Dobrý den,prosím o kontrolu logu.

[dkdavid3]

No tak to vůbec nechápu tedy,jak se to povedlo...no jdu na to znovu tedy..

[dkdavid3]

https://www.virustotal.com/cs/file/03cb ... /analysis/

Tak tohle jsem udělal teď přesně jak jsi mi psal...je tam opět datum 17.4.2015...nechápu proč,ale dělal jsem to teď..

[cernohous13]

Vážený kolega promine

Klikni na https://www.virustotal.com
po kliknutí na "Choose File" jen zkopíruj do řádku "Název souboru":

C:\WINDOWS\SYSWOW64\drivers\ogonyxfm.sys

"Scan It" (pokud byl již testován, nech testovat znovu - Reanalyse)
Trpělivě vyčkej dokončení scanu dokud se neobjeví konečný výsledek např.0/50
Do fóra zkopíruj výsledný log. nebo odkaz z adresního řádku na stránku.
Pokud nebude nález stačí jen oznámit

a já mizím

[dkdavid3]

Zdravím,nechci vypadat jako uplný pako tak snad už se podařilo.

https://www.virustotal.com/cs/file/03cb ... 431757370/

[Roli]

.... snad už se podařilo.

Ještě jednou spusť OTMoveIt

do levého okna aplikace pod Paste Instructions for Items to be Moved zkopíruj tento text:

Kód: Vybrat vše

:processes
explorer.exe       

:files
C:\WINDOWS\SYSWOW64\drivers\ogonyxfm.sys
C:\WINDOWS\system32\drivers\ogonyxfm.sys

:services
podwy

:commands
[purity]
[emptytemp]
[start explorer]

klikni na MoveIt! a v pravém zeleném okně aplikace se Ti objeví info o provedene akci, obsah okna zkopíruj sem,

pokud aplikace bude požadovat restart, klikni na YES

v tom případě sem zkopíruj obsah logu uloženého na C:\_OTMoveIt\MovedFiles\


Spusť skener Cure It podle TOHOTO návodu

po skončení skenu mi sem nakopíruj výsledky - stačí konec logu se souhrnem.

(Upozornění je úchylně pomalý a je zapotřebí ho sledovat občas se na něco ptá)

[dkdavid3]

Zdravím tak tady to je.
All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== FILES ==========
File/Folder C:\WINDOWS\SYSWOW64\drivers\ogonyxfm.sys not found.
File/Folder C:\WINDOWS\system32\drivers\ogonyxfm.sys not found.
========== SERVICES/DRIVERS ==========
Error: No service named podwy was found to stop!
Service\Driver key podwy not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: David
->Temp folder emptied: 186609824 bytes
->Temporary Internet Files folder emptied: 214295 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 4836056 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default.migrated

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 140906173 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 317,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 05172015_205913



Total 12695061812 bytes in 31214 files scanned (66269 objects)
Total 31169 files (66216 objects) are clean
Total 9 files are infected
Total 44 files are raised error condition
Scan time is 00:21:05.158

[Roli]

Znovu spusť OTMoveIt a nahoře v aplikaci klini na CleanUP!

tímto po sobě uklidí.


Nakonec mi sem dej aktuální log z Rsit.

[dkdavid3]

Zdravím tak tady ještě posílám ten RSIT log

Logfile of random's system information tool 1.10 (written by random/random)
Run by David at 2015-05-18 20:22:03
Microsoft Windows 8.1
System drive C: has 29 GB (10%) free of 286 GB
Total RAM: 3981 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:22:08, on 18. 5. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Windows\SysWOW64\ACEngSvr.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\AVG\AVG2015\avgui.exe
C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\WINDOWS\SysWOW64\ctfmon.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\David.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com/?cid={AC84A581 ... 2015-05-16 00:43:37&v=4.1.0.411&pid=wtu&sg=&sap=hp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AVG Web TuneUp - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Web TuneUp\4.1.0.411\AVG Web TuneUp.dll
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe /S
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Web TuneUp\vprot.exe"
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Viber] "C:\Users\David\AppData\Local\Viber\Viber.exe" StartMinimized
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE"
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_9A83AADA066CCEA6F8C613E0AB5C7E19] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - Startup: Dropbox.lnk = David\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Startup: OnePlus One Toolkit.lnk = C:\Program Files (x86)\OPO Toolkit\OnePlus One Toolkit.exe
O4 - Global Startup: AsusVibeLauncher.lnk = C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe
O4 - Global Startup: TMMonitor.lnk = C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ASUS InstantOn Service (ASUS InstantOn) - ASUS - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
O23 - Service: AtherosSvc - Qualcomm Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater18.4.0 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\ToolbarUpdater.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: Služba Windows Media Player Network Sharing (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: WtuSystemSupport - Unknown owner - C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
O23 - Service: ZAtheros Bt and Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 11078 bytes

======Listing Processes======




c:\PROGRA~2\AVG\AVG2015\avgrsa.exe /boot
C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe /pipeName=c2feea3f-0200-0000-73ad-df20e96bd61b /binaryPath="C:\Program Files (x86)\AVG\AVG2015\"

wininit.exe

winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
"C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe"
"C:\WINDOWS\system32\nvvsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe"
"C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
dashost.exe {8400e900-3812-43e1-99936a3d25c8496d}
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe"
"C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe"
"C:\Program Files (x86)\AVG\AVG2015\avgemca.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
"C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe"
"C:\Program Files\ASUS\P4G\BatteryLife.exe"
taskhostex.exe
"C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe"
C:\WINDOWS\Explorer.EXE
KBFiltr.exe
"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\ToolbarUpdater.exe"
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\loggingserver.exe" 72648 "C:\ProgramData\AVG Secure Search\Logger\logger.properties"
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe"
"C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" ba577d1f-ab5d-4918-b619-428aafae8236 1
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Windows\System32\hkcmd.exe"
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
"C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version8\TeamViewer8_Logfile.log
"C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version8\TeamViewer8_Logfile.log
"C:\Windows\SysWOW64\ACEngSvr.exe" -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
"C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY
"C:\Program Files (x86)\AVG Web TuneUp\vprot.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="5616.0.1427310587\667899707" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,19,42 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3308 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe"
ctfmon.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BackgroundRendererProcesses/AllowBelowNormalFromBrowser/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Freud/*DomRel-Enable/enable/*EmbeddedSearch/Group1 dev:pp6 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Extension (public)/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/ExtensionUseSafeInstallation/Default/*GoogleNow/Enable/*NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Dev_NonMonotonicity_Experiment_PostPeriod/*PasswordGeneration/Enabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/ThrottleExtensionBackgroundPages/ThrottlePersistent/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_50/*UMA-Uniformity-Trial-10-Percent/group_02/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_07/*UMA-Uniformity-Trial-50-Percent/default/UMAInitialMetricsTiming/Enabled/*UseDelayAgnosticAEC/Enabled/V8CacheOptions/default/*V8VerifyHeap/Disabled/*VoiceTrigger/Install/*WebRTC-ScreencastTargetBitrateOvershoot/Control/*WebRTC-SupportVP9/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=5616 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --disable-accelerated-video-decode --channel="5616.1.1247788998\790994225" /prefetch:673131151
"C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe" --type=renderer --no-sandbox --user-agent="Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; ASU2JS; rv:11.0) like Gecko" --lang=en-US --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --lang=en-US --uncaught-exception-stack-size=1024 --disable-pepper-3d --disable-accelerated-compositing --disable-accelerated-video-decode --disable-webrtc-hw-encoding --enable-software-compositing --disable-gpu-compositing --disable-pepper-3d --channel="5836.1.1816642974\1492845229" /prefetch:673131151
"C:\Program Files (x86)\Bluetooth Suite\BtTray.exe"
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*BackgroundRendererProcesses/AllowBelowNormalFromBrowser/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Freud/*DomRel-Enable/enable/*EmbeddedSearch/Group1 dev:pp6 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Extension (public)/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/ExtensionUseSafeInstallation/Default/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/Dev_NonMonotonicity_Experiment_PostPeriod/*PasswordGeneration/Enabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*ThrottleExtensionBackgroundPages/ThrottlePersistent/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_50/*UMA-Uniformity-Trial-10-Percent/group_02/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_07/*UMA-Uniformity-Trial-50-Percent/default/UMAInitialMetricsTiming/Enabled/*UseDelayAgnosticAEC/Enabled/*V8CacheOptions/default/*V8VerifyHeap/Disabled/*VoiceTrigger/Install/*WebRTC-ScreencastTargetBitrateOvershoot/Control/*WebRTC-SupportVP9/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=5616 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --disable-accelerated-video-decode --channel="5616.9.701449494\1835668300" /prefetch:673131151
-downloadmgr
taskhost.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*BackgroundRendererProcesses/AllowBelowNormalFromBrowser/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Freud/*DomRel-Enable/enable/*EmbeddedSearch/Group1 dev:pp6 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Extension (public)/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/ExtensionUseSafeInstallation/Default/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/Dev_NonMonotonicity_Experiment_PostPeriod/*PasswordGeneration/Enabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*ThrottleExtensionBackgroundPages/ThrottlePersistent/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_50/*UMA-Uniformity-Trial-10-Percent/group_02/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_07/*UMA-Uniformity-Trial-50-Percent/default/UMAInitialMetricsTiming/Enabled/*UseDelayAgnosticAEC/Enabled/*V8CacheOptions/default/*V8VerifyHeap/Disabled/*VoiceTrigger/Install/*WebRTC-ScreencastTargetBitrateOvershoot/Control/*WebRTC-SupportVP9/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=5616 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --disable-accelerated-video-decode --channel="5616.21.197729130\1093485301" /prefetch:673131151

C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Users\David\Downloads\RSITx64.exe"
C:\WINDOWS\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\d96zs9o5.default

prefs.js - "browser.startup.homepage" - "https://mysearch.avg.com/?cid={AC84A581 ... 2015-05-16 00:43:37&v=4.1.0.411&pid=wtu&sg=&sap=hp"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.4.0\\npsitesafety.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.51.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.75.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.75.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll


C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\d96zs9o5.default\extensions\
avg@toolbar
gw@wGI.org
T3@N9hg.edu
Yl@PXqh.edu
{ea614400-e918-4741-9a97-7a972ff7c30b}

C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\d96zs9o5.default\searchplugins\
avg-secure-search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG Web TuneUp - C:\Program Files\AVG Web TuneUp\4.1.0.411\AVG Web TuneUp.dll [2015-05-16 2467864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG Web TuneUp - C:\Program Files (x86)\AVG Web TuneUp\4.1.0.411\AVG Web TuneUp.dll [2015-05-16 2424856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2013-10-01 391128]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2013-10-01 771032]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2013-10-01 769496]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-08-20 13192848]
"BtPreLoad"=C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [2012-08-31 64640]
"ACMON"=C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2012-08-24 107192]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-05-01 2685072]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2015-05-01 1570672]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2015-05-15 2888384]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]
"Viber"=C:\Users\David\AppData\Local\Viber\Viber.exe [2015-02-03 776400]
"Zoner Photo Studio Autoupdate"=C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE [2013-12-13 831488]
"GoogleChromeAutoLaunch_9A83AADA066CCEA6F8C613E0AB5C7E19"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-04-28 812872]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2012-03-28 91432]
"ASUSWebStorage"=C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe [2012-08-28 3417984]
"ArcSoft Connection Service"=C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2010-10-27 207424]
"UnlockerAssistant"=C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe [2010-07-04 17408]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2011-10-24 421888]
"AVG_UI"=C:\Program Files (x86)\AVG\AVG2015\avgui.exe [2015-04-15 3745232]
"vProt"=C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2015-05-16 3033112]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AsusVibeLauncher.lnk - C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe
TMMonitor.lnk - C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe

C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\David\AppData\Roaming\Dropbox\bin\Dropbox.exe
OnePlus One Toolkit.lnk - C:\Program Files (x86)\OPO Toolkit\OnePlus One Toolkit.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" ,C:\WINDOWS\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2013-10-01 623104]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableCAD"=1
"DisableTaskMgr"=0
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave4"=wdmaud.drv
"mixer4"=wdmaud.drv
"midi4"=wdmaud.drv
"VIDC.XFR1"=xfcodec64.dll
"wave5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv

======File associations======

.inf - open - "%SystemRoot%\system32\NOTEPAD.EXE" %1
.ini - open - "%SystemRoot%\system32\NOTEPAD.EXE" %1
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - "C:\WINDOWS\System32\WScript.exe" "%1" %*
.txt - open - "%SystemRoot%\system32\NOTEPAD.EXE" %1

======List of files/folders created in the last 1 month======

2015-05-18 20:22:03 ----D---- C:\rsit
2015-05-18 19:13:52 ----A---- C:\Users\David\AppData\Roaming\my_intel.sys
2015-05-17 21:49:57 ----D---- C:\Device
2015-05-16 00:43:51 ----D---- C:\ProgramData\AVG Security Toolbar
2015-05-16 00:43:33 ----D---- C:\ProgramData\AVG Secure Search
2015-05-16 00:43:29 ----D---- C:\Program Files\AVG Web TuneUp
2015-05-16 00:43:23 ----D---- C:\ProgramData\AVG Web TuneUp
2015-05-16 00:43:23 ----D---- C:\Program Files (x86)\AVG Web TuneUp
2015-05-16 00:40:45 ----SD---- C:\WINDOWS\SYSWOW64\Microsoft
2015-05-16 00:38:40 ----D---- C:\Users\David\AppData\Roaming\AVG2015
2015-05-16 00:37:54 ----D---- C:\Users\David\AppData\Roaming\TuneUp Software
2015-05-16 00:37:17 ----HD---- C:\$AVG
2015-05-16 00:37:17 ----D---- C:\ProgramData\AVG2015
2015-05-16 00:37:01 ----D---- C:\Program Files (x86)\AVG
2015-05-16 00:35:23 ----HD---- C:\ProgramData\Common Files
2015-05-16 00:35:22 ----D---- C:\ProgramData\MFAData
2015-05-16 00:31:18 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-16 00:31:14 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-05-15 22:08:53 ----D---- C:\Users\David\AppData\Roaming\HellSpy.cz Download Manager
2015-05-15 22:08:36 ----D---- C:\Program Files (x86)\HellSpy Klient
2015-05-15 01:07:11 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-15 01:07:11 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 19:54:21 ----A---- C:\WINDOWS\system32\SystemSettingsDatabase.dll
2015-05-13 19:54:20 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2015-05-13 19:54:18 ----A---- C:\WINDOWS\system32\UtcResources.dll
2015-05-13 19:54:18 ----A---- C:\WINDOWS\system32\diagtrack.dll
2015-05-13 19:54:03 ----A---- C:\WINDOWS\system32\lsasrv.dll
2015-05-13 19:54:03 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2015-05-13 19:54:03 ----A---- C:\WINDOWS\system32\certcli.dll
2015-05-13 19:54:02 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2015-05-13 19:53:28 ----A---- C:\WINDOWS\SYSWOW64\sdbinst.exe
2015-05-13 19:53:28 ----A---- C:\WINDOWS\system32\sdbinst.exe
2015-05-13 19:53:07 ----A---- C:\WINDOWS\system32\drivers\ahcache.sys
2015-05-13 19:52:56 ----A---- C:\WINDOWS\system32\dwmcore.dll
2015-05-13 19:52:55 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2015-05-13 19:52:54 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Input.Inking.dll
2015-05-13 19:52:54 ----A---- C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2015-05-13 19:52:51 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2015-05-13 19:52:47 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2015-05-13 19:52:47 ----A---- C:\WINDOWS\system32\SRH.dll
2015-05-13 19:52:43 ----AC---- C:\WINDOWS\system32\drivers\sdbus.sys
2015-05-13 19:52:43 ----AC---- C:\WINDOWS\system32\drivers\dumpsd.sys
2015-05-13 19:52:41 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2015-05-13 19:52:41 ----A---- C:\WINDOWS\system32\dbgeng.dll
2015-05-13 19:52:40 ----A---- C:\WINDOWS\SYSWOW64\dbghelp.dll
2015-05-13 19:52:40 ----A---- C:\WINDOWS\system32\dbghelp.dll
2015-05-13 19:52:37 ----A---- C:\WINDOWS\system32\services.exe
2015-05-13 19:52:35 ----AC---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-05-13 19:52:34 ----A---- C:\WINDOWS\system32\wpdshext.dll
2015-05-13 19:52:33 ----A---- C:\WINDOWS\SYSWOW64\wpdshext.dll
2015-05-13 19:52:29 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2015-05-13 19:51:54 ----A---- C:\WINDOWS\system32\drivers\udfs.sys
2015-05-13 19:51:53 ----A---- C:\WINDOWS\system32\PhotoMetadataHandler.dll
2015-05-13 19:51:52 ----A---- C:\WINDOWS\SYSWOW64\PhotoMetadataHandler.dll
2015-05-13 19:51:51 ----AC---- C:\WINDOWS\system32\drivers\bthhfenum.sys
2015-05-13 19:51:42 ----A---- C:\WINDOWS\system32\FntCache.dll
2015-05-13 19:51:42 ----A---- C:\WINDOWS\system32\DWrite.dll
2015-05-13 19:51:41 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2015-05-13 19:51:41 ----A---- C:\WINDOWS\system32\win32k.sys
2015-05-13 19:51:27 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2015-05-13 19:51:27 ----A---- C:\WINDOWS\system32\schannel.dll
2015-05-13 19:51:22 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-05-13 19:51:20 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-05-13 19:51:18 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-05-13 19:51:17 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-05-13 19:51:16 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-05-13 19:51:15 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-05-13 19:51:14 ----A---- C:\WINDOWS\system32\wininet.dll
2015-05-13 19:51:14 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-05-13 19:51:13 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-05-13 19:51:13 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-05-13 19:51:13 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-05-13 19:51:12 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-05-13 19:51:12 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-05-13 19:51:12 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-05-13 19:51:12 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-05-13 19:51:12 ----A---- C:\WINDOWS\system32\jscript.dll
2015-05-13 19:51:11 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2015-05-13 19:51:11 ----A---- C:\WINDOWS\system32\msfeeds.dll
2015-05-13 19:51:11 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2015-05-13 19:51:09 ----A---- C:\WINDOWS\system32\mshtmled.dll
2015-05-13 19:51:05 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2015-05-13 19:51:05 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2015-05-13 19:51:04 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2015-05-13 19:51:04 ----A---- C:\WINDOWS\system32\ieui.dll
2015-05-13 19:51:03 ----A---- C:\WINDOWS\system32\dxtrans.dll
2015-05-13 19:51:01 ----A---- C:\WINDOWS\system32\inseng.dll
2015-05-13 19:51:00 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2015-05-13 19:51:00 ----A---- C:\WINDOWS\system32\webcheck.dll
2015-05-13 19:51:00 ----A---- C:\WINDOWS\system32\iepeers.dll
2015-05-13 19:51:00 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2015-05-13 19:50:59 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2015-05-13 19:50:59 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2015-05-13 19:50:59 ----A---- C:\WINDOWS\system32\inetcomm.dll
2015-05-13 19:50:58 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2015-05-13 19:50:58 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2015-05-13 19:49:19 ----D---- C:\AdwCleaner
2015-05-10 11:15:11 ----D---- C:\Program Files\trend micro
2015-05-09 13:07:39 ----A---- C:\WINDOWS\SYSWOW64\skflv.txt
2015-05-08 11:12:20 ----D---- C:\Program Files (x86)\Android
2015-05-07 20:58:20 ----D---- C:\Program Files (x86)\WugFresh Development
2015-05-07 20:04:01 ----D---- C:\WINDOWS\SYSWOW64\NV
2015-05-07 20:04:01 ----D---- C:\WINDOWS\system32\NV
2015-05-07 19:56:46 ----A---- C:\WINDOWS\system32\nvdispgenco6435012.dll
2015-05-07 19:56:46 ----A---- C:\WINDOWS\system32\nvdispco6435012.dll
2015-05-07 19:56:43 ----A---- C:\WINDOWS\system32\drivers\nvpciflt.sys
2015-05-07 19:56:43 ----A---- C:\WINDOWS\system32\drivers\nvlddmkm.sys
2015-05-07 19:56:39 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll
2015-05-07 19:56:39 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2015-05-07 19:56:39 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2015-05-07 19:56:39 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll
2015-05-07 19:56:39 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2015-05-07 19:56:39 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2015-05-07 19:56:39 ----A---- C:\WINDOWS\system32\nvwgf2umx.dll
2015-05-07 19:56:39 ----A---- C:\WINDOWS\system32\nvopencl.dll
2015-05-07 19:56:39 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2015-05-07 19:56:39 ----A---- C:\WINDOWS\system32\nvoglshim64.dll
2015-05-07 19:56:39 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2015-05-07 19:56:39 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2015-05-07 19:56:38 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2015-05-07 19:56:38 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2015-05-07 19:56:38 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2015-05-07 19:56:38 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2015-05-07 19:56:38 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2015-05-07 19:56:38 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2015-05-07 19:56:38 ----A---- C:\WINDOWS\system32\nvcuda.dll
2015-05-07 19:56:38 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2015-04-26 13:54:33 ----D---- C:\OPO
2015-04-26 12:19:58 ----D---- C:\AndroidSDKSlim
2015-04-26 09:17:05 ----A---- C:\WINDOWS\system32\drivers\aswC3BC.tmp
2015-04-26 09:16:54 ----A---- C:\WINDOWS\system32\drivers\asw976B.tmp
2015-04-26 09:16:54 ----A---- C:\WINDOWS\system32\drivers\asw976A.tmp
2015-04-26 09:16:54 ----A---- C:\WINDOWS\system32\drivers\asw9769.tmp
2015-04-26 09:16:54 ----A---- C:\WINDOWS\system32\drivers\asw9768.tmp
2015-04-26 09:16:54 ----A---- C:\WINDOWS\system32\drivers\asw9757.tmp
2015-04-26 09:16:54 ----A---- C:\WINDOWS\system32\drivers\asw9756.tmp
2015-04-26 09:16:54 ----A---- C:\WINDOWS\system32\drivers\asw9755.tmp
2015-04-26 09:16:54 ----A---- C:\WINDOWS\system32\drivers\asw9735.tmp
2015-04-26 03:39:20 ----A---- C:\WINDOWS\system32\bddel.exe
2015-04-26 03:39:19 ----A---- C:\WINDOWS\system32\bddel.dat
2015-04-26 01:20:50 ----D---- C:\Users\David\AppData\Roaming\LavasoftStatistics
2015-04-26 01:20:27 ----A---- C:\WINDOWS\system32\LavasoftTcpService64.dll
2015-04-26 01:20:09 ----D---- C:\Program Files (x86)\Lavasoft
2015-04-26 01:17:53 ----D---- C:\Users\David\AppData\Roaming\Lavasoft
2015-04-26 01:17:13 ----D---- C:\ProgramData\Lavasoft
2015-04-26 00:35:39 ----D---- C:\WINDOWS\%LOCALAPPDATA%
2015-04-23 22:36:37 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2015-04-23 22:24:02 ----RD---- C:\Program Files (x86)\Skype

======List of files/folders modified in the last 1 month======

2015-05-18 20:22:03 ----D---- C:\WINDOWS\Prefetch
2015-05-18 20:21:42 ----D---- C:\WINDOWS\Temp
2015-05-18 20:14:48 ----D---- C:\WINDOWS\rescache
2015-05-18 20:04:50 ----D---- C:\WINDOWS\Microsoft.NET
2015-05-18 20:00:00 ----D---- C:\WINDOWS\system32\sru
2015-05-18 19:15:23 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2015-05-18 19:13:55 ----D---- C:\Program Files (x86)\Steam
2015-05-18 19:03:30 ----D---- C:\WINDOWS\system32\catroot
2015-05-18 19:00:25 ----D---- C:\WINDOWS\system32\DriverStore
2015-05-18 19:00:25 ----D---- C:\WINDOWS\Inf
2015-05-18 00:18:33 ----D---- C:\WINDOWS\system32\config
2015-05-17 23:11:28 ----RSD---- C:\WINDOWS\assembly
2015-05-17 21:51:37 ----D---- C:\Program Files (x86)\HandyUpdater
2015-05-17 21:51:20 ----D---- C:\WINDOWS\system32\drivers
2015-05-17 21:50:03 ----D---- C:\WINDOWS\SysWOW64
2015-05-17 20:56:36 ----D---- C:\WINDOWS\WinSxS
2015-05-17 20:28:15 ----D---- C:\WINDOWS\system32\MRT
2015-05-17 20:21:09 ----A---- C:\WINDOWS\system32\MRT.exe
2015-05-17 19:43:05 ----D---- C:\WINDOWS\SYSWOW64\drivers
2015-05-17 19:30:13 ----D---- C:\WINDOWS\System32
2015-05-17 19:30:13 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-05-16 23:30:48 ----D---- C:\WINDOWS\Minidump
2015-05-16 23:30:24 ----D---- C:\Windows
2015-05-16 23:30:18 ----D---- C:\ProgramData\AVAST Software
2015-05-16 23:30:11 ----D---- C:\Program Files
2015-05-16 22:16:33 ----D---- C:\Users\David\AppData\Roaming\Dropbox
2015-05-16 21:02:20 ----D---- C:\WINDOWS\SYSWOW64\config
2015-05-16 08:11:32 ----D---- C:\WINDOWS\AppReadiness
2015-05-16 08:11:31 ----HD---- C:\Program Files\WindowsApps
2015-05-16 00:44:54 ----HD---- C:\ProgramData
2015-05-16 00:44:53 ----D---- C:\WINDOWS\system32\Tasks
2015-05-16 00:44:52 ----D---- C:\WINDOWS\Tasks
2015-05-16 00:43:31 ----D---- C:\Program Files (x86)\Common Files
2015-05-16 00:43:23 ----RD---- C:\Program Files (x86)
2015-05-16 00:38:22 ----SHD---- C:\WINDOWS\Installer
2015-05-16 00:37:47 ----HD---- C:\WINDOWS\ELAMBKUP
2015-05-16 00:02:47 ----D---- C:\Users\David\AppData\Roaming\ViberPC
2015-05-15 23:23:02 ----D---- C:\WINDOWS\debug
2015-05-15 22:42:24 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2015-05-15 22:42:23 ----RSD---- C:\WINDOWS\Fonts
2015-05-15 22:42:22 ----D---- C:\WINDOWS\apppatch
2015-05-15 22:42:20 ----D---- C:\WINDOWS\system32\AdvancedInstallers
2015-05-15 22:42:18 ----D---- C:\Program Files (x86)\Internet Explorer
2015-05-15 22:42:17 ----D---- C:\Program Files\Internet Explorer
2015-05-15 22:40:52 ----D---- C:\WINDOWS\CbsTemp
2015-05-15 01:00:20 ----D---- C:\Program Files\Windows Journal
2015-05-15 00:59:40 ----SHD---- C:\System Volume Information
2015-05-14 18:10:29 ----D---- C:\WINDOWS\system32\NDF
2015-05-13 22:13:12 ----D---- C:\WINDOWS\system32\catroot2
2015-05-10 21:36:30 ----D---- C:\Program Files (x86)\Wondershare
2015-05-10 21:35:53 ----D---- C:\Games
2015-05-10 21:29:49 ----D---- C:\Program Files\Common Files
2015-05-10 20:49:16 ----D---- C:\WINDOWS\SoftwareDistribution
2015-05-10 19:45:32 ----SD---- C:\ProgramData\Microsoft
2015-05-10 19:45:32 ----D---- C:\Program Files (x86)\Microsoft.NET
2015-05-10 19:43:52 ----D---- C:\Program Files (x86)\MSBuild
2015-05-10 19:43:03 ----D---- C:\ProgramData\Microsoft Help
2015-05-10 19:42:03 ----D---- C:\WINDOWS\ShellNew
2015-05-10 19:41:34 ----A---- C:\WINDOWS\win.ini
2015-05-09 17:41:41 ----D---- C:\Users\David\AppData\Roaming\DAEMON Tools Lite
2015-05-09 17:40:03 ----D---- C:\WINDOWS\Logs
2015-05-09 17:15:47 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-05-09 17:14:50 ----A---- C:\WINDOWS\wininit.ini
2015-05-09 17:14:47 ----D---- C:\ProgramData\Spybot - Search & Destroy
2015-05-07 20:02:37 ----D---- C:\ProgramData\NVIDIA
2015-05-07 20:00:25 ----D---- C:\Program Files\NVIDIA Corporation
2015-05-01 18:51:27 ----A---- C:\WINDOWS\SYSWOW64\nvspcap.dll
2015-05-01 18:51:27 ----A---- C:\WINDOWS\SYSWOW64\nvspbridge.dll
2015-05-01 18:50:57 ----A---- C:\WINDOWS\system32\nvspcap64.dll
2015-05-01 18:50:57 ----A---- C:\WINDOWS\system32\nvspbridge64.dll
2015-05-01 10:34:59 ----D---- C:\Users\David\AppData\Roaming\.minecraft
2015-04-26 12:03:10 ----D---- C:\WINDOWS\system32\wdi
2015-04-26 10:06:06 ----D---- C:\Program Files (x86)\Send Page
2015-04-26 03:36:15 ----D---- C:\Program Files (x86)\BorderlineMonitor
2015-04-25 23:22:02 ----D---- C:\WINDOWS\AppCompat
2015-04-23 22:27:27 ----SD---- C:\WINDOWS\system32\CompatTel
2015-04-23 22:27:26 ----D---- C:\WINDOWS\system32\appraiser
2015-04-23 22:27:23 ----D---- C:\WINDOWS\system32\cs-CZ
2015-04-23 22:27:19 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-04-23 22:23:58 ----D---- C:\ProgramData\Skype

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\WINDOWS\system32\DRIVERS\avgidsha.sys [2015-03-11 213984]
R0 Avgloga;AVG Logging Driver; C:\WINDOWS\system32\DRIVERS\avgloga.sys [2015-03-11 344544]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx64.sys [2015-04-03 137184]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx64.sys [2015-03-20 40928]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-07-24 645952]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2015-04-09 31376]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-09-07 17536]
R1 Avgdiska;AVG Disk Driver; C:\WINDOWS\system32\DRIVERS\avgdiska.sys [2015-03-11 162784]
R1 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\avgidsdrivera.sys [2015-04-09 284128]
R1 Avgldx64;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx64.sys [2015-04-15 256992]
R1 Avgwfpa;AVG Firewall Driver; C:\WINDOWS\system32\DRIVERS\avgwfpa.sys [2015-04-07 293856]
R1 dtsoftbus01;@oem65.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2014-02-09 283064]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416]
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\SysWOW64\drivers\Afc.sys [2006-11-14 22784]
R3 AiCharger;ASUS Charger Driver; C:\WINDOWS\system32\DRIVERS\AiCharger.sys [2012-07-24 17152]
R3 ASUSVRC64;@oem68.inf,%ASUSVRC.DeviceDesc%;ASUSTeK Virtual Capture Device; C:\WINDOWS\system32\DRIVERS\AsusVRC64.sys [2008-10-13 23424]
R3 athr;@oem89.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\system32\DRIVERS\athw8x.sys [2013-08-22 3915264]
R3 ATP;@oem3.inf,%PS2.DeviceDesc%;ASUS PS/2 Port Input Device; C:\WINDOWS\System32\drivers\AsusTP.sys [2012-10-31 61824]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 HIDSwitch;@oem87.inf,%ASSW.DisplayName%;ASUS Wireless Radio Control; C:\WINDOWS\System32\drivers\AsHIDSwitch64.sys [2013-10-09 20280]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2013-10-01 4177920]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2012-08-28 4124176]
R3 IntcDAud;@oem57.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-08-27 342528]
R3 iwdbus;@oem95.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-08-23 26008]
R3 kbfiltr;@oem12.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\WINDOWS\System32\drivers\kbfiltr.sys [2012-08-02 14992]
R3 MEIx64;@oem35.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-02 62784]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-04-09 10423952]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-05-01 19600]
R3 nvvad_WaveExtensible;@oem18.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2014-11-22 38032]
R3 RSBASTOR;@oem5.inf,%Rts5208%;Realtek PCIE CardReader Driver - BA; C:\WINDOWS\system32\DRIVERS\RtsBaStor.sys [2012-06-13 294544]
R3 RTL8168;@oem4.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2012-06-12 683664]
R3 teamviewervpn;@oem70.inf,%DeviceDescription%;TeamViewer VPN Adapter; C:\WINDOWS\system32\DRIVERS\teamviewervpn.sys [2013-06-06 35112]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2014-06-21 212736]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S0 Avgboota;AVG Early Launch Anti-Malware Driver; C:\WINDOWS\system32\DRIVERS\avgboota.sys [2015-03-27 21152]
S3 androidusb;@oem25.inf,%androidusb.SvcDesc%;ADB Interface Driver; C:\WINDOWS\System32\Drivers\androidusb.sys []
S3 BTATH_A2DP;@oem10.inf,%BTATH_A2DP.SvcDesc%;Bluetooth A2DP Audio Driver; C:\WINDOWS\system32\drivers\btath_a2dp.sys [2012-08-31 344216]
S3 btath_avdt;@oem10.inf,%btath_avdt.SvcDesc%;Qualcomm Atheros Bluetooth AVDT Service; C:\WINDOWS\system32\drivers\btath_avdt.sys [2012-08-31 114840]
S3 BTATH_HCRP;@oem14.inf,%BTATH_HCRP.SvcDesc%;Bluetooth HCRP Server driver; C:\WINDOWS\System32\drivers\btath_hcrp.sys [2012-08-31 178840]
S3 BTATH_RCP;@oem17.inf,%BTATH_RCP%;Bluetooth AVRCP Device; C:\WINDOWS\System32\drivers\btath_rcp.sys [2012-08-31 135832]
S3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2014-01-28 593000]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2014-10-29 53248]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\System32\drivers\BthLEEnum.sys [2013-12-04 226304]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2014-07-24 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-10-29 1198080]
S3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-10-29 81920]
S3 intaud_WaveExtensible;@oem94.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-08-23 39320]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-01-30 167424]
S3 RTL2832UBDA;@oem66.inf,%RTLUSBDEV.BDA_Desc%;REALTEK 2832U BDA Driver; C:\WINDOWS\system32\drivers\RTL2832UBDA.sys [2012-08-03 237968]
S3 RTL2832UUSB;@oem66.inf,%RTLUSBDEV.USB_Desc%;REALTEK 2832U USB Driver; C:\WINDOWS\System32\Drivers\RTL2832UUSB.sys [2012-08-03 39056]
S3 ssudeadb;@oem150.inf,%ssud.Service.DeviceDesc%;SAMSUNG Android Composite ADB(V1.5) Interface Driver ; C:\WINDOWS\System32\Drivers\ssudeadb.sys [2012-07-31 38752]
S3 usb_rndisx;@netrndis.inf,%usb_rndis.Service.DispName%;Adaptér USB RNDIS; C:\WINDOWS\system32\DRIVERS\usb8023x.sys [2013-08-22 20992]
S3 usbrndis6;@netrndis.inf,%usbrndis6.Service.DispName%;Adaptér USB RNDIS6; C:\WINDOWS\System32\drivers\usb80236.sys [2013-08-22 20992]
S3 VBoxNetAdp;@oem107.inf,%VBoxNetAdp_Desc%;VirtualBox Host-Only Ethernet Adapter; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp.sys [2013-12-18 140560]
S3 VBoxNetFlt;@oem105.inf,%VBoxNetFltService_Desc%;VirtualBox Bridged Networking Service; C:\WINDOWS\system32\DRIVERS\VBoxNetFlt.sys []
S4 BTATH_LWFLT;@oem21.inf,%BTATH_LWFLT%;Bluetooth LWFLT Device; C:\WINDOWS\system32\drivers\BTATH_LWFLT.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-18 65432]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2012-07-23 105120]
R2 ASUS InstantOn;ASUS InstantOn Service; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [2012-04-13 277120]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2012-08-31 216192]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2011-11-21 96896]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [2015-04-15 3438032]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [2015-04-15 311792]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-05-01 1152656]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-05-01 1884304]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-05-01 22997648]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-04-08 936264]
R2 TeamViewer8;TeamViewer 8; C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2014-08-04 5095264]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 365376]
R2 vToolbarUpdater18.4.0;vToolbarUpdater18.4.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\ToolbarUpdater.exe [2015-05-16 1875480]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2013-10-01 279000]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-05-14 148080]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-05-15 837824]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-01 116648]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-01 116648]

-----------------EOF-----------------

[Roli]

Tak a teď jsi udělal tu nejhorší možnou alternativu, Avast nahradil AVG

[dkdavid3]

Fááákt??? No tak já to zase vrátím zpátky.A děkuju za pomoc.

[Roli]

Fááákt??? No tak já to zase vrátím zpátky.

Ono to ale nebude jen tak, AVG ve většině případů dělá při odinstalaci problémy nebo po něm zůstane spousta nepořádku.

Musíš nejlépe v Nouzovém režimu použít AVG Remover

Pak mi sem dej zase aktuální log z Rsit abych se mrknul že je po něm opravdu čisto.