Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o pomoc.

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
MichalT
Návštěvník
Návštěvník
Příspěvky: 9
Registrován: 11 říj 2015 20:56

Prosím o pomoc.

#1 Příspěvek od MichalT »

Dobrý den, prosím Vás o pomoc s opravou systému s nežádoucím problémem. Po otevření prohlížeče Firefoxu a kliknutí na nějaký odkaz, problikne a otevře se nová stránka, která se snaží připojit na nějaké neznámé stránky, případně se samovolně v nové záložce otevře reklama na instalaci diagnostického programu. Vše pracuje podstaně pomaleji než dříve. Nainstaloval jsem Avast a po chvilce našel zatím 3 infikované soubory.
Jsem si vědom, že jsem včera povolil instalaci nevhodného programu.
Přikládám LOG a ještě jednou prosím o jeho kontrolu a případnou pomoc při řešení problému, předem moc děkuji.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Michal at 2015-10-11 21:42:46
Microsoft Windows 10 Pro
System drive C: has 98 GB (41%) free of 238 GB
Total RAM: 3071 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:43:22, on 11.10.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\sihost.exe
C:\WINDOWS\system32\taskhostw.exe
C:\Program Files\P4G\BatteryLife.exe
C:\Program Files\IObit\Advanced SystemCare 8\Monitor.exe
C:\Program Files\ASUS\Splendid\ACMON.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
C:\Windows\System32\RuntimeBroker.exe
C:\Program Files\IObit\IObit Uninstaller\UninstallMonitor.exe
C:\Windows\System32\ACEngSvr.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files\HP\HP Software Update\hpwuschd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Samsung\Kies\KiesAirMessage.exe
C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
C:\Program Files\IObit\Advanced SystemCare 8\ASCTray.exe
C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel.exe
C:\WINDOWS\system32\svchost.exe
C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
C:\WINDOWS\system32\ApplicationFrameHost.exe
C:\Windows\System32\SystemSettingsBroker.exe
C:\WINDOWS\System32\NetworkUXBroker.exe
C:\WINDOWS\system32\taskeng.exe
C:\Program Files\IObit\Advanced SystemCare 8\ASC.exe
C:\Program Files\AVAST Software\Avast\avastUi.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\system32\taskhostw.exe
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
C:\WINDOWS\system32\browser_broker.exe
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
C:\WINDOWS\system32\SearchFilterHost.exe
C:\Users\Michal\Downloads\RSIT.exe
C:\Users\Michal\Downloads\RSIT.exe
C:\Program Files\trend micro\Michal.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files\IObit Apps Toolbar\IE\22.1\iobitappsToolbarIE.dll
O2 - BHO: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files\IObit Apps Toolbar\IE\22.1\iobitappsToolbarIE.dll
O2 - BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Advanced SystemCare Surfing Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~1\IObit\SURFIN~1\BROWER~1\ASCPlugin_Protection.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll
O3 - Toolbar: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files\IObit Apps Toolbar\IE\22.1\iobitappsToolbarIE.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [NvBackend] "C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe"
O4 - HKLM\..\Run: [ShadowPlay] C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap.dll,ShadowPlayOnSystemStart
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SearchSettings] "C:\Program Files\Common Files\Spigot\Preferences Manager\PreferencesManager.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup
O4 - HKCU\..\Run: [] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKCU\..\Run: [KiesPDLR.exe] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run
O4 - HKCU\..\Run: [Advanced SystemCare 8] "C:\Program Files\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto
O4 - HKCU\..\Run: [icq] C:\Users\Michal\AppData\Roaming\ICQM\icq.exe -CU
O4 - HKCU\..\Run: [GarminExpressTrayApp] "C:\Program Files\Garmin\Express Tray\ExpressTray.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Michal\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'DefaultAppPool')
O4 - HKUS\S-1-5-18\..\Run: [GarminExpressTrayApp] "C:\Program Files\Garmin\Express Tray\ExpressTray.exe" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [GarminExpressTrayApp] "C:\Program Files\Garmin\Express Tray\ExpressTray.exe" (User 'Default user')
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: SRS Premium Sound.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files\Microsoft Office\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést cíl vazby do existujícího PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést do existujícího PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Převést vybrané vazby do Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést vybrané vazby do existujícího PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Převést výběr do Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést výběr do existujícího PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 8 (AdvancedSystemCareService8) - IObit - C:\Program Files\IObit\Advanced SystemCare 8\ASCService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @oem100.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Broadcom Corporation. - C:\WINDOWS\system32\BtwRSupportService.exe
O23 - Service: Garmin Device Interaction Service - Garmin Ltd. or its subsidiaries - C:\Program Files\Garmin\Device Interaction Service\GarminService.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvvsvc.exe
O23 - Service: Program Manager - Spigot, Inc. - C:\Program Files\Common Files\ProgramManager\ProgramManager.exe
O23 - Service: Remote Procedure Call (RPC) Net (rpcnet) - Absolute Software Corp. - C:\Windows\system32\rpcnet.exe
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

--
End of file - 12700 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\ASC8_SkipUac_Michal.job - C:\Program Files\IObit\Advanced SystemCare 8\ASC.exe /SkipUac
C:\WINDOWS\tasks\b293f196-7f04-4f95-9b88-e865ef27a0d4-1-6.job - C:\Program Files\CinemaP-1.9cV10.10\b293f196-7f04-4f95-9b88-e865ef27a0d4-1-6.exe /rawdata=R/fmk6NeKvt3tC2GyBxRJbLu1dr93ZY/ZSGg3LybU/JBR49N7TdxT6OQ/PPL1uVz4mFByBwMFp/m670vmIeT8Q5mVocFymuYddmFFThNrXDY4b79hesZvpUEQ2SAaJLV5R7IXLal6HrIgthk9KkZPiLZpI4qOHN4jC3WILqJ+BiR/KhtvRGrI7kum/z1rOcs8txZOXU3X+/7K+E8J/UIhk7Ktutim3Yyx50+HMu1quJfWhrYSYtaWJIw2xaVhicGrnSpVLij93Y3PTcX/5vVBozgFngs0yP810Nh42/idejtmfG0xOIs/QT36YcZtn6tKwCRNkf461naYISkwg4ndDBrsF7syUPRJRZsh3z8WUm1VpdogZ6uEUPSb9yVXeyM8nGS2XEDlVKYX6SSeXVgkEHvfSTCJRbz5YOHXWtgzy3E3K8KKGHeAFwPwmQuJVTeA3gRKS0XA1F4aknjpPPArHbbn04LVZpC2+AY/f2yIr7hPAUnpjkVaAhTySzrRgfRZBTS+T/hpHELUgY1ykre5gM4G6JmYygRc0KXo8V9s1zd2dyaqBdFTstTM4Mnd64wpY5qiVom5nJHVEjJ7Q/OqWwlC5f00TKc5X5S36GY5JexEQxPHfZyLu1D8DV17jwEAp13Z5zA91uadaWfSXiZguLirq+2Ne+nUCdiPeAX6+48evP7Mk1lxhnGG4HcE3+RG36o+Fk1j+RBAoiLC7Zc57WEaVYy+yhp2rA5UdLDR/HzsglPMkYVFjvp+5S4R0Gsan+Us7ebFvq/Ivikh5N7pdlVITilktjE3EZQZjJkWD4RtyqCAxdPZfjjy90Q0jKNrPHA3zUoap2R1KXzf0jqb2YgdmDwjytZUxWOccXyoHgtVBS8Ki2bPCuBWcUSp4IoAIgEAPsrWTgYQNhLG5YXQ2NLe+sA8LknArRRYl3TSVAqRWs31eepqL69gazM3qlyHiVjs99QLKzslZZ3WDgDVjgAWyez+aC2FQ7Fgjcp56FdrMbcit7zWrvWwngl/LQfmiFStidauowuvcKlZ6ZEhN5C7Keq+SaokvP3I1NMLylHg2OZ0ZmVxJ9UOdMbkBWhaqIrByAxmtdjtESyDRtuhP9Wy39JqdLUDt8FWJ37XYBOJQTtk1zx32hznkuB3ZEWEF3C23/fUrXhkggf45mXRr3EQL8VZ86iysZJxk6iLrQ=
C:\WINDOWS\tasks\b293f196-7f04-4f95-9b88-e865ef27a0d4-1-7.job - C:\Program Files\CinemaP-1.9cV10.10\b293f196-7f04-4f95-9b88-e865ef27a0d4-1-7.exe /rawdata=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
C:\WINDOWS\tasks\b293f196-7f04-4f95-9b88-e865ef27a0d4-10_user.job - C:\Program Files\CinemaP-1.9cV10.10\b293f196-7f04-4f95-9b88-e865ef27a0d4-10.exe /rawdata=CZw0emJwJ4VvuaHrsx6G47SR2EzweQ5KCSC7fUlWejCGbARK9C1QjTd+YizE4/OVtPieX7cCq/W5ko3aTBgqKoM1/avL7A5Wy7sfCjmIUnPlN9oeUTHIj8cZrA7qBSZEMrWW5+nbrnUR9Lt8jtGhdF75EbbcWNKNOMN18r0rHR1ZOUVccfTt7k7Z0vWAWRQDWxbA+R8B3VV/rcSnz7t47EcnLggGSgu8Yo/psiLFPIo9pRHqrJdm9hAKwMo3S1dWyrm56LkTVmwkfytJIhx9VVAvdwG8d1mL7YbYvatwFiPL25EBaBT1ZfZqfdX2JmSdZSNp4JvH63CwU+uqXBoBZqWD79KkOmJL2XXGacB2V51t5xg/KrHixrmr2+RwCRzvUJHc8Bcb6vsyCFx8ehlWKB6mi96A9hGmVLBf6ogH6jJ9bmbhfuh20ddEKZuDLDegvvZdiRObXsoc7eKnkRNYjoenH3AFYd0cb7d21WkxNRfGobnailC1DaHV1IxdVrC/VSqYq7bji0l5kc6X8byYX+F/n3TIxuufgULvrtFV2ICx3NSCQ67wSmTiAzUEKBNf9k1mKYFP/p52h+Usb56KPSjvHnpE/JuR69jCsQByOJM3OWSQMOcNrlB6d396p+QnUdJ4AFL3Kz6ctzRbCSLrsA+vQjQOF8xtSegakeYDhuamvi5eXwOeHTHl4mjgflAGpZsH3VOD2dwuguGk+7BXeqJm1P6HLwhRo/+e8D2VkYj+RZmHFuTit0BpdIPramI1aMOQN7KlJSYOTib7Pho/sJFaz8Tmo1RU+HH09R273VRJqGORHvg18Ds+7P+UcNLgGyoQKEuFrqApAy5p8JPs1A==
C:\WINDOWS\tasks\b293f196-7f04-4f95-9b88-e865ef27a0d4-11.job - C:\Program Files\CinemaP-1.9cV10.10\b293f196-7f04-4f95-9b88-e865ef27a0d4-11.exe /rawdata=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
C:\WINDOWS\tasks\b293f196-7f04-4f95-9b88-e865ef27a0d4-13.job - C:\Program Files\CinemaP-1.9cV10.10\b293f196-7f04-4f95-9b88-e865ef27a0d4-13.exe /rawdata=hqiA2INkYgogyB10rK4MPUifbLGQCHmf+wzpzMJF9pUTUFjOSm8mmHtYakW2JAKuzUhd3Bf9MUCOzGPnBIMPYKLQLPyu7Gp/9csvMxNZMGzaX8n7WqPL2EqqsmErI+0BhTIZ8erfGUmObRflnuVExhi/EHY8lhmOqWzCVcmG7zwII7ZxwkMix1RHrpGNXW2l10wgQpe0fCCe+l3xuhEb/pt/IE+GG7G2SDiJFxZZt1kV4fP+VSsGBPM+Yi/UgHm203C0rROdNVzkJ94qN97qN9ihJroEAz3l7+KChHt1hX/fXhOXNSptq5xpT34PU1bzzzv63PCr/+eO2qlY6BYM5am2SyUzVW97ZIySfSO+QrQPX8jU4ASbkIJscfLGcLlXj/JJkyg1LnRrrwZqYJyBOtKaMkxBN6H8I6xc40kvpiNOvKXizvPCykZCPUsP3Wok8x8phsAsOcuRjtFDfPvEv8MmgOMwcTBq7hfBjl0rcgjt73vwq8Yz+h9rO8MatJ9ACTqvyKNlebWKnXFCK0BXOoGBNTTceJyPAFh3V4xz91x1ZTT+Hyks9E8bBPzMNDw922aBMnXvbjpc0YmfB9bzEUn0i6FLQpq+rO/vExI3qjFkjDQw5eWU/j6YlwlS4zE0HvskImw1JIy6TUMWPNmMVzRa3y/t+EYpWKcvIJlMmtgNe2G2ovPHETAnc9E4YOy/wIzdPR1rwiaxEa8HSTCmG8sOMqRYz7QvNmjkVNyQ/CaSeklAn1E4SjUOiSTI2FlVmKLwxsAMcACelsUtsMMZhVWc8lfHPAfvzybqv/YOc7+6Cmvlbd5c1DciwiBf1/9BjO7ecH2mVFcjrLAick9sai01mdVCsEnQWSGSdgLdkFLYcqSAu7pM8O7RlRr48Sx/UsepAUrIHap8MWQHj/FJlX5ycU1j0PO4qOR/L+BjAUNNeURpSpeqGjJ4biyxTRG0b3arxlW/T4UTDFtfBQaibBlOKuBTpsbuOCvGOtOMTZq9jscDcx31XLnTcAEpg4wjmyJEWXG4pTjJHcflS+Z/vK0UaVhWykzW3kaSTIZ6jGlNC0FL6C3rKmo1evny4uzGAtZ74i8o56a6JsYHbhwb+MO6syk/P8r1jCLsmc/wdNScuS+P6+78WkyhwZ3GzkGeNc5fAYZk87AthpqPVBpbwHz9+X2YkZ9JtowYvdDUgRSLBMGanE/asLn6p7u0zjSbmK2FYkxH5sH6gP6jvq5BnLilold9LkNLGfLRaMMZD/tL5JlYEbP7vu+N5WA5Mx0AFi0sTSb4p/TZuMzgDmhCGifutSWmg6TIcbmppd/anK+BZCCVbixPjDDNvPjktk+5Wx29U40PJnMffnQKYCGrv61Zbl3xDDjEQWduG+/CgQfa2P3VtMN/6shzJkZ+Eqw9SE4F8CEv6y2r91u7UISKlBawVvRowkudNqsdjFjQfQ9L2YjN3Lopq6lLUknh9tkav381CkAVzsJ7Ol4wZRZfzfHzjOlTFBAUwUH57Wy8U6sLb0vHOKJ4OKQHzZvmsXKQ
C:\WINDOWS\tasks\b293f196-7f04-4f95-9b88-e865ef27a0d4-14.job - C:\Program Files\CinemaP-1.9cV10.10\b293f196-7f04-4f95-9b88-e865ef27a0d4-14.exe /rawdata=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
C:\WINDOWS\tasks\b293f196-7f04-4f95-9b88-e865ef27a0d4-3.job - C:\Program Files\CinemaP-1.9cV10.10\b293f196-7f04-4f95-9b88-e865ef27a0d4-3.exe /rawdata=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
C:\WINDOWS\tasks\b293f196-7f04-4f95-9b88-e865ef27a0d4-4.job - C:\Program Files\CinemaP-1.9cV10.10\b293f196-7f04-4f95-9b88-e865ef27a0d4-4.exe /rawdata=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
C:\WINDOWS\tasks\b293f196-7f04-4f95-9b88-e865ef27a0d4-5.job - C:\Program Files\CinemaP-1.9cV10.10\b293f196-7f04-4f95-9b88-e865ef27a0d4-5.exe /rawdata=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
C:\WINDOWS\tasks\b293f196-7f04-4f95-9b88-e865ef27a0d4-5_user.job - C:\Program Files\CinemaP-1.9cV10.10\b293f196-7f04-4f95-9b88-e865ef27a0d4-5.exe /rawdata=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
C:\WINDOWS\tasks\b293f196-7f04-4f95-9b88-e865ef27a0d4-6.job - C:\Program Files\CinemaP-1.9cV10.10\b293f196-7f04-4f95-9b88-e865ef27a0d4-6.exe /rawdata=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
C:\WINDOWS\tasks\b293f196-7f04-4f95-9b88-e865ef27a0d4-7.job - C:\Program Files\CinemaP-1.9cV10.10\b293f196-7f04-4f95-9b88-e865ef27a0d4-7.exe /rawdata=Ag5IFCTnoSza46MBoywcbSZ+uyMQOejMGy2UGE9hZXiLhgDtlIdDZUPPGMPRNyivnixNrHUrmMZRJx3xyvHOVWYzhWqxdI8LjpGBP41e0vmqrsDxKvA56dIVbm4wrJfgYyXGwq3C+893hV6ivMO+9VuIP5LhS++ttgGSleyOS3uJh26GPQ2JJsetEBUbGvAk9HElp2yCfm/DtTlvDObcSHWwCn/sAzSvHnN5k9qVko1MSrApgvm5EgIDEyeFasfYfD4pTSLeLP1I0Cud0A3ZV8awWF3xPfkrmUA3se/C9FsEY/a3ySzvYOzyccTu6kYi9rL2tEE0hbDg6k35ZycMlkCmcEVT+VAnJU+sRxaGgG+FiVFaKU/nzapKEcD71Ntyb9QKjjL/vjki916vtnB/k63ZJ2hN7pXwC5vBoD9CRb96oFP+/5WAwExOI4b+vay2DouL4IrcPclcvJA9bKkJLDbc3lv20nDwMRBFR9ubD+QCwy0RvHsQChBcD06dSRqiuQs5mRi8NCoQxze4vVKZYG6vKrjQeLdcX8U7MRNuM5tT02JtElLWhi4vYpYCR7XwTGWPg1qzSJz93Vp//1rqTc5olvW+P8sGWmeGAoq9FuflwXZYZ+1ta4NQIb+T6JwWF2T1wMkwWMsqolVQhjWNG3g9/JK2eXad5KV2S0QJR0Vg0RgdHl9Q/ucZHTfPtdkkhFPBpsc/18zYYBs8siX/5GR5HX0rwfxJrRFhgAzUprK1DMQe1qgTv+UKacWXauhp8X1CZCOcppRFURMhQzMhKO5T8+sR45JMGJKncuqRSPmc7IhmcwECFCskYhlkpXELgGZ9YijyO6lNYrZT6tIqZKo4sqpDlO+7EJL/9LbH8pUkib8sw29/nrTkYBVxykSlwE8fPbLGy5FLH58Lc+gAw6tdBvTtsnzrxuGSfahH4Hrq+pYJsECyPhe64brIkjN+zq0oZEoEoKFgV9o5V3lMmQydQi5GVDUFzoUYYcjwdRR8u+XwqwLf6Q1cNMR828J3KjwmhoEbYkOC3NnuZSa+FjeC3kjTWPVez4/eE8NDDsoBdr2/wlQyiXSmtxGVfluEn8HYl8IfMM1G9O9FaexYw1IiyxBSDQFMt2xGhg6D0iPEigV2Eogu9gXohnBBAoNfsbBI21jZcfF4Rc+HgSDuPRuPMgW2Qqm2WVg8xWDgvoKwQ6nPQ8O7OOZaB4/AfcnYLOuScPlUIzwAUDZU5CqlVzY5CQ+x3PuaZdWNSDVhmA6UbmF4yMmQuDZkGDM6XZrmjt5TJEYYq+lpNLp0CCeAY0R8ZmCbHrJXuRLdaWQ2mAyiPBU1pMrmKXqx0XztwbZVGml6qp/8vXvWKMxTOBg5yZjlw3gFqTMlMA9uS5yt+ELu0GA77+iKZl1zku0bl9EsLNftJxG11gueochTRv/1hGZNyIPhJ6snc8mMGPOUbLYLAa+vi+jVzhFqTjlM4CjWfz6IqoN94xOkvaoXp6BpPQjl74esUHZvi4YMGCHZej9M+yA5XNLvK41/i09jCVo4fUy3zK4zskn+YvwFuFoffeSFU/Hnw6Mg/PaaRRbKAt93wpEbcxqJXuiW8x7XgnT/SiFAlo/lyGa7q8ifBW6h6rHHzbu57KDovwYu3P4FbGL0yoM7Xn8qVZlGjzhc+bgsHrV/79ufRtHvnJsAgv60SGiftRCgF1hsgfYlHYjuxwVTlenHyvB3F6ubhS/tc7vtUuuUHRT9Pj8kzPKA96fLDCfaTztRe6M6FSiHCJy5Do+SBfG6H1VrIiCzXmyNcdcNw86z+3rDVSsJLPrtW66+I9ulfTAkm3ddrSPLMQpiIzQKQYaT4qr50l6yRZX3+OanOBgZQ6B9bnS1G9FhnKvSeoGtCnVTVYeTu1ynu0cSjw1yNudsAuBB6Xyd2y1VH0axyECsV2p+0qEMdp4JJhi5XiAAwq+A8t4GM/IJ4UBiHnpzgfkK04PwoWsIbNwdauWE104uR1ifS6O6DDzqhxOfvzUw7dVzveq9dL01AuRBtkN1wwoLaITe5Uk6f/PJI/n1WKPQHvr05y8aKEIwUyW57K+eNzPR33LvBufuhRCUdd+86Xm9sFuz1bX0ou265Xqysr8KeRwAxx9CJnQPDeEZaPnei1eFSvQL9ecUh6gtc72JmmX0KJbdja0pmzCnN+vQPNECJiRIBqUjForSwi+y7jxtGquPpfmT9iWqS2PAFuw1doXeG2DiTD+TGFlTFsN7ezE/vb8680ZlSsanPk7/g385BHHpFiKo40XgxTEynRPQ94WEirkfDv8rczgHx05iFRrgC568SPcjr+wDYTpfd0fWSY2C0gi3Pvc/qWb++aVM2vxwUE7tI0MKThqF1c/oaiTn2RiXNmTIHOoCIUgFdg==
C:\WINDOWS\tasks\Crossbrowse.job - C:\Program Files\Crossbrowse\Crossbrowse\Application\utility.exe /rawdata='V7g+R4RxtVkjWh6upoyPtBzqTpnlyptyoIFSQkrNO2gPmcIhqLdHvAvR4DTOQgvfiP5P3j/QWVBDxhlDu9lN7BFJzkG09ApYVEWScMzPmZUgOPCBUot1F/t4uGq+SNPoYEw/VyhQ9dot/IEHoHHocNEG9q+RVceEQzdi9+5qGzeOJlJxzHbdN1UU2NWRmwAzni18LVv9vNx3M33KPDR3bJ9s0bUgp7DjbkLiI1oWbWs6zlH/ELysBsNS7A8JypQJ76JsqicGDL5u4irVc5im61BdW3dRu1F7Py+VuhyThYBiwaRN3jYRN8duk5A4u5kzpDnoyUynMN3uDpT+kgH1Uw=='
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\SzqqalofR77sdOxRwtk1.job - C:\Users\Michal\AppData\Roaming\SzqqalofR77sdOxRwtk1.exe --c=x3DpFfM0VGxPNWBmD/DAGP3/SmYo7wYmaNMn/IxGPuwZTbdAwAOl14aFtKN/lKqW9NYinGhaV+IKS2K3pnBXpAh4Z4nmbAefSTkeYz0hRM/5I0gmS+lXp7/Yad4LkrCCWjZnbyFpferesHJu2tRzcMU0t7CKMUGuwURXBKb5ZhyRa3811fwtUlCWOkcBiSyakXQMHcACj3a68mzkyCmGG4ICdee6GJvrcQzZXDMPJsioyYX/w+Kj25k7aZSOFB8ivPLDjsaK9KUg7RHslwzQtGBt0lGHl5dfcqA0eIDOxNnJtphaTJs+MpMrAqHkr/hO2mErkyR8du3y8L7jxyvmDA==
C:\WINDOWS\tasks\sZUg8b7V4s.job - C:\Users\Michal\AppData\Roaming\sZUg8b7V4s.exe --c=bUD7/4QkeEMO5uqdU0pAuNK/1A5kXnQ08wJhsHKxZc3fHGJqmN6O63fqX9KEOn0ZmdHEuZDw0I9OTQrgltNuJWJMaWcbd6Ls0619kmpwR90dcxnkcNK5DcFrZbTDB7S/kiJcpATx0J1W9SM3I5CMko4qq9bRJiG3pHgpKvSJQOMCfDKEsUH572hdmD00NVPmluO9l4QJSd9jc0wXHi2Sn9Il/bDkoWj+50t7GTIGd5lGasyInDG7eMrrR83QSRpITFSUjcaz6/YgVscI7GE4DktSUH376Ub87xVELc6kC4wahCwV/tkfuMnf6hD3RwU3OZBWF/2x2nd+PfQ+ePJX4A==
C:\WINDOWS\tasks\Uninstaller_SkipUac_Michal.job - C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe /UninstallExplorer

=========Mozilla firefox=========

ProfilePath - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\7o31mv4m.default-1416215766476

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/|https://www.google.cz/"
prefs.js - "keyword.URL" - "https://search.yahoo.com/search?fr=gree ... =198484&p="

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe� Flash� Player 19.0.0.185 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_19_0_0_185.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.60.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.60.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10]
"Description"=globalUpdate Update
"Path"=C:\Program Files\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4]
"Description"=globalUpdate Update
"Path"=C:\Program Files\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}

C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\7o31mv4m.default-1416215766476\extensions\
ascsurfingprotection@iobit.com
AVJYFVOD75109374@HCDE39471360.com
iobitascsurfingprotection@iobit.com
{ea614400-e918-4741-9a97-7a972ff7c30b}

C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\7o31mv4m.default-1416215766476\searchplugins\
yahoo_ff.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
IObit Apps Toolbar - C:\Program Files\IObit Apps Toolbar\IE\22.1\iobitappsToolbarIE.dll [2015-08-11 1528432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
ExplorerWnd Helper - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll [2015-08-31 752960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-09-13 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-10-11 559624]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-01-31 4528760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}]
Advanced SystemCare Surfing Protection - C:\PROGRA~1\IObit\SURFIN~1\BROWER~1\ASCPlugin_Protection.dll [2015-04-01 672032]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-13 172640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{03EB0E9C-7A91-4381-A220-9B52B641CDB1} - IObit Apps Toolbar - C:\Program Files\IObit Apps Toolbar\IE\22.1\iobitappsToolbarIE.dll [2015-08-11 1528432]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2015-08-14 12336856]
"ATKMEDIA"=C:\Program Files\ASUS\ATK Media\DMedia.exe [2009-04-20 159744]
"ATKOSD2"=C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe [2009-06-10 8568832]
"HControlUser"=C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2015-05-15 60712]
"NvBackend"=C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2015-08-18 2634872]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap.dll [2015-08-18 1423120]
"KiesTrayAgent"=C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [2015-07-27 311616]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2010-06-09 49208]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-07-11 157992]
"SearchSettings"=C:\Program Files\Common Files\Spigot\Preferences Manager\PreferencesManager.exe [2015-08-11 1366640]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2015-08-04 597552]
"seznam-listicka-distribuce"=C:\Program Files\Seznam.cz\distribution\szninstall.exe [2015-10-10 1062472]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-10-11 6134544]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"KiesAirMessage"=C:\Program Files\Samsung\Kies\KiesAirMessage.exe [2013-10-30 578560]
""=C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2015-07-27 1015104]
"KiesPDLR.exe"=C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2015-07-27 1015104]
"Advanced SystemCare 8"=C:\Program Files\IObit\Advanced SystemCare 8\ASCTray.exe [2015-04-08 2429728]
"icq"=C:\Users\Michal\AppData\Roaming\ICQM\icq.exe [2015-06-02 36705800]
"GarminExpressTrayApp"=C:\Program Files\Garmin\Express Tray\ExpressTray.exe [2015-09-11 1403192]
"OneDrive"=C:\Users\Michal\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-09-19 405584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 7.0]
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe [2004-12-14 483328]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-07-29 497648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-07-22 402432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2015-05-15 60712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe [2007-10-23 202024]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Garmin Lifetime Updater]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files\ICQ7.7\ICQ.exe [2012-01-23 127040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2015-07-11 157992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2007-09-20 1836328]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2007-03-01 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NtVdmSrv]
C:\Windows\inf\ntvdm.vbe [2013-06-20 1219]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2014-12-11 30877280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Acrobat Speed Launcher.lnk - C:\Windows\Installer\{AC76BA86-1033-C740-7760-100000000002}\SC_Acrobat.exe
SRS Premium Sound.lnk - C:\Windows\Installer\{D42F84B6-3709-4A50-8502-6719D16AE6C8}\NewShortcut4_E9C83B3EDF9141A39DA5EC05C79BBB91.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iaioi2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.cvid"=iccvid.dll
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=xvidvfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll
"aux"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-10-11 21:42:47 ----D---- C:\Program Files\trend micro
2015-10-11 21:42:46 ----D---- C:\rsit
2015-10-11 19:41:35 ----D---- C:\Users\Michal\AppData\Roaming\AVAST Software
2015-10-11 19:38:31 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2015-10-11 19:38:31 ----A---- C:\WINDOWS\system32\drivers\aswStm.sys
2015-10-11 19:38:31 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2015-10-11 19:38:31 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2015-10-11 19:38:31 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2015-10-11 19:38:31 ----A---- C:\WINDOWS\system32\drivers\aswRdr2.sys
2015-10-11 19:38:31 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2015-10-11 19:38:31 ----A---- C:\WINDOWS\system32\drivers\aswHwid.sys
2015-10-11 19:38:28 ----A---- C:\WINDOWS\system32\aswBoot.exe
2015-10-11 19:38:14 ----A---- C:\WINDOWS\avastSS.scr
2015-10-11 18:47:09 ----D---- C:\Program Files\Reimage
2015-10-11 18:44:27 ----A---- C:\WINDOWS\Reimage.ini
2015-10-10 22:38:23 ----D---- C:\Program Files\Mozilla Firefox
2015-10-10 21:42:16 ----D---- C:\Program Files\bb7f7cc2-b7d1-4d18-9f1f-f341d73656d0
2015-10-10 21:39:29 ----D---- C:\Program Files\Seznam.cz
2015-10-10 21:38:40 ----D---- C:\Users\Michal\AppData\Roaming\Seznam.cz
2015-10-10 21:38:36 ----D---- C:\Users\Michal\AppData\Roaming\Opera Software
2015-10-10 21:00:11 ----D---- C:\Users\Michal\AppData\Roaming\GenoPro
2015-10-10 16:56:08 ----D---- C:\Program Files\GenoPro 2.b13h
2015-10-08 03:41:28 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2015-10-01 19:36:36 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-10-01 19:36:35 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-10-01 19:36:33 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-10-01 19:36:32 ----A---- C:\WINDOWS\system32\windows.storage.dll
2015-10-01 19:36:30 ----A---- C:\WINDOWS\system32\mos.dll
2015-10-01 19:36:28 ----A---- C:\WINDOWS\system32\BingMaps.dll
2015-10-01 19:36:27 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-10-01 19:36:25 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-10-01 19:36:25 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-10-01 19:36:23 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2015-10-01 19:36:23 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-10-01 19:36:21 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-10-01 19:36:20 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-10-01 19:36:19 ----A---- C:\WINDOWS\system32\wininet.dll
2015-10-01 19:36:19 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-10-01 19:36:18 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-10-01 19:36:18 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2015-10-01 19:36:17 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2015-10-01 19:36:17 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-10-01 19:36:16 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-10-01 19:36:15 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-10-01 19:36:15 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-10-01 19:36:15 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2015-10-01 19:36:14 ----A---- C:\WINDOWS\system32\wlansvc.dll
2015-10-01 19:36:14 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-10-01 19:36:14 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-10-01 19:36:13 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-10-01 19:36:13 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-10-01 19:36:12 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-10-01 19:36:12 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2015-10-01 19:36:11 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2015-10-01 19:36:11 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2015-10-01 19:36:11 ----A---- C:\WINDOWS\system32\mfsvr.dll
2015-10-01 19:36:11 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2015-10-01 19:36:10 ----A---- C:\WINDOWS\system32\wpx.dll
2015-10-01 19:36:09 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-10-01 19:36:09 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-10-01 19:36:09 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-10-01 19:36:07 ----A---- C:\WINDOWS\system32\mfds.dll
2015-10-01 19:36:07 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2015-10-01 19:36:07 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2015-10-01 19:36:06 ----A---- C:\WINDOWS\system32\winmde.dll
2015-10-01 19:36:06 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-10-01 19:36:06 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2015-10-01 19:36:06 ----A---- C:\WINDOWS\system32\drivers\Wdf01000.sys
2015-10-01 19:36:05 ----A---- C:\WINDOWS\system32\wmpmde.dll
2015-10-01 19:36:05 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-10-01 19:36:05 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2015-10-01 19:36:05 ----A---- C:\WINDOWS\system32\esent.dll
2015-10-01 19:36:05 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2015-10-01 19:36:04 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2015-10-01 19:36:04 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2015-10-01 19:36:04 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-10-01 19:36:03 ----A---- C:\WINDOWS\system32\VEEventDispatcher.dll
2015-10-01 19:36:03 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-10-01 19:36:03 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2015-10-01 19:36:02 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2015-10-01 19:36:02 ----A---- C:\WINDOWS\system32\NotificationController.dll
2015-10-01 19:36:02 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2015-10-01 19:36:02 ----A---- C:\WINDOWS\system32\bisrv.dll
2015-10-01 19:36:01 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2015-10-01 19:36:01 ----A---- C:\WINDOWS\system32\UserDataService.dll
2015-10-01 19:36:01 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2015-10-01 19:36:01 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2015-10-01 19:36:00 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2015-10-01 19:36:00 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2015-10-01 19:36:00 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2015-10-01 19:35:59 ----A---- C:\WINDOWS\system32\wwanconn.dll
2015-10-01 19:35:59 ----A---- C:\WINDOWS\system32\Unistore.dll
2015-10-01 19:35:59 ----A---- C:\WINDOWS\system32\CellularAPI.dll
2015-10-01 19:35:58 ----A---- C:\WINDOWS\system32\WUDFx02000.dll
2015-10-01 19:35:58 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-10-01 19:35:58 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-10-01 19:35:58 ----A---- C:\WINDOWS\system32\ncsi.dll
2015-10-01 19:35:57 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2015-10-01 19:35:57 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2015-10-01 19:35:57 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-10-01 19:35:56 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-10-01 19:35:56 ----A---- C:\WINDOWS\system32\pnidui.dll
2015-10-01 19:35:56 ----A---- C:\WINDOWS\system32\KnobsCsp.dll
2015-10-01 19:35:56 ----A---- C:\WINDOWS\system32\hevcdecoder.dll
2015-10-01 19:35:56 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-10-01 19:35:55 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-10-01 19:35:55 ----A---- C:\WINDOWS\system32\ngccredprov.dll
2015-10-01 19:35:55 ----A---- C:\WINDOWS\system32\KnobsCore.dll
2015-10-01 19:35:55 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2015-10-01 19:35:54 ----A---- C:\WINDOWS\system32\mf.dll
2015-10-01 19:35:54 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys
2015-10-01 19:35:53 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2015-10-01 19:35:53 ----A---- C:\WINDOWS\system32\provengine.dll
2015-10-01 19:35:52 ----A---- C:\WINDOWS\system32\wwanmm.dll
2015-10-01 19:35:52 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2015-10-01 19:35:52 ----A---- C:\WINDOWS\system32\LocationWebproxy.dll
2015-10-01 19:35:51 ----A---- C:\WINDOWS\system32\wuuhext.dll
2015-10-01 19:35:51 ----A---- C:\WINDOWS\system32\psmsrv.dll
2015-10-01 19:35:51 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2015-10-01 19:35:51 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2015-10-01 19:35:50 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2015-10-01 19:35:50 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-10-01 19:35:50 ----A---- C:\WINDOWS\system32\SubscriptionMgr.dll
2015-10-01 19:35:50 ----A---- C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll
2015-10-01 19:35:50 ----A---- C:\WINDOWS\system32\cloudAP.dll
2015-10-01 19:35:49 ----A---- C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-10-01 19:35:49 ----A---- C:\WINDOWS\system32\ncryptprov.dll
2015-10-01 19:35:49 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2015-10-01 19:35:49 ----A---- C:\WINDOWS\system32\ContactApis.dll
2015-10-01 19:35:48 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-10-01 19:35:48 ----A---- C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-10-01 19:35:48 ----A---- C:\WINDOWS\system32\LocationWiFiAdapter.dll
2015-10-01 19:35:47 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-10-01 19:35:47 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2015-10-01 19:35:47 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2015-10-01 19:35:47 ----A---- C:\WINDOWS\system32\ChatApis.dll
2015-10-01 19:35:47 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2015-10-01 19:35:46 ----A---- C:\WINDOWS\system32\syncutil.dll
2015-10-01 19:35:46 ----A---- C:\WINDOWS\system32\HttpsDataSource.dll
2015-10-01 19:35:46 ----A---- C:\WINDOWS\system32\EmailApis.dll
2015-10-01 19:35:46 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2015-10-01 19:35:46 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-10-01 19:35:45 ----A---- C:\WINDOWS\system32\provops.dll
2015-10-01 19:35:45 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2015-10-01 19:35:45 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe
2015-10-01 19:35:44 ----A---- C:\WINDOWS\system32\Windows.Speech.Pal.dll
2015-10-01 19:35:44 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll
2015-10-01 19:35:44 ----A---- C:\WINDOWS\system32\ngckeyenum.dll
2015-10-01 19:35:44 ----A---- C:\WINDOWS\system32\drivers\buttonconverter.sys
2015-10-01 19:35:43 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2015-10-01 19:35:43 ----A---- C:\WINDOWS\system32\omadmclient.exe
2015-10-01 19:35:43 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2015-10-01 19:35:42 ----A---- C:\WINDOWS\system32\omadmapi.dll
2015-10-01 19:35:42 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2015-10-01 19:35:41 ----A---- C:\WINDOWS\system32\wwancfg.dll
2015-10-01 19:35:41 ----A---- C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-10-01 19:35:40 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2015-10-01 19:35:40 ----A---- C:\WINDOWS\system32\AudioSes.dll
2015-10-01 19:35:40 ----A---- C:\WINDOWS\system32\accountaccessor.dll
2015-10-01 19:35:39 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2015-10-01 19:35:39 ----A---- C:\WINDOWS\system32\UserDataAccountApis.dll
2015-10-01 19:35:39 ----A---- C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2015-10-01 19:35:38 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2015-10-01 19:35:38 ----A---- C:\WINDOWS\system32\LocationCrowdsource.dll
2015-10-01 19:35:38 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2015-10-01 19:35:38 ----A---- C:\WINDOWS\system32\CallHistoryClient.dll
2015-10-01 19:35:37 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2015-10-01 19:35:37 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2015-10-01 19:35:36 ----A---- C:\WINDOWS\system32\MapsStore.dll
2015-10-01 19:35:36 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2015-10-01 19:35:36 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-10-01 19:35:35 ----A---- C:\WINDOWS\system32\wpnapps.dll
2015-10-01 19:35:35 ----A---- C:\WINDOWS\system32\netcenter.dll
2015-10-01 19:35:35 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2015-10-01 19:35:33 ----A---- C:\WINDOWS\system32\LocationGeofences.dll
2015-10-01 19:35:31 ----A---- C:\WINDOWS\system32\mdmmigrator.dll
2015-10-01 19:35:31 ----A---- C:\WINDOWS\system32\dmcsps.dll
2015-10-01 19:35:30 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-01 19:35:29 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2015-10-01 19:35:29 ----A---- C:\WINDOWS\system32\configmanager2.dll
2015-10-01 19:35:28 ----A---- C:\WINDOWS\system32\syncmlhook.dll
2015-09-24 20:22:07 ----A---- C:\WINDOWS\system32\drivers\ser2pl.sys
2015-09-13 09:25:02 ----D---- C:\Program Files\Common Files\Java
2015-09-13 09:24:04 ----D---- C:\Users\Michal\AppData\Roaming\Sun
2015-09-13 09:23:53 ----A---- C:\WINDOWS\system32\WindowsAccessBridge.dll

======List of files/folders modified in the last 1 month======

2015-10-11 21:42:47 ----RD---- C:\Program Files
2015-10-11 21:36:06 ----D---- C:\WINDOWS\Prefetch
2015-10-11 21:34:59 ----D---- C:\WINDOWS\Temp
2015-10-11 21:34:59 ----D---- C:\WINDOWS\System32
2015-10-11 20:43:17 ----D---- C:\WINDOWS\system32\sru
2015-10-11 19:50:30 ----D---- C:\WINDOWS\system32\catroot2
2015-10-11 19:50:30 ----D---- C:\WINDOWS\debug
2015-10-11 19:50:30 ----D---- C:\Windows
2015-10-11 19:50:07 ----D---- C:\WINDOWS\Tasks
2015-10-11 19:50:07 ----D---- C:\WINDOWS\system32\Tasks
2015-10-11 19:43:38 ----D---- C:\WINDOWS\system32\config
2015-10-11 19:38:31 ----D---- C:\WINDOWS\system32\drivers
2015-10-11 19:38:29 ----D---- C:\WINDOWS\WinSxS
2015-10-11 19:35:56 ----D---- C:\WINDOWS\INF
2015-10-11 19:35:44 ----SHD---- C:\System Volume Information
2015-10-11 19:34:45 ----D---- C:\ProgramData\AVAST Software
2015-10-11 19:18:15 ----HD---- C:\ProgramData
2015-10-11 18:34:59 ----D---- C:\WINDOWS\system32\NDF
2015-10-11 17:40:26 ----A---- C:\WINDOWS\system32\rpcnetp.exe
2015-10-11 15:14:54 ----D---- C:\WINDOWS\AppReadiness
2015-10-10 22:35:58 ----D---- C:\Program Files\Mozilla Maintenance Service
2015-10-10 22:33:43 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-10-10 22:27:00 ----A---- C:\WINDOWS\system32\rpcnet.dll
2015-10-10 22:26:44 ----D---- C:\ProgramData\NVIDIA
2015-10-10 22:03:08 ----D---- C:\WINDOWS\Logs
2015-10-10 21:42:45 ----SHD---- C:\WINDOWS\Installer
2015-10-10 21:42:44 ----SHD---- C:\Config.Msi
2015-10-10 21:42:44 ----D---- C:\Program Files\Common Files
2015-10-10 21:42:29 ----D---- C:\Program Files\Adobe Media Player
2015-10-10 21:14:25 ----D---- C:\Program Files\GenoPro
2015-10-10 20:57:11 ----D---- C:\WINDOWS\SoftwareDistribution
2015-10-10 20:01:20 ----D---- C:\WINDOWS\rescache
2015-10-10 13:50:19 ----D---- C:\WINDOWS\Microsoft.NET
2015-10-10 13:49:12 ----D---- C:\WINDOWS\system32\DriverStore
2015-10-10 10:21:39 ----HD---- C:\Program Files\WindowsApps
2015-10-08 03:37:02 ----SD---- C:\WINDOWS\system32\F12
2015-10-08 03:37:02 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2015-10-08 03:37:02 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2015-10-08 03:37:02 ----D---- C:\WINDOWS\system32\migration
2015-10-08 03:37:02 ----D---- C:\WINDOWS\system32\appraiser
2015-10-08 03:36:59 ----RD---- C:\WINDOWS\PurchaseDialog
2015-10-08 03:36:59 ----D---- C:\WINDOWS\Provisioning
2015-10-08 03:36:59 ----D---- C:\WINDOWS\L2Schemas
2015-10-08 03:36:59 ----D---- C:\WINDOWS\apppatch
2015-10-06 08:10:41 ----D---- C:\ProgramData\ProductData
2015-10-04 09:43:18 ----D---- C:\Users\Michal\AppData\Roaming\vlc
2015-10-01 20:01:00 ----D---- C:\WINDOWS\CbsTemp
2015-10-01 19:24:54 ----D---- C:\WINDOWS\system32\WDI
2015-09-28 22:51:57 ----D---- C:\Users\Michal\AppData\Roaming\Media Player Classic
2015-09-24 20:22:05 ----HD---- C:\Program Files\InstallShield Installation Information
2015-09-20 18:33:33 ----D---- C:\Program Files\Kinetic
2015-09-15 07:56:02 ----D---- C:\ProgramData\Package Cache
2015-09-15 07:55:20 ----RSD---- C:\WINDOWS\assembly
2015-09-15 07:55:10 ----D---- C:\Program Files\Garmin
2015-09-13 09:24:58 ----D---- C:\ProgramData\Oracle
2015-09-13 09:23:19 ----D---- C:\Program Files\Java
2015-09-13 03:31:19 ----D---- C:\WINDOWS\system32\CatRoot
2015-09-13 03:30:51 ----D---- C:\Program Files\Windows Journal

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-10-11 208664]
R0 giveio;giveio; C:\WINDOWS\system32\giveio.sys [1996-04-03 5248]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-03-19 45648]
R0 SmartDefragDriver;SmartDefragDriver; C:\WINDOWS\System32\Drivers\SmartDefragDriver.sys [2013-05-22 15672]
R0 speedfan;speedfan; C:\WINDOWS\system32\speedfan.sys [2012-12-29 24184]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2012-03-07 24408]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2015-10-11 81728]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-10-11 789296]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-10-11 434184]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 74240]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 7680]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\WINDOWS\system32\drivers\HWiNFO32.SYS [2015-08-14 23840]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-10-11 24016]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-10-11 76000]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2015-10-11 115640]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2012-01-16 83872]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2012-01-16 25888]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 37376]
R2 rimmptsk;rimmptsk; C:\WINDOWS\System32\drivers\rimmptsk.sys [2009-06-25 48128]
R2 rimsptsk;rimsptsk; C:\WINDOWS\System32\drivers\rimsptsk.sys [2009-06-25 44544]
R2 rismxdp;@oem63.inf,%DiskServiceDesc%;Ricoh xD-Picture Card Driver; C:\WINDOWS\System32\drivers\rixdptsk.sys [2009-06-25 38400]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 52736]
R3 athr;@oem35.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\System32\drivers\athr.sys [2014-10-04 3234304]
R3 bcbtums;@oem100.inf,%BCBTUMS.SvcDesc%;Bluetooth USB LD Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2013-10-28 175320]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-07-10 86528]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 102912]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2015-07-10 61952]
R3 dtsoftbus01;@oem48.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2012-11-10 242240]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHDA.sys [2015-08-14 3522264]
R3 L1C;@oem2.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\WINDOWS\System32\drivers\L1C62x86.sys [2014-10-04 109256]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2015-08-14 130048]
R3 MTsensor;@oem6.inf,%ATKACPI.DisplayName%;ATK0100 ACPI UTILITY; C:\WINDOWS\System32\drivers\ATKACPI.sys [2009-05-13 14392]
R3 NVHDA;@oem108.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32v.sys [2013-11-28 162592]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-08-18 10704560]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-08-18 18552]
R3 nvvad_WaveExtensible;@oem106.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad32v.sys [2015-08-11 44840]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-07-10 129536]
R3 StillCam;@sti.inf,%StillCam.SvcDesc%;Ovladač digitálního fotoaparátu pro sériový port; C:\WINDOWS\system32\DRIVERS\serscan.sys [2015-07-10 9216]
S0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-10-11 49776]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 88928]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 83296]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 51040]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 51552]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 33632]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-09-17 725504]
S3 btwampfl;@oem100.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2013-10-28 144600]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-09-17 26112]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 96768]
S3 dg_ssudbus;@oem62.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2015-05-21 89984]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 24064]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 17408]
S3 GPIO;@iaiogpio.inf,%GPIO.SVCDESC%;Intel SoC GPIO Controller Driver; C:\WINDOWS\System32\drivers\iaiogpio.sys [2015-07-10 22016]
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2012-04-05 25280]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 37728]
S3 iaioi2c;@iaioi2c.inf,%Driver_Service.Desc%;Intel(R) Atom(TM) Processor I2C Controller Service; C:\WINDOWS\System32\drivers\iaioi2c.sys [2015-07-10 61936]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 23040]
S3 RegFilter;RegFilter; \??\C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\regfilter.sys [2013-11-19 32288]
S3 Ser2pl;@oem110.inf,%Serial.SVCDESC%;Prolific Serial port driver; C:\WINDOWS\system32\DRIVERS\ser2pl.sys [2008-10-27 77824]
S3 Ser2plx86;@oem109.inf,%Serial.SVCDESC%;Prolific Serial port WDF driver; C:\WINDOWS\system32\DRIVERS\ser2pl.sys [2008-10-27 77824]
S3 ssadbus;@oem41.inf,%SAMSUNG.Service.Desc%;SAMSUNG Android USB Composite Device driver (WDM); C:\WINDOWS\System32\drivers\ssadbus.sys [2015-05-21 136904]
S3 ssadmdfl;@oem45.inf,%Samsung.Filter.Name%;SAMSUNG Android USB Modem (Filter); C:\WINDOWS\system32\DRIVERS\ssadmdfl.sys [2015-05-21 17864]
S3 ssadmdm;@oem45.inf,%Samsung.Service.Name%;SAMSUNG Android USB Modem Drivers; C:\WINDOWS\system32\DRIVERS\ssadmdm.sys [2015-05-21 153672]
S3 ssadserd;@oem49.inf,%Samsung.Service.Name%;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\WINDOWS\system32\DRIVERS\ssadserd.sys [2015-05-21 130248]
S3 ssudmdm;@oem68.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2015-05-21 184192]
S4 FileMonitor;FileMonitor; \??\C:\Program Files\IObit\IObit Malware Fighter\Drivers\win7_x86\FileMonitor.sys [2013-03-23 21480]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-07-07 82128]
R2 AdvancedSystemCareService8;Advanced SystemCare Service 8; C:\Program Files\IObit\Advanced SystemCare 8\ASCService.exe [2015-08-05 821024]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-05-29 60744]
R2 ASLDRService;ASLDR Service; C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe [2009-06-15 84536]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-10-11 146600]
R2 BcmBtRSupport;@oem100.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2013-10-28 1680088]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-08-18 921208]
R2 IMFservice;IMF Service; C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe [2014-09-30 344896]
R2 LiveUpdateSvc;LiveUpdate; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2015-08-14 2909472]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2015-08-14 24576]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-08-18 1872504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-08-18 4305016]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-08-18 670512]
R2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R2 rpcnet;Remote Procedure Call (RPC) Net; C:\Windows\system32\rpcnet.exe [2015-04-19 78032]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe [2014-10-04 251096]
R2 ss_conn_service;SAMSUNG Mobile Connectivity Service; C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [2015-05-21 743688]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-08-17 409776]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-07-11 541992]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S2 Application Updater;Application Updater; C:\Program Files\Application Updater\ApplicationUpdater.exe [2015-08-11 946352]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-21 269000]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 23040]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2015-05-29 43696]
S3 Garmin Device Interaction Service;Garmin Device Interaction Service; C:\Program Files\Garmin\Device Interaction Service\GarminService.exe [2015-09-11 762272]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2015-10-02 147624]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 41864]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 Program Manager;Program Manager; C:\Program Files\Common Files\ProgramManager\ProgramManager.exe [2015-08-15 951448]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-08-14 669696]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S4 AdobeActiveFileMonitor9.0;Adobe Active File Monitor V9; C:\Program Files\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [2010-09-30 169408]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2015-07-10 45240]
S4 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 390504]
S4 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-09-20 853288]
S4 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2007-10-23 382248]
S4 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

-----------------EOF-----------------


Děkuji

Michal
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119674
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o pomoc.

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
MichalT
Návštěvník
Návštěvník
Příspěvky: 9
Registrován: 11 říj 2015 20:56

Re: Prosím o pomoc.

#3 Příspěvek od MichalT »

Dobrý večer

zde je požadovaný LOG

# AdwCleaner v5.013 - Logfile created 11/10/2015 at 22:42:42
# Updated 09/10/2015 by Xplode
# Database : 2015-10-09.3 [Server]
# Operating system : Windows 10 Pro (x86)
# Username : Michal - MICHAL-PC
# Running from : C:\Users\Michal\Desktop\adwcleaner_5.013.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : Application Updater
[-] Service Deleted : globalUpdate
[-] Service Deleted : globalUpdatem
[-] Service Deleted : Program Manager

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files\Application Updater
[-] Folder Deleted : C:\Program Files\IObit Apps Toolbar
[-] Folder Deleted : C:\Program Files\Reimage
[-] Folder Deleted : C:\Program Files\myfree codec
[-] Folder Deleted : C:\Program Files\Common Files\Spigot
[-] Folder Deleted : C:\Program Files\Common Files\ProgramManager
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
[-] Folder Deleted : C:\Users\Michal\AppData\Local\globalUpdate
[-] Folder Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpiifgmgnfdiblgpaepbmfdkcheicgof
[-] Folder Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj
[-] Folder Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj
[-] Folder Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
[-] Folder Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlcphjankhppgohedpkjonpadimhaoof
[-] Folder Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp
[-] Folder Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi
[!] Folder Not Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj
[!] Folder Not Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlcphjankhppgohedpkjonpadimhaoof
[!] Folder Not Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp
[!] Folder Not Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpiifgmgnfdiblgpaepbmfdkcheicgof
[!] Folder Not Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj
[!] Folder Not Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi
[!] Folder Not Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
[!] Folder Not Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlcphjankhppgohedpkjonpadimhaoof
[!] Folder Not Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp
[-] Folder Deleted : C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\7o31mv4m.default-1416215766476\Extensions\ascsurfingprotection@iobit.com
[-] Folder Deleted : C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\7o31mv4m.default-1416215766476\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
[-] Folder Deleted : C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\7o31mv4m.default-1416215766476\Extensions\AVJYFVOD75109374@HCDE39471360.com

***** [ Files ] *****

[-] File Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gpiifgmgnfdiblgpaepbmfdkcheicgof_0.localstorage
[-] File Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gpiifgmgnfdiblgpaepbmfdkcheicgof
[-] File Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hbcennhacfaagdopikcegfcobcadeocj
[-] File Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\icdlfehblmklkikfigmjhbmmpmkmpooj
[-] File Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mhkaekfpcppmmioggniknbnbdbcigpkk
[-] File Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlcphjankhppgohedpkjonpadimhaoof
[-] File Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pfndaklgolladniicklehhancnlgocpp
[-] File Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hbcennhacfaagdopikcegfcobcadeocj
[-] File Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlcphjankhppgohedpkjonpadimhaoof
[-] File Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pfndaklgolladniicklehhancnlgocpp
[-] File Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gpiifgmgnfdiblgpaepbmfdkcheicgof_0.localstorage
[-] File Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gpiifgmgnfdiblgpaepbmfdkcheicgof
[-] File Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hbcennhacfaagdopikcegfcobcadeocj
[-] File Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mhkaekfpcppmmioggniknbnbdbcigpkk
[-] File Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlcphjankhppgohedpkjonpadimhaoof
[-] File Deleted : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pfndaklgolladniicklehhancnlgocpp
[-] File Deleted : C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\7o31mv4m.default-1416215766476\searchplugins\yahoo_ff.xml
[-] File Deleted : C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\7o31mv4m.default-1416215766476\user.js
[-] File Deleted : C:\WINDOWS\Reimage.ini

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : Crossbrowse
[-] Task Deleted : LaunchSignup
[-] Task Deleted : amiupdaterExd
[-] Task Deleted : amiupdaterExi
[-] Task Deleted : b293f196-7f04-4f95-9b88-e865ef27a0d4-1-6
[-] Task Deleted : b293f196-7f04-4f95-9b88-e865ef27a0d4-1-7
[-] Task Deleted : b293f196-7f04-4f95-9b88-e865ef27a0d4-10_user
[-] Task Deleted : b293f196-7f04-4f95-9b88-e865ef27a0d4-11
[-] Task Deleted : b293f196-7f04-4f95-9b88-e865ef27a0d4-13
[-] Task Deleted : b293f196-7f04-4f95-9b88-e865ef27a0d4-14
[-] Task Deleted : b293f196-7f04-4f95-9b88-e865ef27a0d4-3
[-] Task Deleted : b293f196-7f04-4f95-9b88-e865ef27a0d4-4
[-] Task Deleted : b293f196-7f04-4f95-9b88-e865ef27a0d4-5
[-] Task Deleted : b293f196-7f04-4f95-9b88-e865ef27a0d4-5_user
[-] Task Deleted : b293f196-7f04-4f95-9b88-e865ef27a0d4-6
[-] Task Deleted : b293f196-7f04-4f95-9b88-e865ef27a0d4-7
[-] Task Deleted : b293f196-7f04-4f95-9b88-e865ef27a0d4-1-6
[-] Task Deleted : b293f196-7f04-4f95-9b88-e865ef27a0d4-1-7
[-] Task Deleted : b293f196-7f04-4f95-9b88-e865ef27a0d4-10_user
[-] Task Deleted : b293f196-7f04-4f95-9b88-e865ef27a0d4-11
[-] Task Deleted : b293f196-7f04-4f95-9b88-e865ef27a0d4-13
[-] Task Deleted : b293f196-7f04-4f95-9b88-e865ef27a0d4-14
[-] Task Deleted : b293f196-7f04-4f95-9b88-e865ef27a0d4-3
[-] Task Deleted : b293f196-7f04-4f95-9b88-e865ef27a0d4-4
[-] Task Deleted : b293f196-7f04-4f95-9b88-e865ef27a0d4-5
[-] Task Deleted : b293f196-7f04-4f95-9b88-e865ef27a0d4-5_user
[-] Task Deleted : b293f196-7f04-4f95-9b88-e865ef27a0d4-6
[-] Task Deleted : b293f196-7f04-4f95-9b88-e865ef27a0d4-7

***** [ Registry ] *****

[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SearchSettings]
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\REI_AxControl.DLL
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Mediaplayer\Shiminclusionlist\crossbrowse.exe
[-] Value Deleted : HKLM\SOFTWARE\Classes\.htm\OpenWithProgids [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\Classes\.html\OpenWithProgids [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\RegisteredApplications [Crossbrowse]
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\globalupdate.exe
[-] Value Deleted : HKLM\SOFTWARE\Classes\.xht\OpenWithProgIDs [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\Classes\.webp\OpenWithProgIDs [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\Classes\.shtml\OpenWithProgIDs [CRSBRWSHTML]
[-] Key Deleted : HKLM\SOFTWARE\Classes\Crossbrowse
[!] Value Not Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures [Crossbrowse.job]
[!] Value Not Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures [Crossbrowse.job.fp]
[-] Key Deleted : HKLM\SOFTWARE\05d14d2a-16cd-468e-8aa7-b8cb20ef244f
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\hbcennhacfaagdopikcegfcobcadeocj
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pfndaklgolladniicklehhancnlgocpp
[!] Key Not Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\hbcennhacfaagdopikcegfcobcadeocj
[!] Key Not Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pfndaklgolladniicklehhancnlgocpp
[!] Key Not Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\hbcennhacfaagdopikcegfcobcadeocj
[!] Key Not Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
[!] Key Not Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pfndaklgolladniicklehhancnlgocpp
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6EDBF8C0-C94C-4A13-956F-E393BCA5BA4B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{10921475-03CE-4E04-90CE-E2E7EF20C814}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D14D64BC-A0E4-42E3-BB72-FB41EA43C198}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DD1F043F-ABC8-4643-8B95-D2C5B22BB019}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F3E8F9-F747-4DD6-BA6B-82A6CE1E0860}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ED0B64D4-BF27-4521-AD27-190F49BF5EA7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{023E9EC8-B147-40EB-B0B3-DF90618FB371}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0522D9A4-4D57-437D-978D-E5B3B6C9005D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{07F41522-AF7D-4F26-B394-094F059FDB8A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0C40F472-7407-4467-8914-1DEA7C326972}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{212E6D43-6062-492A-B8CC-144669FF11ED}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{224FE662-1E6D-4BC0-AEBB-9E2FB4057BE9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3A807417-B46D-4D37-8C9A-19AC6DE204F9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3CC60715-D6C5-429D-830E-43FA3F86C61D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4517D94C-19BA-46FA-BE66-2A30CEAC4A85}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{555D7146-94A8-4C94-AE76-C39CDC7F7705}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8120D9D6-785C-4413-9C0C-DF2028C56FAD}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{823AE2EB-E62C-4847-B192-C99B91B92416}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9B4F7CFE-987D-410E-A8E4-20182E0B3C24}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9B9A45F4-18FC-484A-BACA-076D78273D8E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A6D54287-7939-466A-8579-92546D946C8C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A78EDAFB-926F-4D93-AB13-8232D7378EB1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10921475-03CE-4E04-90CE-E2E7EF20C814}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{10ECCE17-29B5-4880-A8F5-EAD298611484}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
[-] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKCU\Software\GlobalUpdate
[-] Key Deleted : HKCU\Software\InstalledBrowserExtensions
[-] Key Deleted : HKCU\Software\Myfree Codec
[-] Key Deleted : HKCU\Software\Reimage
[-] Key Deleted : HKCU\Software\IObit Apps
[-] Key Deleted : HKCU\Software\CrossBrowser
[-] Key Deleted : HKCU\Software\YorkNewCin
[-] Key Deleted : HKCU\Software\HighDefAction
[-] Key Deleted : HKCU\Software\ArenaHD
[-] Key Deleted : HKCU\Software\AppDataLow\Software\IObit Apps
[-] Key Deleted : HKCU\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKLM\SOFTWARE\AppDataLow\SOFTWARE\Crossrider
[-] Key Deleted : HKLM\SOFTWARE\AppDataLow\SOFTWARE\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKLM\SOFTWARE\Application Updater
[-] Key Deleted : HKLM\SOFTWARE\GlobalUpdate
[-] Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Key Deleted : HKLM\SOFTWARE\Myfree Codec
[-] Key Deleted : HKLM\SOFTWARE\Reimage
[-] Key Deleted : HKLM\SOFTWARE\IObit Apps
[-] Key Deleted : HKLM\SOFTWARE\YorkNewCin
[-] Key Deleted : HKLM\SOFTWARE\HighDefAction
[-] Key Deleted : HKLM\SOFTWARE\ArenaHD
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
[!] Key Not Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[!] Key Not Deleted : HKU\S-1-5-21-91866238-1826204841-3386684671-1000\Software\AppDataLow\Software\IObit Apps
[!] Key Not Deleted : HKU\S-1-5-21-91866238-1826204841-3386684671-1000\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[!] Key Not Deleted : HKU\S-1-5-18\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\30C16B15B255BD349A1157B8A83E2AF9
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1CAE30F47D14B41B5FC8FA53658044
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GLOBALUPDATE.EXE
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{4F1A2CD6-2862-4FF8-9E53-B6A27F068AD0}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95AEAA8E-AF59-47C0-AFF4-A4516FA09127}
[!] Key Not Deleted : HKU\S-1-5-21-91866238-1826204841-3386684671-1000\Software\Microsoft\Internet Explorer\SearchScopes\{4F1A2CD6-2862-4FF8-9E53-B6A27F068AD0}
[!] Key Not Deleted : HKU\S-1-5-21-91866238-1826204841-3386684671-1000\Software\Microsoft\Internet Explorer\SearchScopes\{95AEAA8E-AF59-47C0-AFF4-A4516FA09127}

***** [ Web browsers ] *****

[-] [C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\7o31mv4m.default-1416215766476\prefs.js] [Preference] Deleted : user_pref("extensions.aAVJYFVOD75109374HCDE39471360com72895.72895.internaldb.__ICM_LITE__blacklist_domain.value", "%7B%22SLIDERS%22%3A%5B%226pm.com%22%2C%22amazon.co.uk%22%2C%22amazon.com%22%2C%22anth[...]
[-] [C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\7o31mv4m.default-1416215766476\prefs.js] [Preference] Deleted : user_pref("extensions.aAVJYFVOD75109374HCDE39471360com72895.72895.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%2C%22dealply_p%22%[...]
[-] [C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\7o31mv4m.default-1416215766476\prefs.js] [Preference] Deleted : user_pref("extensions.crossrider.bic", "1505348eb87681b819349fa73e20f4a2");
[-] [C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : bbmegnmpleoagolcnjnejdacakedpcgd
[-] [C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : gpiifgmgnfdiblgpaepbmfdkcheicgof
[-] [C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : gpiifgmgnfdiblgpaepbmfdkcheicgof
[-] [C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : hbcennhacfaagdopikcegfcobcadeocj
[-] [C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : hbcennhacfaagdopikcegfcobcadeocj
[-] [C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : hbcennhacfaagdopikcegfcobcadeocj
[-] [C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : icdlfehblmklkikfigmjhbmmpmkmpooj
[-] [C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : lkadffjmnaiokkdncgdlecdegajoiemi
[-] [C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : lkadffjmnaiokkdncgdlecdegajoiemi
[-] [C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : mhkaekfpcppmmioggniknbnbdbcigpkk
[-] [C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : mhkaekfpcppmmioggniknbnbdbcigpkk
[-] [C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : nfengeggddojhakldhlpjdlddgkkjkdd
[-] [C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : nlcphjankhppgohedpkjonpadimhaoof
[-] [C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : nlcphjankhppgohedpkjonpadimhaoof
[-] [C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : nlcphjankhppgohedpkjonpadimhaoof
[-] [C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : pfndaklgolladniicklehhancnlgocpp
[-] [C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : pfndaklgolladniicklehhancnlgocpp
[-] [C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : pfndaklgolladniicklehhancnlgocpp

*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [22254 bytes] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119674
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o pomoc.

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
MichalT
Návštěvník
Návštěvník
Příspěvky: 9
Registrován: 11 říj 2015 20:56

Re: Prosím o pomoc.

#5 Příspěvek od MichalT »

Zde je

Logfile of random's system information tool 1.10 (written by random/random)
Run by Michal at 2015-10-12 18:51:05
Microsoft Windows 10 Pro
System drive C: has 98 GB (41%) free of 238 GB
Total RAM: 3071 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:51:20, on 12.10.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\taskhostw.exe
C:\Program Files\ASUS\Splendid\ACMON.exe
C:\Program Files\P4G\BatteryLife.exe
C:\WINDOWS\system32\sihost.exe
C:\Program Files\IObit\Advanced SystemCare 8\Monitor.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
C:\Windows\System32\RuntimeBroker.exe
C:\Windows\System32\ACEngSvr.exe
C:\Program Files\IObit\IObit Uninstaller\UninstallMonitor.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files\HP\HP Software Update\hpwuschd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Samsung\Kies\KiesAirMessage.exe
C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
C:\Program Files\IObit\Advanced SystemCare 8\ASCTray.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Users\Michal\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ApplicationFrameHost.exe
C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe
C:\Users\Michal\Downloads\RSIT.exe
C:\Program Files\trend micro\Michal.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [NvBackend] "C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe"
O4 - HKLM\..\Run: [ShadowPlay] C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap.dll,ShadowPlayOnSystemStart
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup
O4 - HKCU\..\Run: [] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKCU\..\Run: [KiesPDLR.exe] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run
O4 - HKCU\..\Run: [Advanced SystemCare 8] "C:\Program Files\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto
O4 - HKCU\..\Run: [icq] C:\Users\Michal\AppData\Roaming\ICQM\icq.exe -CU
O4 - HKCU\..\Run: [GarminExpressTrayApp] "C:\Program Files\Garmin\Express Tray\ExpressTray.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Michal\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [GarminExpressTrayApp] "C:\Program Files\Garmin\Express Tray\ExpressTray.exe" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [GarminExpressTrayApp] "C:\Program Files\Garmin\Express Tray\ExpressTray.exe" (User 'Default user')
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: SRS Premium Sound.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files\Microsoft Office\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést cíl vazby do existujícího PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést do existujícího PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Převést vybrané vazby do Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést vybrané vazby do existujícího PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Převést výběr do Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést výběr do existujícího PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 8 (AdvancedSystemCareService8) - IObit - C:\Program Files\IObit\Advanced SystemCare 8\ASCService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @oem100.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Broadcom Corporation. - C:\WINDOWS\system32\BtwRSupportService.exe
O23 - Service: Garmin Device Interaction Service - Garmin Ltd. or its subsidiaries - C:\Program Files\Garmin\Device Interaction Service\GarminService.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvvsvc.exe
O23 - Service: Remote Procedure Call (RPC) Net (rpcnet) - Absolute Software Corp. - C:\Windows\system32\rpcnet.exe
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

--
End of file - 11086 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\ASC8_SkipUac_Michal.job - C:\Program Files\IObit\Advanced SystemCare 8\ASC.exe /SkipUac
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\SzqqalofR77sdOxRwtk1.job - C:\Users\Michal\AppData\Roaming\SzqqalofR77sdOxRwtk1.exe --c=x3DpFfM0VGxPNWBmD/DAGP3/SmYo7wYmaNMn/IxGPuwZTbdAwAOl14aFtKN/lKqW9NYinGhaV+IKS2K3pnBXpAh4Z4nmbAefSTkeYz0hRM/5I0gmS+lXp7/Yad4LkrCCWjZnbyFpferesHJu2tRzcMU0t7CKMUGuwURXBKb5ZhyRa3811fwtUlCWOkcBiSyakXQMHcACj3a68mzkyCmGG4ICdee6GJvrcQzZXDMPJsioyYX/w+Kj25k7aZSOFB8ivPLDjsaK9KUg7RHslwzQtGBt0lGHl5dfcqA0eIDOxNnJtphaTJs+MpMrAqHkr/hO2mErkyR8du3y8L7jxyvmDA==
C:\WINDOWS\tasks\sZUg8b7V4s.job - C:\Users\Michal\AppData\Roaming\sZUg8b7V4s.exe --c=bUD7/4QkeEMO5uqdU0pAuNK/1A5kXnQ08wJhsHKxZc3fHGJqmN6O63fqX9KEOn0ZmdHEuZDw0I9OTQrgltNuJWJMaWcbd6Ls0619kmpwR90dcxnkcNK5DcFrZbTDB7S/kiJcpATx0J1W9SM3I5CMko4qq9bRJiG3pHgpKvSJQOMCfDKEsUH572hdmD00NVPmluO9l4QJSd9jc0wXHi2Sn9Il/bDkoWj+50t7GTIGd5lGasyInDG7eMrrR83QSRpITFSUjcaz6/YgVscI7GE4DktSUH376Ub87xVELc6kC4wahCwV/tkfuMnf6hD3RwU3OZBWF/2x2nd+PfQ+ePJX4A==
C:\WINDOWS\tasks\Uninstaller_SkipUac_Michal.job - C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe /UninstallExplorer

=========Mozilla firefox=========

ProfilePath - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\7o31mv4m.default-1416215766476

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/|https://www.google.cz/"
prefs.js - "keyword.URL" - "https://search.yahoo.com/search?fr=gree ... =198484&p="

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe� Flash� Player 19.0.0.185 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_19_0_0_185.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.60.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.60.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}

C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\7o31mv4m.default-1416215766476\extensions\
iobitascsurfingprotection@iobit.com

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-09-13 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-10-11 559624]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-01-31 4528760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-13 172640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2015-08-14 12336856]
"ATKMEDIA"=C:\Program Files\ASUS\ATK Media\DMedia.exe [2009-04-20 159744]
"ATKOSD2"=C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe [2009-06-10 8568832]
"HControlUser"=C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2015-05-15 60712]
"NvBackend"=C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2015-08-18 2634872]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap.dll [2015-08-18 1423120]
"KiesTrayAgent"=C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [2015-07-27 311616]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2010-06-09 49208]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-07-11 157992]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2015-08-04 597552]
"seznam-listicka-distribuce"=C:\Program Files\Seznam.cz\distribution\szninstall.exe [2015-10-10 1062472]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-10-11 6134544]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"KiesAirMessage"=C:\Program Files\Samsung\Kies\KiesAirMessage.exe [2013-10-30 578560]
""=C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2015-07-27 1015104]
"KiesPDLR.exe"=C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2015-07-27 1015104]
"Advanced SystemCare 8"=C:\Program Files\IObit\Advanced SystemCare 8\ASCTray.exe [2015-04-08 2429728]
"icq"=C:\Users\Michal\AppData\Roaming\ICQM\icq.exe [2015-06-02 36705800]
"GarminExpressTrayApp"=C:\Program Files\Garmin\Express Tray\ExpressTray.exe [2015-09-11 1403192]
"OneDrive"=C:\Users\Michal\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-09-19 405584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 7.0]
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe [2004-12-14 483328]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-07-29 497648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-07-22 402432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2015-05-15 60712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe [2007-10-23 202024]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Garmin Lifetime Updater]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files\ICQ7.7\ICQ.exe [2012-01-23 127040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2015-07-11 157992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2007-09-20 1836328]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2007-03-01 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NtVdmSrv]
C:\Windows\inf\ntvdm.vbe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2014-12-11 30877280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Acrobat Speed Launcher.lnk - C:\Windows\Installer\{AC76BA86-1033-C740-7760-100000000002}\SC_Acrobat.exe
SRS Premium Sound.lnk - C:\Windows\Installer\{D42F84B6-3709-4A50-8502-6719D16AE6C8}\NewShortcut4_E9C83B3EDF9141A39DA5EC05C79BBB91.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iaioi2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.cvid"=iccvid.dll
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=xvidvfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll
"aux"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-10-11 22:38:10 ----D---- C:\AdwCleaner
2015-10-11 21:42:47 ----D---- C:\Program Files\trend micro
2015-10-11 21:42:46 ----D---- C:\rsit
2015-10-11 19:41:35 ----D---- C:\Users\Michal\AppData\Roaming\AVAST Software
2015-10-11 19:38:31 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2015-10-11 19:38:31 ----A---- C:\WINDOWS\system32\drivers\aswStm.sys
2015-10-11 19:38:31 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2015-10-11 19:38:31 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2015-10-11 19:38:31 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2015-10-11 19:38:31 ----A---- C:\WINDOWS\system32\drivers\aswRdr2.sys
2015-10-11 19:38:31 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2015-10-11 19:38:31 ----A---- C:\WINDOWS\system32\drivers\aswHwid.sys
2015-10-11 19:38:28 ----A---- C:\WINDOWS\system32\aswBoot.exe
2015-10-11 19:38:14 ----A---- C:\WINDOWS\avastSS.scr
2015-10-10 22:38:23 ----D---- C:\Program Files\Mozilla Firefox
2015-10-10 21:42:16 ----D---- C:\Program Files\bb7f7cc2-b7d1-4d18-9f1f-f341d73656d0
2015-10-10 21:39:29 ----D---- C:\Program Files\Seznam.cz
2015-10-10 21:38:40 ----D---- C:\Users\Michal\AppData\Roaming\Seznam.cz
2015-10-10 21:38:36 ----D---- C:\Users\Michal\AppData\Roaming\Opera Software
2015-10-10 21:00:11 ----D---- C:\Users\Michal\AppData\Roaming\GenoPro
2015-10-10 16:56:08 ----D---- C:\Program Files\GenoPro 2.b13h
2015-10-08 03:41:28 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2015-10-01 19:36:36 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-10-01 19:36:35 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-10-01 19:36:33 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-10-01 19:36:32 ----A---- C:\WINDOWS\system32\windows.storage.dll
2015-10-01 19:36:30 ----A---- C:\WINDOWS\system32\mos.dll
2015-10-01 19:36:28 ----A---- C:\WINDOWS\system32\BingMaps.dll
2015-10-01 19:36:27 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-10-01 19:36:25 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-10-01 19:36:25 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-10-01 19:36:23 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2015-10-01 19:36:23 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-10-01 19:36:21 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-10-01 19:36:20 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-10-01 19:36:19 ----A---- C:\WINDOWS\system32\wininet.dll
2015-10-01 19:36:19 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-10-01 19:36:18 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-10-01 19:36:18 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2015-10-01 19:36:17 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2015-10-01 19:36:17 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-10-01 19:36:16 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-10-01 19:36:15 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-10-01 19:36:15 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-10-01 19:36:15 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2015-10-01 19:36:14 ----A---- C:\WINDOWS\system32\wlansvc.dll
2015-10-01 19:36:14 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-10-01 19:36:14 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-10-01 19:36:13 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-10-01 19:36:13 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-10-01 19:36:12 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-10-01 19:36:12 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2015-10-01 19:36:11 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2015-10-01 19:36:11 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2015-10-01 19:36:11 ----A---- C:\WINDOWS\system32\mfsvr.dll
2015-10-01 19:36:11 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2015-10-01 19:36:10 ----A---- C:\WINDOWS\system32\wpx.dll
2015-10-01 19:36:09 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-10-01 19:36:09 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-10-01 19:36:09 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-10-01 19:36:07 ----A---- C:\WINDOWS\system32\mfds.dll
2015-10-01 19:36:07 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2015-10-01 19:36:07 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2015-10-01 19:36:06 ----A---- C:\WINDOWS\system32\winmde.dll
2015-10-01 19:36:06 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-10-01 19:36:06 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2015-10-01 19:36:06 ----A---- C:\WINDOWS\system32\drivers\Wdf01000.sys
2015-10-01 19:36:05 ----A---- C:\WINDOWS\system32\wmpmde.dll
2015-10-01 19:36:05 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-10-01 19:36:05 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2015-10-01 19:36:05 ----A---- C:\WINDOWS\system32\esent.dll
2015-10-01 19:36:05 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2015-10-01 19:36:04 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2015-10-01 19:36:04 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2015-10-01 19:36:04 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-10-01 19:36:03 ----A---- C:\WINDOWS\system32\VEEventDispatcher.dll
2015-10-01 19:36:03 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-10-01 19:36:03 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2015-10-01 19:36:02 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2015-10-01 19:36:02 ----A---- C:\WINDOWS\system32\NotificationController.dll
2015-10-01 19:36:02 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2015-10-01 19:36:02 ----A---- C:\WINDOWS\system32\bisrv.dll
2015-10-01 19:36:01 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2015-10-01 19:36:01 ----A---- C:\WINDOWS\system32\UserDataService.dll
2015-10-01 19:36:01 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2015-10-01 19:36:01 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2015-10-01 19:36:00 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2015-10-01 19:36:00 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2015-10-01 19:36:00 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2015-10-01 19:35:59 ----A---- C:\WINDOWS\system32\wwanconn.dll
2015-10-01 19:35:59 ----A---- C:\WINDOWS\system32\Unistore.dll
2015-10-01 19:35:59 ----A---- C:\WINDOWS\system32\CellularAPI.dll
2015-10-01 19:35:58 ----A---- C:\WINDOWS\system32\WUDFx02000.dll
2015-10-01 19:35:58 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-10-01 19:35:58 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-10-01 19:35:58 ----A---- C:\WINDOWS\system32\ncsi.dll
2015-10-01 19:35:57 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2015-10-01 19:35:57 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2015-10-01 19:35:57 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-10-01 19:35:56 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-10-01 19:35:56 ----A---- C:\WINDOWS\system32\pnidui.dll
2015-10-01 19:35:56 ----A---- C:\WINDOWS\system32\KnobsCsp.dll
2015-10-01 19:35:56 ----A---- C:\WINDOWS\system32\hevcdecoder.dll
2015-10-01 19:35:56 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-10-01 19:35:55 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-10-01 19:35:55 ----A---- C:\WINDOWS\system32\ngccredprov.dll
2015-10-01 19:35:55 ----A---- C:\WINDOWS\system32\KnobsCore.dll
2015-10-01 19:35:55 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2015-10-01 19:35:54 ----A---- C:\WINDOWS\system32\mf.dll
2015-10-01 19:35:54 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys
2015-10-01 19:35:53 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2015-10-01 19:35:53 ----A---- C:\WINDOWS\system32\provengine.dll
2015-10-01 19:35:52 ----A---- C:\WINDOWS\system32\wwanmm.dll
2015-10-01 19:35:52 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2015-10-01 19:35:52 ----A---- C:\WINDOWS\system32\LocationWebproxy.dll
2015-10-01 19:35:51 ----A---- C:\WINDOWS\system32\wuuhext.dll
2015-10-01 19:35:51 ----A---- C:\WINDOWS\system32\psmsrv.dll
2015-10-01 19:35:51 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2015-10-01 19:35:51 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2015-10-01 19:35:50 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2015-10-01 19:35:50 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-10-01 19:35:50 ----A---- C:\WINDOWS\system32\SubscriptionMgr.dll
2015-10-01 19:35:50 ----A---- C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll
2015-10-01 19:35:50 ----A---- C:\WINDOWS\system32\cloudAP.dll
2015-10-01 19:35:49 ----A---- C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-10-01 19:35:49 ----A---- C:\WINDOWS\system32\ncryptprov.dll
2015-10-01 19:35:49 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2015-10-01 19:35:49 ----A---- C:\WINDOWS\system32\ContactApis.dll
2015-10-01 19:35:48 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-10-01 19:35:48 ----A---- C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-10-01 19:35:48 ----A---- C:\WINDOWS\system32\LocationWiFiAdapter.dll
2015-10-01 19:35:47 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-10-01 19:35:47 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2015-10-01 19:35:47 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2015-10-01 19:35:47 ----A---- C:\WINDOWS\system32\ChatApis.dll
2015-10-01 19:35:47 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2015-10-01 19:35:46 ----A---- C:\WINDOWS\system32\syncutil.dll
2015-10-01 19:35:46 ----A---- C:\WINDOWS\system32\HttpsDataSource.dll
2015-10-01 19:35:46 ----A---- C:\WINDOWS\system32\EmailApis.dll
2015-10-01 19:35:46 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2015-10-01 19:35:46 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-10-01 19:35:45 ----A---- C:\WINDOWS\system32\provops.dll
2015-10-01 19:35:45 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2015-10-01 19:35:45 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe
2015-10-01 19:35:44 ----A---- C:\WINDOWS\system32\Windows.Speech.Pal.dll
2015-10-01 19:35:44 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll
2015-10-01 19:35:44 ----A---- C:\WINDOWS\system32\ngckeyenum.dll
2015-10-01 19:35:44 ----A---- C:\WINDOWS\system32\drivers\buttonconverter.sys
2015-10-01 19:35:43 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2015-10-01 19:35:43 ----A---- C:\WINDOWS\system32\omadmclient.exe
2015-10-01 19:35:43 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2015-10-01 19:35:42 ----A---- C:\WINDOWS\system32\omadmapi.dll
2015-10-01 19:35:42 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2015-10-01 19:35:41 ----A---- C:\WINDOWS\system32\wwancfg.dll
2015-10-01 19:35:41 ----A---- C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-10-01 19:35:40 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2015-10-01 19:35:40 ----A---- C:\WINDOWS\system32\AudioSes.dll
2015-10-01 19:35:40 ----A---- C:\WINDOWS\system32\accountaccessor.dll
2015-10-01 19:35:39 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2015-10-01 19:35:39 ----A---- C:\WINDOWS\system32\UserDataAccountApis.dll
2015-10-01 19:35:39 ----A---- C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2015-10-01 19:35:38 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2015-10-01 19:35:38 ----A---- C:\WINDOWS\system32\LocationCrowdsource.dll
2015-10-01 19:35:38 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2015-10-01 19:35:38 ----A---- C:\WINDOWS\system32\CallHistoryClient.dll
2015-10-01 19:35:37 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2015-10-01 19:35:37 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2015-10-01 19:35:36 ----A---- C:\WINDOWS\system32\MapsStore.dll
2015-10-01 19:35:36 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2015-10-01 19:35:36 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-10-01 19:35:35 ----A---- C:\WINDOWS\system32\wpnapps.dll
2015-10-01 19:35:35 ----A---- C:\WINDOWS\system32\netcenter.dll
2015-10-01 19:35:35 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2015-10-01 19:35:33 ----A---- C:\WINDOWS\system32\LocationGeofences.dll
2015-10-01 19:35:31 ----A---- C:\WINDOWS\system32\mdmmigrator.dll
2015-10-01 19:35:31 ----A---- C:\WINDOWS\system32\dmcsps.dll
2015-10-01 19:35:30 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-01 19:35:29 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2015-10-01 19:35:29 ----A---- C:\WINDOWS\system32\configmanager2.dll
2015-10-01 19:35:28 ----A---- C:\WINDOWS\system32\syncmlhook.dll
2015-09-24 20:22:07 ----A---- C:\WINDOWS\system32\drivers\ser2pl.sys
2015-09-13 09:25:02 ----D---- C:\Program Files\Common Files\Java
2015-09-13 09:24:04 ----D---- C:\Users\Michal\AppData\Roaming\Sun
2015-09-13 09:23:53 ----A---- C:\WINDOWS\system32\WindowsAccessBridge.dll

======List of files/folders modified in the last 1 month======

2015-10-12 18:47:22 ----D---- C:\WINDOWS\System32
2015-10-12 18:47:22 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-10-12 18:47:21 ----D---- C:\WINDOWS\INF
2015-10-12 18:43:16 ----D---- C:\WINDOWS\Prefetch
2015-10-12 18:42:07 ----D---- C:\WINDOWS\Temp
2015-10-12 18:42:05 ----A---- C:\WINDOWS\system32\rpcnetp.exe
2015-10-12 18:32:48 ----D---- C:\WINDOWS\system32\sru
2015-10-12 10:17:37 ----D---- C:\WINDOWS\system32\config
2015-10-12 06:53:15 ----D---- C:\WINDOWS\Microsoft.NET
2015-10-12 06:32:27 ----D---- C:\WINDOWS\debug
2015-10-12 06:30:54 ----D---- C:\WINDOWS\system32\Tasks
2015-10-11 22:52:12 ----D---- C:\WINDOWS\system32\WDI
2015-10-11 22:49:03 ----D---- C:\WINDOWS\SoftwareDistribution
2015-10-11 22:47:39 ----A---- C:\WINDOWS\system32\rpcnet.dll
2015-10-11 22:47:17 ----D---- C:\ProgramData\NVIDIA
2015-10-11 22:46:49 ----D---- C:\Windows
2015-10-11 22:46:49 ----D---- C:\Program Files\Mozilla Maintenance Service
2015-10-11 22:43:11 ----D---- C:\WINDOWS\Tasks
2015-10-11 22:42:48 ----D---- C:\Program Files\Common Files
2015-10-11 22:42:47 ----RD---- C:\Program Files
2015-10-11 19:50:30 ----D---- C:\WINDOWS\system32\catroot2
2015-10-11 19:38:31 ----D---- C:\WINDOWS\system32\drivers
2015-10-11 19:38:29 ----D---- C:\WINDOWS\WinSxS
2015-10-11 19:35:44 ----SHD---- C:\System Volume Information
2015-10-11 19:34:45 ----D---- C:\ProgramData\AVAST Software
2015-10-11 19:18:15 ----HD---- C:\ProgramData
2015-10-11 18:34:59 ----D---- C:\WINDOWS\system32\NDF
2015-10-11 15:14:54 ----D---- C:\WINDOWS\AppReadiness
2015-10-10 22:03:08 ----D---- C:\WINDOWS\Logs
2015-10-10 21:42:45 ----SHD---- C:\WINDOWS\Installer
2015-10-10 21:42:44 ----SHD---- C:\Config.Msi
2015-10-10 21:42:29 ----D---- C:\Program Files\Adobe Media Player
2015-10-10 21:14:25 ----D---- C:\Program Files\GenoPro
2015-10-10 20:01:20 ----D---- C:\WINDOWS\rescache
2015-10-10 13:49:12 ----D---- C:\WINDOWS\system32\DriverStore
2015-10-10 10:21:39 ----HD---- C:\Program Files\WindowsApps
2015-10-08 03:37:02 ----SD---- C:\WINDOWS\system32\F12
2015-10-08 03:37:02 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2015-10-08 03:37:02 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2015-10-08 03:37:02 ----D---- C:\WINDOWS\system32\migration
2015-10-08 03:37:02 ----D---- C:\WINDOWS\system32\appraiser
2015-10-08 03:36:59 ----RD---- C:\WINDOWS\PurchaseDialog
2015-10-08 03:36:59 ----D---- C:\WINDOWS\Provisioning
2015-10-08 03:36:59 ----D---- C:\WINDOWS\L2Schemas
2015-10-08 03:36:59 ----D---- C:\WINDOWS\apppatch
2015-10-06 08:10:41 ----D---- C:\ProgramData\ProductData
2015-10-04 09:43:18 ----D---- C:\Users\Michal\AppData\Roaming\vlc
2015-10-01 20:01:00 ----D---- C:\WINDOWS\CbsTemp
2015-09-28 22:51:57 ----D---- C:\Users\Michal\AppData\Roaming\Media Player Classic
2015-09-24 20:22:05 ----HD---- C:\Program Files\InstallShield Installation Information
2015-09-20 18:33:33 ----D---- C:\Program Files\Kinetic
2015-09-15 07:56:02 ----D---- C:\ProgramData\Package Cache
2015-09-15 07:55:20 ----RSD---- C:\WINDOWS\assembly
2015-09-15 07:55:10 ----D---- C:\Program Files\Garmin
2015-09-13 09:24:58 ----D---- C:\ProgramData\Oracle
2015-09-13 09:23:19 ----D---- C:\Program Files\Java
2015-09-13 03:31:19 ----D---- C:\WINDOWS\system32\CatRoot
2015-09-13 03:30:51 ----D---- C:\Program Files\Windows Journal

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-10-11 49776]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-10-11 208664]
R0 giveio;giveio; C:\WINDOWS\system32\giveio.sys [1996-04-03 5248]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-03-19 45648]
R0 SmartDefragDriver;SmartDefragDriver; C:\WINDOWS\System32\Drivers\SmartDefragDriver.sys [2013-05-22 15672]
R0 speedfan;speedfan; C:\WINDOWS\system32\speedfan.sys [2012-12-29 24184]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2012-03-07 24408]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2015-10-11 81728]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-10-11 789296]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-10-11 434184]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 74240]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 7680]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\WINDOWS\system32\drivers\HWiNFO32.SYS [2015-08-14 23840]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-10-11 24016]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-10-11 76000]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2015-10-11 115640]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2012-01-16 83872]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2012-01-16 25888]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 37376]
R2 rimmptsk;rimmptsk; C:\WINDOWS\System32\drivers\rimmptsk.sys [2009-06-25 48128]
R2 rimsptsk;rimsptsk; C:\WINDOWS\System32\drivers\rimsptsk.sys [2009-06-25 44544]
R2 rismxdp;@oem63.inf,%DiskServiceDesc%;Ricoh xD-Picture Card Driver; C:\WINDOWS\System32\drivers\rixdptsk.sys [2009-06-25 38400]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 52736]
R3 athr;@oem35.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\System32\drivers\athr.sys [2014-10-04 3234304]
R3 bcbtums;@oem100.inf,%BCBTUMS.SvcDesc%;Bluetooth USB LD Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2013-10-28 175320]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-07-10 86528]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 102912]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2015-07-10 61952]
R3 dtsoftbus01;@oem48.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2012-11-10 242240]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHDA.sys [2015-08-14 3522264]
R3 L1C;@oem2.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\WINDOWS\System32\drivers\L1C62x86.sys [2014-10-04 109256]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2015-08-14 130048]
R3 MTsensor;@oem6.inf,%ATKACPI.DisplayName%;ATK0100 ACPI UTILITY; C:\WINDOWS\System32\drivers\ATKACPI.sys [2009-05-13 14392]
R3 NVHDA;@oem108.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32v.sys [2013-11-28 162592]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-08-18 10704560]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-08-18 18552]
R3 nvvad_WaveExtensible;@oem106.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad32v.sys [2015-08-11 44840]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-07-10 129536]
R3 StillCam;@sti.inf,%StillCam.SvcDesc%;Ovladač digitálního fotoaparátu pro sériový port; C:\WINDOWS\system32\DRIVERS\serscan.sys [2015-07-10 9216]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 88928]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 83296]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 51040]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 51552]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 33632]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-09-17 725504]
S3 btwampfl;@oem100.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2013-10-28 144600]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-09-17 26112]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 96768]
S3 dg_ssudbus;@oem62.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2015-05-21 89984]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 24064]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 17408]
S3 GPIO;@iaiogpio.inf,%GPIO.SVCDESC%;Intel SoC GPIO Controller Driver; C:\WINDOWS\System32\drivers\iaiogpio.sys [2015-07-10 22016]
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2012-04-05 25280]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 37728]
S3 iaioi2c;@iaioi2c.inf,%Driver_Service.Desc%;Intel(R) Atom(TM) Processor I2C Controller Service; C:\WINDOWS\System32\drivers\iaioi2c.sys [2015-07-10 61936]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 23040]
S3 RegFilter;RegFilter; \??\C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\regfilter.sys [2013-11-19 32288]
S3 Ser2pl;@oem110.inf,%Serial.SVCDESC%;Prolific Serial port driver; C:\WINDOWS\system32\DRIVERS\ser2pl.sys [2008-10-27 77824]
S3 Ser2plx86;@oem109.inf,%Serial.SVCDESC%;Prolific Serial port WDF driver; C:\WINDOWS\system32\DRIVERS\ser2pl.sys [2008-10-27 77824]
S3 ssadbus;@oem41.inf,%SAMSUNG.Service.Desc%;SAMSUNG Android USB Composite Device driver (WDM); C:\WINDOWS\System32\drivers\ssadbus.sys [2015-05-21 136904]
S3 ssadmdfl;@oem45.inf,%Samsung.Filter.Name%;SAMSUNG Android USB Modem (Filter); C:\WINDOWS\system32\DRIVERS\ssadmdfl.sys [2015-05-21 17864]
S3 ssadmdm;@oem45.inf,%Samsung.Service.Name%;SAMSUNG Android USB Modem Drivers; C:\WINDOWS\system32\DRIVERS\ssadmdm.sys [2015-05-21 153672]
S3 ssadserd;@oem49.inf,%Samsung.Service.Name%;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\WINDOWS\system32\DRIVERS\ssadserd.sys [2015-05-21 130248]
S3 ssudmdm;@oem68.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2015-05-21 184192]
S4 FileMonitor;FileMonitor; \??\C:\Program Files\IObit\IObit Malware Fighter\Drivers\win7_x86\FileMonitor.sys [2013-03-23 21480]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-07-07 82128]
R2 AdvancedSystemCareService8;Advanced SystemCare Service 8; C:\Program Files\IObit\Advanced SystemCare 8\ASCService.exe [2015-08-05 821024]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-05-29 60744]
R2 ASLDRService;ASLDR Service; C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe [2009-06-15 84536]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-10-11 146600]
R2 BcmBtRSupport;@oem100.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2013-10-28 1680088]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-08-18 921208]
R2 IMFservice;IMF Service; C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe [2014-09-30 344896]
R2 LiveUpdateSvc;LiveUpdate; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2015-08-14 2909472]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2015-08-14 24576]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-08-18 1872504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-08-18 4305016]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-08-18 670512]
R2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R2 rpcnet;Remote Procedure Call (RPC) Net; C:\Windows\system32\rpcnet.exe [2015-04-19 78032]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe [2014-10-04 251096]
R2 ss_conn_service;SAMSUNG Mobile Connectivity Service; C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [2015-05-21 743688]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-08-17 409776]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
R3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-07-11 541992]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-21 269000]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 23040]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2015-05-29 43696]
S3 Garmin Device Interaction Service;Garmin Device Interaction Service; C:\Program Files\Garmin\Device Interaction Service\GarminService.exe [2015-09-11 762272]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2015-10-02 147624]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 41864]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-08-14 669696]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S4 AdobeActiveFileMonitor9.0;Adobe Active File Monitor V9; C:\Program Files\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [2010-09-30 169408]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2015-07-10 45240]
S4 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 390504]
S4 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-09-20 853288]
S4 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2007-10-23 382248]
S4 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119674
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o pomoc.

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Program Files\Skype\Toolbars
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\SzqqalofR77sdOxRwtk1.job
C:\WINDOWS\tasks\sZUg8b7V4s.job
C:\Users\Michal\AppData\Roaming\SzqqalofR77sdOxRwtk1.exe
C:\Users\Michal\AppData\Roaming\sZUg8b7V4s.exe
C:\Windows\inf\ntvdm.vbe

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NtVdmSrv]

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
MichalT
Návštěvník
Návštěvník
Příspěvky: 9
Registrován: 11 říj 2015 20:56

Re: Prosím o pomoc.

#7 Příspěvek od MichalT »

Posílám nový log.


Logfile of random's system information tool 1.10 (written by random/random)
Run by Michal at 2015-10-12 19:38:36
Microsoft Windows 10 Pro
System drive C: has 98 GB (41%) free of 238 GB
Total RAM: 3071 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:39:06, on 12.10.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16412)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\taskhostw.exe
C:\WINDOWS\system32\sihost.exe
C:\Program Files\P4G\BatteryLife.exe
C:\WINDOWS\system32\taskeng.exe
C:\Program Files\ASUS\Splendid\ACMON.exe
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe
C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\WINDOWS\system32\SearchFilterHost.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files\HP\HP Software Update\hpwuschd2.exe
C:\Program Files\IObit\IObit Uninstaller\UninstallMonitor.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Samsung\Kies\KiesAirMessage.exe
C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
C:\Users\Michal\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel.exe
C:\Windows\System32\ACEngSvr.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\system32\svchost.exe
C:\Users\Michal\Desktop\RSIT.exe
C:\Program Files\trend micro\Michal.exe
C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [NvBackend] "C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe"
O4 - HKLM\..\Run: [ShadowPlay] C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap.dll,ShadowPlayOnSystemStart
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup
O4 - HKCU\..\Run: [] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKCU\..\Run: [KiesPDLR.exe] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run
O4 - HKCU\..\Run: [Advanced SystemCare 8] "C:\Program Files\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto
O4 - HKCU\..\Run: [icq] C:\Users\Michal\AppData\Roaming\ICQM\icq.exe -CU
O4 - HKCU\..\Run: [GarminExpressTrayApp] "C:\Program Files\Garmin\Express Tray\ExpressTray.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Michal\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [GarminExpressTrayApp] "C:\Program Files\Garmin\Express Tray\ExpressTray.exe" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [GarminExpressTrayApp] "C:\Program Files\Garmin\Express Tray\ExpressTray.exe" (User 'Default user')
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: SRS Premium Sound.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files\Microsoft Office\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést cíl vazby do existujícího PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést do existujícího PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Převést vybrané vazby do Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést vybrané vazby do existujícího PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Převést výběr do Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést výběr do existujícího PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 8 (AdvancedSystemCareService8) - IObit - C:\Program Files\IObit\Advanced SystemCare 8\ASCService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @oem100.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Broadcom Corporation. - C:\WINDOWS\system32\BtwRSupportService.exe
O23 - Service: Garmin Device Interaction Service - Garmin Ltd. or its subsidiaries - C:\Program Files\Garmin\Device Interaction Service\GarminService.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvvsvc.exe
O23 - Service: Remote Procedure Call (RPC) Net (rpcnet) - Absolute Software Corp. - C:\Windows\system32\rpcnet.exe
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

--
End of file - 10716 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\ASC8_SkipUac_Michal.job - C:\Program Files\IObit\Advanced SystemCare 8\ASC.exe /SkipUac
C:\WINDOWS\tasks\Uninstaller_SkipUac_Michal.job - C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe /UninstallExplorer

=========Mozilla firefox=========

ProfilePath - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\7o31mv4m.default-1416215766476

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/|https://www.google.cz/"
prefs.js - "keyword.URL" - "https://search.yahoo.com/search?fr=gree ... =198484&p="

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe� Flash� Player 19.0.0.185 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_19_0_0_185.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.60.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.60.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}

C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\7o31mv4m.default-1416215766476\extensions\
iobitascsurfingprotection@iobit.com

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-09-13 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-10-11 559624]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-13 172640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2015-08-14 12336856]
"ATKMEDIA"=C:\Program Files\ASUS\ATK Media\DMedia.exe [2009-04-20 159744]
"ATKOSD2"=C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe [2009-06-10 8568832]
"HControlUser"=C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2015-05-15 60712]
"NvBackend"=C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2015-08-18 2634872]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap.dll [2015-08-18 1423120]
"KiesTrayAgent"=C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [2015-07-27 311616]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2010-06-09 49208]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-07-11 157992]
"seznam-listicka-distribuce"=C:\Program Files\Seznam.cz\distribution\szninstall.exe [2015-10-10 1062472]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-10-11 6134544]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"KiesAirMessage"=C:\Program Files\Samsung\Kies\KiesAirMessage.exe [2013-10-30 578560]
""=C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2015-07-27 1015104]
"KiesPDLR.exe"=C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2015-07-27 1015104]
"Advanced SystemCare 8"=C:\Program Files\IObit\Advanced SystemCare 8\ASCTray.exe [2015-04-08 2429728]
"icq"=C:\Users\Michal\AppData\Roaming\ICQM\icq.exe [2015-06-02 36705800]
"GarminExpressTrayApp"=C:\Program Files\Garmin\Express Tray\ExpressTray.exe [2015-09-11 1403192]
"OneDrive"=C:\Users\Michal\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-09-19 405584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 7.0]
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe [2004-12-14 483328]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-07-29 497648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-07-22 402432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2015-05-15 60712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe [2007-10-23 202024]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Garmin Lifetime Updater]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files\ICQ7.7\ICQ.exe [2012-01-23 127040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2015-07-11 157992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2007-09-20 1836328]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2007-03-01 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2014-12-11 30877280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Acrobat Speed Launcher.lnk - C:\Windows\Installer\{AC76BA86-1033-C740-7760-100000000002}\SC_Acrobat.exe
SRS Premium Sound.lnk - C:\Windows\Installer\{D42F84B6-3709-4A50-8502-6719D16AE6C8}\NewShortcut4_E9C83B3EDF9141A39DA5EC05C79BBB91.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iaioi2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.cvid"=iccvid.dll
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=xvidvfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll
"aux"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-10-12 19:15:34 ----D---- C:\_OTM
2015-10-11 22:38:10 ----D---- C:\AdwCleaner
2015-10-11 21:42:47 ----D---- C:\Program Files\trend micro
2015-10-11 21:42:46 ----D---- C:\rsit
2015-10-11 19:41:35 ----D---- C:\Users\Michal\AppData\Roaming\AVAST Software
2015-10-11 19:38:31 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2015-10-11 19:38:31 ----A---- C:\WINDOWS\system32\drivers\aswStm.sys
2015-10-11 19:38:31 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2015-10-11 19:38:31 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2015-10-11 19:38:31 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2015-10-11 19:38:31 ----A---- C:\WINDOWS\system32\drivers\aswRdr2.sys
2015-10-11 19:38:31 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2015-10-11 19:38:31 ----A---- C:\WINDOWS\system32\drivers\aswHwid.sys
2015-10-11 19:38:28 ----A---- C:\WINDOWS\system32\aswBoot.exe
2015-10-11 19:38:14 ----A---- C:\WINDOWS\avastSS.scr
2015-10-10 22:38:23 ----D---- C:\Program Files\Mozilla Firefox
2015-10-10 21:42:16 ----D---- C:\Program Files\bb7f7cc2-b7d1-4d18-9f1f-f341d73656d0
2015-10-10 21:39:29 ----D---- C:\Program Files\Seznam.cz
2015-10-10 21:38:40 ----D---- C:\Users\Michal\AppData\Roaming\Seznam.cz
2015-10-10 21:38:36 ----D---- C:\Users\Michal\AppData\Roaming\Opera Software
2015-10-10 21:00:11 ----D---- C:\Users\Michal\AppData\Roaming\GenoPro
2015-10-10 16:56:08 ----D---- C:\Program Files\GenoPro 2.b13h
2015-10-08 03:41:28 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2015-10-01 19:36:36 ----A---- C:\WINDOWS\system32\edgehtml.dll
2015-10-01 19:36:35 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-10-01 19:36:33 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-10-01 19:36:32 ----A---- C:\WINDOWS\system32\windows.storage.dll
2015-10-01 19:36:30 ----A---- C:\WINDOWS\system32\mos.dll
2015-10-01 19:36:28 ----A---- C:\WINDOWS\system32\BingMaps.dll
2015-10-01 19:36:27 ----A---- C:\WINDOWS\system32\Chakra.dll
2015-10-01 19:36:25 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-10-01 19:36:25 ----A---- C:\WINDOWS\system32\mfcore.dll
2015-10-01 19:36:23 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2015-10-01 19:36:23 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2015-10-01 19:36:21 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-10-01 19:36:20 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2015-10-01 19:36:19 ----A---- C:\WINDOWS\system32\wininet.dll
2015-10-01 19:36:19 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-10-01 19:36:18 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-10-01 19:36:18 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2015-10-01 19:36:17 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2015-10-01 19:36:17 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2015-10-01 19:36:16 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-10-01 19:36:15 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-10-01 19:36:15 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2015-10-01 19:36:15 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2015-10-01 19:36:14 ----A---- C:\WINDOWS\system32\wlansvc.dll
2015-10-01 19:36:14 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-10-01 19:36:14 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-10-01 19:36:13 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-10-01 19:36:13 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-10-01 19:36:12 ----A---- C:\WINDOWS\system32\wwansvc.dll
2015-10-01 19:36:12 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2015-10-01 19:36:11 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2015-10-01 19:36:11 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2015-10-01 19:36:11 ----A---- C:\WINDOWS\system32\mfsvr.dll
2015-10-01 19:36:11 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2015-10-01 19:36:10 ----A---- C:\WINDOWS\system32\wpx.dll
2015-10-01 19:36:09 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-10-01 19:36:09 ----A---- C:\WINDOWS\system32\RDXService.dll
2015-10-01 19:36:09 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2015-10-01 19:36:07 ----A---- C:\WINDOWS\system32\mfds.dll
2015-10-01 19:36:07 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2015-10-01 19:36:07 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2015-10-01 19:36:06 ----A---- C:\WINDOWS\system32\winmde.dll
2015-10-01 19:36:06 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-10-01 19:36:06 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2015-10-01 19:36:06 ----A---- C:\WINDOWS\system32\drivers\Wdf01000.sys
2015-10-01 19:36:05 ----A---- C:\WINDOWS\system32\wmpmde.dll
2015-10-01 19:36:05 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2015-10-01 19:36:05 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2015-10-01 19:36:05 ----A---- C:\WINDOWS\system32\esent.dll
2015-10-01 19:36:05 ----A---- C:\WINDOWS\system32\directmanipulation.dll
2015-10-01 19:36:04 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2015-10-01 19:36:04 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2015-10-01 19:36:04 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-10-01 19:36:03 ----A---- C:\WINDOWS\system32\VEEventDispatcher.dll
2015-10-01 19:36:03 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2015-10-01 19:36:03 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll
2015-10-01 19:36:02 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2015-10-01 19:36:02 ----A---- C:\WINDOWS\system32\NotificationController.dll
2015-10-01 19:36:02 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2015-10-01 19:36:02 ----A---- C:\WINDOWS\system32\bisrv.dll
2015-10-01 19:36:01 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2015-10-01 19:36:01 ----A---- C:\WINDOWS\system32\UserDataService.dll
2015-10-01 19:36:01 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2015-10-01 19:36:01 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2015-10-01 19:36:00 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2015-10-01 19:36:00 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2015-10-01 19:36:00 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2015-10-01 19:35:59 ----A---- C:\WINDOWS\system32\wwanconn.dll
2015-10-01 19:35:59 ----A---- C:\WINDOWS\system32\Unistore.dll
2015-10-01 19:35:59 ----A---- C:\WINDOWS\system32\CellularAPI.dll
2015-10-01 19:35:58 ----A---- C:\WINDOWS\system32\WUDFx02000.dll
2015-10-01 19:35:58 ----A---- C:\WINDOWS\system32\win32kfull.sys
2015-10-01 19:35:58 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-10-01 19:35:58 ----A---- C:\WINDOWS\system32\ncsi.dll
2015-10-01 19:35:57 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2015-10-01 19:35:57 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2015-10-01 19:35:57 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2015-10-01 19:35:56 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-10-01 19:35:56 ----A---- C:\WINDOWS\system32\pnidui.dll
2015-10-01 19:35:56 ----A---- C:\WINDOWS\system32\KnobsCsp.dll
2015-10-01 19:35:56 ----A---- C:\WINDOWS\system32\hevcdecoder.dll
2015-10-01 19:35:56 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-10-01 19:35:55 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2015-10-01 19:35:55 ----A---- C:\WINDOWS\system32\ngccredprov.dll
2015-10-01 19:35:55 ----A---- C:\WINDOWS\system32\KnobsCore.dll
2015-10-01 19:35:55 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2015-10-01 19:35:54 ----A---- C:\WINDOWS\system32\mf.dll
2015-10-01 19:35:54 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys
2015-10-01 19:35:53 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2015-10-01 19:35:53 ----A---- C:\WINDOWS\system32\provengine.dll
2015-10-01 19:35:52 ----A---- C:\WINDOWS\system32\wwanmm.dll
2015-10-01 19:35:52 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2015-10-01 19:35:52 ----A---- C:\WINDOWS\system32\LocationWebproxy.dll
2015-10-01 19:35:51 ----A---- C:\WINDOWS\system32\wuuhext.dll
2015-10-01 19:35:51 ----A---- C:\WINDOWS\system32\psmsrv.dll
2015-10-01 19:35:51 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2015-10-01 19:35:51 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2015-10-01 19:35:50 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2015-10-01 19:35:50 ----A---- C:\WINDOWS\system32\tetheringservice.dll
2015-10-01 19:35:50 ----A---- C:\WINDOWS\system32\SubscriptionMgr.dll
2015-10-01 19:35:50 ----A---- C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll
2015-10-01 19:35:50 ----A---- C:\WINDOWS\system32\cloudAP.dll
2015-10-01 19:35:49 ----A---- C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-10-01 19:35:49 ----A---- C:\WINDOWS\system32\ncryptprov.dll
2015-10-01 19:35:49 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2015-10-01 19:35:49 ----A---- C:\WINDOWS\system32\ContactApis.dll
2015-10-01 19:35:48 ----A---- C:\WINDOWS\system32\win32kbase.sys
2015-10-01 19:35:48 ----A---- C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-10-01 19:35:48 ----A---- C:\WINDOWS\system32\LocationWiFiAdapter.dll
2015-10-01 19:35:47 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-10-01 19:35:47 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2015-10-01 19:35:47 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2015-10-01 19:35:47 ----A---- C:\WINDOWS\system32\ChatApis.dll
2015-10-01 19:35:47 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2015-10-01 19:35:46 ----A---- C:\WINDOWS\system32\syncutil.dll
2015-10-01 19:35:46 ----A---- C:\WINDOWS\system32\HttpsDataSource.dll
2015-10-01 19:35:46 ----A---- C:\WINDOWS\system32\EmailApis.dll
2015-10-01 19:35:46 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2015-10-01 19:35:46 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-10-01 19:35:45 ----A---- C:\WINDOWS\system32\provops.dll
2015-10-01 19:35:45 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2015-10-01 19:35:45 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe
2015-10-01 19:35:44 ----A---- C:\WINDOWS\system32\Windows.Speech.Pal.dll
2015-10-01 19:35:44 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll
2015-10-01 19:35:44 ----A---- C:\WINDOWS\system32\ngckeyenum.dll
2015-10-01 19:35:44 ----A---- C:\WINDOWS\system32\drivers\buttonconverter.sys
2015-10-01 19:35:43 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2015-10-01 19:35:43 ----A---- C:\WINDOWS\system32\omadmclient.exe
2015-10-01 19:35:43 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2015-10-01 19:35:42 ----A---- C:\WINDOWS\system32\omadmapi.dll
2015-10-01 19:35:42 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2015-10-01 19:35:41 ----A---- C:\WINDOWS\system32\wwancfg.dll
2015-10-01 19:35:41 ----A---- C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-10-01 19:35:40 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2015-10-01 19:35:40 ----A---- C:\WINDOWS\system32\AudioSes.dll
2015-10-01 19:35:40 ----A---- C:\WINDOWS\system32\accountaccessor.dll
2015-10-01 19:35:39 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2015-10-01 19:35:39 ----A---- C:\WINDOWS\system32\UserDataAccountApis.dll
2015-10-01 19:35:39 ----A---- C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2015-10-01 19:35:38 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2015-10-01 19:35:38 ----A---- C:\WINDOWS\system32\LocationCrowdsource.dll
2015-10-01 19:35:38 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2015-10-01 19:35:38 ----A---- C:\WINDOWS\system32\CallHistoryClient.dll
2015-10-01 19:35:37 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2015-10-01 19:35:37 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2015-10-01 19:35:36 ----A---- C:\WINDOWS\system32\MapsStore.dll
2015-10-01 19:35:36 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2015-10-01 19:35:36 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-10-01 19:35:35 ----A---- C:\WINDOWS\system32\wpnapps.dll
2015-10-01 19:35:35 ----A---- C:\WINDOWS\system32\netcenter.dll
2015-10-01 19:35:35 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2015-10-01 19:35:33 ----A---- C:\WINDOWS\system32\LocationGeofences.dll
2015-10-01 19:35:31 ----A---- C:\WINDOWS\system32\mdmmigrator.dll
2015-10-01 19:35:31 ----A---- C:\WINDOWS\system32\dmcsps.dll
2015-10-01 19:35:30 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-01 19:35:29 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2015-10-01 19:35:29 ----A---- C:\WINDOWS\system32\configmanager2.dll
2015-10-01 19:35:28 ----A---- C:\WINDOWS\system32\syncmlhook.dll
2015-09-24 20:22:07 ----A---- C:\WINDOWS\system32\drivers\ser2pl.sys
2015-09-13 09:25:02 ----D---- C:\Program Files\Common Files\Java
2015-09-13 09:24:04 ----D---- C:\Users\Michal\AppData\Roaming\Sun
2015-09-13 09:23:53 ----A---- C:\WINDOWS\system32\WindowsAccessBridge.dll

======List of files/folders modified in the last 1 month======

2015-10-12 19:38:21 ----D---- C:\WINDOWS\Prefetch
2015-10-12 19:38:02 ----D---- C:\WINDOWS\system32\Tasks
2015-10-12 19:36:43 ----D---- C:\WINDOWS\Temp
2015-10-12 19:35:33 ----D---- C:\WINDOWS\System32
2015-10-12 19:34:49 ----A---- C:\WINDOWS\system32\rpcnetp.exe
2015-10-12 19:34:48 ----D---- C:\WINDOWS\system32\sru
2015-10-12 19:34:46 ----A---- C:\WINDOWS\system32\rpcnet.dll
2015-10-12 19:34:23 ----D---- C:\ProgramData\NVIDIA
2015-10-12 19:30:34 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-10-12 19:30:33 ----D---- C:\WINDOWS\INF
2015-10-12 19:29:35 ----A---- C:\WINDOWS\system32\acovcnt.exe
2015-10-12 19:15:40 ----D---- C:\WINDOWS\Tasks
2015-10-12 19:15:39 ----RD---- C:\Program Files\Skype
2015-10-12 19:05:09 ----D---- C:\WINDOWS\Microsoft.NET
2015-10-12 10:17:37 ----D---- C:\WINDOWS\system32\config
2015-10-12 06:32:27 ----D---- C:\WINDOWS\debug
2015-10-11 22:52:12 ----D---- C:\WINDOWS\system32\WDI
2015-10-11 22:49:03 ----D---- C:\WINDOWS\SoftwareDistribution
2015-10-11 22:46:49 ----D---- C:\Windows
2015-10-11 22:46:49 ----D---- C:\Program Files\Mozilla Maintenance Service
2015-10-11 22:42:48 ----D---- C:\Program Files\Common Files
2015-10-11 22:42:47 ----RD---- C:\Program Files
2015-10-11 19:50:30 ----D---- C:\WINDOWS\system32\catroot2
2015-10-11 19:38:31 ----D---- C:\WINDOWS\system32\drivers
2015-10-11 19:38:29 ----D---- C:\WINDOWS\WinSxS
2015-10-11 19:35:44 ----SHD---- C:\System Volume Information
2015-10-11 19:34:45 ----D---- C:\ProgramData\AVAST Software
2015-10-11 19:18:15 ----HD---- C:\ProgramData
2015-10-11 18:34:59 ----D---- C:\WINDOWS\system32\NDF
2015-10-11 15:14:54 ----D---- C:\WINDOWS\AppReadiness
2015-10-10 22:03:08 ----D---- C:\WINDOWS\Logs
2015-10-10 21:42:45 ----SHD---- C:\WINDOWS\Installer
2015-10-10 21:42:44 ----SHD---- C:\Config.Msi
2015-10-10 21:42:29 ----D---- C:\Program Files\Adobe Media Player
2015-10-10 21:14:25 ----D---- C:\Program Files\GenoPro
2015-10-10 20:01:20 ----D---- C:\WINDOWS\rescache
2015-10-10 13:49:12 ----D---- C:\WINDOWS\system32\DriverStore
2015-10-10 10:21:39 ----HD---- C:\Program Files\WindowsApps
2015-10-08 03:37:02 ----SD---- C:\WINDOWS\system32\F12
2015-10-08 03:37:02 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2015-10-08 03:37:02 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2015-10-08 03:37:02 ----D---- C:\WINDOWS\system32\migration
2015-10-08 03:37:02 ----D---- C:\WINDOWS\system32\appraiser
2015-10-08 03:36:59 ----RD---- C:\WINDOWS\PurchaseDialog
2015-10-08 03:36:59 ----D---- C:\WINDOWS\Provisioning
2015-10-08 03:36:59 ----D---- C:\WINDOWS\L2Schemas
2015-10-08 03:36:59 ----D---- C:\WINDOWS\apppatch
2015-10-06 08:10:41 ----D---- C:\ProgramData\ProductData
2015-10-04 09:43:18 ----D---- C:\Users\Michal\AppData\Roaming\vlc
2015-10-01 20:01:00 ----D---- C:\WINDOWS\CbsTemp
2015-09-28 22:51:57 ----D---- C:\Users\Michal\AppData\Roaming\Media Player Classic
2015-09-24 20:22:05 ----HD---- C:\Program Files\InstallShield Installation Information
2015-09-20 18:33:33 ----D---- C:\Program Files\Kinetic
2015-09-15 07:56:02 ----D---- C:\ProgramData\Package Cache
2015-09-15 07:55:20 ----RSD---- C:\WINDOWS\assembly
2015-09-15 07:55:10 ----D---- C:\Program Files\Garmin
2015-09-13 09:24:58 ----D---- C:\ProgramData\Oracle
2015-09-13 09:23:19 ----D---- C:\Program Files\Java
2015-09-13 03:31:19 ----D---- C:\WINDOWS\system32\CatRoot
2015-09-13 03:30:51 ----D---- C:\Program Files\Windows Journal

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-10-11 49776]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-10-11 208664]
R0 giveio;giveio; C:\WINDOWS\system32\giveio.sys [1996-04-03 5248]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-03-19 45648]
R0 SmartDefragDriver;SmartDefragDriver; C:\WINDOWS\System32\Drivers\SmartDefragDriver.sys [2013-05-22 15672]
R0 speedfan;speedfan; C:\WINDOWS\system32\speedfan.sys [2012-12-29 24184]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2012-03-07 24408]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2015-10-11 81728]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-10-11 789296]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-10-11 434184]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 74240]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 7680]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\WINDOWS\system32\drivers\HWiNFO32.SYS [2015-08-14 23840]
R1 MpKsla785f06c;MpKsla785f06c; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B6F44949-EF57-4B88-BBFC-24D4ECA20063}\MpKsla785f06c.sys [2015-10-12 39168]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-10-11 24016]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-10-11 76000]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2015-10-11 115640]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2012-01-16 83872]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2012-01-16 25888]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 37376]
R2 rimmptsk;rimmptsk; C:\WINDOWS\System32\drivers\rimmptsk.sys [2009-06-25 48128]
R2 rimsptsk;rimsptsk; C:\WINDOWS\System32\drivers\rimsptsk.sys [2009-06-25 44544]
R2 rismxdp;@oem63.inf,%DiskServiceDesc%;Ricoh xD-Picture Card Driver; C:\WINDOWS\System32\drivers\rixdptsk.sys [2009-06-25 38400]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 52736]
R3 athr;@oem35.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\System32\drivers\athr.sys [2014-10-04 3234304]
R3 bcbtums;@oem100.inf,%BCBTUMS.SvcDesc%;Bluetooth USB LD Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2013-10-28 175320]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-07-10 86528]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 102912]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2015-07-10 61952]
R3 dtsoftbus01;@oem48.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2012-11-10 242240]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHDA.sys [2015-08-14 3522264]
R3 L1C;@oem2.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\WINDOWS\System32\drivers\L1C62x86.sys [2014-10-04 109256]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2015-08-14 130048]
R3 MTsensor;@oem6.inf,%ATKACPI.DisplayName%;ATK0100 ACPI UTILITY; C:\WINDOWS\System32\drivers\ATKACPI.sys [2009-05-13 14392]
R3 NVHDA;@oem108.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32v.sys [2013-11-28 162592]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-08-18 10704560]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-08-18 18552]
R3 nvvad_WaveExtensible;@oem106.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad32v.sys [2015-08-11 44840]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-07-10 129536]
R3 StillCam;@sti.inf,%StillCam.SvcDesc%;Ovladač digitálního fotoaparátu pro sériový port; C:\WINDOWS\system32\DRIVERS\serscan.sys [2015-07-10 9216]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 88928]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 83296]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 51040]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 51552]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 33632]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-09-17 725504]
S3 btwampfl;@oem100.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2013-10-28 144600]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-09-17 26112]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 96768]
S3 dg_ssudbus;@oem62.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2015-05-21 89984]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 24064]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 17408]
S3 GPIO;@iaiogpio.inf,%GPIO.SVCDESC%;Intel SoC GPIO Controller Driver; C:\WINDOWS\System32\drivers\iaiogpio.sys [2015-07-10 22016]
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2012-04-05 25280]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 37728]
S3 iaioi2c;@iaioi2c.inf,%Driver_Service.Desc%;Intel(R) Atom(TM) Processor I2C Controller Service; C:\WINDOWS\System32\drivers\iaioi2c.sys [2015-07-10 61936]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 23040]
S3 RegFilter;RegFilter; \??\C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\regfilter.sys [2013-11-19 32288]
S3 Ser2pl;@oem110.inf,%Serial.SVCDESC%;Prolific Serial port driver; C:\WINDOWS\system32\DRIVERS\ser2pl.sys [2008-10-27 77824]
S3 Ser2plx86;@oem109.inf,%Serial.SVCDESC%;Prolific Serial port WDF driver; C:\WINDOWS\system32\DRIVERS\ser2pl.sys [2008-10-27 77824]
S3 ssadbus;@oem41.inf,%SAMSUNG.Service.Desc%;SAMSUNG Android USB Composite Device driver (WDM); C:\WINDOWS\System32\drivers\ssadbus.sys [2015-05-21 136904]
S3 ssadmdfl;@oem45.inf,%Samsung.Filter.Name%;SAMSUNG Android USB Modem (Filter); C:\WINDOWS\system32\DRIVERS\ssadmdfl.sys [2015-05-21 17864]
S3 ssadmdm;@oem45.inf,%Samsung.Service.Name%;SAMSUNG Android USB Modem Drivers; C:\WINDOWS\system32\DRIVERS\ssadmdm.sys [2015-05-21 153672]
S3 ssadserd;@oem49.inf,%Samsung.Service.Name%;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\WINDOWS\system32\DRIVERS\ssadserd.sys [2015-05-21 130248]
S3 ssudmdm;@oem68.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2015-05-21 184192]
S4 FileMonitor;FileMonitor; \??\C:\Program Files\IObit\IObit Malware Fighter\Drivers\win7_x86\FileMonitor.sys [2013-03-23 21480]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-07-07 82128]
R2 AdvancedSystemCareService8;Advanced SystemCare Service 8; C:\Program Files\IObit\Advanced SystemCare 8\ASCService.exe [2015-08-05 821024]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-05-29 60744]
R2 ASLDRService;ASLDR Service; C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe [2009-06-15 84536]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-10-11 146600]
R2 BcmBtRSupport;@oem100.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2013-10-28 1680088]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
R2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-08-18 921208]
R2 IMFservice;IMF Service; C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe [2014-09-30 344896]
R2 LiveUpdateSvc;LiveUpdate; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2015-08-14 2909472]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2015-08-14 24576]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-08-18 1872504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-08-18 4305016]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-08-18 670512]
R2 OneSyncSvc_Session1;Hostitel synchronizace_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R2 rpcnet;Remote Procedure Call (RPC) Net; C:\Windows\system32\rpcnet.exe [2015-04-19 78032]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe [2014-10-04 251096]
R2 ss_conn_service;SAMSUNG Mobile Connectivity Service; C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [2015-05-21 743688]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-08-17 409776]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-07-11 541992]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-07-10 135848]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-21 269000]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 23040]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2015-05-29 43696]
S3 Garmin Device Interaction Service;Garmin Device Interaction Service; C:\Program Files\Garmin\Device Interaction Service\GarminService.exe [2015-09-11 762272]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2015-10-02 147624]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 41864]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 PimIndexMaintenanceSvc_Session1;Data kontaktů_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 35176]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-08-14 669696]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 35176]
S4 AdobeActiveFileMonitor9.0;Adobe Active File Monitor V9; C:\Program Files\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [2010-09-30 169408]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2015-07-10 45240]
S4 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 390504]
S4 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-09-20 853288]
S4 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2007-10-23 382248]
S4 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119674
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o pomoc.

#8 Příspěvek od Rudy »

Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
MichalT
Návštěvník
Návštěvník
Příspěvky: 9
Registrován: 11 říj 2015 20:56

Re: Prosím o pomoc.

#9 Příspěvek od MichalT »

Počítač se restartoval a na ploše zmizely dvě aplikace použité na opravu.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119674
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o pomoc.

#10 Příspěvek od Rudy »

Tak to má být. A co ten Firefox?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
MichalT
Návštěvník
Návštěvník
Příspěvky: 9
Registrován: 11 říj 2015 20:56

Re: Prosím o pomoc.

#11 Příspěvek od MichalT »

Firefox zdá se pracuje jak má, nikde nic nevyskakuje a ani neproblikává další okno. Včera jsem přidal Avast Online Security a ten se zdá, že to trošku brzdí. Musím najít, kde se to vypíná. Jinak se to zdá být vpořádku.
Ano, po vypnutí je odezva podstaně kratší. Doporučil by jste tuto ochranu nechat zapnutou?

Tak asi není vše vpořádku, restartoval jsem už podruhé a na kliknutí levým tlačítkem nereaguje nabídka start a na pravé straně ikonka v liště "nové oznámení " a přístup k internetu taktéž nereaguje. U kurzoru jen problikne modré kolečko, ale nic se nestane.
pokud u nabídky start kliknu pravým tlačítkem, rozbalí se menu. Po kliknutí na nabídku programy a funkce se objeví klasické okno k přidání či odinstalování programů.
Spuštění programů z lišty funguje normálně.
Lupa k prohledání Windows také nereaguje.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119674
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o pomoc.

#12 Příspěvek od Rudy »

Njn. U desítek tohle nevidím poprvé. Zkuste obnovu systému k datu, kdy korektně fungoval.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
MichalT
Návštěvník
Návštěvník
Příspěvky: 9
Registrován: 11 říj 2015 20:56

Re: Prosím o pomoc.

#13 Příspěvek od MichalT »

OK, myslím, že to bylo ještě před úklidem. Jdu na to.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119674
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o pomoc.

#14 Příspěvek od Rudy »

OK.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
MichalT
Návštěvník
Návštěvník
Příspěvky: 9
Registrován: 11 říj 2015 20:56

Re: Prosím o pomoc.

#15 Příspěvek od MichalT »

Obnova pomohla, nabídka start a ostatní fungují. V tuto chvíli se zdá být vyřešeno, ale ještě uvidím za provozu. Nezbývá mi, než Vám moc a moc poděkovat za poskytnutou pomoc a za skvělé služby, které nám laikům poskytujete. Číslo účtu jsem si už opsal.
Ještě jednou díky.

Michal T.
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“