C:\ProgramData\ShopperPro
Task: {5B85ED70-177E-4A87-BABB-1BCB51DE4157} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv => C:\Windows\TEMP\{15A794E4-8C55-4041-9D9D-FB668D762FEC}.exe
Task: {797DCDAD-AB4F-47DE-BE35-5066508F03DB} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{0BD37B14-8EAF-4697-BB3B-4A61B709102A}.exe
Task: {E7D743CF-9323-4313-97B6-D8864F1C980A} - System32\Tasks\{00971CEC-5920-4381-9EE7-24A8B0FFE93B} => pcalua.exe -a "C:\Users\Frantisek\AppData\Local\Temp\Temp3_Need-for-Speed-Underground-2---srz.iplace.cz.zip\Need for Speed Underground 2\makeDesktopIcon.exe"
Task: {FBAE935F-B12E-431B-A8B4-66DB00EEEA92} - System32\Tasks\{E58561EF-F17A-4FD2-BED3-9D7C54B2C038} => pcalua.exe -a C:\Users\Frantisek\Desktop\zoek.exe.com -d C:\Users\Frantisek\Desktop
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job => C:\Windows\TEMP\{15A794E4-8C55-4041-9D9D-FB668D762FEC}.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{0BD37B14-8EAF-4697-BB3B-4A61B709102A}.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\WpsUpdateTask_Frantisek.job => C:\Program Files (x86)\Kingsoft\Kingsoft Office\office6\wpsupdate.exe

Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_A4EEEEC2EE29EF9AFB0ED8B7841A357A => value deleted successfully.
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Monitoring => value deleted successfully.
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Adobe Speed Launcher => value deleted successfully.
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\S-1-5-21-1026437247-2068624690-2562190202-1001 => Key not found.
"HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b8c0469b-fe55-11e2-8588-78e3b576ac31}" => Key deleted successfully.
HKCR\CLSID\{b8c0469b-fe55-11e2-8588-78e3b576ac31} => Key not found.
"HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e5aa4ae2-100e-11e3-8b42-78e3b576ac31}" => Key deleted successfully.
HKCR\CLSID\{e5aa4ae2-100e-11e3-8b42-78e3b576ac31} => Key not found.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk not found.
C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe not found.
"C:\Program Files\McAfee Security Scan" => File/Directory not found.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
"HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\SOFTWARE\Policies\Google" => Key deleted successfully.
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{611E37D5-D222-F03D-BEDF-05E85DC3F804}" => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{611E37D5-D222-F03D-BEDF-05E85DC3F804} => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}" => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{b7fca997-d0fb-4fe0-8afd-255e89cf9671} => Key not found.
"HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{489AAB21-8022-44F7-A4EC-10DD531EFC7C}" => Key deleted successfully.
HKCR\CLSID\{489AAB21-8022-44F7-A4EC-10DD531EFC7C} => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611191115}" => Key deleted successfully.
HKCR\CLSID\{11111111-1111-1111-1111-110611191115} => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5347542D-5636-006A-76A7-7A786E7484D7}" => Key deleted successfully.
HKCR\CLSID\{5347542D-5636-006A-76A7-7A786E7484D7} => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8590886E-EC8C-43C1-A32C-E4C2B0B6395B}" => Key deleted successfully.
HKCR\CLSID\{8590886E-EC8C-43C1-A32C-E4C2B0B6395B} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01} => Key not found.
HKCR\Wow6432Node\CLSID\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01} => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611191115}" => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611191115} => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1fa57a3a-80e9-44a5-8032-e995b13643fa}" => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{1fa57a3a-80e9-44a5-8032-e995b13643fa} => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5347542D-5636-006A-76A7-7A786E7484D7}" => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{5347542D-5636-006A-76A7-7A786E7484D7} => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8590886E-EC8C-43C1-A32C-E4C2B0B6395B}" => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{8590886E-EC8C-43C1-A32C-E4C2B0B6395B} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{C98EE38D-21E4-4A50-907D-2B56FEC7013E} => value deleted successfully.
HKCR\CLSID\{C98EE38D-21E4-4A50-907D-2B56FEC7013E} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => value deleted successfully.
HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{C98EE38D-21E4-4A50-907D-2B56FEC7013E} => value deleted successfully.
HKCR\Wow6432Node\CLSID\{C98EE38D-21E4-4A50-907D-2B56FEC7013E} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{1fa57a3a-80e9-44a5-8032-e995b13643fa} => value deleted successfully.
HKCR\Wow6432Node\CLSID\{1fa57a3a-80e9-44a5-8032-e995b13643fa} => Key not found.
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => value deleted successfully.
HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Key not found.
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{5347542D-5636-006A-76A7-7A786E7484D7} => value deleted successfully.
HKCR\CLSID\{5347542D-5636-006A-76A7-7A786E7484D7} => Key not found.
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
HKU\S-1-5-21-1026437247-2068624690-2562190202-1001\Software\Mozilla\Firefox\Extensions\\{e4f94d1e-2f53-401e-8885-681602c0ddd8} => Value not found.
C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi => Moved successfully.
FF Extension: No Name - wrc@avast.com [Not Found] not found.
CHR dev: Chrome dev build detected! <======= ATTENTION => Error: No automatic fix found for this entry.
C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.3.0\\npsitesafety.dll not found.
C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll not found.
C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll not found.
C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll not found.
C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll not found.
C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll not found.
C:\Users\Frantisek\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll not found.
C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll not found.
c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll not found.
C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkkenjlnjfemconejajakbijbheoffli => Moved successfully.
sbapifs => Service deleted successfully.
"C:\Users\Frantisek\Desktop\FRST.txt" => File/Directory not found.
C:\Users\Frantisek\Desktop\FRSTLauncher.exe => Moved successfully.
"C:\Users\Frantisek\Desktop\zoek.exe" => File/Directory not found.
C:\Users\Frantisek\Desktop\zoek.zip => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\Frantisek\Desktop\adwcleaner_4.106.exe => Moved successfully.
C:\rsit => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\Users\Frantisek\Downloads\RSITx64.exe => Moved successfully.
C:\ProgramData\Spybot - Search & Destroy => Moved successfully.
C:\Program Files (x86)\Spybot - Search & Destroy => Moved successfully.
C:\Users\Frantisek\Downloads\spybotsd162.exe => Moved successfully.
C:\Users\Frantisek\Downloads\ccsetup501(3).exe => Moved successfully.
C:\Users\Frantisek\Downloads\ccsetup501 (1).exe => Moved successfully.
C:\Users\Frantisek\Downloads\ccsetup501(1).exe => Moved successfully.
C:\Users\Frantisek\Downloads\ccsetup501(2).exe => Moved successfully.
C:\Users\Frantisek\Downloads\ccsetup501.exe => Moved successfully.
C:\Users\Frantisek\Downloads\Nepotvrzeno 892725.crdownload => Moved successfully.
C:\Users\Frantisek\AppData\Roaming\Seznam.cz => Moved successfully.
C:\Program Files (x86)\Seznam.cz => Moved successfully.
C:\ProgramData\STOPzilla! => Moved successfully.
C:\Users\Frantisek\Downloads\STOPzillaAVM_Setup.exe => Moved successfully.

========= reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore" /v "Generalize_DisableSR" /t "REG_DWORD" /d "00000000" =========

The operation completed successfully.

========= End of Reg: =========

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{52836EEE-973E-4404-B296-8B2D5337C5CB}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{52836EEE-973E-4404-B296-8B2D5337C5CB}" => Key deleted successfully.
C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_333739353731333936372d3755556c415a505757414a34 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SPBIW_UpdateTask_Time_333739353731333936372d3755556c415a505757414a34" => Key deleted successfully.
"C:\ProgramData\ShopperPro" => File/Directory not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5B85ED70-177E-4A87-BABB-1BCB51DE4157}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5B85ED70-177E-4A87-BABB-1BCB51DE4157}" => Key deleted successfully.
C:\Windows\System32\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AVG-Secure-Search-Update_JUNE2013_HP_rmv" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{797DCDAD-AB4F-47DE-BE35-5066508F03DB}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{797DCDAD-AB4F-47DE-BE35-5066508F03DB}" => Key deleted successfully.
C:\Windows\System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AVG-Secure-Search-Update_JUNE2013_TB_rmv" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E7D743CF-9323-4313-97B6-D8864F1C980A}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E7D743CF-9323-4313-97B6-D8864F1C980A}" => Key deleted successfully.
C:\Windows\System32\Tasks\{00971CEC-5920-4381-9EE7-24A8B0FFE93B} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{00971CEC-5920-4381-9EE7-24A8B0FFE93B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FBAE935F-B12E-431B-A8B4-66DB00EEEA92}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FBAE935F-B12E-431B-A8B4-66DB00EEEA92}" => Key deleted successfully.
C:\Windows\System32\Tasks\{E58561EF-F17A-4FD2-BED3-9D7C54B2C038} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{E58561EF-F17A-4FD2-BED3-9D7C54B2C038}" => Key deleted successfully.
C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job => Moved successfully.
C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\Tasks\WpsUpdateTask_Frantisek.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 6.1 GB temporary data.

The system needed a reboot.

==== End of Fixlog 18:23:07 ====

#9 Příspěvek od **altrok** » 25 Pro 2014 18:39

Taky tam bylo bordela az na pudu.. proto jsem si chtel praci usetrit utilitama...

Takze jeste uklidime.

Stahnete a spustte DelFix - https://toolslib.net/downloads/viewdownload/2-delfix/
Oznacte jen moznost "Remove disinfection tools"
kliknete na Run

A pokud nejsou dotazy ci jine problemy, je to ode mne vse.

phineas · #10 Příspěvek od **phineas** » 25 Pro 2014 18:56

Super, moc děkuji za pomoc

jen bych se chtěl zeptat co všechno mám mazat či to nechat anebo něco stáhnout k tomu avastu (nějakou prevenci kterou můžu užívat na všech pc - dle vás tu nejlepší

) ještě jednou velice děkuji za pomoc a váš čas

#11 Příspěvek od **altrok** » 25 Pro 2014 21:52

avast! jako ochrana staci. Pak je to spis otazka chovani uzivatele, na co vsechno na internetu klikne, s cim vsim pri instalaci programu souhlasi a jakemu viru da u antiviru vyjimku (zni to smesne, ale presne tohle uzivatele delaji v pripade cracku). Na pravidelnou udrzbu doporucuji cca jednou tydne pouzit CCleaner - idealne stahujte ze stranek vyrobce - Piriformu (nevyskytuji se tam adwary v podobe "fajfek" typu listicka a postak od seznamu atd... zkratka o starost min).

Nemate zac, rad jsem pomohl

Mejte se a treba zase nekdy

VIRY.CZ

Zpomalený počítač, vyskakující reklamní okna

Zpomalený počítač, vyskakující reklamní okna

Re: Zpomalený počítač, vyskakující reklamní okna

Re: Zpomalený počítač, vyskakující reklamní okna

Re: Zpomalený počítač, vyskakující reklamní okna

Re: Zpomalený počítač, vyskakující reklamní okna

Re: Zpomalený počítač, vyskakující reklamní okna

Re: Zpomalený počítač, vyskakující reklamní okna

Re: Zpomalený počítač, vyskakující reklamní okna

Re: Zpomalený počítač, vyskakující reklamní okna

Re: Zpomalený počítač, vyskakující reklamní okna

Re: Zpomalený počítač, vyskakující reklamní okna