Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o kontrolu logu

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Petra1
Návštěvník
Návštěvník
Příspěvky: 41
Registrován: 20 srp 2006 15:44

Prosím o kontrolu logu

#1 Příspěvek od Petra1 »

Avast hlásí, že zablokoval nebezpečnou stránku nebo soubor

Logfile of random's system information tool 1.10 (written by random/random)
Run by ZM at 2015-05-12 20:11:30
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 214 GB (77%) free of 278 GB
Total RAM: 4010 MB (48% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:11:46, on 12.5.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17728)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Samsung\Easy Software Manager\SWMAgent.exe
C:\Program Files (x86)\Luidia\eBeam Device Service\eBeamDeviceServiceUI.exe
C:\Program Files\Activ Software\ActivDriver\activmgr.exe
C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe
C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe
C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe
C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
C:\Program Files (x86)\Samsung\Easy Support Center\SSCKbdHk.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\AVAST Software\Avast\avBugReport.exe
C:\Program Files\trend micro\ZM.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: PriceLeesss - {71dbae38-3554-4c4e-af28-3d1f78ab1aa2} - C:\Program Files (x86)\PriceLeesss\kLAWNCR4qsqkWU.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SSDMonitor] C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-21-1571869238-3936240484-2151935606-1000\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Bluetooth 3.0 + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: Bluetooth Device Monitor - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: eBeam Device Service - Luidia, Inc. - C:\Program Files (x86)\Luidia\eBeam Device Service\eBeamDeviceServiceMain.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Foxit Cloud Safe Update Service (FoxitCloudUpdateService) - Foxit Software Inc. - C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - Unknown owner - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: SInstalátor (ssinstall) - PS Media s.r.o. - C:\windows\SysWOW64\ssins.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11189 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
winlogon.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\nvvsvc.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs

C:\windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\windows\system32\nvvsvc.exe -session -first
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
taskeng.exe {C41596BF-CB4A-4B64-80BE-D8426A4F4AEA}
"taskhost.exe"
"C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe"
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
taskeng.exe {F8AE5460-76DE-4C50-94A0-87B98512C255}
"C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe"
C:\windows\system32\svchost.exe -k bthsvcs
"C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe"
"C:\Program Files (x86)\Samsung\Easy Software Manager\SWMAgent.exe"
"C:\Program Files (x86)\Luidia\eBeam Device Service\eBeamDeviceServiceMain.exe"
C:\Program Files (x86)\Luidia\eBeam Device Service\eBeamDeviceServiceUI.exe -medIL
"C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe"
"C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe"
"C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe"
C:\windows\SysWOW64\ssins.exe
C:\windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
C:\windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe"
"C:\Windows\System32\rundll32.exe" "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\Activ Software\ActivDriver\ActivControl2x64.exe"
"C:\Program Files\Activ Software\ActivDriver\activmgr.exe"
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
taskeng.exe {493FF22A-DDEA-405B-82B7-CC7471D47898}
"C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe"
"C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe"
"C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe"
"C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe"
"C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe"
C:\windows\system32\igfxext.exe -Embedding
C:\windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
C:\windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe"
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe"
"C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe"
"C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe" -Embedding
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\windows\servicing\TrustedInstaller.exe
ngservice.exe pipeserver
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-08469647-727d-4c1f-b88c-79103bbc412a -SystemEventPortName:HostProcess-bd8bddd1-62b3-43be-9022-ec33ea2d2265 -IoCancelEventPortName:HostProcess-574a9b14-9815-419e-9ceb-33d4a25179c8 -NonStateChangingEventPortName:HostProcess-8b87fcdb-8b69-4e17-9854-9c81bb30e153 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:b25031c4-4c61-4af4-bde6-f8db402bbb65 -DeviceGroupId:WpdFsGroup
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\windows\system32\SearchIndexer.exe /Embedding
C:\windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe"
"C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe"
C:\windows\system32\wbem\unsecapp.exe -Embedding
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files (x86)\Samsung\Easy Support Center\SSCKbdHk.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\windows\system32\svchost.exe -k SDRSVC
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 4980
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\AVAST Software\Avast\avBugReport.exe"
\??\C:\windows\system32\conhost.exe "1769302195-1408418235-1403227776-2063433643-416124245-578017442-633904230-2033029135
C:\windows\System32\svchost.exe -k WerSvcGroup
"C:\Program Files\AVAST Software\Avast\setup\instup.exe" /instop:update_vps
"C:\windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"D:\ZM\Downloads\RSITx64.exe"
"C:\windows\system32\RunDll32.exe" "C:\windows\system32\WerConCpl.dll", LaunchErcApp -queuereporting

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\windows\tasks\AutoKMS.job - C:\windows\AutoKMS.exe
C:\windows\tasks\AutoKMSDaily.job - C:\windows\AutoKMS.exe
C:\windows\tasks\Bidaily Synchronize Task.job - C:\ProgramData\{3694846e-0f79-4744-3694-4846e0f711b8}\Download.exe --startup=1 --single
C:\windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\ZM\AppData\Roaming\Mozilla\Firefox\Profiles\v3ezqehg.default

prefs.js - "browser.search.useDBForOrder" - ""
prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"
prefs.js - "keyword.URL" - "http://search.seznam.cz/?sourceid=quick ... earchTerms}&"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.169 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.31.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.31.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.169 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.31.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.31.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL

C:\Program Files (x86)\Mozilla Firefox\extensions\
xmlfiller@software602.cz

C:\Program Files (x86)\Mozilla Firefox\components\
nsIFillerPlugin.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\
npfiller.dll
NPOFFICE.DLL
nppdf32.dll
npwachk.dll

C:\Users\ZM\AppData\Roaming\Mozilla\Firefox\Profiles\v3ezqehg.default\extensions\
UAVJ1Y@g.net
{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}

C:\Users\ZM\AppData\Roaming\Mozilla\Firefox\Profiles\v3ezqehg.default\searchplugins\
ask-search.xml
Google.xml
seznam-avast.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{71dbae38-3554-4c4e-af28-3d1f78ab1aa2}]
PriceLeesss - C:\Program Files (x86)\PriceLeesss\kLAWNCR4qsqkWU.x64.dll [2015-05-12 896000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-02-27 551848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-05 662672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-27 212904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{71dbae38-3554-4c4e-af28-3d1f78ab1aa2}]
PriceLeesss - C:\Program Files (x86)\PriceLeesss\kLAWNCR4qsqkWU.dll [2015-05-12 827392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-27 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-05 565304]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-27 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-07-12 12558440]
"BTMTrayAgent"=C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [2011-03-30 10372368]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2011-06-17 2721576]
"ActivControl"=C:\Program Files\Activ Software\ActivDriver\ActivControl2x64.exe [2012-02-24 1241456]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-04-08 8202008]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SSDMonitor"=C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [2011-12-12 103896]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-05-11 5515496]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2010-12-16 384000]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2015-05-12 20:08:26 ----D---- C:\rsit
2015-05-12 17:02:15 ----D---- C:\Users\ZM\AppData\Roaming\Seznam.cz
2015-05-12 17:01:29 ----D---- C:\ProgramData\15005040001595613094
2015-05-12 17:01:26 ----D---- C:\Program Files (x86)\PriceLeesss
2015-05-12 17:00:56 ----D---- C:\ProgramData\{3694846e-0f79-4744-3694-4846e0f711b8}
2015-04-30 19:36:05 ----D---- C:\CSI
2015-04-28 20:30:21 ----A---- C:\windows\system32\aswBoot.exe
2015-04-28 20:30:14 ----A---- C:\windows\avastSS.scr
2015-04-23 19:52:40 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-04-15 17:44:49 ----A---- C:\windows\SYSWOW64\wuwebv.dll
2015-04-15 17:44:49 ----A---- C:\windows\SYSWOW64\wups.dll
2015-04-15 17:44:49 ----A---- C:\windows\SYSWOW64\wudriver.dll
2015-04-15 17:44:49 ----A---- C:\windows\SYSWOW64\wuapp.exe
2015-04-15 17:44:49 ----A---- C:\windows\SYSWOW64\wuapi.dll
2015-04-15 17:44:49 ----A---- C:\windows\system32\wuauclt.exe
2015-04-15 17:44:49 ----A---- C:\windows\system32\wuapp.exe
2015-04-15 17:44:49 ----A---- C:\windows\system32\wuapi.dll
2015-04-15 17:44:48 ----A---- C:\windows\system32\wuwebv.dll
2015-04-15 17:44:48 ----A---- C:\windows\system32\wups2.dll
2015-04-15 17:44:48 ----A---- C:\windows\system32\wups.dll
2015-04-15 17:44:48 ----A---- C:\windows\system32\wudriver.dll
2015-04-15 17:44:48 ----A---- C:\windows\system32\wucltux.dll
2015-04-15 17:44:48 ----A---- C:\windows\system32\wuaueng.dll
2015-04-15 17:44:48 ----A---- C:\windows\system32\wu.upgrade.ps.dll
2015-04-15 17:44:48 ----A---- C:\windows\system32\WinSetupUI.dll
2015-04-15 17:44:43 ----A---- C:\windows\system32\invagent.dll
2015-04-15 17:44:43 ----A---- C:\windows\system32\generaltel.dll
2015-04-15 17:44:43 ----A---- C:\windows\system32\devinv.dll
2015-04-15 17:44:43 ----A---- C:\windows\system32\appraiser.dll
2015-04-15 17:44:43 ----A---- C:\windows\system32\aeinv.dll
2015-04-15 17:44:43 ----A---- C:\windows\system32\acmigration.dll
2015-04-15 17:44:42 ----A---- C:\windows\system32\gdi32.dll
2015-04-15 17:44:42 ----A---- C:\windows\system32\aepic.dll
2015-04-15 17:44:42 ----A---- C:\windows\system32\aepdu.dll
2015-04-15 17:44:41 ----A---- C:\windows\SYSWOW64\gdi32.dll
2015-04-15 17:44:41 ----A---- C:\windows\system32\msxml3.dll
2015-04-15 17:44:40 ----A---- C:\windows\SYSWOW64\msxml3.dll
2015-04-15 17:44:39 ----A---- C:\windows\SYSWOW64\msxml3r.dll
2015-04-15 17:44:39 ----A---- C:\windows\system32\msxml3r.dll
2015-04-15 17:44:20 ----A---- C:\windows\system32\ntoskrnl.exe
2015-04-15 17:44:19 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2015-04-15 17:44:19 ----A---- C:\windows\SYSWOW64\ntdll.dll
2015-04-15 17:44:19 ----A---- C:\windows\system32\ntdll.dll
2015-04-15 17:44:19 ----A---- C:\windows\system32\KernelBase.dll
2015-04-15 17:44:19 ----A---- C:\windows\system32\kernel32.dll
2015-04-15 17:44:18 ----A---- C:\windows\SYSWOW64\schannel.dll
2015-04-15 17:44:18 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2015-04-15 17:44:18 ----A---- C:\windows\SYSWOW64\kernel32.dll
2015-04-15 17:44:18 ----A---- C:\windows\system32\wow64win.dll
2015-04-15 17:44:18 ----A---- C:\windows\system32\wow64.dll
2015-04-15 17:44:18 ----A---- C:\windows\system32\srcore.dll
2015-04-15 17:44:18 ----A---- C:\windows\system32\schannel.dll
2015-04-15 17:44:18 ----A---- C:\windows\system32\lsasrv.dll
2015-04-15 17:44:18 ----A---- C:\windows\system32\conhost.exe
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\wow32.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\wdigest.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\TSpkg.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\sspicli.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\srclient.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\setup16.exe
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\secur32.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\ncrypt.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\msv1_0.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\kerberos.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\credssp.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\auditpol.exe
2015-04-15 17:44:17 ----A---- C:\windows\system32\wow64cpu.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\winsrv.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\wdigest.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\TSpkg.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\sspisrv.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\sspicli.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\srclient.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\smss.exe
2015-04-15 17:44:17 ----A---- C:\windows\system32\secur32.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\rstrui.exe
2015-04-15 17:44:17 ----A---- C:\windows\system32\ntvdm64.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\ncrypt.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\msv1_0.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\lsass.exe
2015-04-15 17:44:17 ----A---- C:\windows\system32\kerberos.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2015-04-15 17:44:17 ----A---- C:\windows\system32\drivers\ksecdd.sys
2015-04-15 17:44:17 ----A---- C:\windows\system32\csrsrv.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\credssp.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\auditpol.exe
2015-04-15 17:44:16 ----A---- C:\windows\SYSWOW64\user.exe
2015-04-15 17:44:16 ----A---- C:\windows\SYSWOW64\instnm.exe
2015-04-15 17:44:16 ----A---- C:\windows\SYSWOW64\apisetschema.dll
2015-04-15 17:44:16 ----A---- C:\windows\system32\apisetschema.dll
2015-04-15 17:44:16 ----A---- C:\windows\system32\adtschema.dll
2015-04-15 17:44:15 ----A---- C:\windows\SYSWOW64\msobjs.dll
2015-04-15 17:44:15 ----A---- C:\windows\SYSWOW64\msaudite.dll
2015-04-15 17:44:15 ----A---- C:\windows\SYSWOW64\adtschema.dll
2015-04-15 17:44:15 ----A---- C:\windows\system32\msobjs.dll
2015-04-15 17:44:15 ----A---- C:\windows\system32\msaudite.dll
2015-04-15 17:44:01 ----A---- C:\windows\system32\drivers\http.sys
2015-04-15 17:44:00 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2015-04-15 17:44:00 ----A---- C:\windows\SYSWOW64\MshtmlDac.dll
2015-04-15 17:44:00 ----A---- C:\windows\SYSWOW64\iernonce.dll
2015-04-15 17:44:00 ----A---- C:\windows\SYSWOW64\ieetwproxystub.dll
2015-04-15 17:44:00 ----A---- C:\windows\system32\ieetwproxystub.dll
2015-04-15 17:44:00 ----A---- C:\windows\system32\ieetwcollector.exe
2015-04-15 17:43:58 ----A---- C:\windows\SYSWOW64\urlmon.dll
2015-04-15 17:43:58 ----A---- C:\windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-04-15 17:43:58 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2015-04-15 17:43:58 ----A---- C:\windows\system32\JavaScriptCollectionAgent.dll
2015-04-15 17:43:58 ----A---- C:\windows\system32\iernonce.dll
2015-04-15 17:43:58 ----A---- C:\windows\system32\ie4uinit.exe
2015-04-15 17:43:57 ----A---- C:\windows\SYSWOW64\mshtml.dll
2015-04-15 17:43:57 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2015-04-15 17:43:57 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2015-04-15 17:43:55 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2015-04-15 17:43:55 ----A---- C:\windows\SYSWOW64\jscript9diag.dll
2015-04-15 17:43:55 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2015-04-15 17:43:55 ----A---- C:\windows\SYSWOW64\iesetup.dll
2015-04-15 17:43:55 ----A---- C:\windows\SYSWOW64\iertutil.dll
2015-04-15 17:43:55 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2015-04-15 17:43:55 ----A---- C:\windows\system32\urlmon.dll
2015-04-15 17:43:55 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2015-04-15 17:43:55 ----A---- C:\windows\system32\ieetwcollectorres.dll
2015-04-15 17:43:55 ----A---- C:\windows\system32\iedkcs32.dll
2015-04-15 17:43:54 ----A---- C:\windows\SYSWOW64\ieui.dll
2015-04-15 17:43:54 ----A---- C:\windows\SYSWOW64\ieframe.dll
2015-04-15 17:43:54 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2015-04-15 17:43:54 ----A---- C:\windows\system32\msfeeds.dll
2015-04-15 17:43:54 ----A---- C:\windows\system32\iesetup.dll
2015-04-15 17:43:54 ----A---- C:\windows\system32\ieapfltr.dll
2015-04-15 17:43:54 ----A---- C:\windows\system32\dxtrans.dll
2015-04-15 17:43:53 ----A---- C:\windows\system32\iertutil.dll
2015-04-15 17:43:52 ----A---- C:\windows\SYSWOW64\wininet.dll
2015-04-15 17:43:52 ----A---- C:\windows\SYSWOW64\vbscript.dll
2015-04-15 17:43:52 ----A---- C:\windows\SYSWOW64\msrating.dll
2015-04-15 17:43:52 ----A---- C:\windows\SYSWOW64\mshtmlmedia.dll
2015-04-15 17:43:52 ----A---- C:\windows\SYSWOW64\jscript9.dll
2015-04-15 17:43:52 ----A---- C:\windows\system32\jsproxy.dll
2015-04-15 17:43:52 ----A---- C:\windows\system32\ieUnatt.exe
2015-04-15 17:43:51 ----A---- C:\windows\system32\ieui.dll
2015-04-15 17:43:51 ----A---- C:\windows\system32\ieframe.dll
2015-04-15 17:43:51 ----A---- C:\windows\system32\dxtmsft.dll
2015-04-15 17:43:50 ----A---- C:\windows\system32\mshtmlmedia.dll
2015-04-15 17:43:50 ----A---- C:\windows\system32\mshtmled.dll
2015-04-15 17:43:50 ----A---- C:\windows\system32\jscript9diag.dll
2015-04-15 17:43:50 ----A---- C:\windows\system32\jscript9.dll
2015-04-15 17:43:49 ----A---- C:\windows\system32\wininet.dll
2015-04-15 17:43:49 ----A---- C:\windows\system32\vbscript.dll
2015-04-15 17:43:49 ----A---- C:\windows\system32\MshtmlDac.dll
2015-04-15 17:43:48 ----A---- C:\windows\system32\msrating.dll
2015-04-15 17:43:48 ----A---- C:\windows\system32\mshtml.dll
2015-04-15 17:43:06 ----A---- C:\windows\SYSWOW64\clfsw32.dll
2015-04-15 17:43:06 ----A---- C:\windows\system32\clfsw32.dll
2015-04-15 17:43:06 ----A---- C:\windows\system32\clfs.sys
2015-04-15 17:25:08 ----A---- C:\windows\SYSWOW64\FlashPlayerInstaller.exe

======List of files/folders modified in the last 1 month======

2015-05-12 20:11:46 ----D---- C:\windows\Temp
2015-05-12 20:11:46 ----D---- C:\Program Files\trend micro
2015-05-12 20:11:31 ----D---- C:\windows\Prefetch
2015-05-12 20:05:34 ----D---- C:\windows\System32
2015-05-12 20:05:34 ----D---- C:\windows\inf
2015-05-12 20:05:34 ----A---- C:\windows\system32\PerfStringBackup.INI
2015-05-12 20:01:48 ----A---- C:\windows\SYSWOW64\log.txt
2015-05-12 20:01:38 ----D---- C:\windows\system32\Tasks
2015-05-12 20:01:35 ----D---- C:\windows\Tasks
2015-05-12 19:59:38 ----D---- C:\Windows
2015-05-12 19:59:38 ----A---- C:\windows\KMSEmulator.exe
2015-05-12 19:59:29 ----D---- C:\windows\system32\config
2015-05-12 19:49:01 ----D---- C:\windows\debug
2015-05-12 19:43:15 ----D---- C:\Program Files\CCleaner
2015-05-12 19:08:43 ----AD---- C:\ProgramData\Temp
2015-05-12 17:01:29 ----D---- C:\ProgramData
2015-05-12 17:01:26 ----D---- C:\Program Files (x86)
2015-05-12 16:48:33 ----SHD---- C:\System Volume Information
2015-05-11 17:52:54 ----D---- C:\Users\ZM\AppData\Roaming\vlc
2015-05-08 10:06:38 ----D---- C:\windows\system32\NDF
2015-04-30 19:36:38 ----SHD---- C:\windows\Installer
2015-04-28 21:02:22 ----D---- C:\windows\system32\drivers
2015-04-28 06:21:39 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-26 14:54:23 ----D---- C:\Rozvrhy
2015-04-16 19:34:32 ----D---- C:\windows\AppCompat
2015-04-16 17:54:39 ----D---- C:\windows\rescache
2015-04-16 17:13:11 ----D---- C:\windows\Microsoft.NET
2015-04-16 17:12:17 ----RSD---- C:\windows\assembly
2015-04-16 16:54:11 ----D---- C:\windows\winsxs
2015-04-16 16:50:49 ----SD---- C:\windows\system32\CompatTel
2015-04-16 16:50:49 ----D---- C:\windows\SYSWOW64\cs-CZ
2015-04-16 16:50:49 ----D---- C:\windows\SysWOW64
2015-04-16 16:50:49 ----D---- C:\windows\system32\cs-CZ
2015-04-16 16:50:49 ----D---- C:\windows\system32\appraiser
2015-04-16 16:50:49 ----D---- C:\windows\PolicyDefinitions
2015-04-16 16:50:48 ----D---- C:\windows\AppPatch
2015-04-16 16:50:44 ----D---- C:\Program Files\Internet Explorer
2015-04-16 16:50:43 ----D---- C:\windows\SYSWOW64\en-US
2015-04-16 16:50:42 ----D---- C:\windows\system32\en-US
2015-04-16 16:50:41 ----D---- C:\Program Files (x86)\Internet Explorer
2015-04-16 16:34:37 ----D---- C:\ProgramData\Microsoft Help
2015-04-16 16:33:13 ----A---- C:\windows\SYSWOW64\PerfStringBackup.INI
2015-04-16 16:27:34 ----D---- C:\windows\system32\MRT
2015-04-16 15:53:51 ----A---- C:\windows\system32\MRT.exe
2015-04-15 17:39:55 ----D---- C:\windows\system32\catroot2
2015-04-15 17:25:17 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\windows\system32\drivers\aswRvrt.sys [2015-04-28 65736]
R0 aswVmm;avast! VM Monitor; C:\windows\system32\drivers\aswVmm.sys [2015-04-28 272248]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2011-02-18 439320]
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys [2011-06-05 25960]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswRdr;aswRdr; C:\windows\system32\drivers\aswRdr2.sys [2015-04-28 93528]
R1 aswSnx;aswSnx; C:\windows\system32\drivers\aswSnx.sys [2015-04-28 1047320]
R1 aswSP;aswSP; C:\windows\system32\drivers\aswSP.sys [2015-04-28 442264]
R1 SABI;SAMSUNG Kernel Driver For Windows 7; \??\C:\windows\system32\Drivers\SABI.sys [2011-07-30 13824]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2011-01-25 60416]
R2 aswHwid;avast! HardwareID; C:\windows\system32\drivers\aswHwid.sys [2015-04-28 29168]
R2 aswMonFlt;aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [2015-04-28 89944]
R2 aswStm;aswStm; C:\windows\system32\drivers\aswStm.sys [2015-04-28 137288]
R2 SGDrv;SGDrv; C:\windows\system32\DRIVERS\SGdrv64.sys [2011-04-11 7680]
R2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2015-04-28 273824]
R3 AMPPAL;Virtuální adaptér Intel(R) Centrino(R) Bluetooth 3.0 + High Speed; C:\windows\system32\DRIVERS\AMPPAL.sys [2011-04-21 294912]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btmaux;Intel Bluetooth Auxiliary Service; C:\windows\system32\DRIVERS\btmaux.sys [2011-03-08 51712]
R3 btmhsf;btmhsf; C:\windows\system32\DRIVERS\btmhsf.sys [2011-03-08 274944]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\windows\system32\DRIVERS\clwvd.sys [2011-08-17 31216]
R3 ETD;ELAN PS/2 Port Input Device; C:\windows\system32\DRIVERS\ETD.sys [2011-06-17 186152]
R3 iBtFltCoex;iBtFltCoex; C:\windows\system32\DRIVERS\iBtFltCoex.sys [2011-03-22 59904]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2010-12-16 12256512]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2011-07-12 2917096]
R3 IntcDAud;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
R3 MEIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\windows\system32\DRIVERS\NETwNs64.sys [2011-05-01 8593920]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2011-04-22 471144]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2011-01-25 18432]
S3 AMPPALP;Protokol Intel(R) Centrino(R) Bluetooth 3.0 + High Speed; C:\windows\system32\DRIVERS\amppal.sys [2011-04-21 294912]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 rtport;rtport; \??\C:\windows\SysWOW64\drivers\rtport.sys [2011-09-19 15144]
S3 SMARTMouseFilterx64;HID-compliant mouse; C:\windows\system32\DRIVERS\SMARTMouseFilterx64.sys [2009-12-15 12584]
S3 SMARTVHidMiniVistaAmd64;SMART HID Device; C:\windows\system32\DRIVERS\SMARTVHidMiniVistaAmd64.sys [2009-12-15 15784]
S3 SMARTVTabletPCx64;SMART Virtual TabletPC; C:\windows\system32\DRIVERS\SMARTVTabletPCx64.sys [2009-12-15 18432]
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\windows\system32\DRIVERS\ss_bus.sys [2009-09-21 127488]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\windows\system32\DRIVERS\ss_mdfl.sys [2009-09-21 18944]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\windows\system32\DRIVERS\ss_mdm.sys [2009-09-21 161280]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usbscan;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 602XML Updater;602Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [2010-04-14 73728]
R2 AMPPALR3;Intel® Centrino® Bluetooth 3.0 + High Speed Service; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-04-21 1136640]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-04-28 343336]
R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2011-03-30 923984]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2011-03-30 1001808]
R2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-04-21 134928]
R2 eBeam Device Service;eBeam Device Service; C:\Program Files (x86)\Luidia\eBeam Device Service\eBeamDeviceServiceMain.exe [2013-08-14 180224]
R2 FoxitCloudUpdateService;Foxit Cloud Safe Update Service; C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [2015-04-14 244392]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-05-05 326424]
R2 NVSvc;NVIDIA Driver Helper Service; C:\windows\system32\nvvsvc.exe [2011-06-04 993896]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-06-05 1997416]
R2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [2011-12-12 793048]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2009-12-01 244904]
R2 ssinstall;SInstalátor; C:\windows\SysWOW64\ssins.exe [2014-10-15 2324216]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-05-05 2656536]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2015-04-28 4034896]
R3 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2011-03-30 1321296]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-16 107912]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-02-18 315488]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15 268464]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-16 107912]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2015-03-13 114688]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-04-23 148080]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2012-04-19 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu logu

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Petra1
Návštěvník
Návštěvník
Příspěvky: 41
Registrován: 20 srp 2006 15:44

Re: Prosím o kontrolu logu

#3 Příspěvek od Petra1 »

Log je zde :)

# AdwCleaner v4.204 - Log vytvořen 12/05/2015 v 22:22:24
# Aktualizováno 12/05/2015 by Xplode
# Databáze : 2015-05-12.2 [Server]
# Operační system : Windows 7 Home Premium Service Pack 1 (x64)
# Uživatelské jméno : ZM - ZM-PC
# Spuštěno z : C:\Users\ZM\Desktop\adwcleaner_4.204.exe
# Nastavení : Čištění

***** [ Služby ] *****


***** [ Soubory / Složky ] *****

Složka Smazáno : C:\ProgramData\apn
Složka Smazáno : C:\ProgramData\AskPartnerNetwork
Složka Smazáno : C:\ProgramData\{3694846e-0f79-4744-3694-4846e0f711b8}
Složka Smazáno : C:\Program Files (x86)\AskPartnerNetwork
Složka Smazáno : C:\Program Files (x86)\PriceLeesss
Složka Smazáno : C:\Users\ZM\AppData\Local\AskPartnerNetwork
Složka Smazáno : C:\Users\ZM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLV Player
Složka Smazáno : C:\Users\ZM\AppData\Roaming\Mozilla\Firefox\Profiles\v3ezqehg.default\Extensions\UAVJ1Y@g.net
Soubor Smazáno : C:\windows\AppPatch\Custom\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb
Soubor Smazáno : C:\Users\ZM\AppData\Roaming\Mozilla\Firefox\Profiles\v3ezqehg.default\searchplugins\ask-search.xml

***** [ Naplánované úlohy ] *****

Úloha Smazáno : Bidaily Synchronize Task

***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\Classes\P71dbae38_3554_4c4e_af28_3d1f78ab1aa2_.P71dbae38_3554_4c4e_af28_3d1f78ab1aa2_
Klíč Smazáno : HKLM\SOFTWARE\Classes\P71dbae38_3554_4c4e_af28_3d1f78ab1aa2_.P71dbae38_3554_4c4e_af28_3d1f78ab1aa2_.9
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{71dbae38-3554-4c4e-af28-3d1f78ab1aa2}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{046B74D1-7337-45AC-B266-A6625FBDDA47}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{71dbae38-3554-4c4e-af28-3d1f78ab1aa2}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{71dbae38-3554-4c4e-af28-3d1f78ab1aa2}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\CLSID\{71dbae38-3554-4c4e-af28-3d1f78ab1aa2}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{71dbae38-3554-4c4e-af28-3d1f78ab1aa2}
Klíč Smazáno : HKCU\Software\AskPartnerNetwork
Klíč Smazáno : HKLM\SOFTWARE\AskPartnerNetwork
Klíč Smazáno : HKLM\SOFTWARE\SPPDCOM
Klíč Smazáno : HKLM\SOFTWARE\SiteSee
Klíč Smazáno : HKU\.DEFAULT\Software\AskPartnerNetwork
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4F524A2D-5354-2D53-5045-A758B70C1902}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17728


-\\ Mozilla Firefox v37.0.2 (x86 cs)

[v3ezqehg.default\prefs.js] - Řádek Smazáno : user_pref("extensions.toolbar_ORJ-SPE@apn.ask.com.install-event-fired", true);
[v3ezqehg.default\prefs.js] - Řádek Smazáno : user_pref("extensions.toolbar_ORJ-ST-SPE@apn.ask.com.install-event-fired", true);

-\\ Google Chrome v42.0.2311.135

[C:\Users\ZM\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Smazáno [Search Provider] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3 ... rms}&SSPV=

*************************

AdwCleaner[R0].txt - [3560 bytů] - [12/05/2015 22:20:39]
AdwCleaner[S0].txt - [3407 bytů] - [12/05/2015 22:22:24]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3465 bytů] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu logu

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Petra1
Návštěvník
Návštěvník
Příspěvky: 41
Registrován: 20 srp 2006 15:44

Re: Prosím o kontrolu logu

#5 Příspěvek od Petra1 »

Je tu :)

Logfile of random's system information tool 1.10 (written by random/random)
Run by ZM at 2015-05-12 22:46:55
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 214 GB (77%) free of 278 GB
Total RAM: 4010 MB (54% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:47:12, on 12.5.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17728)
Boot mode: Normal

Running processes:
C:\Program Files\Activ Software\ActivDriver\activmgr.exe
C:\Program Files (x86)\Samsung\Easy Software Manager\SWMAgent.exe
C:\Program Files (x86)\Luidia\eBeam Device Service\eBeamDeviceServiceUI.exe
C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe
C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe
C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe
C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
C:\Program Files (x86)\Samsung\Easy Support Center\SSCKbdHk.exe
C:\Program Files\trend micro\ZM.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SSDMonitor] C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-21-1571869238-3936240484-2151935606-1000\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Bluetooth 3.0 + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: Bluetooth Device Monitor - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: eBeam Device Service - Luidia, Inc. - C:\Program Files (x86)\Luidia\eBeam Device Service\eBeamDeviceServiceMain.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Foxit Cloud Safe Update Service (FoxitCloudUpdateService) - Foxit Software Inc. - C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - Unknown owner - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: SInstalátor (ssinstall) - PS Media s.r.o. - C:\windows\SysWOW64\ssins.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11014 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
winlogon.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\nvvsvc.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\windows\system32\nvvsvc.exe -session -first
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe"
taskeng.exe {A3D83A4B-A53E-44EA-9882-0AF33BFD872D}
"C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe"
C:\windows\system32\svchost.exe -k bthsvcs
"C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Windows\System32\rundll32.exe" "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\Activ Software\ActivDriver\ActivControl2x64.exe"
"C:\Program Files (x86)\Luidia\eBeam Device Service\eBeamDeviceServiceMain.exe"
"C:\Program Files\Activ Software\ActivDriver\activmgr.exe"
"C:\Program Files (x86)\Samsung\Easy Software Manager\SWMAgent.exe"
C:\Program Files (x86)\Luidia\eBeam Device Service\eBeamDeviceServiceUI.exe -medIL
"C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe"
"C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe"
"C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe"
"C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe"
C:\windows\SysWOW64\ssins.exe
C:\windows\system32\svchost.exe -k imgsvc
C:\windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe"
taskeng.exe {2EC4B5F1-6413-48A7-B052-9236EFE5B261}
"C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe"
"C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe"
"C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe"
"C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe"
"C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe"
"C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe"
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe" -Embedding
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-2be121df-062f-4689-8427-28779f558d4a -SystemEventPortName:HostProcess-3efcbab1-ff2e-4eaa-811d-df61f1b76931 -IoCancelEventPortName:HostProcess-cc366590-2280-4dc7-b018-d5bdf650f2d2 -NonStateChangingEventPortName:HostProcess-6c96ac46-d7bf-43af-bf99-eb04b390d9a7 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:5120f713-8f84-414e-b2a3-ca5de8c193a5 -DeviceGroupId:WpdFsGroup
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
C:\windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe"
"C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe"
"C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe"
ngservice.exe pipeserver
"C:\Program Files (x86)\Samsung\Easy Support Center\SSCKbdHk.exe"
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\wbem\unsecapp.exe -Embedding
C:\windows\system32\igfxext.exe -Embedding
C:\windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
C:\windows\system32\svchost.exe -k SDRSVC
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 3176
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
taskeng.exe {8C92947C-4934-4358-9D07-210900AB085C}

"D:\ZM\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\windows\tasks\AutoKMS.job - C:\windows\AutoKMS.exe
C:\windows\tasks\AutoKMSDaily.job - C:\windows\AutoKMS.exe
C:\windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\ZM\AppData\Roaming\Mozilla\Firefox\Profiles\v3ezqehg.default

prefs.js - "browser.search.useDBForOrder" - ""
prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"
prefs.js - "keyword.URL" - "http://search.seznam.cz/?sourceid=quick ... earchTerms}&"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.169 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.31.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.31.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.169 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.31.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.31.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL

C:\Program Files (x86)\Mozilla Firefox\extensions\
xmlfiller@software602.cz

C:\Program Files (x86)\Mozilla Firefox\components\
nsIFillerPlugin.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\
npfiller.dll
NPOFFICE.DLL
nppdf32.dll
npwachk.dll

C:\Users\ZM\AppData\Roaming\Mozilla\Firefox\Profiles\v3ezqehg.default\extensions\
{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}

C:\Users\ZM\AppData\Roaming\Mozilla\Firefox\Profiles\v3ezqehg.default\searchplugins\
Google.xml
seznam-avast.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-02-27 551848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-05 662672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-27 212904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-27 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-05 565304]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-27 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-07-12 12558440]
"BTMTrayAgent"=C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [2011-03-30 10372368]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2011-06-17 2721576]
"ActivControl"=C:\Program Files\Activ Software\ActivDriver\ActivControl2x64.exe [2012-02-24 1241456]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-04-08 8202008]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SSDMonitor"=C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [2011-12-12 103896]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-05-11 5515496]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2010-12-16 384000]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2015-05-12 22:20:34 ----D---- C:\AdwCleaner
2015-05-12 20:08:26 ----D---- C:\rsit
2015-05-12 17:02:15 ----D---- C:\Users\ZM\AppData\Roaming\Seznam.cz
2015-05-12 17:01:29 ----D---- C:\ProgramData\15005040001595613094
2015-04-30 19:36:05 ----D---- C:\CSI
2015-04-28 20:30:21 ----A---- C:\windows\system32\aswBoot.exe
2015-04-28 20:30:14 ----A---- C:\windows\avastSS.scr
2015-04-23 19:52:40 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-04-15 17:44:49 ----A---- C:\windows\SYSWOW64\wuwebv.dll
2015-04-15 17:44:49 ----A---- C:\windows\SYSWOW64\wups.dll
2015-04-15 17:44:49 ----A---- C:\windows\SYSWOW64\wudriver.dll
2015-04-15 17:44:49 ----A---- C:\windows\SYSWOW64\wuapp.exe
2015-04-15 17:44:49 ----A---- C:\windows\SYSWOW64\wuapi.dll
2015-04-15 17:44:49 ----A---- C:\windows\system32\wuauclt.exe
2015-04-15 17:44:49 ----A---- C:\windows\system32\wuapp.exe
2015-04-15 17:44:49 ----A---- C:\windows\system32\wuapi.dll
2015-04-15 17:44:48 ----A---- C:\windows\system32\wuwebv.dll
2015-04-15 17:44:48 ----A---- C:\windows\system32\wups2.dll
2015-04-15 17:44:48 ----A---- C:\windows\system32\wups.dll
2015-04-15 17:44:48 ----A---- C:\windows\system32\wudriver.dll
2015-04-15 17:44:48 ----A---- C:\windows\system32\wucltux.dll
2015-04-15 17:44:48 ----A---- C:\windows\system32\wuaueng.dll
2015-04-15 17:44:48 ----A---- C:\windows\system32\wu.upgrade.ps.dll
2015-04-15 17:44:48 ----A---- C:\windows\system32\WinSetupUI.dll
2015-04-15 17:44:43 ----A---- C:\windows\system32\invagent.dll
2015-04-15 17:44:43 ----A---- C:\windows\system32\generaltel.dll
2015-04-15 17:44:43 ----A---- C:\windows\system32\devinv.dll
2015-04-15 17:44:43 ----A---- C:\windows\system32\appraiser.dll
2015-04-15 17:44:43 ----A---- C:\windows\system32\aeinv.dll
2015-04-15 17:44:43 ----A---- C:\windows\system32\acmigration.dll
2015-04-15 17:44:42 ----A---- C:\windows\system32\gdi32.dll
2015-04-15 17:44:42 ----A---- C:\windows\system32\aepic.dll
2015-04-15 17:44:42 ----A---- C:\windows\system32\aepdu.dll
2015-04-15 17:44:41 ----A---- C:\windows\SYSWOW64\gdi32.dll
2015-04-15 17:44:41 ----A---- C:\windows\system32\msxml3.dll
2015-04-15 17:44:40 ----A---- C:\windows\SYSWOW64\msxml3.dll
2015-04-15 17:44:39 ----A---- C:\windows\SYSWOW64\msxml3r.dll
2015-04-15 17:44:39 ----A---- C:\windows\system32\msxml3r.dll
2015-04-15 17:44:20 ----A---- C:\windows\system32\ntoskrnl.exe
2015-04-15 17:44:19 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2015-04-15 17:44:19 ----A---- C:\windows\SYSWOW64\ntdll.dll
2015-04-15 17:44:19 ----A---- C:\windows\system32\ntdll.dll
2015-04-15 17:44:19 ----A---- C:\windows\system32\KernelBase.dll
2015-04-15 17:44:19 ----A---- C:\windows\system32\kernel32.dll
2015-04-15 17:44:18 ----A---- C:\windows\SYSWOW64\schannel.dll
2015-04-15 17:44:18 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2015-04-15 17:44:18 ----A---- C:\windows\SYSWOW64\kernel32.dll
2015-04-15 17:44:18 ----A---- C:\windows\system32\wow64win.dll
2015-04-15 17:44:18 ----A---- C:\windows\system32\wow64.dll
2015-04-15 17:44:18 ----A---- C:\windows\system32\srcore.dll
2015-04-15 17:44:18 ----A---- C:\windows\system32\schannel.dll
2015-04-15 17:44:18 ----A---- C:\windows\system32\lsasrv.dll
2015-04-15 17:44:18 ----A---- C:\windows\system32\conhost.exe
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\wow32.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\wdigest.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\TSpkg.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\sspicli.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\srclient.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\setup16.exe
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\secur32.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\ncrypt.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\msv1_0.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\kerberos.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\credssp.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\auditpol.exe
2015-04-15 17:44:17 ----A---- C:\windows\system32\wow64cpu.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\winsrv.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\wdigest.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\TSpkg.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\sspisrv.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\sspicli.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\srclient.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\smss.exe
2015-04-15 17:44:17 ----A---- C:\windows\system32\secur32.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\rstrui.exe
2015-04-15 17:44:17 ----A---- C:\windows\system32\ntvdm64.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\ncrypt.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\msv1_0.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\lsass.exe
2015-04-15 17:44:17 ----A---- C:\windows\system32\kerberos.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2015-04-15 17:44:17 ----A---- C:\windows\system32\drivers\ksecdd.sys
2015-04-15 17:44:17 ----A---- C:\windows\system32\csrsrv.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\credssp.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\auditpol.exe
2015-04-15 17:44:16 ----A---- C:\windows\SYSWOW64\user.exe
2015-04-15 17:44:16 ----A---- C:\windows\SYSWOW64\instnm.exe
2015-04-15 17:44:16 ----A---- C:\windows\SYSWOW64\apisetschema.dll
2015-04-15 17:44:16 ----A---- C:\windows\system32\apisetschema.dll
2015-04-15 17:44:16 ----A---- C:\windows\system32\adtschema.dll
2015-04-15 17:44:15 ----A---- C:\windows\SYSWOW64\msobjs.dll
2015-04-15 17:44:15 ----A---- C:\windows\SYSWOW64\msaudite.dll
2015-04-15 17:44:15 ----A---- C:\windows\SYSWOW64\adtschema.dll
2015-04-15 17:44:15 ----A---- C:\windows\system32\msobjs.dll
2015-04-15 17:44:15 ----A---- C:\windows\system32\msaudite.dll
2015-04-15 17:44:01 ----A---- C:\windows\system32\drivers\http.sys
2015-04-15 17:44:00 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2015-04-15 17:44:00 ----A---- C:\windows\SYSWOW64\MshtmlDac.dll
2015-04-15 17:44:00 ----A---- C:\windows\SYSWOW64\iernonce.dll
2015-04-15 17:44:00 ----A---- C:\windows\SYSWOW64\ieetwproxystub.dll
2015-04-15 17:44:00 ----A---- C:\windows\system32\ieetwproxystub.dll
2015-04-15 17:44:00 ----A---- C:\windows\system32\ieetwcollector.exe
2015-04-15 17:43:58 ----A---- C:\windows\SYSWOW64\urlmon.dll
2015-04-15 17:43:58 ----A---- C:\windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-04-15 17:43:58 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2015-04-15 17:43:58 ----A---- C:\windows\system32\JavaScriptCollectionAgent.dll
2015-04-15 17:43:58 ----A---- C:\windows\system32\iernonce.dll
2015-04-15 17:43:58 ----A---- C:\windows\system32\ie4uinit.exe
2015-04-15 17:43:57 ----A---- C:\windows\SYSWOW64\mshtml.dll
2015-04-15 17:43:57 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2015-04-15 17:43:57 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2015-04-15 17:43:55 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2015-04-15 17:43:55 ----A---- C:\windows\SYSWOW64\jscript9diag.dll
2015-04-15 17:43:55 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2015-04-15 17:43:55 ----A---- C:\windows\SYSWOW64\iesetup.dll
2015-04-15 17:43:55 ----A---- C:\windows\SYSWOW64\iertutil.dll
2015-04-15 17:43:55 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2015-04-15 17:43:55 ----A---- C:\windows\system32\urlmon.dll
2015-04-15 17:43:55 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2015-04-15 17:43:55 ----A---- C:\windows\system32\ieetwcollectorres.dll
2015-04-15 17:43:55 ----A---- C:\windows\system32\iedkcs32.dll
2015-04-15 17:43:54 ----A---- C:\windows\SYSWOW64\ieui.dll
2015-04-15 17:43:54 ----A---- C:\windows\SYSWOW64\ieframe.dll
2015-04-15 17:43:54 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2015-04-15 17:43:54 ----A---- C:\windows\system32\msfeeds.dll
2015-04-15 17:43:54 ----A---- C:\windows\system32\iesetup.dll
2015-04-15 17:43:54 ----A---- C:\windows\system32\ieapfltr.dll
2015-04-15 17:43:54 ----A---- C:\windows\system32\dxtrans.dll
2015-04-15 17:43:53 ----A---- C:\windows\system32\iertutil.dll
2015-04-15 17:43:52 ----A---- C:\windows\SYSWOW64\wininet.dll
2015-04-15 17:43:52 ----A---- C:\windows\SYSWOW64\vbscript.dll
2015-04-15 17:43:52 ----A---- C:\windows\SYSWOW64\msrating.dll
2015-04-15 17:43:52 ----A---- C:\windows\SYSWOW64\mshtmlmedia.dll
2015-04-15 17:43:52 ----A---- C:\windows\SYSWOW64\jscript9.dll
2015-04-15 17:43:52 ----A---- C:\windows\system32\jsproxy.dll
2015-04-15 17:43:52 ----A---- C:\windows\system32\ieUnatt.exe
2015-04-15 17:43:51 ----A---- C:\windows\system32\ieui.dll
2015-04-15 17:43:51 ----A---- C:\windows\system32\ieframe.dll
2015-04-15 17:43:51 ----A---- C:\windows\system32\dxtmsft.dll
2015-04-15 17:43:50 ----A---- C:\windows\system32\mshtmlmedia.dll
2015-04-15 17:43:50 ----A---- C:\windows\system32\mshtmled.dll
2015-04-15 17:43:50 ----A---- C:\windows\system32\jscript9diag.dll
2015-04-15 17:43:50 ----A---- C:\windows\system32\jscript9.dll
2015-04-15 17:43:49 ----A---- C:\windows\system32\wininet.dll
2015-04-15 17:43:49 ----A---- C:\windows\system32\vbscript.dll
2015-04-15 17:43:49 ----A---- C:\windows\system32\MshtmlDac.dll
2015-04-15 17:43:48 ----A---- C:\windows\system32\msrating.dll
2015-04-15 17:43:48 ----A---- C:\windows\system32\mshtml.dll
2015-04-15 17:43:06 ----A---- C:\windows\SYSWOW64\clfsw32.dll
2015-04-15 17:43:06 ----A---- C:\windows\system32\clfsw32.dll
2015-04-15 17:43:06 ----A---- C:\windows\system32\clfs.sys
2015-04-15 17:25:08 ----A---- C:\windows\SYSWOW64\FlashPlayerInstaller.exe

======List of files/folders modified in the last 1 month======

2015-05-12 22:47:12 ----D---- C:\Program Files\trend micro
2015-05-12 22:47:10 ----D---- C:\windows\Temp
2015-05-12 22:43:16 ----AD---- C:\ProgramData\Temp
2015-05-12 22:35:40 ----D---- C:\windows\system32\config
2015-05-12 22:29:16 ----D---- C:\windows\Prefetch
2015-05-12 22:28:49 ----A---- C:\windows\SYSWOW64\log.txt
2015-05-12 22:26:22 ----D---- C:\windows\system32\Tasks
2015-05-12 22:26:21 ----D---- C:\windows\Tasks
2015-05-12 22:25:49 ----D---- C:\Windows
2015-05-12 22:25:49 ----A---- C:\windows\KMSEmulator.exe
2015-05-12 22:25:13 ----D---- C:\windows\inf
2015-05-12 22:22:25 ----D---- C:\ProgramData
2015-05-12 22:22:25 ----D---- C:\Program Files (x86)
2015-05-12 20:05:34 ----D---- C:\windows\System32
2015-05-12 20:05:34 ----A---- C:\windows\system32\PerfStringBackup.INI
2015-05-12 19:49:01 ----D---- C:\windows\debug
2015-05-12 19:43:15 ----D---- C:\Program Files\CCleaner
2015-05-12 16:48:33 ----SHD---- C:\System Volume Information
2015-05-11 17:52:54 ----D---- C:\Users\ZM\AppData\Roaming\vlc
2015-05-08 10:06:38 ----D---- C:\windows\system32\NDF
2015-04-30 19:36:38 ----SHD---- C:\windows\Installer
2015-04-28 21:02:22 ----D---- C:\windows\system32\drivers
2015-04-28 06:21:39 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-26 14:54:23 ----D---- C:\Rozvrhy
2015-04-16 19:34:32 ----D---- C:\windows\AppCompat
2015-04-16 17:54:39 ----D---- C:\windows\rescache
2015-04-16 17:13:11 ----D---- C:\windows\Microsoft.NET
2015-04-16 17:12:17 ----RSD---- C:\windows\assembly
2015-04-16 16:54:11 ----D---- C:\windows\winsxs
2015-04-16 16:50:49 ----SD---- C:\windows\system32\CompatTel
2015-04-16 16:50:49 ----D---- C:\windows\SYSWOW64\cs-CZ
2015-04-16 16:50:49 ----D---- C:\windows\SysWOW64
2015-04-16 16:50:49 ----D---- C:\windows\system32\cs-CZ
2015-04-16 16:50:49 ----D---- C:\windows\system32\appraiser
2015-04-16 16:50:49 ----D---- C:\windows\PolicyDefinitions
2015-04-16 16:50:48 ----D---- C:\windows\AppPatch
2015-04-16 16:50:44 ----D---- C:\Program Files\Internet Explorer
2015-04-16 16:50:43 ----D---- C:\windows\SYSWOW64\en-US
2015-04-16 16:50:42 ----D---- C:\windows\system32\en-US
2015-04-16 16:50:41 ----D---- C:\Program Files (x86)\Internet Explorer
2015-04-16 16:34:37 ----D---- C:\ProgramData\Microsoft Help
2015-04-16 16:33:13 ----A---- C:\windows\SYSWOW64\PerfStringBackup.INI
2015-04-16 16:27:34 ----D---- C:\windows\system32\MRT
2015-04-16 15:53:51 ----A---- C:\windows\system32\MRT.exe
2015-04-15 17:39:55 ----D---- C:\windows\system32\catroot2
2015-04-15 17:25:17 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\windows\system32\drivers\aswRvrt.sys [2015-04-28 65736]
R0 aswVmm;avast! VM Monitor; C:\windows\system32\drivers\aswVmm.sys [2015-04-28 272248]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2011-02-18 439320]
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys [2011-06-05 25960]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswRdr;aswRdr; C:\windows\system32\drivers\aswRdr2.sys [2015-04-28 93528]
R1 aswSnx;aswSnx; C:\windows\system32\drivers\aswSnx.sys [2015-04-28 1047320]
R1 aswSP;aswSP; C:\windows\system32\drivers\aswSP.sys [2015-04-28 442264]
R1 SABI;SAMSUNG Kernel Driver For Windows 7; \??\C:\windows\system32\Drivers\SABI.sys [2011-07-30 13824]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2011-01-25 60416]
R2 aswHwid;avast! HardwareID; C:\windows\system32\drivers\aswHwid.sys [2015-04-28 29168]
R2 aswMonFlt;aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [2015-04-28 89944]
R2 aswStm;aswStm; C:\windows\system32\drivers\aswStm.sys [2015-04-28 137288]
R2 SGDrv;SGDrv; C:\windows\system32\DRIVERS\SGdrv64.sys [2011-04-11 7680]
R2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2015-04-28 273824]
R3 AMPPAL;Virtuální adaptér Intel(R) Centrino(R) Bluetooth 3.0 + High Speed; C:\windows\system32\DRIVERS\AMPPAL.sys [2011-04-21 294912]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btmaux;Intel Bluetooth Auxiliary Service; C:\windows\system32\DRIVERS\btmaux.sys [2011-03-08 51712]
R3 btmhsf;btmhsf; C:\windows\system32\DRIVERS\btmhsf.sys [2011-03-08 274944]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\windows\system32\DRIVERS\clwvd.sys [2011-08-17 31216]
R3 ETD;ELAN PS/2 Port Input Device; C:\windows\system32\DRIVERS\ETD.sys [2011-06-17 186152]
R3 iBtFltCoex;iBtFltCoex; C:\windows\system32\DRIVERS\iBtFltCoex.sys [2011-03-22 59904]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2010-12-16 12256512]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2011-07-12 2917096]
R3 IntcDAud;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
R3 MEIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\windows\system32\DRIVERS\NETwNs64.sys [2011-05-01 8593920]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2011-04-22 471144]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2011-01-25 18432]
S3 AMPPALP;Protokol Intel(R) Centrino(R) Bluetooth 3.0 + High Speed; C:\windows\system32\DRIVERS\amppal.sys [2011-04-21 294912]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 rtport;rtport; \??\C:\windows\SysWOW64\drivers\rtport.sys [2011-09-19 15144]
S3 SMARTMouseFilterx64;HID-compliant mouse; C:\windows\system32\DRIVERS\SMARTMouseFilterx64.sys [2009-12-15 12584]
S3 SMARTVHidMiniVistaAmd64;SMART HID Device; C:\windows\system32\DRIVERS\SMARTVHidMiniVistaAmd64.sys [2009-12-15 15784]
S3 SMARTVTabletPCx64;SMART Virtual TabletPC; C:\windows\system32\DRIVERS\SMARTVTabletPCx64.sys [2009-12-15 18432]
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\windows\system32\DRIVERS\ss_bus.sys [2009-09-21 127488]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\windows\system32\DRIVERS\ss_mdfl.sys [2009-09-21 18944]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\windows\system32\DRIVERS\ss_mdm.sys [2009-09-21 161280]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usbscan;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 602XML Updater;602Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [2010-04-14 73728]
R2 AMPPALR3;Intel® Centrino® Bluetooth 3.0 + High Speed Service; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-04-21 1136640]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-04-28 343336]
R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2011-03-30 923984]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2011-03-30 1001808]
R2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-04-21 134928]
R2 eBeam Device Service;eBeam Device Service; C:\Program Files (x86)\Luidia\eBeam Device Service\eBeamDeviceServiceMain.exe [2013-08-14 180224]
R2 FoxitCloudUpdateService;Foxit Cloud Safe Update Service; C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [2015-04-14 244392]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-05-05 326424]
R2 NVSvc;NVIDIA Driver Helper Service; C:\windows\system32\nvvsvc.exe [2011-06-04 993896]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-06-05 1997416]
R2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [2011-12-12 793048]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2009-12-01 244904]
R2 ssinstall;SInstalátor; C:\windows\SysWOW64\ssins.exe [2014-10-15 2324216]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-05-05 2656536]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2015-04-28 4034896]
R3 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2011-03-30 1321296]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-16 107912]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-02-18 315488]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15 268464]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-16 107912]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2015-03-13 114688]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-04-23 148080]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2012-04-19 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu logu

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\windows\tasks\AutoKMS.job
C:\windows\tasks\AutoKMSDaily.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
C:\windows\AutoKMS.exe
C:\ProgramData\15005040001595613094

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Petra1
Návštěvník
Návštěvník
Příspěvky: 41
Registrován: 20 srp 2006 15:44

Re: Prosím o kontrolu logu

#7 Příspěvek od Petra1 »

Logfile of random's system information tool 1.10 (written by random/random)
Run by ZM at 2015-05-13 20:08:47
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 213 GB (77%) free of 278 GB
Total RAM: 4010 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:08:51, on 13.5.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17728)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Luidia\eBeam Device Service\eBeamDeviceServiceUI.exe
C:\Program Files (x86)\Samsung\Easy Software Manager\SWMAgent.exe
C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe
C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe
C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe
C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
C:\Program Files\Activ Software\ActivDriver\activmgr.exe
C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Samsung\Easy Support Center\SSCKbdHk.exe
C:\Program Files\trend micro\ZM.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SSDMonitor] C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-21-1571869238-3936240484-2151935606-1000\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Bluetooth 3.0 + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: Bluetooth Device Monitor - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: eBeam Device Service - Luidia, Inc. - C:\Program Files (x86)\Luidia\eBeam Device Service\eBeamDeviceServiceMain.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Foxit Cloud Safe Update Service (FoxitCloudUpdateService) - Foxit Software Inc. - C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - Unknown owner - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: SInstalátor (ssinstall) - PS Media s.r.o. - C:\windows\SysWOW64\ssins.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11014 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\windows\system32\nvvsvc.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\windows\system32\nvvsvc.exe -session -first
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe"
taskeng.exe {149E178D-E67D-427C-BE7C-27CB51317CAB}
"taskhost.exe"
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
taskeng.exe {02845D1F-3740-46C9-97DD-DCFF7EB839C8}
"C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe"
C:\windows\system32\svchost.exe -k bthsvcs
"C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe"
"C:\Program Files (x86)\Luidia\eBeam Device Service\eBeamDeviceServiceMain.exe"
"C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe"
C:\Program Files (x86)\Luidia\eBeam Device Service\eBeamDeviceServiceUI.exe -medIL
"C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe"
"C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe"
"C:\Program Files (x86)\Samsung\Easy Software Manager\SWMAgent.exe"
C:\windows\SysWOW64\ssins.exe
C:\windows\system32\svchost.exe -k imgsvc
C:\windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe"
"C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe"
taskeng.exe {C3C35476-1B94-46F9-BE77-A7FD0F43FF2F}
"C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe"
"C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe"
"C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe"
"C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe"
C:\windows\system32\wbem\wmiprvse.exe
"C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe"
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-779865ce-7a28-4edb-ac04-392a4f70b4a3 -SystemEventPortName:HostProcess-d9eb4896-0847-4e06-926f-75ee9475224f -IoCancelEventPortName:HostProcess-1e9c7056-22b3-454b-a77f-298fc8627f5d -NonStateChangingEventPortName:HostProcess-cc4fb4e5-d8db-4a79-a35f-55118d1b6957 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:8172a77a-ac67-4738-8c0e-1048e744bd93 -DeviceGroupId:WpdFsGroup
C:\windows\servicing\TrustedInstaller.exe
ngservice.exe pipeserver
C:\windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\windows\notepad.exe" C:\_OTM\MovedFiles\05132015_195740.log
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe"
"C:\Windows\System32\rundll32.exe" "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Activ Software\ActivDriver\ActivControl2x64.exe"
"C:\Program Files\Activ Software\ActivDriver\activmgr.exe"
"C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe"
"C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe" -Embedding
"C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\windows\system32\igfxext.exe -Embedding
C:\windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
C:\windows\System32\svchost.exe -k swprv
C:\windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Samsung\Easy Support Center\SSCKbdHk.exe"
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
C:\windows\system32\sppsvc.exe
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 3500
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\windows\system32\svchost.exe -k SDRSVC
"C:\windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524

"D:\ZM\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\ZM\AppData\Roaming\Mozilla\Firefox\Profiles\v3ezqehg.default

prefs.js - "browser.search.useDBForOrder" - ""
prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"
prefs.js - "keyword.URL" - "http://search.seznam.cz/?sourceid=quick ... earchTerms}&"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.169 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.31.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.31.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.169 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.31.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.31.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL

C:\Program Files (x86)\Mozilla Firefox\extensions\
xmlfiller@software602.cz

C:\Program Files (x86)\Mozilla Firefox\components\
nsIFillerPlugin.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\
npfiller.dll
NPOFFICE.DLL
nppdf32.dll
npwachk.dll

C:\Users\ZM\AppData\Roaming\Mozilla\Firefox\Profiles\v3ezqehg.default\extensions\
{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}

C:\Users\ZM\AppData\Roaming\Mozilla\Firefox\Profiles\v3ezqehg.default\searchplugins\
Google.xml
seznam-avast.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-02-27 551848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-05 662672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-27 212904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-27 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-05 565304]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-27 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-07-12 12558440]
"BTMTrayAgent"=C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [2011-03-30 10372368]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2011-06-17 2721576]
"ActivControl"=C:\Program Files\Activ Software\ActivDriver\ActivControl2x64.exe [2012-02-24 1241456]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-04-08 8202008]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SSDMonitor"=C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [2011-12-12 103896]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-05-11 5515496]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2010-12-16 384000]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2015-05-13 19:57:40 ----D---- C:\_OTM
2015-05-12 22:20:34 ----D---- C:\AdwCleaner
2015-05-12 20:08:26 ----D---- C:\rsit
2015-05-12 17:02:15 ----D---- C:\Users\ZM\AppData\Roaming\Seznam.cz
2015-04-30 19:36:05 ----D---- C:\CSI
2015-04-28 20:30:21 ----A---- C:\windows\system32\aswBoot.exe
2015-04-28 20:30:14 ----A---- C:\windows\avastSS.scr
2015-04-23 19:52:40 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-04-15 17:44:49 ----A---- C:\windows\SYSWOW64\wuwebv.dll
2015-04-15 17:44:49 ----A---- C:\windows\SYSWOW64\wups.dll
2015-04-15 17:44:49 ----A---- C:\windows\SYSWOW64\wudriver.dll
2015-04-15 17:44:49 ----A---- C:\windows\SYSWOW64\wuapp.exe
2015-04-15 17:44:49 ----A---- C:\windows\SYSWOW64\wuapi.dll
2015-04-15 17:44:49 ----A---- C:\windows\system32\wuauclt.exe
2015-04-15 17:44:49 ----A---- C:\windows\system32\wuapp.exe
2015-04-15 17:44:49 ----A---- C:\windows\system32\wuapi.dll
2015-04-15 17:44:48 ----A---- C:\windows\system32\wuwebv.dll
2015-04-15 17:44:48 ----A---- C:\windows\system32\wups2.dll
2015-04-15 17:44:48 ----A---- C:\windows\system32\wups.dll
2015-04-15 17:44:48 ----A---- C:\windows\system32\wudriver.dll
2015-04-15 17:44:48 ----A---- C:\windows\system32\wucltux.dll
2015-04-15 17:44:48 ----A---- C:\windows\system32\wuaueng.dll
2015-04-15 17:44:48 ----A---- C:\windows\system32\wu.upgrade.ps.dll
2015-04-15 17:44:48 ----A---- C:\windows\system32\WinSetupUI.dll
2015-04-15 17:44:43 ----A---- C:\windows\system32\invagent.dll
2015-04-15 17:44:43 ----A---- C:\windows\system32\generaltel.dll
2015-04-15 17:44:43 ----A---- C:\windows\system32\devinv.dll
2015-04-15 17:44:43 ----A---- C:\windows\system32\appraiser.dll
2015-04-15 17:44:43 ----A---- C:\windows\system32\aeinv.dll
2015-04-15 17:44:43 ----A---- C:\windows\system32\acmigration.dll
2015-04-15 17:44:42 ----A---- C:\windows\system32\gdi32.dll
2015-04-15 17:44:42 ----A---- C:\windows\system32\aepic.dll
2015-04-15 17:44:42 ----A---- C:\windows\system32\aepdu.dll
2015-04-15 17:44:41 ----A---- C:\windows\SYSWOW64\gdi32.dll
2015-04-15 17:44:41 ----A---- C:\windows\system32\msxml3.dll
2015-04-15 17:44:40 ----A---- C:\windows\SYSWOW64\msxml3.dll
2015-04-15 17:44:39 ----A---- C:\windows\SYSWOW64\msxml3r.dll
2015-04-15 17:44:39 ----A---- C:\windows\system32\msxml3r.dll
2015-04-15 17:44:20 ----A---- C:\windows\system32\ntoskrnl.exe
2015-04-15 17:44:19 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2015-04-15 17:44:19 ----A---- C:\windows\SYSWOW64\ntdll.dll
2015-04-15 17:44:19 ----A---- C:\windows\system32\ntdll.dll
2015-04-15 17:44:19 ----A---- C:\windows\system32\KernelBase.dll
2015-04-15 17:44:19 ----A---- C:\windows\system32\kernel32.dll
2015-04-15 17:44:18 ----A---- C:\windows\SYSWOW64\schannel.dll
2015-04-15 17:44:18 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2015-04-15 17:44:18 ----A---- C:\windows\SYSWOW64\kernel32.dll
2015-04-15 17:44:18 ----A---- C:\windows\system32\wow64win.dll
2015-04-15 17:44:18 ----A---- C:\windows\system32\wow64.dll
2015-04-15 17:44:18 ----A---- C:\windows\system32\srcore.dll
2015-04-15 17:44:18 ----A---- C:\windows\system32\schannel.dll
2015-04-15 17:44:18 ----A---- C:\windows\system32\lsasrv.dll
2015-04-15 17:44:18 ----A---- C:\windows\system32\conhost.exe
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 17:44:17 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\wow32.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\wdigest.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\TSpkg.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\sspicli.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\srclient.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\setup16.exe
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\secur32.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\ncrypt.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\msv1_0.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\kerberos.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\credssp.dll
2015-04-15 17:44:17 ----A---- C:\windows\SYSWOW64\auditpol.exe
2015-04-15 17:44:17 ----A---- C:\windows\system32\wow64cpu.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\winsrv.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\wdigest.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\TSpkg.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\sspisrv.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\sspicli.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\srclient.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\smss.exe
2015-04-15 17:44:17 ----A---- C:\windows\system32\secur32.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\rstrui.exe
2015-04-15 17:44:17 ----A---- C:\windows\system32\ntvdm64.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\ncrypt.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\msv1_0.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\lsass.exe
2015-04-15 17:44:17 ----A---- C:\windows\system32\kerberos.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2015-04-15 17:44:17 ----A---- C:\windows\system32\drivers\ksecdd.sys
2015-04-15 17:44:17 ----A---- C:\windows\system32\csrsrv.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\credssp.dll
2015-04-15 17:44:17 ----A---- C:\windows\system32\auditpol.exe
2015-04-15 17:44:16 ----A---- C:\windows\SYSWOW64\user.exe
2015-04-15 17:44:16 ----A---- C:\windows\SYSWOW64\instnm.exe
2015-04-15 17:44:16 ----A---- C:\windows\SYSWOW64\apisetschema.dll
2015-04-15 17:44:16 ----A---- C:\windows\system32\apisetschema.dll
2015-04-15 17:44:16 ----A---- C:\windows\system32\adtschema.dll
2015-04-15 17:44:15 ----A---- C:\windows\SYSWOW64\msobjs.dll
2015-04-15 17:44:15 ----A---- C:\windows\SYSWOW64\msaudite.dll
2015-04-15 17:44:15 ----A---- C:\windows\SYSWOW64\adtschema.dll
2015-04-15 17:44:15 ----A---- C:\windows\system32\msobjs.dll
2015-04-15 17:44:15 ----A---- C:\windows\system32\msaudite.dll
2015-04-15 17:44:01 ----A---- C:\windows\system32\drivers\http.sys
2015-04-15 17:44:00 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2015-04-15 17:44:00 ----A---- C:\windows\SYSWOW64\MshtmlDac.dll
2015-04-15 17:44:00 ----A---- C:\windows\SYSWOW64\iernonce.dll
2015-04-15 17:44:00 ----A---- C:\windows\SYSWOW64\ieetwproxystub.dll
2015-04-15 17:44:00 ----A---- C:\windows\system32\ieetwproxystub.dll
2015-04-15 17:44:00 ----A---- C:\windows\system32\ieetwcollector.exe
2015-04-15 17:43:58 ----A---- C:\windows\SYSWOW64\urlmon.dll
2015-04-15 17:43:58 ----A---- C:\windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-04-15 17:43:58 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2015-04-15 17:43:58 ----A---- C:\windows\system32\JavaScriptCollectionAgent.dll
2015-04-15 17:43:58 ----A---- C:\windows\system32\iernonce.dll
2015-04-15 17:43:58 ----A---- C:\windows\system32\ie4uinit.exe
2015-04-15 17:43:57 ----A---- C:\windows\SYSWOW64\mshtml.dll
2015-04-15 17:43:57 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2015-04-15 17:43:57 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2015-04-15 17:43:55 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2015-04-15 17:43:55 ----A---- C:\windows\SYSWOW64\jscript9diag.dll
2015-04-15 17:43:55 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2015-04-15 17:43:55 ----A---- C:\windows\SYSWOW64\iesetup.dll
2015-04-15 17:43:55 ----A---- C:\windows\SYSWOW64\iertutil.dll
2015-04-15 17:43:55 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2015-04-15 17:43:55 ----A---- C:\windows\system32\urlmon.dll
2015-04-15 17:43:55 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2015-04-15 17:43:55 ----A---- C:\windows\system32\ieetwcollectorres.dll
2015-04-15 17:43:55 ----A---- C:\windows\system32\iedkcs32.dll
2015-04-15 17:43:54 ----A---- C:\windows\SYSWOW64\ieui.dll
2015-04-15 17:43:54 ----A---- C:\windows\SYSWOW64\ieframe.dll
2015-04-15 17:43:54 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2015-04-15 17:43:54 ----A---- C:\windows\system32\msfeeds.dll
2015-04-15 17:43:54 ----A---- C:\windows\system32\iesetup.dll
2015-04-15 17:43:54 ----A---- C:\windows\system32\ieapfltr.dll
2015-04-15 17:43:54 ----A---- C:\windows\system32\dxtrans.dll
2015-04-15 17:43:53 ----A---- C:\windows\system32\iertutil.dll
2015-04-15 17:43:52 ----A---- C:\windows\SYSWOW64\wininet.dll
2015-04-15 17:43:52 ----A---- C:\windows\SYSWOW64\vbscript.dll
2015-04-15 17:43:52 ----A---- C:\windows\SYSWOW64\msrating.dll
2015-04-15 17:43:52 ----A---- C:\windows\SYSWOW64\mshtmlmedia.dll
2015-04-15 17:43:52 ----A---- C:\windows\SYSWOW64\jscript9.dll
2015-04-15 17:43:52 ----A---- C:\windows\system32\jsproxy.dll
2015-04-15 17:43:52 ----A---- C:\windows\system32\ieUnatt.exe
2015-04-15 17:43:51 ----A---- C:\windows\system32\ieui.dll
2015-04-15 17:43:51 ----A---- C:\windows\system32\ieframe.dll
2015-04-15 17:43:51 ----A---- C:\windows\system32\dxtmsft.dll
2015-04-15 17:43:50 ----A---- C:\windows\system32\mshtmlmedia.dll
2015-04-15 17:43:50 ----A---- C:\windows\system32\mshtmled.dll
2015-04-15 17:43:50 ----A---- C:\windows\system32\jscript9diag.dll
2015-04-15 17:43:50 ----A---- C:\windows\system32\jscript9.dll
2015-04-15 17:43:49 ----A---- C:\windows\system32\wininet.dll
2015-04-15 17:43:49 ----A---- C:\windows\system32\vbscript.dll
2015-04-15 17:43:49 ----A---- C:\windows\system32\MshtmlDac.dll
2015-04-15 17:43:48 ----A---- C:\windows\system32\msrating.dll
2015-04-15 17:43:48 ----A---- C:\windows\system32\mshtml.dll
2015-04-15 17:43:06 ----A---- C:\windows\SYSWOW64\clfsw32.dll
2015-04-15 17:43:06 ----A---- C:\windows\system32\clfsw32.dll
2015-04-15 17:43:06 ----A---- C:\windows\system32\clfs.sys
2015-04-15 17:25:08 ----A---- C:\windows\SYSWOW64\FlashPlayerInstaller.exe

======List of files/folders modified in the last 1 month======

2015-05-13 20:08:51 ----D---- C:\windows\Prefetch
2015-05-13 20:08:50 ----D---- C:\Program Files\trend micro
2015-05-13 20:08:49 ----D---- C:\windows\Temp
2015-05-13 20:02:29 ----A---- C:\windows\SYSWOW64\log.txt
2015-05-13 20:00:52 ----D---- C:\windows\system32\config
2015-05-13 19:57:42 ----D---- C:\windows\Tasks
2015-05-13 19:57:42 ----D---- C:\Windows
2015-05-13 19:57:42 ----D---- C:\ProgramData
2015-05-13 18:43:01 ----AD---- C:\ProgramData\Temp
2015-05-13 12:38:13 ----D---- C:\windows\winsxs
2015-05-13 12:37:21 ----D---- C:\windows\system32\catroot2
2015-05-12 22:26:22 ----D---- C:\windows\system32\Tasks
2015-05-12 22:25:49 ----A---- C:\windows\KMSEmulator.exe
2015-05-12 22:25:13 ----D---- C:\windows\inf
2015-05-12 22:22:25 ----D---- C:\Program Files (x86)
2015-05-12 20:05:34 ----D---- C:\windows\System32
2015-05-12 20:05:34 ----A---- C:\windows\system32\PerfStringBackup.INI
2015-05-12 19:49:01 ----D---- C:\windows\debug
2015-05-12 19:43:15 ----D---- C:\Program Files\CCleaner
2015-05-12 16:48:33 ----SHD---- C:\System Volume Information
2015-05-11 17:52:54 ----D---- C:\Users\ZM\AppData\Roaming\vlc
2015-05-08 10:06:38 ----D---- C:\windows\system32\NDF
2015-04-30 19:36:38 ----SHD---- C:\windows\Installer
2015-04-28 21:02:22 ----D---- C:\windows\system32\drivers
2015-04-28 06:21:39 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-26 14:54:23 ----D---- C:\Rozvrhy
2015-04-16 19:34:32 ----D---- C:\windows\AppCompat
2015-04-16 17:54:39 ----D---- C:\windows\rescache
2015-04-16 17:13:11 ----D---- C:\windows\Microsoft.NET
2015-04-16 17:12:17 ----RSD---- C:\windows\assembly
2015-04-16 16:50:49 ----SD---- C:\windows\system32\CompatTel
2015-04-16 16:50:49 ----D---- C:\windows\SYSWOW64\cs-CZ
2015-04-16 16:50:49 ----D---- C:\windows\SysWOW64
2015-04-16 16:50:49 ----D---- C:\windows\system32\cs-CZ
2015-04-16 16:50:49 ----D---- C:\windows\system32\appraiser
2015-04-16 16:50:49 ----D---- C:\windows\PolicyDefinitions
2015-04-16 16:50:48 ----D---- C:\windows\AppPatch
2015-04-16 16:50:44 ----D---- C:\Program Files\Internet Explorer
2015-04-16 16:50:43 ----D---- C:\windows\SYSWOW64\en-US
2015-04-16 16:50:42 ----D---- C:\windows\system32\en-US
2015-04-16 16:50:41 ----D---- C:\Program Files (x86)\Internet Explorer
2015-04-16 16:34:37 ----D---- C:\ProgramData\Microsoft Help
2015-04-16 16:33:13 ----A---- C:\windows\SYSWOW64\PerfStringBackup.INI
2015-04-16 16:27:34 ----D---- C:\windows\system32\MRT
2015-04-16 15:53:51 ----A---- C:\windows\system32\MRT.exe
2015-04-15 17:25:17 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\windows\system32\drivers\aswRvrt.sys [2015-04-28 65736]
R0 aswVmm;avast! VM Monitor; C:\windows\system32\drivers\aswVmm.sys [2015-04-28 272248]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2011-02-18 439320]
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys [2011-06-05 25960]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswRdr;aswRdr; C:\windows\system32\drivers\aswRdr2.sys [2015-04-28 93528]
R1 aswSnx;aswSnx; C:\windows\system32\drivers\aswSnx.sys [2015-04-28 1047320]
R1 aswSP;aswSP; C:\windows\system32\drivers\aswSP.sys [2015-04-28 442264]
R1 SABI;SAMSUNG Kernel Driver For Windows 7; \??\C:\windows\system32\Drivers\SABI.sys [2011-07-30 13824]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2011-01-25 60416]
R2 aswHwid;avast! HardwareID; C:\windows\system32\drivers\aswHwid.sys [2015-04-28 29168]
R2 aswMonFlt;aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [2015-04-28 89944]
R2 aswStm;aswStm; C:\windows\system32\drivers\aswStm.sys [2015-04-28 137288]
R2 SGDrv;SGDrv; C:\windows\system32\DRIVERS\SGdrv64.sys [2011-04-11 7680]
R2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2015-04-28 273824]
R3 AMPPAL;Virtuální adaptér Intel(R) Centrino(R) Bluetooth 3.0 + High Speed; C:\windows\system32\DRIVERS\AMPPAL.sys [2011-04-21 294912]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btmaux;Intel Bluetooth Auxiliary Service; C:\windows\system32\DRIVERS\btmaux.sys [2011-03-08 51712]
R3 btmhsf;btmhsf; C:\windows\system32\DRIVERS\btmhsf.sys [2011-03-08 274944]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\windows\system32\DRIVERS\clwvd.sys [2011-08-17 31216]
R3 ETD;ELAN PS/2 Port Input Device; C:\windows\system32\DRIVERS\ETD.sys [2011-06-17 186152]
R3 iBtFltCoex;iBtFltCoex; C:\windows\system32\DRIVERS\iBtFltCoex.sys [2011-03-22 59904]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2010-12-16 12256512]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2011-07-12 2917096]
R3 IntcDAud;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
R3 MEIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\windows\system32\DRIVERS\NETwNs64.sys [2011-05-01 8593920]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2011-04-22 471144]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2011-01-25 18432]
S3 AMPPALP;Protokol Intel(R) Centrino(R) Bluetooth 3.0 + High Speed; C:\windows\system32\DRIVERS\amppal.sys [2011-04-21 294912]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 rtport;rtport; \??\C:\windows\SysWOW64\drivers\rtport.sys [2011-09-19 15144]
S3 SMARTMouseFilterx64;HID-compliant mouse; C:\windows\system32\DRIVERS\SMARTMouseFilterx64.sys [2009-12-15 12584]
S3 SMARTVHidMiniVistaAmd64;SMART HID Device; C:\windows\system32\DRIVERS\SMARTVHidMiniVistaAmd64.sys [2009-12-15 15784]
S3 SMARTVTabletPCx64;SMART Virtual TabletPC; C:\windows\system32\DRIVERS\SMARTVTabletPCx64.sys [2009-12-15 18432]
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\windows\system32\DRIVERS\ss_bus.sys [2009-09-21 127488]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\windows\system32\DRIVERS\ss_mdfl.sys [2009-09-21 18944]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\windows\system32\DRIVERS\ss_mdm.sys [2009-09-21 161280]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usbscan;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 602XML Updater;602Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [2010-04-14 73728]
R2 AMPPALR3;Intel® Centrino® Bluetooth 3.0 + High Speed Service; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-04-21 1136640]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-04-28 343336]
R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2011-03-30 923984]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2011-03-30 1001808]
R2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-04-21 134928]
R2 eBeam Device Service;eBeam Device Service; C:\Program Files (x86)\Luidia\eBeam Device Service\eBeamDeviceServiceMain.exe [2013-08-14 180224]
R2 FoxitCloudUpdateService;Foxit Cloud Safe Update Service; C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [2015-04-14 244392]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-05-05 326424]
R2 NVSvc;NVIDIA Driver Helper Service; C:\windows\system32\nvvsvc.exe [2011-06-04 993896]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-06-05 1997416]
R2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [2011-12-12 793048]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2009-12-01 244904]
R2 ssinstall;SInstalátor; C:\windows\SysWOW64\ssins.exe [2014-10-15 2324216]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-05-05 2656536]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2015-04-28 4034896]
R3 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2011-03-30 1321296]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-16 107912]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-02-18 315488]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15 268464]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-16 107912]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2015-03-13 114688]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-04-23 148080]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2012-04-19 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu logu

#8 Příspěvek od Rudy »

Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Je vše v pořádku?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Petra1
Návštěvník
Návštěvník
Příspěvky: 41
Registrován: 20 srp 2006 15:44

Re: Prosím o kontrolu logu

#9 Příspěvek od Petra1 »

Počítač je ok, avast spolupracuje, velmi děkuji za pomoc :)
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu logu

#10 Příspěvek od Rudy »

Rádo se stalo! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“