VIRY.CZ

Zdravím, potřeboval bych vědět jestli je OS čistý, předem děkuji "mému rádci"
Logfile of random's system information tool 1.09 (written by random/random)
Run by Vlasta at 2013-11-26 22:31:14
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 367 GB (81%) free of 455 GB
Total RAM: 3996 MB (40% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:31:41, on 26.11.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16736)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Winamp\winamp.exe
C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Vlasta.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?ptr=100&crg=3. ... B3CCCAD611}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?ptr=100&crg=3. ... B3CCCAD611}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Kooperativa - PDF Server.lnk = C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{1C3DF2CB-8661-4301-8BAC-4CCF83E26FFE}: NameServer =
O17 - HKLM\System\CCS\Services\Tcpip\..\{3385A54F-82E2-43CE-9C5A-E94B3A76D460}: NameServer =
O17 - HKLM\System\CCS\Services\Tcpip\..\{49BF7D53-2ABC-4DFA-80C2-C42FB13A26B5}: NameServer =
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: eISIS PostgreSQL Database Server (eISISPostgreSQL) - PostgreSQL Global Development Group - c:\eISIS\servers\postgresql\bin\pg_ctl.exe
O23 - Service: eISIS Tomcat (eISISTomcat) - Apache Software Foundation - c:\eISIS\servers\tomcat\bin\tomcat5.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - The Firebird Project - C:\Program Files (x86)\Firebird\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - The Firebird Project - C:\Program Files (x86)\Firebird\bin\fbserver.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10650 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
"C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe"
C:\Windows\system32\svchost.exe -k apphost
c:\eISIS\servers\postgresql\bin\pg_ctl.exe runservice -N eISISPostgreSQL -D c:\eISIS\data\db\data"
c:\eISIS\servers\tomcat\bin\tomcat5.exe //RS//eISISTomcat
c:/eISIS/servers/postgresql/bin/postgres.exe -D "c:/eISIS/data/db/data"
\??\C:\Windows\system32\conhost.exe "-1436232666424210336-1493154264-21257925071689163615-75329218-1560678133-2009788137
\??\C:\Windows\system32\conhost.exe "1029799667171275123-1092854382-2136835007131028624019690144011508613815766388624
"C:\Program Files (x86)\Firebird\bin\fbguard.exe" -s
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe"
"c:/eISIS/servers/postgresql/bin/postgres.exe" "--forkboot" "792" "-x3" "-y" "template1"
"c:/eISIS/servers/postgresql/bin/postgres.exe" "--forkcol" "800"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
C:\Windows\SysWOW64\svchost.exe -k MbnExt
"C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k iissvcs
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2208
"c:/eISIS/servers/postgresql/bin/postgres.exe" "--forkbackend" "812"
"c:/eISIS/servers/postgresql/bin/postgres.exe" "--forkbackend" "808"
taskeng.exe {2319C899-480D-476F-B9D5-C344FEF4F8EB}
"C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe"
"c:/eISIS/servers/postgresql/bin/postgres.exe" "--forkbackend" "828"
"c:/eISIS/servers/postgresql/bin/postgres.exe" "--forkbackend" "816"
"C:\Program Files (x86)\Firebird\bin\fbserver.exe" -s
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
taskmgr.exe /2
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3796.0.620276385\998070076" --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,3,12,22 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x0106 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2653 --ignored=" --type=renderer " /prefetch:822062411
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group1 pct:25 stable:r4 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-1-Percent/group_30/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --renderer-print-preview --instant-process --disable-html-notifications --disable-accelerated-video-decode --channel="3796.1.91740011\1271159785" /prefetch:673131151
"C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group1 pct:25 stable:r4 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-1-Percent/group_30/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="3796.2.1011439173\209987921" /prefetch:673131151
"C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group1 pct:25 stable:r4 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-1-Percent/group_30/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="3796.3.396980719\1497915392" /prefetch:673131151
"C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group1 pct:25 stable:r4 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-1-Percent/group_30/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="3796.4.1752824568\2111580809" /prefetch:673131151
"C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group1 pct:25 stable:r4 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-1-Percent/group_30/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="3796.5.1770368763\1422597964" /prefetch:673131151
"C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group1 pct:25 stable:r4 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-1-Percent/group_30/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="3796.6.2085685898\1570407999" /prefetch:673131151
"C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group1 pct:25 stable:r4 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-1-Percent/group_30/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="3796.7.1580485019\1898438497" /prefetch:673131151
"C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group1 pct:25 stable:r4 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-1-Percent/group_30/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="3796.8.1451959698\2120703669" /prefetch:673131151
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group1 pct:25 stable:r4 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-1-Percent/group_30/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="3796.17.440749527\1731335606" /prefetch:673131151
"C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="3796.18.1754159307\87211923" --ppapi-flash-args --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE"
"taskhost.exe"
"C:\Program Files (x86)\Winamp\winamp.exe" "C:\Users\Vlasta\Downloads\tpč.mp3"
"C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group1 pct:25 stable:r4 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-1-Percent/group_30/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="3796.28.948860082\358373803" /prefetch:673131151
"C:\Users\Vlasta\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1557535924-674888761-1873309798-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1557535924-674888761-1873309798-1000UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Vlasta\AppData\Roaming\Mozilla\Firefox\Profiles\2gcootby.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.8.800.168 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0]
"Description"=WildTangent Games App Presence Detector Plugin
"Path"=C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.8.800.168 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.9.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll


C:\Users\Vlasta\AppData\Roaming\Mozilla\Firefox\Profiles\2gcootby.default\extensions\
{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-11-24 537576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-11-24 193512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2012-02-13 6463592]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2013-10-23 1266912]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-02-24 2885904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]
C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2012-01-05 75624]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Vlasta\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-10 116648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
C:\Windows\system32\hkcmd.exe [2012-02-21 398616]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Quick Launch]
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [2012-03-05 578944]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPConnectionManager]
C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [2011-09-13 103992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPOSD]
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [2011-08-19 379960]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
C:\Windows\system32\igfxtray.exe [2012-02-21 170264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDF Complete]
C:\Program Files (x86)\PDF Complete\pdfsty.exe [2012-02-19 684024]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
C:\Windows\system32\igfxpers.exe [2012-02-21 440600]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SetDefault]
C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe [2011-12-19 44880]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Vlasta^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
C:\PROGRA~2\MICROS~1\Office12\ONENOTEM.EXE [2009-02-26 97680]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
""= []

C:\Users\Vlasta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Kooperativa - PDF Server.lnk - C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-02-14 430080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-11-26 22:22:06 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2013-11-26 22:22:06 ----D---- C:\Program Files\SUPERAntiSpyware
2013-11-26 22:09:40 ----D---- C:\Users\Vlasta\AppData\Roaming\Runscanner.net
2013-11-26 21:44:43 ----SHD---- C:\Config.Msi
2013-11-26 21:44:35 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-26 21:44:35 ----A---- C:\Windows\system32\drivers\mbam.sys
2013-11-26 20:05:28 ----D---- C:\ProgramData\Auslogics
2013-11-26 20:05:23 ----D---- C:\Program Files (x86)\Auslogics
2013-11-26 19:49:45 ----D---- C:\Users\Vlasta\AppData\Roaming\BitTorrent
2013-11-16 15:32:41 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-11-13 15:43:53 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-11-13 15:43:52 ----A---- C:\Windows\system32\ieui.dll
2013-11-13 15:43:51 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-11-13 15:43:51 ----A---- C:\Windows\system32\iesetup.dll
2013-11-13 15:43:51 ----A---- C:\Windows\system32\iernonce.dll
2013-11-13 15:43:50 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-11-13 15:43:50 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-11-13 15:43:50 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-11-13 15:43:50 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-11-13 15:43:50 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-13 15:43:50 ----A---- C:\Windows\system32\iesysprep.dll
2013-11-13 15:43:50 ----A---- C:\Windows\system32\ie4uinit.exe
2013-11-13 15:43:49 ----A---- C:\Windows\system32\iertutil.dll
2013-11-13 15:43:48 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-11-13 15:43:48 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-11-13 15:43:48 ----A---- C:\Windows\system32\msfeeds.dll
2013-11-13 15:43:48 ----A---- C:\Windows\system32\jscript.dll
2013-11-13 15:43:47 ----A---- C:\Windows\system32\jscript9.dll
2013-11-13 15:43:46 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-11-13 15:43:46 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-11-13 15:43:45 ----A---- C:\Windows\system32\urlmon.dll
2013-11-13 15:43:44 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-11-13 15:43:44 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-11-13 15:43:44 ----A---- C:\Windows\system32\wininet.dll
2013-11-13 15:43:44 ----A---- C:\Windows\system32\jsproxy.dll
2013-11-13 15:43:43 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-11-13 15:43:41 ----A---- C:\Windows\system32\mshtml.dll
2013-11-13 15:43:41 ----A---- C:\Windows\system32\ieframe.dll
2013-11-13 15:43:38 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-11-13 07:35:52 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2013-11-13 07:35:52 ----A---- C:\Windows\system32\crypt32.dll
2013-11-13 07:35:49 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2013-11-13 07:35:49 ----A---- C:\Windows\SYSWOW64\credui.dll
2013-11-13 07:35:49 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-11-13 07:35:49 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-13 07:35:49 ----A---- C:\Windows\system32\credui.dll
2013-11-13 07:35:49 ----A---- C:\Windows\system32\authui.dll
2013-11-13 07:35:44 ----A---- C:\Windows\system32\drivers\afd.sys
2013-11-13 07:35:43 ----A---- C:\Windows\SYSWOW64\schannel.dll
2013-11-13 07:35:43 ----A---- C:\Windows\system32\sspicli.dll
2013-11-13 07:35:43 ----A---- C:\Windows\system32\schannel.dll
2013-11-13 07:35:43 ----A---- C:\Windows\system32\lsasrv.dll
2013-11-13 07:35:43 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-11-13 07:35:43 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2013-11-13 07:35:43 ----A---- C:\Windows\system32\drivers\cng.sys
2013-11-13 07:35:42 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2013-11-13 07:35:42 ----A---- C:\Windows\SYSWOW64\secur32.dll
2013-11-13 07:35:42 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2013-11-13 07:35:42 ----A---- C:\Windows\system32\sspisrv.dll
2013-11-13 07:35:42 ----A---- C:\Windows\system32\secur32.dll
2013-11-13 07:35:42 ----A---- C:\Windows\system32\ncrypt.dll
2013-11-13 07:35:42 ----A---- C:\Windows\system32\lsass.exe
2013-11-13 07:35:40 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2013-11-13 07:35:40 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2013-11-13 07:35:40 ----A---- C:\Windows\system32\nshwfp.dll
2013-11-13 07:35:40 ----A---- C:\Windows\system32\IKEEXT.DLL
2013-11-13 07:35:40 ----A---- C:\Windows\system32\gdi32.dll
2013-11-13 07:35:40 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 07:35:39 ----A---- C:\Windows\SYSWOW64\nshwfp.dll

======List of files/folders modified in the last 1 month======

2013-11-26 22:31:40 ----D---- C:\Program Files\trend micro
2013-11-26 22:30:09 ----D---- C:\Windows\Temp
2013-11-26 22:26:59 ----D---- C:\Windows\inf
2013-11-26 22:22:20 ----HD---- C:\ProgramData
2013-11-26 22:22:06 ----RD---- C:\Program Files
2013-11-26 22:18:43 ----D---- C:\Windows\system32\config
2013-11-26 21:55:46 ----D---- C:\ProgramData\VirtualWifiRouter
2013-11-26 21:51:35 ----SHD---- C:\Windows\Installer
2013-11-26 21:51:35 ----D---- C:\Windows
2013-11-26 21:50:42 ----SHD---- C:\System Volume Information
2013-11-26 21:48:41 ----D---- C:\Program Files (x86)\Hewlett-Packard
2013-11-26 21:48:37 ----D---- C:\ProgramData\Hewlett-Packard
2013-11-26 21:48:35 ----D---- C:\Windows\Help
2013-11-26 21:48:32 ----D---- C:\Windows\winsxs
2013-11-26 21:46:40 ----RSD---- C:\Windows\assembly
2013-11-26 21:44:35 ----RD---- C:\Program Files (x86)
2013-11-26 21:44:35 ----D---- C:\Windows\system32\drivers
2013-11-26 21:42:12 ----D---- C:\Users\Vlasta\AppData\Roaming\Seznam.cz
2013-11-26 21:41:52 ----D---- C:\Windows\Prefetch
2013-11-26 21:41:52 ----D---- C:\Program Files (x86)\Seznam.cz
2013-11-26 21:36:49 ----A---- C:\Windows\SYSWOW64\log.txt
2013-11-26 20:28:10 ----D---- C:\Users\Vlasta\AppData\Roaming\TeamViewer
2013-11-26 20:06:46 ----D---- C:\Windows\Tasks
2013-11-26 20:06:46 ----D---- C:\Windows\system32\Tasks
2013-11-26 19:49:03 ----D---- C:\Users\Vlasta\AppData\Roaming\Winamp
2013-11-26 19:48:51 ----D---- C:\Windows\Panther
2013-11-26 19:48:51 ----D---- C:\Windows\ModemLogs
2013-11-26 19:48:50 ----D---- C:\Windows\Minidump
2013-11-26 19:48:50 ----D---- C:\Windows\Logs
2013-11-26 19:48:50 ----D---- C:\Windows\debug
2013-11-26 19:34:15 ----D---- C:\Program Files\CCleaner
2013-11-25 20:33:13 ----D---- C:\Windows\System32
2013-11-25 20:33:13 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-11-24 16:53:05 ----A---- C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-11-24 16:35:29 ----D---- C:\ll
2013-11-19 15:59:40 ----D---- C:\Windows\system32\catroot
2013-11-19 15:59:17 ----D---- C:\Program Files\Microsoft Security Client
2013-11-19 15:59:16 ----D---- C:\Program Files (x86)\Microsoft Security Client
2013-11-19 15:58:45 ----D---- C:\Windows\system32\catroot2
2013-11-19 11:21:41 ----N---- C:\Windows\system32\MpSigStub.exe
2013-11-18 11:49:41 ----D---- C:\Windows\rescache
2013-11-18 07:21:39 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-14 07:43:04 ----D---- C:\Windows\SysWOW64
2013-11-14 07:43:04 ----D---- C:\Program Files (x86)\Internet Explorer
2013-11-14 07:43:03 ----D---- C:\Program Files\Internet Explorer
2013-11-14 07:43:02 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-11-14 07:43:02 ----D---- C:\Windows\system32\cs-CZ
2013-11-13 15:43:37 ----D---- C:\ProgramData\Microsoft Help
2013-11-13 15:42:58 ----D---- C:\Windows\system32\MRT
2013-11-13 15:40:22 ----A---- C:\Windows\system32\MRT.exe
2013-11-13 07:28:06 ----D---- C:\Program Files (x86)\T-Mobile

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2011-11-29 568600]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-09-27 248240]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2012-11-23 560184]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-09-27 134944]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys [2010-07-28 31088]
R3 huawei_enumerator;huawei_enumerator; C:\Windows\system32\DRIVERS\ew_jubusenum.sys [2012-04-23 90112]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-02-14 14692224]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-02-22 4756200]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2011-12-06 331264]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\drivers\HECIx64.sys [2011-11-10 60184]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2011-11-14 1813056]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2012-01-17 675432]
R3 SmbDrv;SmbDrv; C:\Windows\system32\drivers\Smb_driver.sys [2012-02-24 21264]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\drivers\SynTP.sys [2012-02-24 425232]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
S3 Axtmvflt;Axesstel USB Filter Service; C:\Windows\system32\DRIVERS\Axtmvflt.sys [2007-03-26 6144]
S3 Axtmvmdm;Axesstel USB Modem; C:\Windows\system32\DRIVERS\Axtmvmdm.sys [2007-03-26 54272]
S3 Axtmvprt;Axesstel Diagnostic Port; C:\Windows\System32\Drivers\Axtmvprt.sys [2007-03-26 52224]
S3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2009-06-10 1311232]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device; C:\Windows\system32\DRIVERS\ew_hwusbdev.sys [2010-07-27 117248]
S3 ew_usbenumfilter;huawei_CompositeFilter; C:\Windows\system32\DRIVERS\ew_usbenumfilter.sys [2010-03-20 13952]
S3 huawei_cdcacm;huawei_cdcacm; C:\Windows\system32\DRIVERS\ew_jucdcacm.sys [2012-04-23 104448]
S3 huawei_ext_ctrl;huawei_ext_ctrl; C:\Windows\system32\DRIVERS\ew_juextctrl.sys [2012-04-23 30720]
S3 huawei_wwanecm;huawei_wwanecm; C:\Windows\system32\DRIVERS\ew_juwwanecm.sys [2012-04-23 238080]
S3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2013-04-04 25928]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x64.sys [2009-06-10 408960]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 pwdrvio;pwdrvio; \??\C:\Windows\syswow64\pwdrvio.sys []
S3 pwdspio;pwdspio; \??\C:\Windows\syswow64\pwdspio.sys []
S3 RSP2STOR;Realtek PCIE CardReader Driver - P2; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [2011-10-27 259688]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 127488]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 18944]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 161280]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 42496]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2013-10-10 144152]
R2 AERTFilters;Andrea RT Filters Service; C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe [2009-11-18 98208]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 eISISPostgreSQL;eISIS PostgreSQL Database Server; c:\eISIS\servers\postgresql\bin\pg_ctl.exe [2012-09-27 79948]
R2 eISISTomcat;eISIS Tomcat; c:\eISIS\servers\tomcat\bin\tomcat5.exe [2012-09-27 57344]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance; C:\Program Files (x86)\Firebird\bin\fbguard.exe [2007-12-12 65536]
R2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2012-03-05 35200]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-11-29 13592]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-02-02 628448]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-02-08 161560]
R2 MbnExt;Mobile Broadband Extension Service; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-10-23 23808]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance; C:\Program Files (x86)\Firebird\bin\fbserver.exe [2007-12-12 1531989]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 348376]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]
S2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376]
S2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-02-08 363800]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-02-21 276248]
S3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2012-08-10 1001376]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-11-16 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-11-12 1255736]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
S4 AxAutoMntSrv;Alcohol Virtual Drive Auto-mount Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2012-01-05 75624]
S4 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S4 hpCMSrv;HP Connection Manager 4 Service; C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [2011-09-13 1098296]
S4 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-02-08 277784]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 pdfcDispatcher;PDF Document Manager; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [2012-02-19 1134584]
S4 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------

Zdravim

Neeejni cisty, tak jej uklidime

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

• Ulozte nejlepe na plochu
• Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
• Probehne vytvoreni zalohy a nasledne prohledavani
• Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by Vlasta on Łt 26.11.2013 at 23:24:17,66
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-1557535924-674888761-1873309798-1000\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\bi
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\im
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1557535924-674888761-1873309798-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\ytd video downloader"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader"
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{06979EC2-1D35-4D74-AA9A-86654935D655}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{0789DD3D-8523-4609-87CB-7496D290E2EA}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{0AE6D869-2DD3-44DF-8181-C37820AC3558}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{0D6AA6EE-A9F6-4654-AB04-9B484FBFC4EB}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{0DA32364-A186-475F-9BAE-287447ED263B}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{10E057DA-81A2-4540-8BFB-30F5654D8739}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{1C9929A7-FC4D-41D3-8CEF-7E4FA96B2846}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{1D36B386-F1EA-4B9A-BF37-0DF90A8898EB}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{1D6F04E1-2EA3-41D4-9A69-81FD45EA1C39}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{20FE66B2-01DC-456A-B311-B2F7B88D767A}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{210EC563-530B-4004-A755-0F6A8E250289}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{23E63B21-1289-4A3D-A89F-D9E0C02D1EA8}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{23EB65C1-5F87-4F76-A35C-0FC0713129AC}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{26B3DE80-CD70-49E1-BBA4-EF806C88ADC2}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{27B8F4DC-B8C2-495F-B95B-87489DA0EE60}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{2AB369A5-83A4-4D1D-8CDC-2921C5FBB9F1}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{2B2876CE-0E38-48F5-BFBF-FA54190EEC5B}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{2CBC40EC-D47E-4923-8B4D-62AF3E3FA51D}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{2FBEAA16-5796-403A-B438-BDA0563F91B2}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{34831B84-C008-43AF-BA27-9792D408D195}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{355BB375-D000-4AD1-B4E9-1B098203144E}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{36DE88E0-FF64-4420-9F81-A1161252A678}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{40CF99F9-430F-4F4F-85CB-8B74C38A6E74}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{4762D1CE-5402-451F-9667-1BF67BD4FD2D}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{47F09E3B-90A9-4B44-8280-79828CBA3AE3}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{4C55081F-79EF-4545-8015-C3F70F2FBD4D}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{4D9DC068-3FA8-46EA-B41B-F279B78C5270}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{4F3E1FDD-D9A6-4B20-BB07-C19377255B97}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{50A442E4-E84D-407E-9A75-EE509555B306}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{50F17875-F811-4B13-A8EE-18F453E7C2B2}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{56BD1100-8C6C-45E2-B973-6D41C27E9938}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{58EF3B36-5E70-4CD8-9809-038E18C97B3C}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{592A46C4-5261-424C-98BE-63D99589E2F4}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{5B6E532C-6D96-49E0-8D3D-8634F4CFCB37}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{5E73D53F-1734-4D8D-9580-E1A1D46921DB}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{5EE27EF2-91B5-47ED-8E8D-F96B7E49C482}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{5F53FF5A-619B-470A-A8E0-D3B8FB213363}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{615C4BD5-F2E3-47BE-9220-1D6AFD88484A}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{68760FA9-E5C5-41B0-A91D-B9801C34617B}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{6C2A97BA-DD51-4091-BD93-D9C843C9B25D}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{6F7630A7-E188-4600-B7F3-E95D7E459B53}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{761BA1C2-67EA-4C29-A0B6-7AFF93A8E3B0}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{7B152B99-D64B-4A3F-A516-A05ADC60BE55}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{7BEBBCCD-6120-4C86-8D4C-B5EEC887DA7A}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{7E954E9E-3EC9-4355-9B8F-523EC55F73C4}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{82F4736E-9AF3-406A-A83A-5D45182B1EF4}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{83A0EE9E-8AF7-4CFF-9E81-D1AD55941579}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{84C50CCD-9961-48F7-A798-1751761F0BFA}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{88A8D6B5-3867-42E3-847C-B92C45904B1F}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{8A669A64-FAAE-4A3B-BABA-70E67800283A}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{8C9D3C4C-67A6-4E80-9E54-38FA393EA3AF}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{8E1A1CAB-6C40-472C-B0AA-7CEC4E4D0B10}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{8FFA8DC3-619F-43BA-BEB2-592C79359E83}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{90125DE7-BA3A-4C50-95DE-0687FB468891}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{9119FDB2-75F5-4618-8D6A-9EFAC5E9DE9D}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{919DDBB0-A2D4-447F-8B68-07019C2978E3}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{91D3EC23-C549-41D6-8986-BF66463A4C39}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{91E34F9B-6F89-4DDD-B0E0-6C3782CF6293}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{92FF546B-6D34-43B9-95C2-B00444BC4CF3}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{9961FF3A-8F11-4544-B55B-B468CED01741}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{9AC09C95-FE79-4A69-842B-498D64E276B6}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{9C021FA7-2133-4709-87D5-755BF3167E7D}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{A13AFB05-3D4A-4C62-B7FD-941066F99C53}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{A2CBC604-DEA7-4713-9E71-575596D0C300}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{A5112949-80AD-445C-A21B-5EE8D84A85F3}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{A7CBAF1E-D737-47FA-A9A8-16C7371F4025}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{AE5F2840-5F97-4A42-8439-AE930367E810}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{B5316349-A256-4D79-BD6E-99D2C5395CEC}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{B6DCE06A-AFE0-466A-8152-092E59392EA1}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{BC1ABD3D-57BF-433E-B404-240B8E49A407}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{BFEA9573-A232-4E2E-82A7-E00C1B27E3E3}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{C1FADADF-2886-4301-9422-9CCDC98AC03D}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{C60A6CD7-3FD3-4702-A3B2-D31C0A87A3E1}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{C917E2FC-5E90-40BF-AE08-A418EFBE86CF}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{C9A3B1AD-FC5C-431D-ABC4-F659BCC8CECB}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{CE16D0D1-AAA7-427D-8935-379072F0AE30}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{D27361C2-9E0A-4E46-AD7D-E64A067C26B2}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{D5E0B82C-7564-4CBD-A919-D45444032262}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{D724C5DA-2293-4B41-84D0-C23613D2B18E}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{E5B2077B-4827-4439-B967-41F8C9C6C769}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{E807B639-5B84-4D7A-8CFB-120B8D417D50}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{E94DD897-C58D-46E2-BAEE-ECE7FA013E01}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{EA03724D-8F1E-4A45-BA8C-0EDA18CB5CF6}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{FB4A249E-B70E-4108-BBAE-50EBE34CC967}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{FD82D623-3562-494B-BB67-AFB45D9B7E77}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{FF92C7D7-19F5-4890-A354-5467F4C2C330}
Successfully deleted: [Empty Folder] C:\Users\Vlasta\appdata\local\{FF9ADC3C-F464-4474-98AA-A1A7D517AB09}



~~~ FireFox

Emptied folder: C:\Users\Vlasta\AppData\Roaming\mozilla\firefox\profiles\2gcootby.default\minidumps [17 files]



~~~ Chrome

Successfully deleted: [Folder] C:\Users\Vlasta\appdata\local\Google\Chrome\User Data\Default\Extensions\ihdkejbciahopmbagpnjmmkkdpfpaaak



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Łt 26.11.2013 at 23:29:53,90
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


# AdwCleaner v3.013 - Report created 26/11/2013 at 23:33:51
# Updated 24/11/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Vlasta - VLASTA-HP
# Running from : C:\Users\Vlasta\Downloads\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISOS_is1
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16736


-\\ Mozilla Firefox v25.0.1 (cs)

[ File : C:\Users\Vlasta\AppData\Roaming\Mozilla\Firefox\Profiles\2gcootby.default\prefs.js ]


-\\ Google Chrome v

[ File : C:\Users\Vlasta\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : icon_url

*************************

AdwCleaner[R0].txt - [1754 octets] - [26/11/2013 23:32:03]
AdwCleaner[S0].txt - [1363 octets] - [26/11/2013 23:33:51]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1423 octets] ##########

Poprosim o log dle tohoto navodu http://forum.viry.cz/viewtopic.php?f=30&t=133101

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-11-2013 01
Ran by Vlasta (administrator) on VLASTA-HP on 27-11-2013 20:13:49
Running from C:\Users\Vlasta\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(PostgreSQL Global Development Group) C:\eISIS\servers\postgresql\bin\pg_ctl.exe
(Apache Software Foundation) C:\eISIS\servers\tomcat\bin\tomcat5.exe
(PostgreSQL Global Development Group) C:\eISIS\servers\postgresql\bin\postgres.exe
(The Firebird Project) C:\Program Files (x86)\Firebird\bin\fbguard.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(PostgreSQL Global Development Group) C:\eISIS\servers\postgresql\bin\postgres.exe
(PostgreSQL Global Development Group) C:\eISIS\servers\postgresql\bin\postgres.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(StarWind Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Google Inc.) C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Google Inc.) C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
(PostgreSQL Global Development Group) C:\eISIS\servers\postgresql\bin\postgres.exe
(PostgreSQL Global Development Group) C:\eISIS\servers\postgresql\bin\postgres.exe
(PostgreSQL Global Development Group) C:\eISIS\servers\postgresql\bin\postgres.exe
(PostgreSQL Global Development Group) C:\eISIS\servers\postgresql\bin\postgres.exe
(The Firebird Project) C:\Program Files (x86)\Firebird\bin\fbserver.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Google Inc.) C:\Users\Vlasta\AppData\Local\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Vlasta\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6463592 2012-02-13] (Realtek Semiconductor)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2885904 2012-02-24] (Synaptics Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
MountPoints2: H - H:\Autorun.exe
MountPoints2: {02f068c2-cb83-11e2-a93c-a0b3cccad611} - F:\Autorun.exe
MountPoints2: {10a448f5-65f9-11e2-b44e-a0b3cccad611} - F:\Autorun.exe
MountPoints2: {818733b3-5b18-11e2-acd5-a0b3cccad611} - H:\Autorun.exe
MountPoints2: {818733bf-5b18-11e2-acd5-a0b3cccad611} - F:\Autorun.exe
HKLM-x32\...\Run: [] - [x]
HKU\Default\...\Run: [T-Mobile CManager] - C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\Manager.exe [2166552 2013-10-31] (Gemfor s.r.o.)
HKU\Default User\...\Run: [T-Mobile CManager] - C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\Manager.exe [2166552 2013-10-31] (Gemfor s.r.o.)
Startup: C:\Users\Vlasta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Kooperativa - PDF Server.lnk
ShortcutTarget: Kooperativa - PDF Server.lnk -> C:\Program Files\Kooperativa\KoopPxBN\KoopPDFServerSA.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDF
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{1C3DF2CB-8661-4301-8BAC-4CCF83E26FFE}: [NameServer]
Tcpip\..\Interfaces\{3385A54F-82E2-43CE-9C5A-E94B3A76D460}: [NameServer]
Tcpip\..\Interfaces\{49BF7D53-2ABC-4DFA-80C2-C42FB13A26B5}: [NameServer]

FireFox:
========
FF ProfilePath: C:\Users\Vlasta\AppData\Roaming\Mozilla\Firefox\Profiles\2gcootby.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @java.com/DTPlugin,version=10.9.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.4 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Vlasta\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Vlasta\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: DownloadHelper - C:\Users\Vlasta\AppData\Roaming\Mozilla\Firefox\Profiles\2gcootby.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

Chrome:
=======
CHR Extension: (Entanglement) - C:\Users\Vlasta\AppData\Local\Google\Chrome\User Data\Default\Extensions\aciahcmjmecflokailenpkdchphgkefd\2.7.9_0
CHR Extension: (Google Drive) - C:\Users\Vlasta\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Vlasta\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Vlasta\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (AutoCAD 360) - C:\Users\Vlasta\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcjeclnkejmbepoibfnamioojinoopln\2.0_0
CHR Extension: (Sketch Toy) - C:\Users\Vlasta\AppData\Local\Google\Chrome\User Data\Default\Extensions\ednofnkligfbacmlfggaccfhpkfopojb\1.2.0_0
CHR Extension: (AdBlock) - C:\Users\Vlasta\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.4_0
CHR Extension: (Pixlr Express) - C:\Users\Vlasta\AppData\Local\Google\Chrome\User Data\Default\Extensions\hojmjpdlmjopaeginhldhiokeidchjid\1.2_0
CHR Extension: (CanvasDraw) - C:\Users\Vlasta\AppData\Local\Google\Chrome\User Data\Default\Extensions\knfimpamngmggpbamfoomdpebdoleghe\2_0
CHR Extension: (Google Maps) - C:\Users\Vlasta\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh\5.2.7_0
CHR Extension: (Gmail) - C:\Users\Vlasta\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR Extension: (GCH Weather Forecast.) - C:\Users\Vlasta\AppData\Local\Google\Chrome\User Data\Default\Extensions\pobcbokjdifiefbdkmnhfbjnmbleiofa\0.1_0

==================== Services (Whitelisted) =================

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [144152 2013-10-10] (SUPERAntiSpyware.com)
S4 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
R2 eISISPostgreSQL; c:\eISIS\servers\postgresql\bin\pg_ctl.exe [79948 2012-09-27] (PostgreSQL Global Development Group)
R2 eISISTomcat; c:\eISIS\servers\tomcat\bin\tomcat5.exe [57344 2012-09-27] (Apache Software Foundation)
R2 FirebirdGuardianDefaultInstance; C:\Program Files (x86)\Firebird\bin\fbguard.exe [65536 2007-12-12] (The Firebird Project)
R3 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\bin\fbserver.exe [1531989 2007-12-12] (The Firebird Project)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-08] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MbnExt; C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\MbnExt.dll [417128 2013-10-31] (Gemfor s.r.o.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
S4 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1134584 2012-02-19] (PDF Complete Inc)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-21] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S3 Axtmvflt; C:\Windows\System32\DRIVERS\Axtmvflt.sys [6144 2007-03-26] (Axesstel)
S3 Axtmvmdm; C:\Windows\System32\DRIVERS\Axtmvmdm.sys [54272 2007-03-26] (Axesstel)
S3 Axtmvprt; C:\Windows\System32\Drivers\Axtmvprt.sys [52224 2007-03-26] (Axesstel)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [238080 2012-04-23] (Huawei Technologies Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19032 2012-08-20] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12384 2012-08-20] ()
S3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [259688 2011-10-27] (Realtek Semiconductor Corp.)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R3 SmbDrv; C:\Windows\system32\drivers\Smb_driver.sys [21264 2012-02-24] (Synaptics Incorporated)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [560184 2012-11-23] (Duplex Secure Ltd.)
U3 axrxlp6j; C:\Windows\System32\Drivers\axrxlp6j.sys [0 ] (Intel Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-27 20:13 - 2013-11-27 20:14 - 00014724 _____ C:\Users\Vlasta\Desktop\FRST.txt
2013-11-27 20:13 - 2013-11-27 20:13 - 00000000 ____D C:\FRST
2013-11-27 20:12 - 2013-11-27 20:12 - 01958850 _____ (Farbar) C:\Users\Vlasta\Desktop\FRST64.exe
2013-11-27 20:12 - 2013-11-27 20:11 - 00112640 _____ (forum.viry.cz) C:\Users\Vlasta\Desktop\FRSTLauncher.exe
2013-11-27 20:11 - 2013-11-27 20:12 - 01958850 _____ (Farbar) C:\Users\Vlasta\Downloads\FRST64.exe
2013-11-27 20:11 - 2013-11-27 20:11 - 00112640 _____ (forum.viry.cz) C:\Users\Vlasta\Downloads\FRSTLauncher.exe
2013-11-27 12:59 - 2013-11-27 13:00 - 00393216 _____ C:\Users\Vlasta\Desktop\Tabulka k 300913.xls
2013-11-26 23:32 - 2013-11-26 23:33 - 00000000 ____D C:\AdwCleaner
2013-11-26 23:31 - 2013-11-26 23:31 - 01091882 _____ C:\Users\Vlasta\Downloads\adwcleaner.exe
2013-11-26 23:29 - 2013-11-26 23:29 - 00012525 _____ C:\Users\Vlasta\Desktop\JRT.txt
2013-11-26 23:24 - 2013-11-26 23:24 - 00000000 ____D C:\Windows\ERUNT
2013-11-26 23:23 - 2013-11-26 23:23 - 01034531 _____ (Thisisu) C:\Users\Vlasta\Desktop\JRT.exe
2013-11-26 22:22 - 2013-11-26 22:22 - 00000000 ____D C:\Users\Vlasta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2013-11-26 22:22 - 2013-11-26 22:22 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2013-11-26 22:22 - 2013-11-26 22:22 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2013-11-26 22:09 - 2013-11-26 22:09 - 00000000 ____D C:\Users\Vlasta\AppData\Roaming\Runscanner.net
2013-11-26 21:44 - 2013-11-26 21:44 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-26 21:44 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-11-26 21:37 - 2013-11-26 21:57 - 00001354 _____ C:\Windows\PFRO.log
2013-11-26 20:29 - 2013-11-27 20:06 - 00000538 _____ C:\Windows\setupact.log
2013-11-26 20:29 - 2013-11-26 20:29 - 00000000 _____ C:\Windows\setuperr.log
2013-11-26 20:07 - 2013-11-26 20:08 - 00000000 ____D C:\Users\Vlasta\dwhelper
2013-11-26 20:05 - 2013-11-26 20:05 - 00000000 ____D C:\ProgramData\Auslogics
2013-11-26 20:05 - 2013-11-26 20:05 - 00000000 ____D C:\Program Files (x86)\Auslogics
2013-11-26 19:57 - 2013-11-26 19:58 - 00000000 ____D C:\Users\Vlasta\Desktop\RK_Quarantine
2013-11-26 19:52 - 2013-11-26 19:52 - 00000853 _____ C:\Users\Vlasta\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk
2013-11-26 19:49 - 2013-11-26 21:33 - 00000000 ____D C:\Users\Vlasta\AppData\Roaming\BitTorrent
2013-11-24 16:01 - 2013-11-24 16:03 - 00000000 ____D C:\Users\Vlasta\Documents\Command and Conquer Generals Zero Hour Data
2013-11-20 12:30 - 2013-11-20 12:34 - 00010340 _____ C:\Users\Vlasta\Desktop\HRBACOVA.xlsx
2013-11-16 15:32 - 2013-11-16 15:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-13 15:43 - 2013-10-12 09:45 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-13 15:43 - 2013-10-12 09:45 - 01364992 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-13 15:43 - 2013-10-12 09:45 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-13 15:43 - 2013-10-12 09:43 - 19269632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-13 15:43 - 2013-10-12 09:43 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-13 15:43 - 2013-10-12 09:43 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-13 15:43 - 2013-10-12 09:43 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-13 15:43 - 2013-10-12 09:43 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-13 15:43 - 2013-10-12 09:43 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-13 15:43 - 2013-10-12 09:43 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-13 15:43 - 2013-10-12 09:43 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-13 15:43 - 2013-10-12 09:43 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-13 15:43 - 2013-10-12 09:43 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-13 15:43 - 2013-10-12 09:43 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-13 15:43 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-13 15:43 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-13 15:43 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-13 15:43 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-13 15:43 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-13 15:43 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-13 15:43 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-13 15:43 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-13 15:43 - 2013-10-12 08:02 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-13 15:43 - 2013-10-12 08:02 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-13 15:43 - 2013-10-12 08:02 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-13 15:43 - 2013-10-12 08:02 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-13 15:43 - 2013-10-12 08:02 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-13 15:43 - 2013-10-12 07:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-13 15:43 - 2013-10-12 07:08 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-13 15:43 - 2013-10-12 06:44 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-13 15:43 - 2013-10-12 06:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-13 07:35 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-13 07:35 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-13 07:35 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 07:35 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-13 07:35 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-13 07:35 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-13 07:35 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-13 07:35 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-13 07:35 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-13 07:35 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-13 07:35 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-13 07:35 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-13 07:35 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-13 07:35 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-13 07:35 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-13 07:35 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-13 07:35 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-13 07:35 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-13 07:35 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-13 07:35 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-13 07:35 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-13 07:35 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-13 07:35 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-13 07:35 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-13 07:35 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-13 07:35 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-13 07:35 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-13 07:35 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-13 07:35 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-13 07:35 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

==================== One Month Modified Files and Folders =======

2013-11-27 20:14 - 2013-11-27 20:13 - 00014724 _____ C:\Users\Vlasta\Desktop\FRST.txt
2013-11-27 20:13 - 2013-11-27 20:13 - 00000000 ____D C:\FRST
2013-11-27 20:12 - 2013-11-27 20:12 - 01958850 _____ (Farbar) C:\Users\Vlasta\Desktop\FRST64.exe
2013-11-27 20:12 - 2013-11-27 20:11 - 01958850 _____ (Farbar) C:\Users\Vlasta\Downloads\FRST64.exe
2013-11-27 20:11 - 2013-11-27 20:12 - 00112640 _____ (forum.viry.cz) C:\Users\Vlasta\Desktop\FRSTLauncher.exe
2013-11-27 20:11 - 2013-11-27 20:11 - 00112640 _____ (forum.viry.cz) C:\Users\Vlasta\Downloads\FRSTLauncher.exe
2013-11-27 20:11 - 2012-11-10 10:48 - 01998539 _____ C:\Windows\WindowsUpdate.log
2013-11-27 20:07 - 2012-11-10 11:09 - 00000966 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1557535924-674888761-1873309798-1000UA.job
2013-11-27 20:06 - 2013-11-26 20:29 - 00000538 _____ C:\Windows\setupact.log
2013-11-27 20:06 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-27 17:35 - 2013-07-15 13:42 - 00057856 _____ C:\Users\Vlasta\Desktop\MORAVEK.xls
2013-11-27 17:23 - 2013-06-25 10:31 - 00035328 _____ C:\Users\Vlasta\Desktop\SNOPKOVA.xls
2013-11-27 14:26 - 2012-11-10 11:09 - 00000914 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1557535924-674888761-1873309798-1000Core.job
2013-11-27 14:23 - 2012-03-15 19:47 - 00725436 _____ C:\Windows\system32\perfh005.dat
2013-11-27 14:23 - 2012-03-15 19:47 - 00164674 _____ C:\Windows\system32\perfc005.dat
2013-11-27 14:23 - 2009-07-14 06:13 - 01740754 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-27 13:00 - 2013-11-27 12:59 - 00393216 _____ C:\Users\Vlasta\Desktop\Tabulka k 300913.xls
2013-11-27 12:59 - 2013-09-23 08:29 - 05662208 _____ C:\Users\Vlasta\Desktop\ODESILACI.xls
2013-11-27 08:41 - 2012-11-10 10:51 - 00000000 ____D C:\Users\Vlasta\AppData\Local\PDFC
2013-11-27 08:00 - 2013-08-23 14:22 - 00023040 _____ C:\Users\Vlasta\Desktop\splátky US.xls
2013-11-27 07:58 - 2009-07-14 05:45 - 00031472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-27 07:58 - 2009-07-14 05:45 - 00031472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-26 23:33 - 2013-11-26 23:32 - 00000000 ____D C:\AdwCleaner
2013-11-26 23:31 - 2013-11-26 23:31 - 01091882 _____ C:\Users\Vlasta\Downloads\adwcleaner.exe
2013-11-26 23:29 - 2013-11-26 23:29 - 00012525 _____ C:\Users\Vlasta\Desktop\JRT.txt
2013-11-26 23:24 - 2013-11-26 23:24 - 00000000 ____D C:\Windows\ERUNT
2013-11-26 23:23 - 2013-11-26 23:23 - 01034531 _____ (Thisisu) C:\Users\Vlasta\Desktop\JRT.exe
2013-11-26 22:31 - 2013-03-26 22:56 - 00000000 ____D C:\Program Files\trend micro
2013-11-26 22:22 - 2013-11-26 22:22 - 00000000 ____D C:\Users\Vlasta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2013-11-26 22:22 - 2013-11-26 22:22 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2013-11-26 22:22 - 2013-11-26 22:22 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2013-11-26 22:09 - 2013-11-26 22:09 - 00000000 ____D C:\Users\Vlasta\AppData\Roaming\Runscanner.net
2013-11-26 21:57 - 2013-11-26 21:37 - 00001354 _____ C:\Windows\PFRO.log
2013-11-26 21:55 - 2013-07-09 14:07 - 00000000 ____D C:\ProgramData\VirtualWifiRouter
2013-11-26 21:48 - 2012-03-15 11:56 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2013-11-26 21:48 - 2012-03-15 11:34 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard
2013-11-26 21:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Help
2013-11-26 21:44 - 2013-11-26 21:44 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-26 21:42 - 2013-08-01 10:12 - 00000000 ____D C:\Users\Vlasta\AppData\Roaming\Seznam.cz
2013-11-26 21:41 - 2013-08-01 10:12 - 00000000 ____D C:\Program Files (x86)\Seznam.cz
2013-11-26 21:41 - 2013-08-01 10:08 - 00000000 _____ C:\Windows\SysWOW64\sinstall.log
2013-11-26 21:33 - 2013-11-26 19:49 - 00000000 ____D C:\Users\Vlasta\AppData\Roaming\BitTorrent
2013-11-26 20:29 - 2013-11-26 20:29 - 00000000 _____ C:\Windows\setuperr.log
2013-11-26 20:28 - 2013-03-04 11:55 - 00000000 ____D C:\Users\Vlasta\AppData\Roaming\TeamViewer
2013-11-26 20:20 - 2012-11-10 10:51 - 00003978 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{5A40F3D5-9700-4ADD-8A7F-68D698691971}
2013-11-26 20:08 - 2013-11-26 20:07 - 00000000 ____D C:\Users\Vlasta\dwhelper
2013-11-26 20:07 - 2012-11-10 10:48 - 00000000 ____D C:\Users\Vlasta
2013-11-26 20:05 - 2013-11-26 20:05 - 00000000 ____D C:\ProgramData\Auslogics
2013-11-26 20:05 - 2013-11-26 20:05 - 00000000 ____D C:\Program Files (x86)\Auslogics
2013-11-26 19:58 - 2013-11-26 19:57 - 00000000 ____D C:\Users\Vlasta\Desktop\RK_Quarantine
2013-11-26 19:54 - 2012-11-13 20:01 - 00000000 ____D C:\Users\Vlasta\AppData\Local\CrashDumps
2013-11-26 19:52 - 2013-11-26 19:52 - 00000853 _____ C:\Users\Vlasta\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk
2013-11-26 19:49 - 2012-11-10 12:18 - 00000000 ____D C:\Users\Vlasta\AppData\Roaming\Winamp
2013-11-26 19:48 - 2013-04-03 11:52 - 00000000 ____D C:\Windows\Minidump
2013-11-26 19:48 - 2007-01-02 02:25 - 00000000 ____D C:\Windows\Panther
2013-11-26 19:34 - 2013-03-26 23:00 - 00000000 ____D C:\Program Files\CCleaner
2013-11-25 17:55 - 2013-06-04 08:30 - 00058368 _____ C:\Users\Vlasta\Desktop\KOVAR.xls
2013-11-25 17:49 - 2013-08-28 12:40 - 00022016 _____ C:\Users\Vlasta\Desktop\FRANKOVA.xls
2013-11-25 08:13 - 2013-05-19 21:19 - 00000000 ____D C:\Users\Vlasta\Desktop\Honza
2013-11-24 17:44 - 2013-06-02 13:59 - 00000000 ____D C:\Users\Vlasta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-11-24 16:53 - 2013-01-21 10:53 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-11-24 16:53 - 2012-11-11 20:15 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2013-11-24 16:35 - 2012-11-13 19:18 - 00000000 ____D C:\ll
2013-11-24 16:03 - 2013-11-24 16:01 - 00000000 ____D C:\Users\Vlasta\Documents\Command and Conquer Generals Zero Hour Data
2013-11-24 15:02 - 2009-07-14 06:08 - 00032588 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-21 14:58 - 2013-07-01 15:20 - 00000000 ____D C:\Users\Vlasta\Desktop\monika
2013-11-20 12:34 - 2013-11-20 12:30 - 00010340 _____ C:\Users\Vlasta\Desktop\HRBACOVA.xlsx
2013-11-19 15:59 - 2012-11-12 14:41 - 00001912 _____ C:\Windows\epplauncher.mif
2013-11-19 15:59 - 2012-11-12 14:41 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-11-19 15:59 - 2012-11-12 14:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-11-19 11:21 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-18 11:49 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-18 07:21 - 2013-08-01 10:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-16 15:33 - 2013-11-16 15:32 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-15 11:42 - 2013-03-15 12:07 - 00000000 ____D C:\Users\Vlasta\Desktop\Monika1
2013-11-13 15:43 - 2012-11-10 11:15 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-13 15:42 - 2013-07-19 15:51 - 00000000 ____D C:\Windows\system32\MRT
2013-11-13 15:40 - 2012-11-12 14:38 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-13 07:28 - 2013-03-26 19:37 - 00001097 _____ C:\Users\Vlasta\Desktop\T-Mobile Internet Manager.lnk
2013-11-13 07:28 - 2013-03-26 19:37 - 00001097 _____ C:\Users\Default\Desktop\T-Mobile Internet Manager.lnk
2013-11-13 07:28 - 2013-03-26 19:37 - 00001097 _____ C:\Users\Default User\Desktop\T-Mobile Internet Manager.lnk
2013-11-13 07:28 - 2013-03-26 19:37 - 00000000 ____D C:\Program Files (x86)\T-Mobile
2013-11-12 14:57 - 2013-05-24 10:11 - 00000000 ____D C:\Users\Vlasta\Desktop\Mirek

Some content of TEMP:
====================
C:\Users\Vlasta\AppData\Local\Temp\bi_cleaner.exe
C:\Users\Vlasta\AppData\Local\Temp\HPHelpUpdater.exe
C:\Users\Vlasta\AppData\Local\Temp\Quarantine.exe
C:\Users\Vlasta\AppData\Local\Temp\Resource.exe
C:\Users\Vlasta\AppData\Local\Temp\UninstallHPSA.exe
C:\Users\Vlasta\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1557535924-674888761-1873309798-1000Core.job => C:\Users\Vlasta\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1557535924-674888761-1873309798-1000UA.job => C:\Users\Vlasta\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Vlasta\Desktop" je 4111 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount
"C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" -automount [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update
"C:\Users\Vlasta\AppData\Local\Google\Update\GoogleUpdate.exe" /c [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds
C:\Windows\system32\hkcmd.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Quick Launch
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPConnectionManager
C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPOSD
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray
C:\Windows\system32\igfxtray.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDF Complete
C:\Program Files (x86)\PDF Complete\pdfsty.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence
C:\Windows\system32\igfxpers.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SetDefault
C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Vlasta^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^V��ezy obrazovky a spu�t�n� aplikace OneNote 2007.lnk
C:\PROGRA~2\MICROS~1\Office12\ONENOTEM.EXE /tsr [x]


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000001


==================== End Of Log ==============================

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Start
  MountPoints2: H - H:\Autorun.exe
  MountPoints2: {02f068c2-cb83-11e2-a93c-a0b3cccad611} - F:\Autorun.exe
  MountPoints2: {10a448f5-65f9-11e2-b44e-a0b3cccad611} - F:\Autorun.exe
  MountPoints2: {818733b3-5b18-11e2-acd5-a0b3cccad611} - H:\Autorun.exe
  MountPoints2: {818733bf-5b18-11e2-acd5-a0b3cccad611} - F:\Autorun.exe
  HKLM-x32\...\Run: [] - [x]
  
  HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDF
  Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
  Tcpip\..\Interfaces\{1C3DF2CB-8661-4301-8BAC-4CCF83E26FFE}: [NameServer]
  Tcpip\..\Interfaces\{3385A54F-82E2-43CE-9C5A-E94B3A76D460}: [NameServer]
  Tcpip\..\Interfaces\{49BF7D53-2ABC-4DFA-80C2-C42FB13A26B5}: [NameServer] 
  
  C:\Users\Vlasta\AppData\Local\Temp\bi_cleaner.exe
  C:\Users\Vlasta\AppData\Local\Temp\HPHelpUpdater.exe
  C:\Users\Vlasta\AppData\Local\Temp\Quarantine.exe
  C:\Users\Vlasta\AppData\Local\Temp\Resource.exe
  C:\Users\Vlasta\AppData\Local\Temp\UninstallHPSA.exe
  C:\Users\Vlasta\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
  
  Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1557535924-674888761-1873309798-1000Core.job => C:\Users\Vlasta\AppData\Local\Google\Update\GoogleUpdate.exe
  Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1557535924-674888761-1873309798-1000UA.job => C:\Users\Vlasta\AppData\Local\Google\Update\GoogleUpdate.exe
  
  REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f
  REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount" /f
  REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update" /f
  REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDF Complete" /f
  REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Vlasta^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^V��ezy obrazovky a spu�t�n� aplikace OneNote 2007.lnk" /f
  
  Hosts:
  CMD: shutdown /r /f /t 2
  
  End

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 27-11-2013 01
Ran by Vlasta at 2013-11-27 20:57:03 Run:1
Running from C:\Users\Vlasta\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
MountPoints2: H - H:\Autorun.exe
MountPoints2: {02f068c2-cb83-11e2-a93c-a0b3cccad611} - F:\Autorun.exe
MountPoints2: {10a448f5-65f9-11e2-b44e-a0b3cccad611} - F:\Autorun.exe
MountPoints2: {818733b3-5b18-11e2-acd5-a0b3cccad611} - H:\Autorun.exe
MountPoints2: {818733bf-5b18-11e2-acd5-a0b3cccad611} - F:\Autorun.exe
HKLM-x32\...\Run: [] - [x]

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDF
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Tcpip\..\Interfaces\{1C3DF2CB-8661-4301-8BAC-4CCF83E26FFE}: [NameServer]
Tcpip\..\Interfaces\{3385A54F-82E2-43CE-9C5A-E94B3A76D460}: [NameServer]
Tcpip\..\Interfaces\{49BF7D53-2ABC-4DFA-80C2-C42FB13A26B5}: [NameServer]

C:\Users\Vlasta\AppData\Local\Temp\bi_cleaner.exe
C:\Users\Vlasta\AppData\Local\Temp\HPHelpUpdater.exe
C:\Users\Vlasta\AppData\Local\Temp\Quarantine.exe
C:\Users\Vlasta\AppData\Local\Temp\Resource.exe
C:\Users\Vlasta\AppData\Local\Temp\UninstallHPSA.exe
C:\Users\Vlasta\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1557535924-674888761-1873309798-1000Core.job => C:\Users\Vlasta\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1557535924-674888761-1873309798-1000UA.job => C:\Users\Vlasta\AppData\Local\Google\Update\GoogleUpdate.exe

REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDF Complete" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Vlasta^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^V��ezy obrazovky a spu�t�n� aplikace OneNote 2007.lnk" /f

Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\H => Key deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{02f068c2-cb83-11e2-a93c-a0b3cccad611} => Key deleted successfully.
HKCR\CLSID\{02f068c2-cb83-11e2-a93c-a0b3cccad611} => Key not found.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{10a448f5-65f9-11e2-b44e-a0b3cccad611} => Key deleted successfully.
HKCR\CLSID\{10a448f5-65f9-11e2-b44e-a0b3cccad611} => Key not found.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{818733b3-5b18-11e2-acd5-a0b3cccad611} => Key deleted successfully.
HKCR\CLSID\{818733b3-5b18-11e2-acd5-a0b3cccad611} => Key not found.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{818733bf-5b18-11e2-acd5-a0b3cccad611} => Key deleted successfully.
HKCR\CLSID\{818733bf-5b18-11e2-acd5-a0b3cccad611} => Key not found.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Value deleted successfully.
HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Key not found.
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{1C3DF2CB-8661-4301-8BAC-4CCF83E26FFE}\\NameServer => Value deleted successfully.
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{3385A54F-82E2-43CE-9C5A-E94B3A76D460}\\NameServer => Value deleted successfully.
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{49BF7D53-2ABC-4DFA-80C2-C42FB13A26B5}\\NameServer => Value deleted successfully.
C:\Users\Vlasta\AppData\Local\Temp\bi_cleaner.exe => Moved successfully.
C:\Users\Vlasta\AppData\Local\Temp\HPHelpUpdater.exe => Moved successfully.
C:\Users\Vlasta\AppData\Local\Temp\Quarantine.exe => Moved successfully.
C:\Users\Vlasta\AppData\Local\Temp\Resource.exe => Moved successfully.
C:\Users\Vlasta\AppData\Local\Temp\UninstallHPSA.exe => Moved successfully.
C:\Users\Vlasta\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1557535924-674888761-1873309798-1000Core.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1557535924-674888761-1873309798-1000UA.job => Moved successfully.

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f =========

Operace byla dokonźena ŁspŘçnŘ.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount" /f =========

Operace byla dokonźena ŁspŘçnŘ.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update" /f =========

Operace byla dokonźena ŁspŘçnŘ.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDF Complete" /f =========

Operace byla dokonźena ŁspŘçnŘ.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Vlasta^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^V��ezy obrazovky a spu�t�n� aplikace OneNote 2007.lnk" /f =========

Chyba: Syst‚m nenalezl zadaně klˇź registru nebo po§adovanou hodnotu.


========= End of Reg: =========

C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

========= shutdown /r /f /t 2 =========


========= End of CMD: =========


==== End of Fixlog ====

Tak jeste uklidime

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

Mockrát děkuji

Nemate zac, rad jsem pomohl Zase nekdy

A na zaklade Pravidla o zamykani temat