V chromu vyskakují okna

Zpráva

zooh · #1 Příspěvek od **zooh** » 23 pro 2016 22:31

Dobrý den, prosím o kontrolu počítače. 1) v Chromu mi při kliknutí kamkoli (třeba na posouvátko vpravo) vyskakují různé reklamní stránky. 2) V jednom FTP do kterého mám přístup je prý virus, tak nevím, jestli se tam nedostal odemne. Děkuji za pomoc

zooh · #2 Příspěvek od **zooh** » 23 pro 2016 22:32

Logfile of random's system information tool 1.14 (written by random/random)
Run by Jakub at 2016-12-23 22:26:16
Microsoft Windows 10 Home
System drive C: has 70 GB (15%) free of 457 GB
Total RAM: 3911 MB (40% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:26:29, on 23. 12. 2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.14393.0000)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\WindowsApps\Microsoft.BingNews_4.18.41.0_x86__8wekyb3d8bbwe\Microsoft.Msn.News.exe
C:\Program Files\trend micro\Jakub_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://search.yahoo.com/yhs/web?hspart ... 1012__yaie
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O1 - Hosts: 0.0.0.1 mssplus.mcafee.com
O2 - BHO: True Key Helper - {0F4B8786-5502-4803-8EBC-F652A1153BB6} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll
O2 - BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O3 - Toolbar: Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
O3 - Toolbar: True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll
O4 - HKLM\..\Run: [RadioController] "C:\Program Files (x86)\RadioController\RfBtnHelper.exe" Start_Run
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [CanonQuickMenu] C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon
O4 - HKLM\..\Run: [IJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SysWoW64\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Jakub\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Adobe Acrobat Synchronizer] "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe"
O4 - HKCU\..\Run: [MyDriveConnect.exe] "C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe" -startwithoutDA
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files (x86)\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Web Companion] C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Startup: OneNote 2010 Screen Clipper and Launcher.lnk = C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.11.309\SSScheduler.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\lavasofttcpservice.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\lavasofttcpservice.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\lavasofttcpservice.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\lavasofttcpservice.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\lavasofttcpservice.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://*.webcompanion.com
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: McAfee Application Installer Cleanup (0212161482011328) (0212161482011328mcinstcleanup) - McAfee, Inc. - C:\WINDOWS\TEMP\021216~1.EXE
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BitRaider Mini-Support Service Stub Loader (BRSptStub) - BitRaider, LLC - C:\ProgramData\BitRaider\BRSptStub.exe
O23 - Service: CCDMonitorService - Acer Incorporated - C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Device Fast-lane Service (DeviceFastLaneService) - Acer Incorporated - C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
O23 - Service: Elan Service (ETDService) - ELAN Microelectronics Corp. - C:\Program Files\Elantech\ETDService.exe
O23 - Service: ExpressCache - Condusiv Technologies - C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Sleep memory optimizer (FFSOpzSvc) - Acer Incorporated - C:\Program Files\Acer\Acer Instant Service\Sleep Memory Optimizer\FFSService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Rapid Start Technology Service (irstrtsv) - Intel Corporation - C:\Windows\SysWOW64\irstrtsv.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LavasoftTcpService - Lavasoft Limited - C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.11.309\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Nero Update (NAUpdate) - Nero AG - c:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Origin Web Helper Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginWebHelperService.exe
O23 - Service: Dritek RF Button Command Service (RfButtonDriverService) - Dritek System INC. - C:\Windows\RfBtnSvc64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: Intel Security True Key (TrueKey) - McAfee, Inc. - C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe
O23 - Service: Intel Security True Key Scheduler (TrueKeyScheduler) - McAfee, Inc. - C:\Program Files\TrueKey\McTkSchedulerService.exe
O23 - Service: Intel Security True Key Helper Service (TrueKeyServiceHelper) - McAfee, Inc. - C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: Acer Theft Shield Service (USecuAppSvc) - Acer Incorporated - C:\Program Files\Acer\Acer Theft Shield\USecuAppSvc.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 15907 bytes

======Enumerating Processes======

C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\dwm.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\system32\dashost.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe"
"C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\Elantech\ETDService.exe"
"C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe"
"C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE"
"C:\Program Files\Acer\Acer Instant Service\Sleep Memory Optimizer\FFSService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
C:\Windows\RfBtnSvc64.exe
"C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k appmodel
"C:\Program Files\TrueKey\McTkSchedulerService.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"c:\Program Files (x86)\Nero\Update\NASvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\Elantech\ETDCtrl.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
C:\WINDOWS\system32\sihost.exe
C:\WINDOWS\system32\taskhostw.exe
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
C:\WINDOWS\system32\igfxEM.exe
C:\WINDOWS\system32\igfxHK.exe
C:\WINDOWS\system32\igfxTray.exe
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Program Files\TortoiseSVN\bin\TSVNCache.exe"
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Program Files\Acer\Acer Power Management\ePowerTray.exe"
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
C:\WINDOWS\system32\igfxext.exe -Embedding
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe"
"C:\Program Files (x86)\RadioController\RfBtnHelper.exe" HigherRFButtonHelper
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\WINDOWS\system32\fontdrvhost.exe
"C:\Program Files\Acer\Acer Theft Shield\USecuAppClient.exe"
C:\WINDOWS\system32\DllHost.exe /Processid:{49F6E667-6658-4BD1-9DE9-6AF87F9FAF85}
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.16112.10221.0_x64__8wekyb3d8bbwe\Video.UI.exe" -ServerName:Microsoft.ZuneVideo.AppX758ya5sqdjd98rx6z7g95nw6jy7bqx9y.mca
C:\Windows\System32\SystemSettingsBroker.exe -Embedding
C:\WINDOWS\system32\taskhostw.exe
"C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe"
"C:\Program Files\WindowsApps\Microsoft.XboxApp_24.24.20004.0_x64__8wekyb3d8bbwe\XboxApp.exe" -ServerName:Microsoft.XboxApp.AppXf18qzvvf02y898dj8d1frhp2562vbpn5.mca
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1612.3341.0_x64__8wekyb3d8bbwe\Calculator.exe" -ServerName:App.AppXsm3pg4n7er43kdh1qp4e79f1j7am68r8.mca
"C:\Program Files\WindowsApps\Microsoft.BingNews_4.18.41.0_x86__8wekyb3d8bbwe\Microsoft.Msn.News.exe" -ServerName:AppexNews.AppX3vz52bd72d0ycrnwe6jysfgn7k1qcv00.mca
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
C:\WINDOWS\system32\AUDIODG.EXE 0x54c
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe310_ Global\UsGthrCtrlFltPipeMssGthrPipe310 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 648 652 660 8192 656
C:\Windows\System32\smartscreen.exe -Embedding
"C:\Users\Jakub\Downloads\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\system32\tasks\Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\WINDOWS\system32\tasks\Adobe Flash Player Updater - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\system32\tasks\ALU - C:\Program Files (x86)\Acer\Live Updater\updater.exe -auto
C:\WINDOWS\system32\tasks\ALUAgent - C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe
C:\WINDOWS\system32\tasks\avast! Emergency Update - C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
C:\WINDOWS\system32\tasks\CCleanerSkipUAC - "C:\Program Files (x86)\CCleaner\CCleaner.exe" $(Arg0)
C:\WINDOWS\system32\tasks\Dolby Selector - C:\Dolby PCEE4\pcee4.exe -autostart
C:\WINDOWS\system32\tasks\doPDF Update - "C:\Program Files\Softland\novaPDF 8\Driver\UpdateApplication.exe" /oem=doPdf8_Softland /silent
C:\WINDOWS\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\system32\tasks\GoogleUpdateTaskMachineUA1cf8c4c191ca2aa - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\system32\tasks\Power Management - "C:\Program Files\Acer\Acer Power Management\ePowerTray.exe"
C:\WINDOWS\system32\tasks\SafeZone scheduled Autoupdate 1449831072 - C:\Program Files\AVAST Software\SZBrowser\launcher.exe --scheduledautoupdate $(Arg0)
C:\WINDOWS\system32\tasks\Smart Timer Task Scheduler - "%ProgramFiles%\Smart Timer\Smart_Timer.exe" -iffs
C:\WINDOWS\system32\tasks\User_Feed_Synchronization-{F3028801-E200-49EF-99D1-51749B89B0E5} - C:\WINDOWS\system32\msfeedssync.exe sync
C:\WINDOWS\system32\tasks\Theft Shield\AcerTheftShieldTask - C:\Program Files\Acer\Acer Theft Shield\USecuAppLauncher.exe
C:\WINDOWS\system32\tasks\Microsoft\XblGameSave\XblGameSaveTask - %windir%\System32\XblGameSaveTask.exe standby
C:\WINDOWS\system32\tasks\Microsoft\XblGameSave\XblGameSaveTaskLogon - %windir%\System32\XblGameSaveTask.exe logon
C:\WINDOWS\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join - %SystemRoot%\System32\dsregcmd.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join - %SystemRoot%\System32\AutoWorkplace.exe join
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start - C:\WINDOWS\system32\sc.exe start wuauserv
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network - C:\Windows\system32\sc.exe start wuauserv
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\sih - %systemroot%\System32\sihclient.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\sihboot - %systemroot%\System32\sihclient.exe /boot
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -upload
C:\WINDOWS\system32\tasks\Microsoft\Windows\WCM\WiFiTask - %SystemRoot%\System32\WiFiTask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Maintenance Install - %systemroot%\system32\usoclient.exe StartInstall
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval - C:\WINDOWS\system32\MusNotification.exe Display
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Policy Install - %systemroot%\system32\usoclient.exe StartInstall
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Reboot - %systemroot%\system32\MusNotification.exe Reboot
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Refresh Settings - %systemroot%\system32\usoclient.exe RefreshSettings
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Resume On Boot - %systemroot%\system32\usoclient.exe ResumeUpdate
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Scan - %systemroot%\system32\usoclient.exe StartScan
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display - C:\windows\system32\MusNotification.exe Display
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot - C:\windows\system32\MusNotification.exe ReadyToReboot
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone - %windir%\system32\tzsync.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\WINDOWS\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\srtasks.exe ExecuteScheduledSPPCreation
C:\WINDOWS\system32\tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask - %windir%\system32\rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\Storage Tiers Management\Storage Tiers Optimization - %windir%\system32\defrag.exe -c -h -g -# -m 8 -i 13500
C:\WINDOWS\system32\tasks\Microsoft\Windows\Speech\SpeechModelDownloadTask - %windir%\system32\speech_onecore\common\SpeechModelDownload.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SpacePort\SpaceAgentTask - %windir%\system32\SpaceAgent.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SpacePort\SpaceManagerTask - %windir%\system32\spaceman.exe /Work
C:\WINDOWS\system32\tasks\Microsoft\Windows\Shell\FamilySafetyMonitor - %windir%\System32\wpcmon.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SharedPC\Account Cleanup - %windir%\System32\rundll32.exe %windir%\System32\Windows.SharedPC.AccountManager.dll,StartMaintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\RemovalTools\MRT_HB - C:\Windows\system32\MRT.exe /EHB /Q
C:\WINDOWS\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\WINDOWS\system32\tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers - %SystemRoot%\System32\drvinst.exe 6
C:\WINDOWS\system32\tasks\Microsoft\Windows\NlaSvc\WiFiTask - %SystemRoot%\System32\WiFiTask.exe nla
C:\WINDOWS\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\WINDOWS\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser - %SystemRoot%\System32\MbaeParserTask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Management\Provisioning\Logon - %windir%\system32\ProvTool.exe /turn 5
C:\WINDOWS\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotificationWindows.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Location\WindowsActionDialog - %windir%\System32\WindowsActionDialog.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClient - %windir%\system32\dmclient.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload - %windir%\system32\dmclient.exe utcwnf
C:\WINDOWS\system32\tasks\Microsoft\Windows\EnterpriseMgmt\MDMMaintenenceTask - %windir%\system32\MDMAgent.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DUSM\dusmtask - %SystemRoot%\System32\dusmtask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskFootprint\Diagnostics - %windir%\system32\disksnapshot.exe -z
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskCleanup\SilentCleanup - %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive%
C:\WINDOWS\system32\tasks\Microsoft\Windows\Device Information\Device - %windir%\system32\devicecensus.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c -h -o -$
C:\WINDOWS\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Clip\License Validation - %SystemRoot%\system32\ClipUp.exe -p -s -o
C:\WINDOWS\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\WINDOWS\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup - %windir%\system32\rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierdaily - %windir%\system32\AppHostRegistrationVerifier.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierinstall - %windir%\system32\AppHostRegistrationVerifier.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState - %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\DsSvcCleanup - %windir%\system32\dstokenclean.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattelrunner.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\StartupAppTask - %windir%\system32\rundll32.exe Startupscan.dll,SusRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\98fnk3g9.default

prefs.js - "browser.startup.homepage" - "www.seznam.cz"

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
"sp@avast.com"=C:\Program Files\AVAST Software\Avast\SafePrice\FF

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 24.0.0.186 Plugin
"Path"=C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_186.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1225195.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@canon.com/EPPEX]
"Description"=Canon My Image Garden
"Path"=C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.111.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.111.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nullsoft.com/winampDetector;version=1]
"Description"=Winamp Detector
"Path"=C:\Program Files (x86)\Winamp Detect\npwachk.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2027]
"Description"=RealMedia Plugin
"Path"=C:\Program Files (x86)\ACE Mega CoDecS Pack\SystemS\RealMedia\Browser\plugins\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1040]
"Description"=6.0.12.1040
"Path"=C:\Program Files (x86)\ACE Mega CoDecS Pack\SystemS\RealMedia\Browser\plugins\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0]
"Description"=WildTangent Games App V2 Presence Detector Plugin
"Path"=C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Acrobat]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 24.0.0.186 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_186.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll

C:\Program Files (x86)\Mozilla Firefox\components\
flashplayer.xpt
nppl3260.xpt
nsIQTScriptablePlugin.xpt
nsJSRealPlayerPlugin.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\
npjp2.dll
nppdf32.dll
nppl3260.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
nprpjplug.dll
QuickTimePlugin.class

C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\98fnk3g9.default\extensions\
2020Player_IKEA@2020Technologies.com
staged
{ea614400-e918-4741-9a97-7a972ff7c30b}

C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\98fnk3g9.default\searchplugins\
yahoo-lavasoft.xml

C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\98fnk3g9.default\addons.json
Screengrab (fix version) - extension - {02450914-cdd9-410f-b1da-db004e18c671}
YouTube Flash Player - extension - jid1-HAV2inXAnQPIeA@jetpack
Seznam lištička - extension - {ea614400-e918-4741-9a97-7a972ff7c30b}
uBlock Origin - extension - uBlock0@raymondhill.net
Firebug - extension - firebug@software.joehewitt.com

C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\98fnk3g9.default\extensions.json
Adobe Acrobat DC - Create PDF - extension - web2pdfextension.15@web2pdf.adobedotcom - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn
Seznam lištička - extension - {ea614400-e918-4741-9a97-7a972ff7c30b} - C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\98fnk3g9.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
Avast Online Security - extension - wrc@avast.com - C:\Program Files\AVAST Software\Avast\WebRep\FF
Avast SafePrice - extension - sp@avast.com - C:\Program Files\AVAST Software\Avast\SafePrice\FF
Firebug - extension - firebug@software.joehewitt.com - C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\98fnk3g9.default\extensions\firebug@software.joehewitt.com.xpi
YouTube™ Flash® Player - extension - jid1-HAV2inXAnQPIeA@jetpack - C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\98fnk3g9.default\extensions\jid1-HAV2inXAnQPIeA@jetpack.xpi
Screengrab (fix version) - extension - {02450914-cdd9-410f-b1da-db004e18c671} - C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\98fnk3g9.default\extensions\{02450914-cdd9-410f-b1da-db004e18c671}.xpi
Multi-process staged rollout - extension - e10srollout@mozilla.org - C:\Program Files (x86)\Mozilla Firefox\browser\features\e10srollout@mozilla.org.xpi
Pocket - extension - firefox@getpocket.com - C:\Program Files (x86)\Mozilla Firefox\browser\features\firefox@getpocket.com.xpi
Web Compat - extension - webcompat@mozilla.org - C:\Program Files (x86)\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi
Application Update Service Helper - extension - aushelper@mozilla.org - C:\Program Files (x86)\Mozilla Firefox\browser\features\aushelper@mozilla.org.xpi
Default - theme - {972ce4c6-7e08-4474-a285-3208198ce6fd} - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi
uBlock Origin - extension - uBlock0@raymondhill.net - C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\98fnk3g9.default\extensions\uBlock0@raymondhill.net.xpi
2020 3D Viewer for IKEA - extension - 2020Player_IKEA@2020Technologies.com - C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\98fnk3g9.default\extensions\2020Player_IKEA@2020Technologies.com

C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\98fnk3g9.default\pluginreg.dat
Plugin - AdobeAAMDetect - 1.0.0.0 - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll
Plugin - Adobe Acrobat - 15.20.20039.7108 - C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll
Plugin - Adobe Acrobat - 15.20.20039.7108 - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll
Plugin - WildTangent Games App V2 Presence Detector - 4.0.5.13 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll
Plugin - Google Update - 1.3.32.7 - C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll
Plugin - RealPlayer Version Plugin - 6.0.12.1040 - C:\Program Files (x86)\ACE Mega CoDecS Pack\SystemS\RealMedia\Browser\plugins\nprpjplug.dll
Plugin - RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) - 6.0.11.2027 - C:\Program Files (x86)\ACE Mega CoDecS Pack\SystemS\RealMedia\Browser\plugins\nppl3260.dll
Plugin - Winamp Application Detector - 1.0.0.1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll
Plugin - Photo Gallery - 16.4.3528.331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
Plugin - Microsoft Office 2010 - 14.0.4730.1010 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
Plugin - Microsoft Office 2010 - 14.0.4730.1010 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
Plugin - Silverlight Plug-In - 5.1.50901.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll
Plugin - Java(TM) Platform SE 8 U111 - 11.111.2.14 - C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll
Plugin - Java Deployment Toolkit 8.0.1110.14 - 11.111.2.14 - C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npdeployJava1.dll
Plugin - Intel® Identity Protection Technology - 2.1.42.0 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
Plugin - Intel® Identity Protection Technology - 2.1.42.0 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
Plugin - CANON iMAGE GATEWAY Album Plugin Utility for IJ - 5.0.0.0 - C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll
Plugin - Shockwave for Director - 12.2.5.195 - C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1225195.dll
Plugin - Shockwave Flash - 24.0.0.186 - C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_186.dll
Plugin - Unity Player - 5.3.6.1367 - C:\Users\Jakub\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
Plugin - 2020 3D Viewer for IKEA - 7.1.0.19 - C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\98fnk3g9.default\extensions\2020Player_IKEA@2020Technologies.com\plugins\NP_2020Player_IKEA.dll

=========Google Chrome=========

C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Obchod 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Dokumenty Google 0.9
Extension apdfllckaahabafndbhieahigkjlhalf 1 Disk Google 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension cahedbegdkagmcjfolhdlechbkeaieki 0 Chromoji - Emoji for Google Chrome 2.3.4.3
Extension coobgpohoikkiipiblmjeljniedjpjpf 1 Vyhledávání Google 0.0.0.60
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension efaidnbmnnnibpcajpcglclefindmkaj 0 Adobe Acrobat 15.1.0.2
Extension ennkphjdgehloodpbhlhldgbnhmacadg Settings 0.2
Extension eofcbnmajmjmplflapaojjnihcjkigck 2 Avast SafePrice 12.0.93
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 1 Dokumenty Google offline 1.4
Extension gighmmpiobklfepjocnamgkkbiglidom 1 AdBlock 3.8.2
Extension gomekmidlodglbbmalcneegieacbdmki 2 Avast Online Security 11.1.0.210
Extension ifgpecofpgolkidlhimhofjgcdafahkd 1 Whois 0.9
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.38
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mfffpogegjflfpflabcdkioaeobkgjik GaiaAuthExtension 0.0.1
Extension mgndgikekgjfcpckkfioiadnlibdjbkf Chrome 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.1
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Platby Internetového obchodu Chrome 1.0.0.0
Extension pafkbggdmjlpgkdkcbjmhmfcdpncadgh Google Now 1.2.0.1
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 5516.1005.0.3
Homepage:
default_search_provider.search_url:
C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj]
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck]
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki]
"Path"=C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{65A09127-93D4-4368-B03B-971A39331FA7}]
"URL"=http://www.bing.com/search?q={searchTer ... &pc=MAARJS

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{65A09127-93D4-4368-B03B-971A39331FA7}]
"URL"=http://www.bing.com/search?q={searchTer ... &pc=MAARJS

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23 209504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2010-01-21 6723984]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2013-01-25 66688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe Acrobat Create PDF Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-09-30 171704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2010-01-16 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
Adobe Acrobat Create PDF from Selection - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-09-30 171704]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0F4B8786-5502-4803-8EBC-F652A1153BB6}]
True Key Helper - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2016-12-10 1052384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23 176736]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-01-21 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-11-15 473152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe Acrobat Create PDF Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2015-09-30 141496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-01-16 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-11-15 186944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
Adobe Acrobat Create PDF from Selection - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2015-09-30 141496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe Acrobat Create PDF Toolbar - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-09-30 171704]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23 6141528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe Acrobat Create PDF Toolbar - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2015-09-30 141496]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23 4445272]
{4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - True Key - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2016-12-10 1052384]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2015-10-11 3242696]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-01-29 13267016]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-01-18 1276488]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01 508128]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Jakub\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-08-03 554184]
"Adobe Acrobat Synchronizer"=C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [2016-10-01 884920]
"MyDriveConnect.exe"=C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe [2016-04-14 2042144]
"CCleaner Monitoring"=C:\Program Files (x86)\CCleaner\CCleaner64.exe [2016-07-13 8891608]
"Web Companion"=C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [2016-10-12 1790616]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"RadioController"=C:\Program Files (x86)\RadioController\RfBtnHelper.exe [2013-11-27 111216]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2010-01-21 91520]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-12-10 9080768]
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [2016-10-01 1868472]
""= []
"CanonQuickMenu"=C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [2015-04-20 1298456]
"IJNetworkScannerSelectorEX"=C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [2014-01-15 438888]
"VirtualCloneDrive"=C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2013-03-10 88984]
"QuickTime Task"=C:\WINDOWS\SysWoW64\qttask.exe [2016-10-12 98304]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-09-22 587288]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.11.309\SSScheduler.exe

C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OneNote 2010 Screen Clipper and Launcher.lnk - C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
igfxdev.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2010-01-21 6723984]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-01-21 4222864]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"DSCAutomationHostEnabled"=2
"EnableCursorSuppression"=1
"EnableUIADesktopToggle"=0
"undockwithoutlogon"=1
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"EnableLinkedConnections"=1
"DisableTaskMgr"=0
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"NoRun"=0
"NoFolderOptions"=0
"HideSCAHealth"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
"StubPath"=%SystemRoot%\inf\unregmp2.exe /ShowWMP

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

zooh · #3 Příspěvek od **zooh** » 23 pro 2016 22:32

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.txt - open - "C:\Program Files (x86)\PSPad editor\PSPad.exe" "%1"

======List of files/folders created in the last 1 month======

2016-12-23 22:26:18 ----D---- C:\Program Files\trend micro
2016-12-23 22:26:16 ----D---- C:\rsit
2016-12-16 15:01:14 ----A---- C:\WINDOWS\SYSWOW64\mdmregistration.dll
2016-12-16 15:01:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2016-12-16 15:00:59 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2016-12-16 15:00:59 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2016-12-16 15:00:59 ----A---- C:\WINDOWS\SYSWOW64\win32k.sys
2016-12-16 15:00:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-12-16 15:00:56 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2016-12-16 15:00:55 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2016-12-16 15:00:55 ----A---- C:\WINDOWS\SYSWOW64\aadtb.dll
2016-12-16 15:00:54 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.OnlineId.dll
2016-12-16 15:00:54 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2016-12-16 15:00:54 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-12-16 15:00:54 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2016-12-16 15:00:54 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-12-16 15:00:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-12-16 15:00:48 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2016-12-16 15:00:47 ----A---- C:\WINDOWS\SYSWOW64\sspicli.dll
2016-12-16 15:00:47 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-12-16 15:00:46 ----A---- C:\WINDOWS\SYSWOW64\WordBreakers.dll
2016-12-16 15:00:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2016-12-16 15:00:46 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2016-12-16 15:00:46 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2016-12-16 15:00:46 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2016-12-16 15:00:45 ----A---- C:\WINDOWS\SYSWOW64\InputLocaleManager.dll
2016-12-16 15:00:45 ----A---- C:\WINDOWS\SYSWOW64\EditBufferTestHook.dll
2016-12-16 15:00:44 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-12-16 15:00:43 ----A---- C:\WINDOWS\SYSWOW64\indexeddbserver.dll
2016-12-16 15:00:42 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-12-16 15:00:42 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-12-16 15:00:39 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2016-12-16 15:00:38 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2016-12-16 15:00:37 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2016-12-16 15:00:37 ----A---- C:\WINDOWS\SYSWOW64\wincorlib.dll
2016-12-16 15:00:37 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-12-16 15:00:37 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2016-12-16 15:00:37 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2016-12-16 15:00:36 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2016-12-16 15:00:36 ----A---- C:\WINDOWS\SYSWOW64\bcrypt.dll
2016-12-16 15:00:35 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2016-12-16 15:00:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2016-12-16 15:00:34 ----A---- C:\WINDOWS\SYSWOW64\ShareHost.dll
2016-12-16 15:00:34 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2016-12-16 14:55:17 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-12-16 14:55:03 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2016-12-16 14:55:02 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-12-16 14:55:02 ----A---- C:\WINDOWS\system32\win32kbase.sys
2016-12-16 14:55:02 ----A---- C:\WINDOWS\system32\win32k.sys
2016-12-16 14:54:55 ----A---- C:\WINDOWS\system32\user32.dll
2016-12-16 14:54:53 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-12-16 14:54:52 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-12-16 14:54:49 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2016-12-16 14:54:47 ----A---- C:\WINDOWS\system32\fveapibase.dll
2016-12-16 14:54:47 ----A---- C:\WINDOWS\system32\fveapi.dll
2016-12-16 14:54:47 ----A---- C:\WINDOWS\system32\aadtb.dll
2016-12-16 14:54:46 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-12-16 14:54:46 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-12-16 14:54:45 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-12-16 14:54:45 ----A---- C:\WINDOWS\system32\aadcloudap.dll
2016-12-16 14:54:42 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2016-12-16 14:54:38 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-12-16 14:54:29 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-12-16 14:54:18 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-12-16 14:54:18 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2016-12-16 14:54:16 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-12-16 14:54:14 ----A---- C:\WINDOWS\system32\sspicli.dll
2016-12-16 14:54:14 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-12-16 14:54:14 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2016-12-16 14:54:14 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2016-12-16 14:54:14 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-12-16 14:54:14 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2016-12-16 14:54:14 ----A---- C:\WINDOWS\system32\cdd.dll
2016-12-16 14:54:10 ----A---- C:\WINDOWS\system32\WordBreakers.dll
2016-12-16 14:54:10 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-12-16 14:54:10 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2016-12-16 14:54:10 ----A---- C:\WINDOWS\system32\msi.dll
2016-12-16 14:54:10 ----A---- C:\WINDOWS\system32\InputService.dll
2016-12-16 14:54:10 ----A---- C:\WINDOWS\system32\InputLocaleManager.dll
2016-12-16 14:54:10 ----A---- C:\WINDOWS\system32\EditBufferTestHook.dll
2016-12-16 14:54:09 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-12-16 14:54:07 ----A---- C:\WINDOWS\system32\indexeddbserver.dll
2016-12-16 14:54:07 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-12-16 14:54:05 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-12-16 14:53:52 ----A---- C:\WINDOWS\system32\gdi32full.dll
2016-12-16 14:53:44 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2016-12-16 14:53:43 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe
2016-12-16 14:53:41 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-12-16 14:53:39 ----A---- C:\WINDOWS\system32\CryptoWinRT.dll
2016-12-16 14:53:39 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2016-12-16 14:53:38 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2016-12-16 14:53:38 ----A---- C:\WINDOWS\system32\appraiser.dll
2016-12-16 14:53:38 ----A---- C:\WINDOWS\system32\acmigration.dll
2016-12-16 14:53:37 ----A---- C:\WINDOWS\system32\WinTypes.dll
2016-12-16 14:53:37 ----A---- C:\WINDOWS\system32\wincorlib.dll
2016-12-16 14:53:37 ----A---- C:\WINDOWS\system32\msdtctm.dll
2016-12-16 14:53:37 ----A---- C:\WINDOWS\system32\combase.dll
2016-12-16 14:53:36 ----A---- C:\WINDOWS\system32\ole32.dll
2016-12-16 14:53:36 ----A---- C:\WINDOWS\system32\CloudExperienceHost.dll
2016-12-16 14:53:35 ----A---- C:\WINDOWS\system32\cdp.dll
2016-12-16 14:53:18 ----A---- C:\WINDOWS\system32\bcrypt.dll
2016-12-16 14:53:17 ----A---- C:\WINDOWS\system32\winresume.exe
2016-12-16 14:53:16 ----A---- C:\WINDOWS\system32\winload.exe
2016-12-16 14:53:07 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-12-16 14:53:07 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2016-12-16 14:53:07 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2016-12-16 14:53:07 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-12-16 14:53:04 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2016-12-16 14:53:04 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll
2016-12-16 14:53:01 ----A---- C:\WINDOWS\system32\ShareHost.dll
2016-12-16 14:53:01 ----A---- C:\WINDOWS\system32\securekernel.exe
2016-12-16 14:53:01 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2016-12-16 14:52:58 ----A---- C:\WINDOWS\system32\hvloader.exe
2016-12-16 14:52:58 ----A---- C:\WINDOWS\system32\hvix64.exe
2016-12-16 14:52:58 ----A---- C:\WINDOWS\system32\hvax64.exe
2016-12-10 17:40:29 ----A---- C:\WINDOWS\system32\wpnprv.dll
2016-12-10 17:40:29 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-12-10 17:40:29 ----A---- C:\WINDOWS\system32\InstallAgentUserBroker.exe
2016-12-10 17:40:29 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2016-12-10 17:40:29 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2016-12-10 17:40:29 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2016-12-10 17:40:29 ----A---- C:\WINDOWS\system32\browserbroker.dll
2016-12-10 17:40:28 ----A---- C:\WINDOWS\SYSWOW64\netshell.dll
2016-12-10 17:40:28 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2016-12-10 17:40:28 ----A---- C:\WINDOWS\system32\rascustom.dll
2016-12-10 17:40:28 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2016-12-10 17:40:28 ----A---- C:\WINDOWS\system32\AudioEng.dll
2016-12-10 17:40:28 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-12-10 17:40:27 ----A---- C:\WINDOWS\system32\RDXService.dll
2016-12-10 17:40:27 ----A---- C:\WINDOWS\system32\dosvc.dll
2016-12-10 17:40:26 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2016-12-10 17:40:26 ----A---- C:\WINDOWS\system32\AudioSes.dll
2016-12-10 17:40:25 ----A---- C:\WINDOWS\system32\ntshrui.dll
2016-12-10 17:40:25 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-12-10 17:40:25 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-12-10 17:40:24 ----A---- C:\WINDOWS\system32\netshell.dll
2016-12-10 17:40:23 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-12-10 17:40:23 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-12-10 17:40:22 ----A---- C:\WINDOWS\system32\shell32.dll
2016-12-10 17:40:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryClient.dll
2016-12-10 17:40:20 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-12-10 17:40:20 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2016-12-10 17:40:20 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-12-10 17:40:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.ApplicationData.dll
2016-12-10 17:40:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2016-12-10 17:40:19 ----A---- C:\WINDOWS\system32\apprepapi.dll
2016-12-10 17:40:18 ----A---- C:\WINDOWS\SYSWOW64\WSManHTTPConfig.exe
2016-12-10 17:40:18 ----A---- C:\WINDOWS\SYSWOW64\apprepsync.dll
2016-12-10 17:40:18 ----A---- C:\WINDOWS\SYSWOW64\apprepapi.dll
2016-12-10 17:40:18 ----A---- C:\WINDOWS\system32\apprepsync.dll
2016-12-10 17:40:17 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2016-12-10 17:40:17 ----A---- C:\WINDOWS\SYSWOW64\NMAA.dll
2016-12-10 17:40:17 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll
2016-12-10 17:40:17 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2016-12-10 17:40:16 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2016-12-10 17:40:16 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2016-12-10 17:40:16 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2016-12-10 17:40:13 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll
2016-12-10 17:40:13 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2016-12-10 17:40:13 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2016-12-10 17:40:12 ----A---- C:\WINDOWS\SYSWOW64\zipfldr.dll
2016-12-10 17:40:12 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2016-12-10 17:40:12 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2016-12-10 17:40:10 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys
2016-12-10 17:40:10 ----A---- C:\WINDOWS\system32\domgmt.dll
2016-12-10 17:40:09 ----A---- C:\WINDOWS\SYSWOW64\MapRouter.dll
2016-12-10 17:40:09 ----A---- C:\WINDOWS\SYSWOW64\MapGeocoder.dll
2016-12-10 17:40:09 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2016-12-10 17:40:09 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2016-12-10 17:40:08 ----A---- C:\WINDOWS\SYSWOW64\mfaudiocnv.dll
2016-12-10 17:40:08 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll
2016-12-10 17:40:08 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2016-12-10 17:40:08 ----A---- C:\WINDOWS\system32\RTWorkQ.dll
2016-12-10 17:40:08 ----A---- C:\WINDOWS\system32\MFPlay.dll
2016-12-10 17:40:08 ----A---- C:\WINDOWS\system32\HttpsDataSource.dll
2016-12-10 17:40:07 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2016-12-10 17:40:07 ----A---- C:\WINDOWS\SYSWOW64\MapsBtSvc.dll
2016-12-10 17:40:07 ----A---- C:\WINDOWS\SYSWOW64\DeviceFlows.DataModel.dll
2016-12-10 17:40:07 ----A---- C:\WINDOWS\system32\policymanager.dll
2016-12-10 17:40:07 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys
2016-12-10 17:40:06 ----A---- C:\WINDOWS\SYSWOW64\MosStorage.dll
2016-12-10 17:40:06 ----A---- C:\WINDOWS\SYSWOW64\CloudStorageWizard.exe
2016-12-10 17:40:06 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-12-10 17:40:06 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2016-12-10 17:40:06 ----A---- C:\WINDOWS\system32\dmenrollengine.dll
2016-12-10 17:40:06 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2016-12-10 17:40:02 ----A---- C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2016-12-10 17:40:02 ----A---- C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2016-12-10 17:40:01 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2016-12-10 17:40:01 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2016-12-10 17:40:01 ----A---- C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2016-12-10 17:40:01 ----A---- C:\WINDOWS\system32\EDPCleanup.exe
2016-12-10 17:40:01 ----A---- C:\WINDOWS\system32\EAMProgressHandler.dll
2016-12-10 17:40:01 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2016-12-10 17:40:00 ----A---- C:\WINDOWS\system32\ReportingCSP.dll
2016-12-10 17:40:00 ----A---- C:\WINDOWS\system32\d3d11.dll
2016-12-10 17:39:59 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2016-12-10 17:39:59 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2016-12-10 17:39:59 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2016-12-10 17:39:59 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2016-12-10 17:39:58 ----A---- C:\WINDOWS\system32\hevcdecoder.dll
2016-12-10 17:39:57 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2016-12-10 17:39:57 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2016-12-10 17:39:56 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2016-12-10 17:39:56 ----A---- C:\WINDOWS\system32\usercpl.dll
2016-12-10 17:39:55 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2016-12-10 17:39:54 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2016-12-10 17:39:54 ----A---- C:\WINDOWS\SYSWOW64\efswrt.dll
2016-12-10 17:39:54 ----A---- C:\WINDOWS\SYSWOW64\BcastDVRHelper.dll
2016-12-10 17:39:54 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2016-12-10 17:39:54 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2016-12-10 17:39:54 ----A---- C:\WINDOWS\SYSWOW64\AppCapture.dll
2016-12-10 17:39:54 ----A---- C:\WINDOWS\system32\NgcCtnr.dll
2016-12-10 17:39:54 ----A---- C:\WINDOWS\system32\ngccredprov.dll
2016-12-10 17:39:54 ----A---- C:\WINDOWS\system32\drivers\xboxgip.sys
2016-12-10 17:39:54 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2016-12-10 17:39:53 ----A---- C:\WINDOWS\system32\wscsvc.dll
2016-12-10 17:39:53 ----A---- C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2016-12-10 17:39:53 ----A---- C:\WINDOWS\system32\RDXTaskFactory.dll
2016-12-10 17:39:53 ----A---- C:\WINDOWS\system32\netplwiz.dll
2016-12-10 17:39:53 ----A---- C:\WINDOWS\system32\DeviceFlows.DataModel.dll
2016-12-10 17:39:52 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2016-12-10 17:39:52 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-12-10 17:39:51 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-12-10 17:39:51 ----A---- C:\WINDOWS\system32\dxgi.dll
2016-12-10 17:39:51 ----A---- C:\WINDOWS\system32\actxprxy.dll
2016-12-10 17:39:50 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-12-10 17:39:47 ----A---- C:\WINDOWS\SYSWOW64\RTWorkQ.dll
2016-12-10 17:39:47 ----A---- C:\WINDOWS\system32\wscapi.dll
2016-12-10 17:39:47 ----A---- C:\WINDOWS\system32\services.exe
2016-12-10 17:39:46 ----A---- C:\WINDOWS\SYSWOW64\wsecedit.dll
2016-12-10 17:39:45 ----A---- C:\WINDOWS\SYSWOW64\ActivationManager.dll
2016-12-10 17:39:45 ----A---- C:\WINDOWS\system32\wscinterop.dll
2016-12-10 17:39:45 ----A---- C:\WINDOWS\system32\VEStoreEventHandlers.dll
2016-12-10 17:39:45 ----A---- C:\WINDOWS\system32\cryptngc.dll
2016-12-10 17:39:44 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-12-10 17:39:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Resources.dll
2016-12-10 17:39:43 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-12-10 17:39:40 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2016-12-10 17:39:38 ----A---- C:\WINDOWS\system32\msctf.dll
2016-12-10 17:39:35 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-12-10 17:39:35 ----A---- C:\WINDOWS\system32\comdlg32.dll
2016-12-10 17:39:33 ----A---- C:\WINDOWS\system32\drivers\tpm.sys
2016-12-10 17:39:32 ----A---- C:\WINDOWS\SYSWOW64\mspaint.exe
2016-12-10 17:39:32 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2016-12-10 17:39:32 ----A---- C:\WINDOWS\system32\LogonController.dll
2016-12-10 17:39:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2016-12-10 17:39:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.Shell.Search.UriHandler.dll
2016-12-10 17:39:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2016-12-10 17:39:31 ----A---- C:\WINDOWS\SYSWOW64\LaunchWinApp.exe
2016-12-10 17:39:31 ----A---- C:\WINDOWS\SYSWOW64\gameux.dll
2016-12-10 17:39:31 ----A---- C:\WINDOWS\SYSWOW64\DevicePairing.dll
2016-12-10 17:39:31 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-12-10 17:39:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2016-12-10 17:39:30 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-12-10 17:39:29 ----A---- C:\WINDOWS\system32\cdpusersvc.dll
2016-12-10 17:39:29 ----A---- C:\WINDOWS\system32\cdpsvc.dll
2016-12-10 17:39:28 ----A---- C:\WINDOWS\SYSWOW64\stobject.dll
2016-12-10 17:39:28 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2016-12-10 17:39:28 ----A---- C:\WINDOWS\system32\sppwinob.dll
2016-12-10 17:39:28 ----A---- C:\WINDOWS\system32\sppobjs.dll
2016-12-10 17:39:28 ----A---- C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2016-12-10 17:39:28 ----A---- C:\WINDOWS\system32\EditionUpgradeHelper.dll
2016-12-10 17:39:27 ----A---- C:\WINDOWS\system32\wpncore.dll
2016-12-10 17:39:27 ----A---- C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2016-12-10 17:39:26 ----A---- C:\WINDOWS\system32\wuuhext.dll
2016-12-10 17:39:26 ----A---- C:\WINDOWS\system32\winlogon.exe
2016-12-10 17:39:25 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2016-12-10 17:39:25 ----A---- C:\WINDOWS\SYSWOW64\dmenrollengine.dll
2016-12-10 17:39:25 ----A---- C:\WINDOWS\system32\VPNv2CSP.dll
2016-12-10 17:39:25 ----A---- C:\WINDOWS\system32\SRHInproc.dll
2016-12-10 17:39:24 ----A---- C:\WINDOWS\SYSWOW64\policymanager.dll
2016-12-10 17:39:24 ----A---- C:\WINDOWS\SYSWOW64\msdtcprx.dll
2016-12-10 17:39:24 ----A---- C:\WINDOWS\system32\wsecedit.dll
2016-12-10 17:39:23 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2016-12-10 17:39:23 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2016-12-10 17:39:23 ----A---- C:\WINDOWS\system32\StorSvc.dll
2016-12-10 17:39:23 ----A---- C:\WINDOWS\system32\lpremove.exe
2016-12-10 17:39:23 ----A---- C:\WINDOWS\system32\DeviceReactivation.dll
2016-12-10 17:39:21 ----A---- C:\WINDOWS\SYSWOW64\mtxclu.dll
2016-12-10 17:39:21 ----A---- C:\WINDOWS\system32\SRH.dll
2016-12-10 17:39:20 ----A---- C:\WINDOWS\SYSWOW64\xolehlp.dll
2016-12-10 17:39:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2016-12-10 17:39:20 ----A---- C:\WINDOWS\SYSWOW64\sendmail.dll
2016-12-10 17:39:20 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2016-12-10 17:39:20 ----A---- C:\WINDOWS\system32\drivers\modem.sys
2016-12-10 17:39:19 ----A---- C:\WINDOWS\SYSWOW64\ngccredprov.dll
2016-12-10 17:39:19 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-12-10 17:39:19 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2016-12-10 17:39:18 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-12-10 17:39:18 ----A---- C:\WINDOWS\system32\wkssvc.dll
2016-12-10 17:39:18 ----A---- C:\WINDOWS\system32\mfplat.dll
2016-12-10 17:39:17 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll
2016-12-10 17:39:17 ----A---- C:\WINDOWS\SYSWOW64\cryptngc.dll
2016-12-10 17:39:17 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-12-10 17:39:17 ----A---- C:\WINDOWS\system32\BcastDVRHelper.dll
2016-12-10 17:39:16 ----A---- C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2016-12-10 17:39:16 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-12-10 17:39:15 ----A---- C:\WINDOWS\system32\lsm.dll
2016-12-10 17:39:13 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2016-12-10 17:39:12 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2016-12-10 17:39:12 ----A---- C:\WINDOWS\system32\AppCapture.dll
2016-12-10 17:39:11 ----A---- C:\WINDOWS\system32\windows.storage.dll
2016-12-10 17:39:11 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2016-12-10 17:39:09 ----A---- C:\WINDOWS\system32\dwmcore.dll
2016-12-10 17:39:06 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2016-12-10 17:39:06 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2016-12-10 17:39:02 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2016-12-10 17:39:02 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-12-10 17:39:02 ----A---- C:\WINDOWS\system32\mfaudiocnv.dll
2016-12-10 17:39:01 ----A---- C:\WINDOWS\SYSWOW64\migisol.dll
2016-12-10 17:39:01 ----A---- C:\WINDOWS\SYSWOW64\MFPlay.dll
2016-12-10 17:39:01 ----A---- C:\WINDOWS\system32\migisol.dll
2016-12-10 17:39:01 ----A---- C:\WINDOWS\system32\dialserver.dll
2016-12-10 17:39:01 ----A---- C:\WINDOWS\system32\CloudStorageWizard.exe
2016-12-10 17:39:00 ----A---- C:\WINDOWS\system32\sppnp.dll
2016-12-10 17:39:00 ----A---- C:\WINDOWS\system32\ProvSysprep.dll
2016-12-10 17:39:00 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2016-12-10 17:38:59 ----A---- C:\WINDOWS\system32\ReAgentc.exe
2016-12-10 17:38:59 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2016-12-10 17:38:58 ----A---- C:\WINDOWS\SYSWOW64\msdtcuiu.dll
2016-12-10 17:38:58 ----A---- C:\WINDOWS\system32\RjvMDMConfig.dll
2016-12-10 17:38:58 ----A---- C:\WINDOWS\system32\aitstatic.exe
2016-12-10 17:38:57 ----A---- C:\WINDOWS\SYSWOW64\StoreAgent.dll
2016-12-10 17:38:57 ----A---- C:\WINDOWS\SYSWOW64\InstallAgentUserBroker.exe
2016-12-10 17:38:57 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2016-12-10 17:38:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2016-12-10 17:38:50 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2016-12-10 17:38:49 ----A---- C:\WINDOWS\system32\mspaint.exe
2016-12-10 17:38:49 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll
2016-12-10 17:38:48 ----A---- C:\WINDOWS\system32\stobject.dll
2016-12-10 17:38:48 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2016-12-10 17:38:47 ----A---- C:\WINDOWS\system32\ieproxy.dll
2016-12-10 17:38:46 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-12-10 17:38:46 ----A---- C:\WINDOWS\system32\gameux.dll
2016-12-10 17:38:46 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2016-12-10 17:38:44 ----A---- C:\WINDOWS\explorer.exe
2016-12-10 17:38:43 ----A---- C:\WINDOWS\system32\WSManHTTPConfig.exe
2016-12-10 17:38:43 ----A---- C:\WINDOWS\system32\NMAA.dll
2016-12-10 17:38:43 ----A---- C:\WINDOWS\system32\MapControlCore.dll
2016-12-10 17:38:43 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2016-12-10 17:38:43 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2016-12-10 17:38:40 ----A---- C:\WINDOWS\system32\twinui.dll
2016-12-10 17:38:40 ----A---- C:\WINDOWS\system32\IdCtrls.dll
2016-12-10 17:38:39 ----A---- C:\WINDOWS\system32\zipfldr.dll
2016-12-10 17:38:39 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2016-12-10 17:38:39 ----A---- C:\WINDOWS\system32\wininet.dll
2016-12-10 17:38:39 ----A---- C:\WINDOWS\system32\efswrt.dll
2016-12-10 17:38:38 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-12-10 17:38:38 ----A---- C:\WINDOWS\system32\mos.dll
2016-12-10 17:38:37 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2016-12-10 17:38:35 ----A---- C:\WINDOWS\SYSWOW64\ntshrui.dll
2016-12-10 17:38:34 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-12-10 17:38:34 ----A---- C:\WINDOWS\system32\SyncCenter.dll
2016-12-10 17:38:32 ----A---- C:\WINDOWS\system32\JpMapControl.dll
2016-12-10 17:38:31 ----A---- C:\WINDOWS\system32\BingMaps.dll
2016-12-10 17:38:28 ----A---- C:\WINDOWS\SYSWOW64\hevcdecoder.dll
2016-12-10 17:38:27 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2016-12-10 17:38:27 ----A---- C:\WINDOWS\system32\rasmans.dll
2016-12-10 17:38:26 ----A---- C:\WINDOWS\system32\moshostcore.dll
2016-12-10 17:38:26 ----A---- C:\WINDOWS\system32\MapsStore.dll
2016-12-10 17:38:26 ----A---- C:\WINDOWS\system32\MapRouter.dll
2016-12-10 17:38:25 ----A---- C:\WINDOWS\system32\MapGeocoder.dll
2016-12-10 17:38:24 ----A---- C:\WINDOWS\SYSWOW64\setupugc.exe
2016-12-10 17:38:24 ----A---- C:\WINDOWS\system32\setupugc.exe
2016-12-10 17:38:24 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2016-12-10 17:38:24 ----A---- C:\WINDOWS\system32\MapsBtSvc.dll
2016-12-10 17:38:24 ----A---- C:\WINDOWS\system32\MapConfiguration.dll
2016-12-10 17:38:23 ----A---- C:\WINDOWS\SYSWOW64\wscapi.dll
2016-12-10 17:38:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-12-10 17:38:23 ----A---- C:\WINDOWS\SYSWOW64\NetSetupShim.dll
2016-12-10 17:38:23 ----A---- C:\WINDOWS\system32\vpnike.dll
2016-12-10 17:38:23 ----A---- C:\WINDOWS\system32\rasapi32.dll
2016-12-10 17:38:23 ----A---- C:\WINDOWS\system32\MosStorage.dll
2016-12-10 17:38:23 ----A---- C:\WINDOWS\system32\moshost.dll
2016-12-10 17:38:22 ----A---- C:\WINDOWS\SYSWOW64\wscinterop.dll
2016-12-10 17:38:22 ----A---- C:\WINDOWS\SYSWOW64\ReAgentc.exe
2016-12-10 17:38:22 ----A---- C:\WINDOWS\system32\umpoext.dll
2016-12-10 17:38:22 ----A---- C:\WINDOWS\system32\sendmail.dll
2016-12-10 17:38:22 ----A---- C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
2016-12-10 17:38:21 ----A---- C:\WINDOWS\SYSWOW64\NetCfgNotifyObjectHost.exe
2016-12-10 17:38:21 ----A---- C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll
2016-12-04 17:34:08 ----D---- C:\ProgramData\firebird
2016-12-04 17:33:49 ----D---- C:\Users\Jakub\AppData\Roaming\Exec
2016-12-04 16:01:34 ----D---- C:\Program Files (x86)\Exec
2016-12-01 23:51:27 ----D---- C:\Users\Jakub\AppData\Roaming\hps-install

======List of files/folders modified in the last 1 month======

2016-12-23 22:26:18 ----RD---- C:\Program Files
2016-12-23 21:35:02 ----D---- C:\WINDOWS\system32\sru
2016-12-23 19:34:01 ----D---- C:\WINDOWS\Temp
2016-12-23 19:33:59 ----D---- C:\WINDOWS\system32\SleepStudy
2016-12-23 17:45:02 ----D---- C:\WINDOWS\system32\drivers
2016-12-23 13:19:20 ----D---- C:\WINDOWS\Prefetch
2016-12-23 13:19:00 ----HD---- C:\Program Files\WindowsApps
2016-12-23 10:03:29 ----RD---- C:\WINDOWS\Microsoft.NET
2016-12-22 23:22:23 ----D---- C:\Users\Jakub\AppData\Roaming\Origin
2016-12-22 16:09:14 ----D---- C:\WINDOWS\AppReadiness
2016-12-22 13:12:05 ----D---- C:\Program Files\TrueKey
2016-12-22 13:11:40 ----SHDC---- C:\WINDOWS\Installer
2016-12-21 23:07:55 ----D---- C:\ProgramData\Origin
2016-12-21 23:07:33 ----AD---- C:\Program Files (x86)\Origin
2016-12-19 11:09:59 ----D---- C:\WINDOWS\rescache
2016-12-19 11:04:17 ----D---- C:\WINDOWS\system32\config
2016-12-18 17:02:00 ----D---- C:\WINDOWS\WinSxS
2016-12-18 16:59:18 ----D---- C:\WINDOWS\system32\catroot2
2016-12-18 16:47:44 ----D---- C:\WINDOWS\System32
2016-12-18 16:47:44 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-12-18 09:02:32 ----RSD---- C:\WINDOWS\assembly
2016-12-17 22:50:01 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2016-12-17 22:43:50 ----D---- C:\Windows
2016-12-17 22:43:50 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-12-17 22:43:50 ----AD---- C:\Program Files (x86)\Mozilla Firefox
2016-12-17 22:42:21 ----D---- C:\WINDOWS\SYSWOW64\en-US
2016-12-17 22:42:21 ----D---- C:\WINDOWS\SysWOW64
2016-12-17 22:42:15 ----D---- C:\WINDOWS\system32\en-US
2016-12-17 22:42:13 ----D---- C:\WINDOWS\ShellExperiences
2016-12-17 22:42:13 ----D---- C:\WINDOWS\AppPatch
2016-12-17 22:42:12 ----D---- C:\WINDOWS\system32\Boot
2016-12-17 22:42:11 ----D---- C:\WINDOWS\system32\DriverStore
2016-12-17 22:42:08 ----D---- C:\WINDOWS\INF
2016-12-17 20:14:01 ----D---- C:\WINDOWS\debug
2016-12-16 23:50:03 ----D---- C:\Games
2016-12-16 22:53:42 ----RD---- C:\Program Files (x86)
2016-12-16 22:53:26 ----D---- C:\WINDOWS\Tasks
2016-12-16 20:12:43 ----HD---- C:\ProgramData
2016-12-16 15:29:36 ----D---- C:\WINDOWS\CbsTemp
2016-12-16 01:37:15 ----D---- C:\WINDOWS\system32\Macromed
2016-12-16 01:37:10 ----D---- C:\WINDOWS\SYSWOW64\Macromed
2016-12-16 01:37:09 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerInstaller.exe
2016-12-15 13:09:03 ----SHD---- C:\System Volume Information
2016-12-15 13:05:28 ----D---- C:\WINDOWS\system32\MRT
2016-12-15 12:58:24 ----AC---- C:\WINDOWS\system32\MRT.exe
2016-12-14 10:40:56 ----D---- C:\WINDOWS\SoftwareDistribution
2016-12-12 16:03:45 ----D---- C:\ProgramData\CanonIJPLM
2016-12-12 00:56:25 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-12-12 00:07:27 ----D---- C:\WINDOWS\SYSWOW64\oobe
2016-12-12 00:07:27 ----D---- C:\WINDOWS\SYSWOW64\Dism
2016-12-12 00:07:19 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2016-12-12 00:07:17 ----D---- C:\WINDOWS\system32\wbem
2016-12-12 00:07:17 ----D---- C:\WINDOWS\system32\Sysprep
2016-12-12 00:07:17 ----D---- C:\WINDOWS\system32\sr-Latn-CS
2016-12-12 00:07:17 ----D---- C:\WINDOWS\system32\oobe
2016-12-12 00:07:14 ----D---- C:\WINDOWS\system32\Dism
2016-12-12 00:07:03 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2016-12-12 00:07:03 ----D---- C:\WINDOWS\servicing
2016-12-12 00:07:02 ----D---- C:\WINDOWS\bcastdvr
2016-12-12 00:07:02 ----D---- C:\Program Files\Internet Explorer
2016-12-12 00:07:02 ----D---- C:\Program Files (x86)\Internet Explorer
2016-12-10 17:15:52 ----A---- C:\WINDOWS\system32\enrollmentapi.dll
2016-12-10 16:50:26 ----AD---- C:\Program Files (x86)\Mozilla Thunderbird
2016-12-09 11:05:51 ----D---- C:\ProgramData\McAfee
2016-12-09 10:59:53 ----D---- C:\Program Files\Common Files\McAfee
2016-12-04 19:29:35 ----D---- C:\ProgramData\tmp
2016-12-04 16:00:54 ----D---- C:\ProgramData\Package Cache
2016-11-30 21:16:52 ----RSD---- C:\WINDOWS\Fonts

File C:\WINDOWS\system32\winlogon.exe is digitally signed
File C:\WINDOWS\system32\wininit.exe is digitally signed
File C:\WINDOWS\explorer.exe is digitally signed
File C:\WINDOWS\SysWOW64\explorer.exe is digitally signed
File C:\WINDOWS\system32\svchost.exe is digitally signed
File C:\WINDOWS\SysWOW64\svchost.exe is digitally signed
File C:\WINDOWS\system32\services.exe is digitally signed
File C:\WINDOWS\system32\User32.dll is digitally signed
File C:\WINDOWS\SysWOW64\User32.dll is digitally signed
File C:\WINDOWS\system32\userinit.exe is digitally signed
File C:\WINDOWS\SysWOW64\userinit.exe is digitally signed
File C:\WINDOWS\system32\rpcss.dll is digitally signed
File C:\WINDOWS\system32\Drivers\volsnap.sys is digitally signed

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2016-09-08 74544]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2016-10-13 293352]
R0 excsd;ExpressCache Storage Filter Driver; C:\WINDOWS\system32\DRIVERS\excsd.sys [2013-01-08 112552]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-07-09 645952]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-100; C:\WINDOWS\system32\drivers\iorate.sys [2016-11-02 48992]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2016-09-08 37144]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2016-09-08 103064]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2016-09-13 969184]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2016-09-23 513632]
R1 dtsoftbus01;@oem31.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2014-08-10 283200]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2014-12-20 40344]
R1 excfs;ExpressCache File System Filter Driver; C:\WINDOWS\system32\DRIVERS\excfs.sys [2013-01-08 26024]
R2 acedrv11;acedrv11; \??\C:\WINDOWS\system32\drivers\acedrv11.sys [2010-02-24 191616]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2016-09-08 108816]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2016-09-08 163416]
R2 clreg;@%SystemRoot%\system32\drivers\registry.sys,-100; C:\WINDOWS\System32\drivers\registry.sys [2016-07-16 70144]
R3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\System32\drivers\athw8x.sys [2016-07-16 4233728]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2016-07-13 610336]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\drivers\BTHUSB.sys [2016-08-20 84992]
R3 ETD;@oem20.inf,%PS2.DeviceDesc%;ELAN Input Device; C:\WINDOWS\system32\DRIVERS\ETD.sys [2015-10-11 525512]
R3 iwdbus;@oem29.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-12-01 38896]
R3 MarvinBus;@oem24.inf,%MarvinBus.SVCDESC%;Pinnacle Marvin Bus 64; C:\WINDOWS\System32\drivers\MarvinBus64.sys [2005-09-23 261120]
R3 Ps2Kb2Hid;@oem11.inf,%Ps2Kb2Hid.SVCDESC%;PS/2 Keyboard to HID Driver; C:\WINDOWS\System32\drivers\aPs2Kb2Hid.sys [2013-11-27 26736]
R3 RTSUER;@oem25.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\WINDOWS\system32\Drivers\RtsUer.sys [2015-05-14 402960]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2016-10-05 64352]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2016-07-16 88416]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2016-07-16 18432]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2016-07-16 15360]
S3 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2016-09-08 37656]
S3 BthA2DP;@wdma_bt.inf,%BthA2DP.SvcDesc%;Bluetooth Stereo; C:\WINDOWS\system32\drivers\BthA2DP.sys [2016-09-15 168448]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2016-08-20 114176]
S3 BthHFAud;@wdma_bt.inf,%DISPLAY_NAME%;Bluetooth Hands-Free; C:\WINDOWS\System32\drivers\BthHfAud.sys [2016-07-16 37376]
S3 BthLEEnum;@BthLEEnum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\System32\drivers\BthLEEnum.sys [2016-09-15 249856]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2016-10-05 128512]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\drivers\BTHport.sys [2016-11-11 967168]
S3 ccSet_NARA;NARA Settings Manager; C:\WINDOWS\system32\drivers\NARAx64\0403000.00E\ccSetx64.sys [2012-05-26 168608]
S3 EsgScanner;EsgScanner; C:\WINDOWS\system32\DRIVERS\EsgScanner.sys [2015-12-11 22704]
S3 Hamachi;LogMeIn Hamachi Virtual Miniport); C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [2015-03-30 44296]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2016-08-06 73568]
S3 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2016-07-16 346976]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2016-07-16 2104160]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2016-07-16 33280]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2016-07-16 64512]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2016-07-16 35840]
S3 intaud_WaveExtensible;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2015-07-20 50240]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2016-07-16 120320]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2016-07-16 90624]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2016-07-16 183808]
S3 scmdisk0101;@scmdisk0101.inf,%scmdisk0101.SvcDesc%;Microsoft NVDIMM-N disk driver; C:\WINDOWS\System32\drivers\scmdisk0101.sys [2016-07-16 123904]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AGSService;Adobe Genuine Software Integrity Service; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2016-09-26 2207960]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-09-08 197128]
R2 CCDMonitorService;CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2013-02-27 2615368]
R2 CDPUserSvc_68ca3a;CDPUserSvc_68ca3a; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll"=
R2 ETDService;Elan Service; C:\Program Files\Elantech\ETDService.exe [2015-10-11 144072]
R2 ExpressCache;ExpressCache; C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe [2013-01-08 107944]
R2 FFSOpzSvc;Sleep memory optimizer; C:\Program Files\Acer\Acer Instant Service\Sleep Memory Optimizer\FFSService.exe [2012-03-12 161384]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2016-05-03 337888]
R2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [2013-06-28 84616]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
R2 NAUpdate;Nero Update; c:\Program Files (x86)\Nero\Update\NASvc.exe [2012-07-14 769432]
R2 NovaPdfServer;novaPDF Server; C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe [2015-10-13 41760]
R2 OneSyncSvc_68ca3a;Hostitel synchronizace_68ca3a; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll"=
R2 RfButtonDriverService;Dritek RF Button Command Service; C:\Windows\RfBtnSvc64.exe [2013-11-27 96880]
R3 ePowerSvc;ePower Service; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2013-03-16 662088]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2016-05-25 43696]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 PimIndexMaintenanceSvc_68ca3a;Data kontaktů_68ca3a; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll"=
R3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll"=%SystemRoot%\System32\RMapi.dll
S2 0212161482011328mcinstcleanup;McAfee Application Installer Cleanup (0212161482011328); C:\WINDOWS\TEMP\021216~1.EXE [2016-03-02 922152]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll"=%SystemRoot%\System32\CDPUserSvc.dll
S2 LavasoftTcpService;LavasoftTcpService; C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe [2016-10-12 2751760]
S2 Origin Web Helper Service;Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2016-12-21 2180624]
S3 BRSptStub;BitRaider Mini-Support Service Stub Loader; C:\ProgramData\BitRaider\BRSptStub.exe [2015-02-07 363208]
S3 DeviceFastLaneService;Device Fast-lane Service; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [2013-05-01 470056]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; %SystemRoot%\System32\svchost.exe -k Camera;"ServiceDll"=%SystemRoot%\system32\FrameServer.dll
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll"=%SystemRoot%\System32\hvhostsvc.dll
S3 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll"=%SystemRoot%\System32\irmon.dll
S3 irstrtsv;Intel(R) Rapid Start Technology Service; C:\Windows\SysWOW64\irstrtsv.exe [2012-07-19 193576]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.11.309\McCHSvc.exe [2016-03-11 293128]
S3 MessagingService_68ca3a;Služba zasílání zpráv_68ca3a; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll"=
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-01-21 30963576]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-12-15 172488]
S3 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2013-01-28 4230016]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2016-12-21 2119688]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2016-08-23 1465120]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; %SystemRoot%\System32\svchost.exe -k netsvcs;"ServiceDll"=%systemroot%\system32\Windows.SharedPC.AccountManager.dll

-----------------EOF-----------------

#4 Příspěvek od **Márty84** » 24 pro 2016 15:42

Zdravim

Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner[C?].txt ). Ten mi sem zkopirujte.

Postupujte podle navodu kolegy

vyosek píše: Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
Ulozte nejlepe na plochu

Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu

Probehne vytvoreni zalohy a nasledne prohledavani

Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Postupujte podle navodu kolegy

vyosek píše: Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize
Kód: Vybrat vše
autoclean;
autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;
Nasledne kliknete na Run Script

PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

zooh · #5 Příspěvek od **zooh** » 26 pro 2016 17:15

# AdwCleaner v6.041 - Log vytvořen 26/12/2016 v 17:06:10
# Aktualizováno dne 16/12/2016 z Malwarebytes
# Databáze : 2016-12-26.3 [Místní]
# Operační systém : Windows 10 Home (X64)
# Uživatelské jméno : Jakub - SANUV_COMP
# Spuštěno z : C:\Users\Jakub\Desktop\adwcleaner_6.041.exe
# Mod: Čištění
# Podpora : https://www.malwarebytes.com/support

***** [ Služby ] *****

***** [ Složky ] *****

***** [ Soubory ] *****

[#] Soubor smazán: C:\WINDOWS\SysNative\LavasoftTcpService64.dll
[#] Soubor smazán: C:\WINDOWS\SysWoW64\lavasofttcpservice.dll

***** [ DLL ] *****

***** [ WMI ] *****

***** [ Zástupci ] *****

***** [ Naplánované úlohy ] *****

***** [ Registry ] *****

***** [ Prohlížeče ] *****

*************************

:: "Tracing" klíče smazány
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [927 Bajty] - [26/12/2016 17:06:10]
C:\AdwCleaner\AdwCleaner[S0].txt - [11835 Bajty] - [26/12/2016 16:56:59]
C:\AdwCleaner\AdwCleaner[S1].txt - [1518 Bajty] - [26/12/2016 17:06:03]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1146 Bajty] ##########

zooh · #6 Příspěvek od **zooh** » 26 pro 2016 17:44

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.0 (12.05.2016)
Operating System: Windows 10 Home x64
Ran by Jakub (Administrator) on po 26. 12. 2016 at 17:18:56,62
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

File System: 0

Registry: 9

Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1E3A1204-A3CB-476C-9B98-22D4E0FD64AF} (Registry Key)
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{21E34A49-8B0A-476F-9013-5CEE2193F283} (Registry Key)
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{35A7FD4E-65BD-44F4-9EA3-04FEDEFAED3C} (Registry Key)
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{604969F3-C7A3-4EC5-9984-224E630FC5E7} (Registry Key)
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{65A09127-93D4-4368-B03B-971A39331FA7} (Registry Key)
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{7D3114FD-E519-4E08-A548-31BB22A3E5EC} (Registry Key)
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{896A5512-31EE-4722-B863-5AE1C3198F50} (Registry Key)
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B3FB68C4-150A-4DF4-AE45-584563A1E1AF} (Registry Key)
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EF99601D-DCAB-4977-822B-F32FD1484B84} (Registry Key)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on po 26. 12. 2016 at 17:24:37,92
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

zooh · #7 Příspěvek od **zooh** » 26 pro 2016 20:12

Zoek.exe v5.0.0.1 Updated 19-September-2016
Tool run by Jakub on po 26. 12. 2016 at 17:45:24,73.
Microsoft Windows 10 Home 10.0.14393 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Jakub\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

26. 12. 2016 17:46:05 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\AGEIA Technologies deleted successfully
C:\PROGRA~2\Lavasoft deleted successfully
C:\PROGRA~2\McAfee deleted successfully
C:\PROGRA~2\MSXML 4.0 deleted successfully
C:\PROGRA~2\R.G. Mechanics deleted successfully
C:\PROGRA~3\Canon IJ Network Tool deleted successfully
C:\PROGRA~3\Comms deleted successfully
C:\PROGRA~3\firebird deleted successfully
C:\PROGRA~3\Lavasoft deleted successfully
C:\PROGRA~3\Pinnacle Studio Plus deleted successfully
C:\PROGRA~3\SoftwareDistribution deleted successfully
C:\PROGRA~3\SPSS deleted successfully
C:\Users\Jakub\AppData\Local\ActiveSync deleted successfully
C:\Users\Jakub\AppData\Local\AION deleted successfully
C:\Users\Jakub\AppData\Local\CrashDumps deleted successfully
C:\Users\Jakub\AppData\Local\EmieSiteList deleted successfully
C:\Users\Jakub\AppData\Local\EmieUserList deleted successfully
C:\Users\Jakub\AppData\Local\GHISLER deleted successfully
C:\Users\Jakub\AppData\Local\NetworkTiles deleted successfully
C:\Users\Jakub\AppData\Local\TSVNCache deleted successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Maps deleted successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\NetworkTiles deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2566524524-4000122826-781035213-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} deleted successfully

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== FireFox Fix ======================

Deleted from C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\98fnk3g9.default\prefs.js:
user_pref("browser.startup.homepage", "www.seznam.cz");
user_pref("browser.search.defaultenginename", "YahooÂ®");
user_pref("browser.search.selectedEngine", "YahooÂ®");

Added to C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\98fnk3g9.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

Deleted from C:\Users\Jakub\AppData\Roaming\Thunderbird\Profiles\dwl51szg.default\prefs.js:

Added to C:\Users\Jakub\AppData\Roaming\Thunderbird\Profiles\dwl51szg.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

ProfilePath: C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\98fnk3g9.default

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_201626.12._1812_.backup

ProfilePath: C:\Users\Jakub\AppData\Roaming\Thunderbird\Profiles\dwl51szg.default

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_201626.12._1812_.backup

==== Batch Command(s) Run By Tool======================

Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.

==== Deleting Files \ Folders ======================

C:\PROGRA~2\AGEIA Technologies not found
C:\PROGRA~2\Lavasoft not found
C:\PROGRA~2\McAfee not found
C:\PROGRA~2\R.G. Mechanics not found
C:\Users\Jakub\AppData\Local\Lavasoft deleted
C:\PROGRA~2\DAEMON Tools Pro deleted
C:\Users\Jakub\AppData\Roaming\Factorio deleted
C:\PROGRA~2\ProtectDisc Driver Installer deleted
C:\install.exe deleted
C:\found.000 deleted
C:\Users\Jakub\AppData\Local\Unity deleted
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\LavasoftTcpService deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\lavasoft\WebCompanion deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk deleted
C:\Users\Jakub\AppData\LocalLow\Unity deleted
C:\WINDOWS\SysWow64\AI_RecycleBin deleted
"C:\Windows\Installer\5d589.msi" deleted
"C:\PROGRA~3\Package Cache" deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\98fnk3g9.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

ProfilePath: C:\Users\Jakub\AppData\Roaming\Thunderbird\Profiles\dwl51szg.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"sp@avast.com"="C:\Program Files\AVAST Software\Avast\SafePrice\FF" [08. 09. 2016 20:27]
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"web2pdfextension.15@web2pdf.adobedotcom"="C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn" [19. 02. 2016 11:06]

==== Firefox Extensions ======================

ProfilePath: C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\98fnk3g9.default
- Adobe Acrobat DC - Create PDF - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn
- Visualisateur 3D de 20-20 - %ProfilePath%\extensions\2020Player_IKEA@2020Technologies.com
- Seznam litika - %ProfilePath%\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
- Firebug - %ProfilePath%\extensions\firebug@software.joehewitt.com.xpi
- YouTube Flash Player - %ProfilePath%\extensions\jid1-HAV2inXAnQPIeA@jetpack.xpi
- Undetermined - %ProfilePath%\extensions\uBlock0@raymondhill.net.xpi
- Screengrab fix version - %ProfilePath%\extensions\{02450914-cdd9-410f-b1da-db004e18c671}.xpi

ProfilePath: C:\Users\Jakub\AppData\Roaming\Thunderbird\Profiles\dwl51szg.default
- Lightning - %ProfilePath%\extensions\{e2fda1a4-762b-4020-b5ad-a41df1933103}

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Undetermined - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi

==== Firefox Plugins ======================

Profilepath: C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\98fnk3g9.default
86C2467018027DFF6ED94F50D9CF1145 - C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1225195.dll - Shockwave for Director / Shockwave for Director
E8D38E8FB6EC88E7B0E0B4D9AC9B0725 - C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_186.dll - Shockwave Flash

==== Chromium Look ======================

Google Chrome Version: 46.0.2490.86

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
efaidnbmnnnibpcajpcglclefindmkaj - No path found[]
eofcbnmajmjmplflapaojjnihcjkigck - No path found[]
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[]

Chrome Media Router - Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm

==== Chromium Fix ======================

C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.donation-tools.org_0.localstorage deleted successfully
C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.donation-tools.org_0.localstorage-journal deleted successfully
C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage deleted successfully
C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal deleted successfully
C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_pstatic.davebestdeals.com_0.localstorage deleted successfully
C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal deleted successfully
C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.davebestdeals.com_0.localstorage deleted successfully
C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{65A09127-93D4-4368-B03B-971A39331FA7}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{65A09127-93D4-4368-B03B-971A39331FA7}] not found

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKLM and HKCU SearchScopes ======================

HKLM\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKLM\SearchScopes\{65A09127-93D4-4368-B03B-971A39331FA7} - http://www.bing.com/search?q={searchTer ... &pc=MAARJS
HKLM\Wow6432Node\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKLM\Wow6432Node\SearchScopes\{65A09127-93D4-4368-B03B-971A39331FA7} - http://www.bing.com/search?q={searchTer ... &pc=MAARJS
HKCU\SearchScopes "DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms}
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTer ... ORM=IESR02

==== Reset Google Chrome ======================

C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Web Data copy was reset successfully
C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== shortcuts on Users Desktops ======================

C:\Users\Jakub\Desktop\Play South Park The Stick of Truth.lnk - C:\Games\South Park The Stick of Truth\South Park - The Stick of Truth.exe
C:\Users\Jakub\Desktop\kubika\skse_loader.exe – zástupce.lnk -

==== shortcuts in Users Start Menu ======================

C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\GOM Player.lnk - C:\Program Files (x86)\GRETECH\GomPlayer\GOM.exe

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk - C:\WINDOWS\Installer\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}\SC_Reader.ico
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk - C:\WINDOWS\Installer\{AC76BA86-1033-FFFF-7760-0C0F074E4100}\_SC_Acrobat.ico
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller DC.lnk - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrodist.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\core\PDapp.exe --appletID=CCM_UI --appletVersion=1.0 --workflow=CCM_workflow_launch
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bontia Studio.lnk - C:\Program Files (x86)\Exec\Bontia Studio\Bontia Studio 64.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk - C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk - C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk - C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\True Key.lnk - C:\Program Files\Intel Security\True Key\application\truekey.exe --open-source=startmenu
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk - C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\3GP to AVI Converter.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\3gptoavi2.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\abcAVI Tag Editor.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\abcAVI Tag Editor\avi_tags.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\ACE Mega CoDecS Pack DashBoard.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\DashBoard\DashBoard.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Asf to Matroska Recorder.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\asf2mkv.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\AVI CoDecS.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\AVI CoDecS\AVIcodec.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\AVIPreview.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\avipreview.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\BSPlayer.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\BSPlayer\bsplayer.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\CDSpeed.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\CDSpeed.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\DirectShow Filter Enumerator.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\sysenum.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\DivX Fix.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\DivX Fix\divfix.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\DriveSpeed.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\drivespeed.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\DVD Identifier.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\DVD Identifier.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\GraphEdit.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\graphedit.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\GSpot.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\GSpot\gspot.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\InfoTool.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\infotool.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\LAMEdropXPd.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\lamedropxpd.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Media Player Classic.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Media Player Classic\mplayerc.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\NET Player.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\netplayer.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\NET Server.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\netserver.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\NonExistent CoDecS-FilterS Remover.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\Remover.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Validator.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\validator.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\VFAPI Reade CoDec.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\vfapiconv.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\VIDCAP.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\VIDCAP.EXE
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Windows Media Diagnostic Tool.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\WMDiag.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\WinDV.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\WinDV.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\ConfiguratorS\3ivx Configurator.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\3ivxconfig.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\ConfiguratorS\DivX 5 Decoder Properties.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\SystemS\DivX\config.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\ConfiguratorS\Intervideo Switch.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\switch.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\ConfiguratorS\Ligos MPEG Configuration Utility.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\lsxmpgcfg.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\ConfiguratorS\MPEG-4 CoDec Configure.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\mp4def.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\ConfiguratorS\ReClock Config.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\reclock config.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\ConfiguratorS\StartUp.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\startup.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\ConfiguratorS\VSS Video CoDec Settings.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\SystemS\Vanguard Software Sollutions\vssconf.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\ConfiguratorS\XviD Decoder Configurator.lnk - C:\Windows\System32\rundll32.exe "C:\Program Files (x86)\ACE Mega CoDecS Pack\SystemS\XviD\xvid.ax",Configure
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\ConfiguratorS\XviD Encoder Configurator.lnk - C:\Windows\System32\rundll32.exe "C:\Program Files (x86)\ACE Mega CoDecS Pack\SystemS\XviD\xvidvfw.dll",Configure
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\DocumentationS\ACE Mega CoDecS Pack - License.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\DocumentationS\license.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\DocumentationS\ACE Mega CoDecS Pack - Licensz.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\DocumentationS\licensz.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\DocumentationS\ACE Mega CoDecS Pack - Olvass El.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\DocumentationS\olvassel.html
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\DocumentationS\ACE Mega CoDecS Pack - Read Me.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\DocumentationS\readme.html
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\3ivx.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\3ivx.htm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\abcAVI Tag Editor - History.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\abcavi tag editor - history.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\abcAVI Tag Editor - Language.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\abcAVI Tag Editor\language.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\abcAVI Tag Editor - Read Me.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\abcavi tag editor.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\abcAVI Tag Editor.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\abcAVI Tag Editor\abcavi.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\AC3 Filter.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\AC3 Filter\ac3filter_eng.html
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\acmprop.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\acmprop.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\ASFView.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\asfview.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\AVI CoDecS.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\avicodec.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\AVI Frame Rate Changer.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\avifrate.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\AVIChop.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\avichop.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\AVIDeFreezer.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\AVI DeFreezer\AVIDeFreezer.htm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\AVIPreview - ChangeLog.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\avipreview - changelog.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\AVIPreview - Read Me.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\avipreview - readme.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\AVIzlib and AVImszh.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\loss-less codec library.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\CamStudio Lossless CoDec.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\camstudio lossless codec.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\DivX 3.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\divx scene-detect patch.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\DivX Documentation.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\divx.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\DivX Read Me.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\divx.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\DivXG400.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\divxg400.htm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\DXMan.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\dxman.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\Elecard MPEG2 Video Decoder - ReadMe.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\elecard mpeg2 video decoder - readme.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\Elecard MPEG2 Video Decoder.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\elecard mpeg2 video decoder.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\GraphEdit - Read Me.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\graphedit.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\GraphEdit.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\graphedit.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\Huffyuv - Read Me.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\Huffyuv Lossless CoDec\readme.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\Huffyuv.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\Huffyuv Lossless CoDec\huffyuv.html
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\MatrixMixer.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\MatrixMixer\matrix_mixer_eng.html
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\MiniCalc.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\minicalc.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\Morgan Multimedia MJPEG.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\Morgan Multimedia MJPEG\install.htm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\OGGDec.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\Vorbis Tools\oggdec.html
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\OGGEnc.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\Vorbis Tools\oggenc.html
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\OGGInfo.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\Vorbis Tools\ogginfo.html
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\OGGMuX - ChangeLog.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\OGGMuX\changelog.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\OGGMuX.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\OGGMuX\releasenotes.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\QuickTime.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\quicktime.wri
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\readme.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\DivX Fix\readme.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\ReClock - ChangeLog.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\ReClock\changelog.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\ReClock.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\ReClock\readme.htm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\Rududu CoDec.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\rududucodec.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\StatsReader.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\statsreader.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\TrueMotion CoDec.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\truemotion.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\Tweak Windows User Interface.lnk - C:\Windows\System32\tweakui.hlp
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\UDP Streaming.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\udpstreaming.doc
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\VCut.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\Vorbis Tools\vcut.html
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\VFAPI Reader CoDec.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\vfapi reader codec.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\Video Server Wrapper Audio-Video CoDec.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\aviwrapper.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\Vorbis ACM CoDec.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\vorbisacm.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\VorbisComment.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\Vorbis Tools\vorbiscomment.html
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\VS Filter - Read Me.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\VS Filter\readme1st.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\VS Filter.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\VS Filter\dvobsub.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\WinDivX Decoder.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\windivx decoder.doc
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\XviD - Documentation.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\xvid.pdf
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\Read MeS\XviD.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Read MeS\xvid.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\UnInstall\UnInstall ACE Mega CoDecS Pack - Professional Edition.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\unins000.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\UtilitieS\ACMProp.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\acmprop.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\UtilitieS\ASFView.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\asfview.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\UtilitieS\AVI FourCC Code Changer.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\avic.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\UtilitieS\AVI Frame Rate Changer.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\avifrate.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\UtilitieS\AVI Header Changer.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\avihdr.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\UtilitieS\AVIChop.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\avichop.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\UtilitieS\DXMan.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\dxman.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\UtilitieS\File Merger.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\filemerger.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\UtilitieS\MiniCalc.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\minicalc.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\UtilitieS\Ogg File Cutter.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\oggcut.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\UtilitieS\OGGdropXPd.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\oggdropxpd.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\UtilitieS\OGGMuX.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\oggmux.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\UtilitieS\StatsReader.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\statsreader.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\UtilitieS\VS Conv.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\vsconv.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACE Mega CoDecS Pack\UtilitieS\VS Rip.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\UtilitieS\vsrip.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Codec Pack\Nastaveni AC3.lnk - C:\Windows\System32\ac3filter.cpl
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Codec Pack\Nastaveni DivX.lnk - C:\Program Files (x86)\Codec Pack - All In 1\DivXconfig.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Codec Pack\Nastaveni DVobSub.lnk - C:\Windows\System32\rundll32.exe DVobSub.ax,DirectVobSub
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Codec Pack\Nastaveni XviD.lnk - C:\Windows\System32\rundll32.exe xvid.ax,Configure
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Codec Pack\Web\CodecPack (mirror).lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Codec Pack\Web\CodecPack.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Codec Pack\Web\Diskusni forum.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dm CEWE fotosvet\CEWE FOTOIMPORTER.lnk - C:\Program Files\dm\dm CEWE fotosvet\CEWE FOTOIMPORTER.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dm CEWE fotosvet\CEWE prezentace.lnk - C:\Program Files\dm\dm CEWE fotosvet\CEWE prezentace.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dm CEWE fotosvet\dm CEWE fotosvet.lnk - C:\Program Files\dm\dm CEWE fotosvet\dm CEWE fotosvet.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dm CEWE fotosvet\Odinstalovat dm CEWE fotosvet.lnk - C:\Program Files (x86)\dm\dm CEWE fotosvet\uninstall.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOM Player\GOM Player.lnk - C:\Program Files (x86)\GRETECH\GomPlayer\GOM.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOM Player\Uninstall.lnk - C:\Program Files (x86)\GRETECH\GomPlayer\Uninstall.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\About Java.lnk - C:\Program Files (x86)\Java\jre1.8.0_111\bin\javacpl.exe -tab about
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Check For Updates.lnk - C:\Program Files (x86)\Java\jre1.8.0_111\bin\javacpl.exe -tab update
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Configure Java.lnk - C:\Program Files (x86)\Java\jre1.8.0_111\bin\javacpl.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk - C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\Silverlight.Configuration.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pinnacle Studio 15\Pinnacle Studio 12 Nápověda.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pinnacle Studio 15\Pinnacle Studio 15 Instrukce.lnk - C:\Program Files (x86)\Pinnacle\Studio 15\studio_cz.pdf
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pinnacle Studio 15\Pinnacle Studio 15.lnk - C:\WINDOWS\Installer\{1362E602-9625-42D3-B57F-CDA9D26F9DA8}\Studio.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pinnacle Studio 15\Průvodce.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pinnacle Studio 15\Soubor readme.lnk - C:\WINDOWS\Installer\{1362E602-9625-42D3-B57F-CDA9D26F9DA8}\SC_ReadMe.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pinnacle Studio 15\Nástroje\AM Capture.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pinnacle Studio 15\Nástroje\Check 3D Server.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pinnacle Studio 15\Nástroje\Přenos obsahu.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Studio Plugins\Remove Knoll Light Factory EZ Studio 15.lnk - C:\Windows\unvise32.exe C:\PROGRA~2\Pinnacle\STUDIO~1\Plugins\RTFx\KLFEZS~1.LOG
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Studio Plugins\Remove Red Giant ToonIt Studio 15.lnk - C:\Windows\unvise32.exe C:\PROGRA~2\Pinnacle\STUDIO~1\Plugins\RTFx\RGTOON~1.LOG
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live\Windows Live Writer.lnk - C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriter.exe

==== shortcuts in Quick Launch ======================

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Jakub\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\ACE Mega CoDecS Pack DashBoard.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\DashBoard\DashBoard.exe
C:\Users\Jakub\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\AION.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://boost.games724.com/click/3a9b3d0 ... tDtCyBtCtD
C:\Users\Jakub\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BS.Player FREE.lnk - C:\Program Files (x86)\Webteh\BSPlayer\bsplayer.exe
C:\Users\Jakub\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BSPlayer.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\BSPlayer\bsplayer.exe
C:\Users\Jakub\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\GOM Player.lnk - C:\Program Files (x86)\GRETECH\GomPlayer\GOM.exe
C:\Users\Jakub\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Jakub\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Jakub\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Media Player Classic.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Media Player Classic\mplayerc.exe
C:\Users\Jakub\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PSPad.lnk - C:\Program Files (x86)\PSPad editor\PSPad.exe
C:\Users\Jakub\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Jakub\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\WarThunder.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Jakub\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Winamp.lnk - C:\Program Files (x86)\Winamp\winamp.exe
C:\Users\Jakub\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Jakub\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7111c0ce965b7246\Battle.net.lnk - C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe
C:\Users\Jakub\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Depth clean up junk files.lnk - C:\Program Files (x86)\Elex-tech\YAC\iStart.exe -divertop -param0=2 -param1=0 -param2=1
C:\Users\Jakub\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CS5.lnk - C:\Users\Jakub\Desktop\Adobe White Rabbit (Photoshop CS5) Portable\Photoshop.exe
C:\Users\Jakub\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\Jakub\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome (2).lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Jakub\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\Jakub\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Thunderbird.lnk - C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe

==== shortcuts After Repair ======================

C:\Users\Jakub\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\AION.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\203E62EEA6789D84098513925E9B9999 deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki deleted successfully
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{fd28709e-9d92-48a9-ad34-53e2f7b400b0} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{EE26E302-876A-48D9-9058-3129E5B99999} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\203E62EEA6789D84098513925E9B9999 deleted successfully

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jakub\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Jakub\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Jakub\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\Jakub\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

C:\Users\Jakub\AppData\Local\Mozilla\Firefox\Profiles\98fnk3g9.default\cache2 emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=168 folders=103 386291027 bytes)

==== Empty Temp Folders ======================

C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\Jakub\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on po 26. 12. 2016 at 20:07:20,78 ======================

#8 Příspěvek od **Márty84** » 27 pro 2016 20:59

Nastala nejaka zmena?

Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu (cili Vlastni sken vsech disku) http://forum.viry.cz/viewtopic.php?f=29&t=144868 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

zooh · #9 Příspěvek od **zooh** » 03 led 2017 21:16

Ano, nikde už snad nic nevyskakuje. Akorát mám problém s MBAM, od chvíle co jsem jej nainstalovala se mi neustále seká počítač. Nechala jsem ho běžet, nic jsem na pc nedělala a stejně se seknul a 3/4 hodiny se nehnul. Musela jsem restartovat na tvrdo. Zkusím ho nechat běžet ještě přes noc ale nevim nevim.

zooh · #10 Příspěvek od **zooh** » 13 led 2017 11:48

Tak asi nic. Konečně se mi povedlo přes noc Malvarebytes pustit, ale když dám uložit výsledky tak je v souboru jen
Malwarebytes
http://www.malwarebytes.com
a přitom to píše 13 identifikovaných hrozeb.

Přikládám aspon printscreen.

: jhijkůl.jpg (143.29 KiB) Zobrazeno 3336 x

#11 Příspěvek od **Márty84** » 06 bře 2017 11:28

Zdravim

Jak jsem mel uvedeno v podpisu, z duvodu stehovani a naslednych zmen a vyrizovani jsem byl dlouho mimo. Predpokladam, ze problem jiz neni aktualni. Pokud nahodou ano, zalozte nove tema, at jsou logy aktualni

Tady

Mejte se krasne

VIRY.CZ

V chromu vyskakují okna

V chromu vyskakují okna

Re: V chromu vyskakují okna

Re: V chromu vyskakují okna

Re: V chromu vyskakují okna

Re: V chromu vyskakují okna

Re: V chromu vyskakují okna

Re: V chromu vyskakují okna

Re: V chromu vyskakují okna

Re: V chromu vyskakují okna

Re: V chromu vyskakují okna

Re: V chromu vyskakují okna