VIRY.CZ

Hezký den,

mám problém na jednom PC. Chrome nejde spustit píše

"Systém Windows nemůže najít položku C:\Program Files (x86)\Chrome\Application\chrome.exe. Ujistěte se, zda je název zadán správně, a akci opakujte."

Samozřejmě vím co to znamená. Podle rad na internetu jsem zkoušel přeinstalaci, bod obnovy, vypnout antivir.

Není to můj počítač, jeho uživatel mi ještě sdělil "on nedávno mě ten počítač upozorňoval, že mi chrome zpomaluje počítač a měl bych ho deaktivovat, tak jsem to podle mě nějak nechtěně udělal nebo nevim už"

Zde je log RSIT
Logfile of random's system information tool 1.08 (written by random/random)
Run by Samsung at 2014-07-28 23:02:10
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 4 GB (2%) free of 237 GB
Total RAM: 3893 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:02:16, on 28.7.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17207)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe
C:\Program Files (x86)\ooVoo\ooVoo.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\Samsung\AppData\Local\iLivid\iLivid.exe
C:\Users\Samsung\AppData\Roaming\SkypEmoticons\SE.exe
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Program Files (x86)\Samsung\Easy Display Manager\WifiManager.exe
C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe
C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
C:\Program Files (x86)\Ask.com\Updater\Updater.exe
C:\Windows\SysWOW64\RunDll32.exe
C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
C:\Program Files (x86)\QuickTime\QTTask.exe
C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Users\Samsung\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\Samsung.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://search13.net/search.php?clid=486&q=%s
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search13.net/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.wonderfulsearches.info ... Z&unqvl=60
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.wonderfulsearches.info ... Z&unqvl=60
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search13.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://search13.net/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\9.4\iobitappsToolbarIE.dll
O2 - BHO: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\9.4\iobitappsToolbarIE.dll
O2 - BHO: CrossriderApp0002258 - {11111111-1111-1111-1111-110011221158} - (no file)
O2 - BHO: CrossriderApp0003847 - {11111111-1111-1111-1111-110011381147} - (no file)
O2 - BHO: CrossriderApp0004637 - {11111111-1111-1111-1111-110011461137} - (no file)
O2 - BHO: MySearch - {1583FBC5-BFE4-E175-B53C-91AE2778B2A5} - C:\Program Files (x86)\MySearch\oEsgmJRAm.dll
O2 - BHO: Adblocker - {182DDFA4-3880-DF7B-C123-085CEAE401CE} - C:\Program Files (x86)\Adblocker\HtIXv.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - (no file)
O2 - BHO: Adblocker - {30650B1A-9060-EF7D-7864-27231C14BD96} - C:\Program Files (x86)\Adblocker\SZGM9f5g.dll
O2 - BHO: Vaudiix - {336048D2-A3E7-E9B4-229E-490FA784F6EF} - C:\Program Files (x86)\Vaudiix\WmnjGk.dll
O2 - BHO: Ask Toolbar BHO - {41545534-2D56-3700-76A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Passport.dll" (file missing)
O2 - BHO: Lišta Centrum.cz - {5D9C17C6-093D-43E5-BF3D-4A13D162AB74} - C:\PROGRA~2\CENTRU~1.O\LITACE~1.CZ\cenbho32.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Funmoods Helper Object - {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL
O2 - BHO: aTube Toolbar - {bfc39e47-d643-4dc2-aa1d-61377501c844} - C:\Program Files (x86)\atube\atubeX.dll
O2 - BHO: Vaudix - {CF01FD8E-A727-057F-11A9-4A32311C744B} - C:\Program Files (x86)\Vaudix\4.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - (no file)
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: aTube Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: aTube Toolbar - {bfc39e47-d643-4dc2-aa1d-61377501c844} - C:\Program Files (x86)\atube\atubeX.dll
O3 - Toolbar: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
O3 - Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - (no file)
O3 - Toolbar: (no name) - {A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} - (no file)
O3 - Toolbar: Ask Toolbar - {41545534-2D56-3700-76A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Passport.dll" (file missing)
O3 - Toolbar: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\9.4\iobitappsToolbarIE.dll
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe"
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Guard.Mail.ru.gui] "C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe" /gui
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [SSDMonitor] C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [ApnTBMon] "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SearchSettings] "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [ooVoo.exe] C:\Program Files (x86)\ooVoo\oovoo.exe /minimized
O4 - HKCU\..\Run: [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [WebcamMaxAutoRun] "C:\Program Files (x86)\WebcamMax\wcmmon.exe" -a
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Samsung\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Samsung\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKCU\..\Run: [AppleIEDAV] C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
O4 - HKCU\..\Run: [Advanced SystemCare 7] "C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe" /Auto
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Samsung\AppData\Roaming\uTorrent\updates\3.3.2_30303.exe" /MINIMIZED
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [iLivid] "C:\Users\Samsung\AppData\Local\iLivid\iLivid.exe" -autorun
O4 - HKCU\..\Run: [se] "C:\Users\Samsung\AppData\Roaming\SkypEmoticons\SE.exe" /minimized
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Upload to Facebook - C:\Program Files (x86)\WebcamMax\share\iecontext.htm
O9 - Extra button: StylishProfile - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files (x86)\Stylish Profile\ct.htm (file missing)
O9 - Extra 'Tools' menuitem: StylishProfile - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files (x86)\Stylish Profile\ct.htm (file missing)
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files (x86)\ICQ7.7\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files (x86)\ICQ7.7\ICQ.exe
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Odeslat do zařízení Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Odeslat do zařízení &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{437DF307-EDD5-4A7C-B798-169505122258}: NameServer = 10.168.38.53
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: c:\progra~2\sw-boo~1\assist~1.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Advanced SystemCare Service 7 (AdvancedSystemCareService7) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
O23 - Service: Computer Backup (MyPC Backup) (BackupStack) - Unknown owner - C:\Program Files (x86)\MyPC Backup\BackupStack.exe (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Guard.Mail.ru - Unknown owner - C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NitroPDFReaderDriverCreatorReadSpool2 (NitroReaderDriverReadSpool2) - Nitro PDF Software - C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe
O23 - Service: PC Speed Up Service (PCSUService) - Unknown owner - C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe
O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - Unknown owner - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Software Update Service (supdate) (supdate) - Boxore OU. - C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 18042 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 3054752
\??\C:\Windows\system32\conhost.exe "-776246514-354560684-70426764-1556150821-1486215885-410740130862802041-2081411737
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
taskeng.exe {0383748C-A7FA-447F-B4D3-162C10C87A2D}
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Windows\system32\rundll32.exe" "c:\progra~2\sw-boo~1\AssistantSvc.dll",service
"C:\Windows\system32\rundll32.exe" "c:\progra~2\sw-boo~1\AssistantSvc.dll",service
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe"
"C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe"
"C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe"
"C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe"
"C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe"
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"taskhost.exe"
taskeng.exe {B6C82D51-6A11-4AB4-BDDF-03FE60B7C433}
"C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe" /TUStart /pid:2280
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe"
c:\programdata\ezsoftware\sw-booster\SW-Booster.exe /schedule /profile "c:\programdata\ezsoftware\sw-booster\3133355616.ini"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\ooVoo\ooVoo.exe" /minimized
"C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe"
"C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe" /Auto
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Users\Samsung\AppData\Local\iLivid\iLivid.exe" -autorun
"C:\Users\Samsung\AppData\Roaming\SkypEmoticons\SE.exe" /minimized
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe"
"C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\srspremiumpanel_64.exe" /h
"C:\Program Files (x86)\Samsung\Easy Display Manager\WifiManager.exe" hide
"C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe"
"C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe"
"C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe" -Embedding
"C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe" /gui
"C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
C:\Windows\SysWOW64\RunDll32.exe "C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
"C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe"
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
"C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings64.exe" HOOK -Dwthx184.dll -IE"DefaultScope" -GC"C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Web Data" -FF"\Prefs.js"
szndesktop.exe default start
C:\Windows\system32\igfxext.exe -Embedding
"C:\Users\Samsung\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe "313851186179916197-1737763383-18213874914935207391607062321-949814143194649851
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5324 CREDAT:275457 /prefetch:2
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5324 CREDAT:2831380 /prefetch:2
"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto -critical
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5324 CREDAT:668693 /prefetch:2
"C:\Windows\System32\MsSpellCheckingFacility.exe" -Embedding
"C:\Windows\system32\RunDll32.exe" "C:\Windows\system32\WerConCpl.dll", LaunchErcApp -queuereporting
C:\Windows\system32\sppsvc.exe
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5324 CREDAT:3683428 /prefetch:2
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Users\Samsung\Downloads\RSITx64 (1).exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\DLL-Files.Com Fixer_MONTHLY.job
C:\Windows\tasks\DLL-Files.Com Fixer_Updates.job
C:\Windows\tasks\Funmoods.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\RegClean Pro_DEFAULT.job
C:\Windows\tasks\RegClean Pro_UPDATES.job
C:\Windows\tasks\Registry Optimizer_DEFAULT.job
C:\Windows\tasks\Registry Optimizer_UPDATES.job
C:\Windows\tasks\SoftwareUpdateTaskMachineCore.job
C:\Windows\tasks\SoftwareUpdateTaskMachineUA.job
C:\Windows\tasks\SW-Booster-S-3133355616.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
ExplorerWnd Helper - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll [2014-06-01 2471744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1583FBC5-BFE4-E175-B53C-91AE2778B2A5}]
MySearch - C:\Program Files (x86)\MySearch\oEsgmJRAm.x64.dll [2014-07-28 512000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{182DDFA4-3880-DF7B-C123-085CEAE401CE}]
Adblocker - C:\Program Files (x86)\Adblocker\HtIXv.x64.dll [2014-07-28 512000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30650B1A-9060-EF7D-7864-27231C14BD96}]
Adblocker - C:\Program Files (x86)\Adblocker\SZGM9f5g.x64.dll [2014-07-28 512000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336048D2-A3E7-E9B4-229E-490FA784F6EF}]
Vaudiix - C:\Program Files (x86)\Vaudiix\WmnjGk.x64.dll [2014-07-28 512000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-03-21 6270336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CF01FD8E-A727-057F-11A9-4A32311C744B}]
Vaudix - C:\Program Files (x86)\Vaudix\4.x64.dll [2014-07-28 512000]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
IObit Apps Toolbar - C:\Program Files (x86)\IObit Apps Toolbar\IE\9.4\iobitappsToolbarIE.dll [2014-06-16 1398592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011221158}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011381147}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011461137}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1583FBC5-BFE4-E175-B53C-91AE2778B2A5}]
MySearch - C:\Program Files (x86)\MySearch\oEsgmJRAm.dll [2013-07-28 455168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{182DDFA4-3880-DF7B-C123-085CEAE401CE}]
Adblocker - C:\Program Files (x86)\Adblocker\HtIXv.dll [2014-07-28 455168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30650B1A-9060-EF7D-7864-27231C14BD96}]
Adblocker - C:\Program Files (x86)\Adblocker\SZGM9f5g.dll [2014-07-28 455168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336048D2-A3E7-E9B4-229E-490FA784F6EF}]
Vaudiix - C:\Program Files (x86)\Vaudiix\WmnjGk.dll [2013-07-28 455168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41545534-2D56-3700-76A7-7A786E7484D7}]
Ask Toolbar - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Passport.dll [2013-08-16 12240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5D9C17C6-093D-43E5-BF3D-4A13D162AB74}]
Lišta Centrum.cz - C:\PROGRA~2\CENTRU~1.O\LITACE~1.CZ\cenbho32.dll [2011-11-24 265680]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-02-08 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-03-21 4502400]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}]
Advanced SystemCare Browser Protection - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL [2014-02-20 669504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bfc39e47-d643-4dc2-aa1d-61377501c844}]
aTube Toolbar - C:\Program Files (x86)\atube\atubeX.dll [2011-10-31 81920]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CF01FD8E-A727-057F-11A9-4A32311C744B}]
Vaudix - C:\Program Files (x86)\Vaudix\4.dll [2014-07-28 455168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
aTube Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2012-01-03 1514152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-02-08 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{03EB0E9C-7A91-4381-A220-9B52B641CDB1} - IObit Apps Toolbar - C:\Program Files (x86)\IObit Apps Toolbar\IE\9.4\iobitappsToolbarIE64.dll [2014-06-16 1997120]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll [2011-08-17 1055808]
{D4027C7F-154A-4066-A1AD-4243D8127440} - aTube Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2012-01-03 1514152]
{bfc39e47-d643-4dc2-aa1d-61377501c844} - aTube Toolbar - C:\Program Files (x86)\atube\atubeX.dll [2011-10-31 81920]
{EEE6C35B-6118-11DC-9C72-001320C79847}
{98889811-442D-49dd-99D7-DC866BE87DBC}
{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}
{41545534-2D56-3700-76A7-7A786E7484D7} - Ask Toolbar - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Passport.dll [2013-08-16 12240]
{03EB0E9C-7A91-4381-A220-9B52B641CDB1} - IObit Apps Toolbar - C:\Program Files (x86)\IObit Apps Toolbar\IE\9.4\iobitappsToolbarIE.dll [2014-06-16 1398592]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-02-08 161304]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-02-08 386584]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-02-08 415256]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-02-08 11660904]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-02-08 2149160]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-09-22 4035152]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ooVoo.exe"=C:\Program Files (x86)\ooVoo\oovoo.exe [2012-08-20 27040888]
"EA Core"=C:\Program Files (x86)\Electronic Arts\EADM\Core.exe [2009-03-28 3325952]
"WebcamMaxAutoRun"=C:\Program Files (x86)\WebcamMax\wcmmon.exe [2011-07-17 1038848]
"cz.seznam.software.autoupdate"=C:\Users\Samsung\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Samsung\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
"iCloudServices"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [2013-11-20 59720]
"ApplePhotoStreams"=C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [2013-11-20 59720]
"AppleIEDAV"=C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe [2013-11-15 1326408]
"Advanced SystemCare 7"=C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe [2014-04-21 2295584]
"uTorrent"=C:\Users\Samsung\AppData\Roaming\uTorrent\updates\3.3.2_30303.exe [2013-12-08 900440]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-05-08 21444224]
"iLivid"=C:\Users\Samsung\AppData\Local\iLivid\iLivid.exe [2014-05-25 7913472]
"se"=C:\Users\Samsung\AppData\Roaming\SkypEmoticons\SE.exe [2014-07-28 5679008]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"RemoteControl10"=C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe [2010-09-20 87336]
"CLMLServer"=C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2009-11-02 103720]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"Guard.Mail.ru.gui"=C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [2012-02-11 1564368]
"ApnUpdater"=C:\Program Files (x86)\Ask.com\Updater\Updater.exe [2012-01-03 1391272]
"SSDMonitor"=C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [2011-12-12 103896]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-07-03 43816]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-03-21 1061960]
"ApnTBMon"=C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [2013-08-16 1601488]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-01-17 421888]
""= []
"SearchSettings"=C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe [2014-06-16 1404736]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-07-08 152392]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\PROGRA~2\SW-BOO~1\ASSIST~2.DLL"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-02-08 271360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2014-07-28 23:02:10 ----D---- C:\rsit
2014-07-28 23:02:10 ----D---- C:\Program Files\trend micro
2014-07-28 20:29:20 ----D---- C:\Users\Samsung\AppData\Roaming\SkypEmoticons
2014-07-28 20:29:19 ----D---- C:\ProgramData\MySearch
2014-07-28 20:29:16 ----D---- C:\Program Files (x86)\MySearch
2014-07-28 20:28:35 ----D---- C:\ProgramData\EZSoftware
2014-07-28 20:28:32 ----D---- C:\Program Files (x86)\SW-Booster
2014-07-28 20:28:10 ----D---- C:\ProgramData\Adblocker
2014-07-28 20:28:09 ----D---- C:\Program Files (x86)\Adblocker
2014-07-28 20:28:03 ----D---- C:\ProgramData\Vaudiix
2014-07-28 20:28:03 ----D---- C:\Program Files (x86)\Vaudiix
2014-07-28 20:27:58 ----D---- C:\ProgramData\Vaudix
2014-07-28 20:27:56 ----D---- C:\Program Files (x86)\Vaudix
2014-07-28 20:27:41 ----D---- C:\ProgramData\fb6152e1da7df93e
2014-07-28 20:26:35 ----D---- C:\ProgramData\InstallMate
2014-07-24 21:21:47 ----D---- C:\Windows\system32\%LOCALAPPDATA%
2014-07-22 17:14:00 ----D---- C:\Program Files (x86)\GUM376E.tmp
2014-07-22 17:14:00 ----A---- C:\Program Files (x86)\GUT376F.tmp
2014-07-10 21:13:48 ----D---- C:\Program Files\iPod
2014-07-10 21:13:46 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-07-10 21:13:46 ----D---- C:\Program Files\iTunes
2014-07-09 20:19:20 ----A---- C:\Windows\system32\aepdu.dll
2014-07-09 20:19:19 ----A---- C:\Windows\system32\aeinv.dll
2014-07-09 20:18:59 ----A---- C:\Windows\system32\win32k.sys
2014-07-09 20:18:58 ----A---- C:\Windows\SYSWOW64\osk.exe
2014-07-09 20:18:57 ----A---- C:\Windows\system32\osk.exe
2014-07-09 20:18:56 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-07-09 20:18:56 ----A---- C:\Windows\system32\qedit.dll
2014-07-09 20:18:55 ----A---- C:\Windows\system32\drivers\afd.sys
2014-07-09 20:18:52 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-07-09 20:18:52 ----A---- C:\Windows\system32\schannel.dll
2014-07-09 20:18:51 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-07-09 20:18:51 ----A---- C:\Windows\system32\kerberos.dll
2014-07-09 20:18:50 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-07-09 20:18:50 ----A---- C:\Windows\system32\wdigest.dll
2014-07-09 20:18:50 ----A---- C:\Windows\system32\ncrypt.dll
2014-07-09 20:18:50 ----A---- C:\Windows\system32\msv1_0.dll
2014-07-09 20:18:49 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-07-09 20:18:49 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-07-09 20:18:49 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-07-09 20:18:49 ----A---- C:\Windows\system32\TSpkg.dll
2014-07-09 20:18:48 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-07-09 20:18:48 ----A---- C:\Windows\system32\credssp.dll
2014-07-09 20:18:41 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-07-09 20:18:41 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-07-09 20:18:41 ----A---- C:\Windows\system32\iernonce.dll
2014-07-09 20:18:40 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-07-09 20:18:39 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-07-09 20:18:39 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-07-09 20:18:39 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-07-09 20:18:39 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 20:18:39 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-07-09 20:18:39 ----A---- C:\Windows\system32\iedkcs32.dll
2014-07-09 20:18:38 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-07-09 20:18:38 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-07-09 20:18:36 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-07-09 20:18:35 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-07-09 20:18:34 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-07-09 20:18:34 ----A---- C:\Windows\system32\urlmon.dll
2014-07-09 20:18:33 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-07-09 20:18:33 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-07-09 20:18:32 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-07-09 20:18:32 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-07-09 20:18:32 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-07-09 20:18:32 ----A---- C:\Windows\system32\msfeeds.dll
2014-07-09 20:18:32 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-07-09 20:18:32 ----A---- C:\Windows\system32\dxtmsft.dll
2014-07-09 20:18:30 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-07-09 20:18:30 ----A---- C:\Windows\system32\iesetup.dll
2014-07-09 20:18:30 ----A---- C:\Windows\system32\ie4uinit.exe
2014-07-09 20:18:28 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-07-09 20:18:28 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-07-09 20:18:28 ----A---- C:\Windows\system32\iertutil.dll
2014-07-09 20:18:27 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-07-09 20:18:27 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-07-09 20:18:27 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-07-09 20:18:26 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-07-09 20:18:26 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-07-09 20:18:26 ----A---- C:\Windows\system32\jsproxy.dll
2014-07-09 20:18:25 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-07-09 20:18:23 ----A---- C:\Windows\system32\dxtrans.dll
2014-07-09 20:18:22 ----A---- C:\Windows\system32\ieui.dll
2014-07-09 20:18:21 ----A---- C:\Windows\system32\ieframe.dll
2014-07-09 20:18:20 ----A---- C:\Windows\system32\mshtmled.dll
2014-07-09 20:18:18 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-07-09 20:18:18 ----A---- C:\Windows\system32\jscript9diag.dll
2014-07-09 20:18:18 ----A---- C:\Windows\system32\ieUnatt.exe
2014-07-09 20:18:17 ----A---- C:\Windows\system32\vbscript.dll
2014-07-09 20:18:17 ----A---- C:\Windows\system32\jscript9.dll
2014-07-09 20:18:16 ----A---- C:\Windows\system32\wininet.dll
2014-07-09 20:18:16 ----A---- C:\Windows\system32\ieapfltr.dll
2014-07-09 20:18:15 ----A---- C:\Windows\system32\msrating.dll
2014-07-09 20:18:15 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-07-09 20:18:14 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-09 20:18:12 ----A---- C:\Windows\system32\mshtml.dll
2014-07-09 20:17:36 ----A---- C:\Windows\system32\lsasrv.dll
2014-07-09 20:17:35 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-07-09 20:17:35 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-07-01 05:27:43 ----D---- C:\Program Files (x86)\Application Updater
2014-07-01 05:27:42 ----D---- C:\Program Files (x86)\IObit Apps Toolbar

======List of files/folders modified in the last 1 months======

2014-07-28 23:02:11 ----D---- C:\Windows\temp
2014-07-28 23:02:10 ----RD---- C:\Program Files
2014-07-28 22:59:31 ----D---- C:\Windows\inf
2014-07-28 22:56:50 ----D---- C:\Users\Samsung\AppData\Roaming\Skype
2014-07-28 22:49:13 ----D---- C:\Users\Samsung\AppData\Roaming\Seznam.cz
2014-07-28 22:46:38 ----D---- C:\Users\Samsung\AppData\Roaming\uTorrent
2014-07-28 22:46:11 ----A---- C:\Windows\SYSWOW64\log.txt
2014-07-28 22:43:51 ----D---- C:\Windows\system32\config
2014-07-28 22:26:57 ----D---- C:\Windows\SoftwareDistribution
2014-07-28 21:12:03 ----AD---- C:\ProgramData\Temp
2014-07-28 20:33:33 ----D---- C:\Windows\system32\catroot2
2014-07-28 20:33:32 ----D---- C:\Windows
2014-07-28 20:33:25 ----D---- C:\Windows\debug
2014-07-28 20:30:11 ----RD---- C:\Program Files (x86)
2014-07-28 20:29:19 ----D---- C:\ProgramData
2014-07-28 20:28:40 ----D---- C:\Windows\system32\Tasks
2014-07-28 20:28:39 ----D---- C:\Windows\Tasks
2014-07-28 20:27:41 ----HD---- C:\Windows\system32\GroupPolicy
2014-07-28 20:27:41 ----D---- C:\Windows\SYSWOW64\GroupPolicy
2014-07-28 20:27:40 ----D---- C:\Program Files (x86)\Google
2014-07-28 20:27:38 ----RD---- C:\Users
2014-07-28 11:12:08 ----SHD---- C:\Windows\Installer
2014-07-26 20:35:49 ----D---- C:\Users\Samsung\AppData\Roaming\Nitro PDF
2014-07-26 10:45:07 ----SHD---- C:\System Volume Information
2014-07-25 06:00:27 ----D---- C:\Program Files\Microsoft Silverlight
2014-07-25 06:00:26 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-07-24 21:24:34 ----D---- C:\Config.Msi
2014-07-24 21:21:47 ----D---- C:\Windows\System32
2014-07-23 13:14:42 ----D---- C:\Windows\Prefetch
2014-07-22 17:30:52 ----D---- C:\ProgramData\ProductData
2014-07-22 17:30:45 ----D---- C:\ProgramData\IObit
2014-07-22 17:24:10 ----SHD---- C:\$RECYCLE.BIN
2014-07-20 22:21:46 ----D---- C:\Program Files (x86)\DVDVideoSoft
2014-07-20 22:20:33 ----RSD---- C:\Windows\assembly
2014-07-20 22:20:23 ----D---- C:\Users\Samsung\AppData\Roaming\DVDVideoSoft
2014-07-20 13:03:08 ----D---- C:\Windows\system32\NDF
2014-07-10 22:15:15 ----D---- C:\Windows\system32\catroot
2014-07-10 21:35:57 ----D---- C:\Windows\winsxs
2014-07-10 21:14:45 ----D---- C:\Windows\SysWOW64
2014-07-10 21:14:39 ----D---- C:\Program Files (x86)\iTunes
2014-07-10 14:23:02 ----D---- C:\Program Files\Windows Journal
2014-07-10 14:23:01 ----SD---- C:\Windows\system32\CompatTel
2014-07-10 14:23:01 ----D---- C:\Windows\SYSWOW64\Dism
2014-07-10 14:23:00 ----D---- C:\Windows\system32\Dism
2014-07-10 14:22:59 ----D---- C:\Windows\ehome
2014-07-10 14:22:58 ----D---- C:\Windows\system32\drivers
2014-07-10 14:22:57 ----D---- C:\Windows\system32\cs-CZ
2014-07-10 14:22:56 ----D---- C:\Windows\SYSWOW64\en-US
2014-07-10 14:22:56 ----D---- C:\Program Files\Internet Explorer
2014-07-10 14:22:55 ----D---- C:\Windows\system32\en-US
2014-07-10 14:22:53 ----D---- C:\Program Files (x86)\Internet Explorer
2014-07-09 22:12:55 ----D---- C:\Windows\system32\MRT
2014-07-09 22:10:37 ----A---- C:\Windows\system32\MRT.exe
2014-07-09 22:09:58 ----D---- C:\ProgramData\Microsoft Help
2014-07-07 12:56:10 ----D---- C:\Users\Samsung\AppData\Roaming\OpenCandy
2014-07-06 20:23:23 ----D---- C:\Windows\system32\wdi

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-04-27 540696]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2011-08-04 146432]
R1 SABI;SAMSUNG Kernel Driver For Windows 7; \??\C:\Windows\system32\Drivers\SABI.sys [2009-05-28 13824]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2011-01-25 60416]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2011-08-09 202576]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2011-08-04 137144]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl664.sys [2012-02-08 3065408]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 BTWAMPFL;btwampfl; C:\Windows\system32\DRIVERS\btwampfl.sys [2012-02-08 348712]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2012-02-08 106536]
R3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\DRIVERS\btwavdt.sys [2012-02-08 138280]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2012-02-08 39464]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2012-02-08 21416]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys [2010-11-10 31088]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2012-02-08 56344]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-02-08 10611552]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2012-02-08 158976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-02-08 2647528]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2012-02-08 289280]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2012-02-08 409192]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2012-02-08 1377840]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2011-01-25 18432]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files (x86)\MediaCoder\SysInfoX64.sys []
S3 Netaapl;Apple Mobile Device Ethernet Service; C:\Windows\system32\DRIVERS\netaapl64.sys [2013-07-25 23040]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2011-08-17 171008]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2013-11-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-11-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2013-11-23 30208]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys []
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-12-13 54784]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-18 65432]
R2 AdvancedSystemCareService7;Advanced SystemCare Service 7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [2014-01-14 881952]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-06-12 43336]
R2 Application Updater;Application Updater; C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe [2014-06-16 807800]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2010-10-22 953632]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-04-11 1390720]
R2 d0e87c27;PC-Sustainer; C:\Windows\syswow64\rundll32.exe [2009-07-14 44544]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-09-22 974944]
R2 Guard.Mail.ru;Guard.Mail.ru; C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [2012-02-11 1564368]
R2 ICQ Service;ICQ Service; C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe [2011-08-17 247872]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-02-08 325656]
R2 NitroReaderDriverReadSpool2;NitroPDFReaderDriverCreatorReadSpool2; C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [2012-04-11 204304]
R2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [2011-12-12 793048]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2012-02-08 244904]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2012-11-02 2365792]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-02-08 2533400]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-07-08 641352]
S2 BackupStack;Computer Backup (MyPC Backup); C:\Program Files (x86)\MyPC Backup\BackupStack.exe []
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2014-05-04 2152736]
S2 PCSUService;PC Speed Up Service; C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe [2012-11-07 312176]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S2 supdate;Software Update Service (supdate); C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [2012-09-19 139576]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-06-19 111616]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-02-12 1255736]
S4 APNMCP;Ask Update Service; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [2013-08-16 164816]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc []
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /medsvc []
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------




Děkuji

Zdravim

Holicz píše:Není to můj počítač, jeho uživatel mi ještě sdělil "on nedávno mě ten počítač upozorňoval, že mi chrome zpomaluje počítač a měl bych ho deaktivovat, tak jsem to podle mě nějak nechtěně udělal nebo nevim už"

A uzivatel je teda kdo? Nejaky pribuzny? Je tam smeti od sklepa az po komin.



Odinstalujte Advanced SystemCare a pripadne vse od IObit. Dela to vic skody nez uzitku.


Aktualizujem skener
Smazte RSIT a slozku C:\Program Files\trend micro , pokud ji najdete.
Pak stahnete nove RSIT http://images.malwareremoval.com/random/RSITx64.exe a dejte log z nej.

Uživatel je kamarád. Nevím jak by tomu sám rozuměl, takže mu s tím skenováním a tak pomáhám a pokud vůbec nebude vědět, pomohu mu přes TeamViewer, proto sem píši já.

Odinstalováno. Ale měl k tomu výhrady, že pak mu nejdou plynule nějaké hry. V tom PC je evidentně (i jak píšete) hrozně moc smetí. Tak kdybyste mohl trochu pomoci i s tímto, pokud něco v logu zahlédnete.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Samsung at 2014-07-29 21:09:31
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 4 GB (2%) free of 237 GB
Total RAM: 3893 MB (47% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:09:34, on 29.7.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17207)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ooVoo\ooVoo.exe
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe
C:\Program Files (x86)\Samsung\Easy Display Manager\WifiManager.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\Samsung\AppData\Local\iLivid\iLivid.exe
C:\Users\Samsung\AppData\Roaming\SkypEmoticons\SE.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
C:\Users\Samsung\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
C:\Program Files (x86)\Ask.com\Updater\Updater.exe
C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
C:\Program Files (x86)\QuickTime\QTTask.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Windows\SysWOW64\RunDll32.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\Samsung.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://search13.net/search.php?clid=486&q=%s
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search13.net/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.wonderfulsearches.info ... Z&unqvl=60
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.wonderfulsearches.info ... Z&unqvl=60
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search13.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://search13.net/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\9.6\iobitappsToolbarIE.dll
O2 - BHO: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\9.6\iobitappsToolbarIE.dll
O2 - BHO: CrossriderApp0002258 - {11111111-1111-1111-1111-110011221158} - (no file)
O2 - BHO: CrossriderApp0003847 - {11111111-1111-1111-1111-110011381147} - (no file)
O2 - BHO: CrossriderApp0004637 - {11111111-1111-1111-1111-110011461137} - (no file)
O2 - BHO: MySearch - {1583FBC5-BFE4-E175-B53C-91AE2778B2A5} - C:\Program Files (x86)\MySearch\oEsgmJRAm.dll
O2 - BHO: Adblocker - {182DDFA4-3880-DF7B-C123-085CEAE401CE} - C:\Program Files (x86)\Adblocker\HtIXv.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - (no file)
O2 - BHO: Adblocker - {30650B1A-9060-EF7D-7864-27231C14BD96} - C:\Program Files (x86)\Adblocker\SZGM9f5g.dll
O2 - BHO: Vaudiix - {336048D2-A3E7-E9B4-229E-490FA784F6EF} - C:\Program Files (x86)\Vaudiix\WmnjGk.dll
O2 - BHO: Ask Toolbar BHO - {41545534-2D56-3700-76A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Passport.dll" (file missing)
O2 - BHO: Lišta Centrum.cz - {5D9C17C6-093D-43E5-BF3D-4A13D162AB74} - C:\PROGRA~2\CENTRU~1.O\LITACE~1.CZ\cenbho32.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Funmoods Helper Object - {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL
O2 - BHO: aTube Toolbar - {bfc39e47-d643-4dc2-aa1d-61377501c844} - C:\Program Files (x86)\atube\atubeX.dll
O2 - BHO: Vaudix - {CF01FD8E-A727-057F-11A9-4A32311C744B} - C:\Program Files (x86)\Vaudix\4.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - (no file)
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: aTube Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: aTube Toolbar - {bfc39e47-d643-4dc2-aa1d-61377501c844} - C:\Program Files (x86)\atube\atubeX.dll
O3 - Toolbar: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
O3 - Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - (no file)
O3 - Toolbar: (no name) - {A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} - (no file)
O3 - Toolbar: Ask Toolbar - {41545534-2D56-3700-76A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Passport.dll" (file missing)
O3 - Toolbar: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\9.6\iobitappsToolbarIE.dll
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe"
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Guard.Mail.ru.gui] "C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe" /gui
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [SSDMonitor] C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [ApnTBMon] "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SearchSettings] "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe"
O4 - HKCU\..\Run: [ooVoo.exe] C:\Program Files (x86)\ooVoo\oovoo.exe /minimized
O4 - HKCU\..\Run: [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [WebcamMaxAutoRun] "C:\Program Files (x86)\WebcamMax\wcmmon.exe" -a
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Samsung\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Samsung\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKCU\..\Run: [AppleIEDAV] C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Samsung\AppData\Roaming\uTorrent\updates\3.3.2_30303.exe" /MINIMIZED
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [iLivid] "C:\Users\Samsung\AppData\Local\iLivid\iLivid.exe" -autorun
O4 - HKCU\..\Run: [se] "C:\Users\Samsung\AppData\Roaming\SkypEmoticons\SE.exe" /minimized
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Upload to Facebook - C:\Program Files (x86)\WebcamMax\share\iecontext.htm
O9 - Extra button: StylishProfile - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files (x86)\Stylish Profile\ct.htm (file missing)
O9 - Extra 'Tools' menuitem: StylishProfile - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files (x86)\Stylish Profile\ct.htm (file missing)
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files (x86)\ICQ7.7\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files (x86)\ICQ7.7\ICQ.exe
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Odeslat do zařízení Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Odeslat do zařízení &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{437DF307-EDD5-4A7C-B798-169505122258}: NameServer = 10.168.38.53
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: c:\progra~2\sw-boo~1\assist~1.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
O23 - Service: Computer Backup (MyPC Backup) (BackupStack) - Unknown owner - C:\Program Files (x86)\MyPC Backup\BackupStack.exe (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Guard.Mail.ru - Unknown owner - C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NitroPDFReaderDriverCreatorReadSpool2 (NitroReaderDriverReadSpool2) - Nitro PDF Software - C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe
O23 - Service: PC Speed Up Service (PCSUService) - Unknown owner - C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe
O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - Unknown owner - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Software Update Service (supdate) (supdate) - Boxore OU. - C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 17539 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 4940560
\??\C:\Windows\system32\conhost.exe "14259386462084216889636897185513037729-476208465-28025881-3064645-1872125610
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
taskeng.exe {A19FFD66-92B9-4647-8C67-CB9C67B95FF5}
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Windows\system32\rundll32.exe" "c:\progra~2\sw-boo~1\AssistantSvc.dll",service
"C:\Windows\system32\rundll32.exe" "c:\progra~2\sw-boo~1\AssistantSvc.dll",service
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe"
"C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe"
"C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe"
"C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe"
"C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
taskeng.exe {93B68725-B532-4F25-BE49-74A4033DB024}
"C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe" /TUStart /pid:2352
c:\programdata\ezsoftware\sw-booster\SW-Booster.exe /schedule /profile "c:\programdata\ezsoftware\sw-booster\3133355616.ini"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files (x86)\ooVoo\ooVoo.exe" /minimized
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe"
"C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\srspremiumpanel_64.exe" /h
"C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe"
"C:\Program Files (x86)\Samsung\Easy Display Manager\WifiManager.exe" hide
"C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" -Embedding
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Users\Samsung\AppData\Local\iLivid\iLivid.exe" -autorun
"C:\Users\Samsung\AppData\Roaming\SkypEmoticons\SE.exe" /minimized
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe" -Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
szndesktop.exe default start
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\Users\Samsung\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
"C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe"
\??\C:\Windows\system32\conhost.exe "-2585334677272389461689151-2678012901736117325752370932-21473409078180546
"C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe" /gui
"C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
"C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe"
"C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
C:\Windows\SysWOW64\RunDll32.exe "C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe"
C:\Windows\system32\igfxext.exe -Embedding
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto -critical
"C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe"
"C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe" DFROMKITAUTOUPDATE
"C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings64.exe" HOOK -Dwthx186.dll -IE"DefaultScope" -GC"C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Web Data" -FF"\Prefs.js"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4452 CREDAT:3290121 /prefetch:2
"C:\Windows\System32\MsSpellCheckingFacility.exe" -Embedding
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4452 CREDAT:603196 /prefetch:2
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe15_ Global\UsGthrCtrlFltPipeMssGthrPipe15 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Users\Samsung\Downloads\RSITx64 (1).exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\DLL-Files.Com Fixer_MONTHLY.job - C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe? scan?
C:\Windows\tasks\DLL-Files.Com Fixer_Updates.job - C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe? -updatecheck?
C:\Windows\tasks\Funmoods.job - C:\Users\Samsung\AppData\Roaming\Funmoods\UPDATE~1\UPDATE~1.EXE? /Check?
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe? /c?
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe? /ua /installsource scheduler?
C:\Windows\tasks\RegClean Pro_DEFAULT.job - C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe? -default?
C:\Windows\tasks\RegClean Pro_UPDATES.job - C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe? -updatecheck?
C:\Windows\tasks\Registry Optimizer_DEFAULT.job - C:\Program Files (x86)\WinZip Registry Optimizer\Winzipro.exe? -default?
C:\Windows\tasks\Registry Optimizer_UPDATES.job - C:\Program Files (x86)\WinZip Registry Optimizer\Winzipro.exe? -updatecheck?
C:\Windows\tasks\SoftwareUpdateTaskMachineCore.job - C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe? /c?
C:\Windows\tasks\SoftwareUpdateTaskMachineUA.job - C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe? /ua /installsource scheduler?
C:\Windows\tasks\SW-Booster-S-3133355616.job - c:\programdata\ezsoftware\sw-booster\SW-Booster.exe? /schedule /profile "c:\programdata\ezsoftware\sw-booster\3133355616.ini"?

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
ExplorerWnd Helper - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1583FBC5-BFE4-E175-B53C-91AE2778B2A5}]
MySearch - C:\Program Files (x86)\MySearch\oEsgmJRAm.x64.dll [2014-07-28 512000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{182DDFA4-3880-DF7B-C123-085CEAE401CE}]
Adblocker - C:\Program Files (x86)\Adblocker\HtIXv.x64.dll [2014-07-28 512000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30650B1A-9060-EF7D-7864-27231C14BD96}]
Adblocker - C:\Program Files (x86)\Adblocker\SZGM9f5g.x64.dll [2014-07-28 512000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336048D2-A3E7-E9B4-229E-490FA784F6EF}]
Vaudiix - C:\Program Files (x86)\Vaudiix\WmnjGk.x64.dll [2014-07-28 512000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-03-21 6270336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CF01FD8E-A727-057F-11A9-4A32311C744B}]
Vaudix - C:\Program Files (x86)\Vaudix\4.x64.dll [2014-07-28 512000]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
IObit Apps Toolbar - C:\Program Files (x86)\IObit Apps Toolbar\IE\9.6\iobitappsToolbarIE.dll [2014-07-28 1400128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011221158}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011381147}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011461137}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1583FBC5-BFE4-E175-B53C-91AE2778B2A5}]
MySearch - C:\Program Files (x86)\MySearch\oEsgmJRAm.dll [2013-07-28 455168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{182DDFA4-3880-DF7B-C123-085CEAE401CE}]
Adblocker - C:\Program Files (x86)\Adblocker\HtIXv.dll [2014-07-28 455168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30650B1A-9060-EF7D-7864-27231C14BD96}]
Adblocker - C:\Program Files (x86)\Adblocker\SZGM9f5g.dll [2014-07-28 455168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336048D2-A3E7-E9B4-229E-490FA784F6EF}]
Vaudiix - C:\Program Files (x86)\Vaudiix\WmnjGk.dll [2013-07-28 455168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41545534-2D56-3700-76A7-7A786E7484D7}]
Ask Toolbar - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Passport.dll [2013-08-16 12240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5D9C17C6-093D-43E5-BF3D-4A13D162AB74}]
Lišta Centrum.cz - C:\PROGRA~2\CENTRU~1.O\LITACE~1.CZ\cenbho32.dll [2011-11-24 265680]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-02-08 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-03-21 4502400]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}]
Advanced SystemCare Browser Protection - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL [2014-02-20 669504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bfc39e47-d643-4dc2-aa1d-61377501c844}]
aTube Toolbar - C:\Program Files (x86)\atube\atubeX.dll [2011-10-31 81920]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CF01FD8E-A727-057F-11A9-4A32311C744B}]
Vaudix - C:\Program Files (x86)\Vaudix\4.dll [2014-07-28 455168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
aTube Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2012-01-03 1514152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-02-08 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{03EB0E9C-7A91-4381-A220-9B52B641CDB1} - IObit Apps Toolbar - C:\Program Files (x86)\IObit Apps Toolbar\IE\9.6\iobitappsToolbarIE64.dll [2014-07-28 1998656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll [2011-08-17 1055808]
{D4027C7F-154A-4066-A1AD-4243D8127440} - aTube Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2012-01-03 1514152]
{bfc39e47-d643-4dc2-aa1d-61377501c844} - aTube Toolbar - C:\Program Files (x86)\atube\atubeX.dll [2011-10-31 81920]
{EEE6C35B-6118-11DC-9C72-001320C79847}
{98889811-442D-49dd-99D7-DC866BE87DBC}
{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}
{41545534-2D56-3700-76A7-7A786E7484D7} - Ask Toolbar - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Passport.dll [2013-08-16 12240]
{03EB0E9C-7A91-4381-A220-9B52B641CDB1} - IObit Apps Toolbar - C:\Program Files (x86)\IObit Apps Toolbar\IE\9.6\iobitappsToolbarIE.dll [2014-07-28 1400128]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-02-08 161304]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-02-08 386584]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-02-08 415256]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-02-08 11660904]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-02-08 2149160]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-09-22 4035152]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ooVoo.exe"=C:\Program Files (x86)\ooVoo\oovoo.exe [2012-08-20 27040888]
"EA Core"=C:\Program Files (x86)\Electronic Arts\EADM\Core.exe [2009-03-28 3325952]
"WebcamMaxAutoRun"=C:\Program Files (x86)\WebcamMax\wcmmon.exe [2011-07-17 1038848]
"cz.seznam.software.autoupdate"=C:\Users\Samsung\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Samsung\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
"iCloudServices"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [2013-11-20 59720]
"ApplePhotoStreams"=C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [2013-11-20 59720]
"AppleIEDAV"=C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe [2013-11-15 1326408]
"uTorrent"=C:\Users\Samsung\AppData\Roaming\uTorrent\updates\3.3.2_30303.exe [2013-12-08 900440]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-05-08 21444224]
"iLivid"=C:\Users\Samsung\AppData\Local\iLivid\iLivid.exe [2014-05-25 7913472]
"se"=C:\Users\Samsung\AppData\Roaming\SkypEmoticons\SE.exe [2014-07-28 5679008]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"RemoteControl10"=C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe [2010-09-20 87336]
"CLMLServer"=C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2009-11-02 103720]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"Guard.Mail.ru.gui"=C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [2012-02-11 1564368]
"ApnUpdater"=C:\Program Files (x86)\Ask.com\Updater\Updater.exe [2012-01-03 1391272]
"SSDMonitor"=C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [2011-12-12 103896]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-07-03 43816]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-03-21 1061960]
"ApnTBMon"=C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [2013-08-16 1601488]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-01-17 421888]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-07-08 152392]
""= []
"SearchSettings"=C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe [2014-07-28 1436480]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\PROGRA~2\SW-BOO~1\ASSIST~2.DLL"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-02-08 271360]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\chrome.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 3 months======

2014-07-29 17:35:02 ----D---- C:\Program Files\trend micro
2014-07-29 17:30:03 ----D---- C:\Program Files (x86)\Application Updater
2014-07-29 17:30:01 ----D---- C:\Program Files (x86)\IObit Apps Toolbar
2014-07-28 23:02:10 ----D---- C:\rsit
2014-07-28 20:29:20 ----D---- C:\Users\Samsung\AppData\Roaming\SkypEmoticons
2014-07-28 20:29:19 ----D---- C:\ProgramData\MySearch
2014-07-28 20:29:16 ----D---- C:\Program Files (x86)\MySearch
2014-07-28 20:28:35 ----D---- C:\ProgramData\EZSoftware
2014-07-28 20:28:32 ----D---- C:\Program Files (x86)\SW-Booster
2014-07-28 20:28:10 ----D---- C:\ProgramData\Adblocker
2014-07-28 20:28:09 ----D---- C:\Program Files (x86)\Adblocker
2014-07-28 20:28:03 ----D---- C:\ProgramData\Vaudiix
2014-07-28 20:28:03 ----D---- C:\Program Files (x86)\Vaudiix
2014-07-28 20:27:58 ----D---- C:\ProgramData\Vaudix
2014-07-28 20:27:56 ----D---- C:\Program Files (x86)\Vaudix
2014-07-28 20:27:41 ----D---- C:\ProgramData\fb6152e1da7df93e
2014-07-28 20:26:35 ----D---- C:\ProgramData\InstallMate
2014-07-24 21:21:47 ----D---- C:\Windows\system32\%LOCALAPPDATA%
2014-07-22 17:14:00 ----D---- C:\Program Files (x86)\GUM376E.tmp
2014-07-22 17:14:00 ----A---- C:\Program Files (x86)\GUT376F.tmp
2014-07-10 21:13:48 ----D---- C:\Program Files\iPod
2014-07-10 21:13:46 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-07-10 21:13:46 ----D---- C:\Program Files\iTunes
2014-07-09 20:19:20 ----A---- C:\Windows\system32\aepdu.dll
2014-07-09 20:19:19 ----A---- C:\Windows\system32\aeinv.dll
2014-07-09 20:18:59 ----A---- C:\Windows\system32\win32k.sys
2014-07-09 20:18:58 ----A---- C:\Windows\SYSWOW64\osk.exe
2014-07-09 20:18:57 ----A---- C:\Windows\system32\osk.exe
2014-07-09 20:18:56 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-07-09 20:18:56 ----A---- C:\Windows\system32\qedit.dll
2014-07-09 20:18:55 ----A---- C:\Windows\system32\drivers\afd.sys
2014-07-09 20:18:52 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-07-09 20:18:52 ----A---- C:\Windows\system32\schannel.dll
2014-07-09 20:18:51 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-07-09 20:18:51 ----A---- C:\Windows\system32\kerberos.dll
2014-07-09 20:18:50 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-07-09 20:18:50 ----A---- C:\Windows\system32\wdigest.dll
2014-07-09 20:18:50 ----A---- C:\Windows\system32\ncrypt.dll
2014-07-09 20:18:50 ----A---- C:\Windows\system32\msv1_0.dll
2014-07-09 20:18:49 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-07-09 20:18:49 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-07-09 20:18:49 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-07-09 20:18:49 ----A---- C:\Windows\system32\TSpkg.dll
2014-07-09 20:18:48 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-07-09 20:18:48 ----A---- C:\Windows\system32\credssp.dll
2014-07-09 20:18:41 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-07-09 20:18:41 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-07-09 20:18:41 ----A---- C:\Windows\system32\iernonce.dll
2014-07-09 20:18:40 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-07-09 20:18:39 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-07-09 20:18:39 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-07-09 20:18:39 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-07-09 20:18:39 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 20:18:39 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-07-09 20:18:39 ----A---- C:\Windows\system32\iedkcs32.dll
2014-07-09 20:18:38 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-07-09 20:18:38 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-07-09 20:18:36 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-07-09 20:18:35 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-07-09 20:18:34 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-07-09 20:18:34 ----A---- C:\Windows\system32\urlmon.dll
2014-07-09 20:18:33 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-07-09 20:18:33 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-07-09 20:18:32 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-07-09 20:18:32 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-07-09 20:18:32 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-07-09 20:18:32 ----A---- C:\Windows\system32\msfeeds.dll
2014-07-09 20:18:32 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-07-09 20:18:32 ----A---- C:\Windows\system32\dxtmsft.dll
2014-07-09 20:18:30 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-07-09 20:18:30 ----A---- C:\Windows\system32\iesetup.dll
2014-07-09 20:18:30 ----A---- C:\Windows\system32\ie4uinit.exe
2014-07-09 20:18:28 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-07-09 20:18:28 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-07-09 20:18:28 ----A---- C:\Windows\system32\iertutil.dll
2014-07-09 20:18:27 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-07-09 20:18:27 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-07-09 20:18:27 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-07-09 20:18:26 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-07-09 20:18:26 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-07-09 20:18:26 ----A---- C:\Windows\system32\jsproxy.dll
2014-07-09 20:18:25 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-07-09 20:18:23 ----A---- C:\Windows\system32\dxtrans.dll
2014-07-09 20:18:22 ----A---- C:\Windows\system32\ieui.dll
2014-07-09 20:18:21 ----A---- C:\Windows\system32\ieframe.dll
2014-07-09 20:18:20 ----A---- C:\Windows\system32\mshtmled.dll
2014-07-09 20:18:18 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-07-09 20:18:18 ----A---- C:\Windows\system32\jscript9diag.dll
2014-07-09 20:18:18 ----A---- C:\Windows\system32\ieUnatt.exe
2014-07-09 20:18:17 ----A---- C:\Windows\system32\vbscript.dll
2014-07-09 20:18:17 ----A---- C:\Windows\system32\jscript9.dll
2014-07-09 20:18:16 ----A---- C:\Windows\system32\wininet.dll
2014-07-09 20:18:16 ----A---- C:\Windows\system32\ieapfltr.dll
2014-07-09 20:18:15 ----A---- C:\Windows\system32\msrating.dll
2014-07-09 20:18:15 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-07-09 20:18:14 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-09 20:18:12 ----A---- C:\Windows\system32\mshtml.dll
2014-07-09 20:17:36 ----A---- C:\Windows\system32\lsasrv.dll
2014-07-09 20:17:35 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-07-09 20:17:35 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-06-19 22:23:37 ----A---- C:\Users\Samsung\AppData\Roaming\temp.ini
2014-06-11 09:38:20 ----A---- C:\Windows\system32\usp10.dll
2014-06-11 09:38:19 ----A---- C:\Windows\SYSWOW64\usp10.dll
2014-06-11 09:38:18 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-06-11 09:38:17 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2014-06-11 09:38:15 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2014-06-11 09:38:15 ----A---- C:\Windows\system32\msxml6.dll
2014-06-11 09:38:15 ----A---- C:\Windows\system32\msxml3.dll
2014-06-11 09:38:14 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2014-06-11 09:38:14 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-06-11 09:38:14 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-06-11 09:38:14 ----A---- C:\Windows\system32\msxml6r.dll
2014-06-11 09:38:14 ----A---- C:\Windows\system32\msxml3r.dll
2014-06-11 09:38:12 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-06-11 09:38:12 ----A---- C:\Windows\system32\rdpcorets.dll
2014-06-01 12:34:40 ----D---- C:\Users\Samsung\AppData\Roaming\ProductData
2014-05-30 14:37:07 ----ASH---- C:\pagefile.sys
2014-05-14 16:53:09 ----A---- C:\Windows\system32\shell32.dll
2014-05-14 16:53:07 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-05-14 16:46:28 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-05-14 16:46:27 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-05-14 16:46:26 ----A---- C:\Windows\system32\winlogon.exe
2014-05-14 16:46:25 ----A---- C:\Windows\system32\objsel.dll
2014-05-14 16:46:25 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-05-14 16:46:23 ----A---- C:\Windows\SYSWOW64\objsel.dll
2014-05-14 16:46:20 ----A---- C:\Windows\system32\KernelBase.dll
2014-05-14 16:46:19 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-05-14 16:46:17 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-05-14 16:46:15 ----A---- C:\Windows\SYSWOW64\dimsroam.dll
2014-05-14 16:46:15 ----A---- C:\Windows\system32\dimsroam.dll
2014-05-14 16:46:15 ----A---- C:\Windows\system32\cngprovider.dll
2014-05-14 16:46:15 ----A---- C:\Windows\system32\adprovider.dll
2014-05-14 16:46:14 ----A---- C:\Windows\SYSWOW64\cngprovider.dll
2014-05-14 16:46:14 ----A---- C:\Windows\SYSWOW64\adprovider.dll
2014-05-14 16:46:14 ----A---- C:\Windows\system32\dpapiprovider.dll
2014-05-14 16:46:14 ----A---- C:\Windows\system32\capiprovider.dll
2014-05-14 16:46:13 ----A---- C:\Windows\SYSWOW64\dpapiprovider.dll
2014-05-14 16:46:13 ----A---- C:\Windows\SYSWOW64\capiprovider.dll
2014-05-14 16:46:11 ----A---- C:\Windows\system32\sspicli.dll
2014-05-14 16:46:11 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-05-14 16:46:10 ----A---- C:\Windows\system32\wincredprovider.dll
2014-05-14 16:46:09 ----A---- C:\Windows\SYSWOW64\wincredprovider.dll
2014-05-14 16:46:09 ----A---- C:\Windows\system32\lsass.exe
2014-05-14 16:46:08 ----A---- C:\Windows\system32\sspisrv.dll
2014-05-14 16:46:07 ----A---- C:\Windows\system32\secur32.dll

======List of files/folders modified in the last 3 months======

2014-07-29 21:09:32 ----D---- C:\Windows\temp
2014-07-29 21:07:06 ----D---- C:\Users\Samsung\AppData\Roaming\Skype
2014-07-29 17:40:58 ----D---- C:\Windows\system32\config
2014-07-29 17:35:02 ----RD---- C:\Program Files
2014-07-29 17:32:39 ----D---- C:\Windows\system32\Tasks
2014-07-29 17:32:11 ----D---- C:\Program Files (x86)\IObit
2014-07-29 17:32:08 ----D---- C:\Windows\Tasks
2014-07-29 17:30:21 ----SHD---- C:\Windows\Installer
2014-07-29 17:30:14 ----D---- C:\Config.Msi
2014-07-29 17:30:03 ----RD---- C:\Program Files (x86)
2014-07-29 17:29:12 ----D---- C:\Users\Samsung\AppData\Roaming\Seznam.cz
2014-07-29 17:25:50 ----D---- C:\Users\Samsung\AppData\Roaming\uTorrent
2014-07-29 17:25:42 ----A---- C:\Windows\SYSWOW64\log.txt
2014-07-29 09:14:43 ----SHD---- C:\System Volume Information
2014-07-28 22:59:31 ----D---- C:\Windows\inf
2014-07-28 22:26:57 ----D---- C:\Windows\SoftwareDistribution
2014-07-28 21:12:03 ----AD---- C:\ProgramData\Temp
2014-07-28 20:33:33 ----D---- C:\Windows\system32\catroot2
2014-07-28 20:33:32 ----D---- C:\Windows
2014-07-28 20:33:25 ----D---- C:\Windows\debug
2014-07-28 20:29:19 ----D---- C:\ProgramData
2014-07-28 20:27:41 ----HD---- C:\Windows\system32\GroupPolicy
2014-07-28 20:27:41 ----D---- C:\Windows\SYSWOW64\GroupPolicy
2014-07-28 20:27:40 ----D---- C:\Program Files (x86)\Google
2014-07-28 20:27:38 ----RD---- C:\Users
2014-07-26 20:35:49 ----D---- C:\Users\Samsung\AppData\Roaming\Nitro PDF
2014-07-25 06:00:27 ----D---- C:\Program Files\Microsoft Silverlight
2014-07-25 06:00:26 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-07-24 21:21:47 ----D---- C:\Windows\System32
2014-07-23 13:14:42 ----D---- C:\Windows\Prefetch
2014-07-22 17:30:52 ----D---- C:\ProgramData\ProductData
2014-07-22 17:30:45 ----D---- C:\ProgramData\IObit
2014-07-22 17:24:10 ----SHD---- C:\$RECYCLE.BIN
2014-07-20 22:21:46 ----D---- C:\Program Files (x86)\DVDVideoSoft
2014-07-20 22:20:33 ----RSD---- C:\Windows\assembly
2014-07-20 22:20:23 ----D---- C:\Users\Samsung\AppData\Roaming\DVDVideoSoft
2014-07-20 13:03:08 ----D---- C:\Windows\system32\NDF
2014-07-10 22:15:15 ----D---- C:\Windows\system32\catroot
2014-07-10 21:35:57 ----D---- C:\Windows\winsxs
2014-07-10 21:14:45 ----D---- C:\Windows\SysWOW64
2014-07-10 21:14:39 ----D---- C:\Program Files (x86)\iTunes
2014-07-10 14:23:02 ----D---- C:\Program Files\Windows Journal
2014-07-10 14:23:01 ----SD---- C:\Windows\system32\CompatTel
2014-07-10 14:23:01 ----D---- C:\Windows\SYSWOW64\Dism
2014-07-10 14:23:00 ----D---- C:\Windows\system32\Dism
2014-07-10 14:22:59 ----D---- C:\Windows\ehome
2014-07-10 14:22:58 ----D---- C:\Windows\system32\drivers
2014-07-10 14:22:57 ----D---- C:\Windows\system32\cs-CZ
2014-07-10 14:22:56 ----D---- C:\Windows\SYSWOW64\en-US
2014-07-10 14:22:56 ----D---- C:\Program Files\Internet Explorer
2014-07-10 14:22:55 ----D---- C:\Windows\system32\en-US
2014-07-10 14:22:53 ----D---- C:\Program Files (x86)\Internet Explorer
2014-07-09 22:12:55 ----D---- C:\Windows\system32\MRT
2014-07-09 22:10:37 ----A---- C:\Windows\system32\MRT.exe
2014-07-09 22:09:58 ----D---- C:\ProgramData\Microsoft Help
2014-07-07 12:56:10 ----D---- C:\Users\Samsung\AppData\Roaming\OpenCandy
2014-07-06 20:23:23 ----D---- C:\Windows\system32\wdi
2014-06-18 20:19:53 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-06-12 12:19:24 ----D---- C:\Windows\system32\DriverStore
2014-05-25 22:06:34 ----RD---- C:\Program Files (x86)\Skype
2014-05-23 14:45:58 ----D---- C:\ProgramData\Skype
2014-05-23 14:45:50 ----D---- C:\Program Files (x86)\Common Files
2014-05-16 15:10:01 ----D---- C:\Windows\Microsoft.NET

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-04-27 540696]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2011-08-04 146432]
R1 SABI;SAMSUNG Kernel Driver For Windows 7; \??\C:\Windows\system32\Drivers\SABI.sys [2009-05-28 13824]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2011-01-25 60416]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2011-08-09 202576]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2011-08-04 137144]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl664.sys [2012-02-08 3065408]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 BTWAMPFL;btwampfl; C:\Windows\system32\DRIVERS\btwampfl.sys [2012-02-08 348712]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2012-02-08 106536]
R3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\DRIVERS\btwavdt.sys [2012-02-08 138280]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2012-02-08 39464]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2012-02-08 21416]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys [2010-11-10 31088]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2012-02-08 56344]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-02-08 10611552]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2012-02-08 158976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-02-08 2647528]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2012-02-08 289280]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2012-02-08 409192]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2012-02-08 1377840]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2011-01-25 18432]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files (x86)\MediaCoder\SysInfoX64.sys []
S3 Netaapl;Apple Mobile Device Ethernet Service; C:\Windows\system32\DRIVERS\netaapl64.sys [2013-07-25 23040]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2011-08-17 171008]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2013-11-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-11-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2013-11-23 30208]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys []
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-12-13 54784]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-18 65432]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-06-12 43336]
R2 Application Updater;Application Updater; C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe [2014-07-28 811384]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2010-10-22 953632]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-04-11 1390720]
R2 d0e87c27;PC-Sustainer; C:\Windows\syswow64\rundll32.exe [2009-07-14 44544]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-09-22 974944]
R2 Guard.Mail.ru;Guard.Mail.ru; C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [2012-02-11 1564368]
R2 ICQ Service;ICQ Service; C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe [2011-08-17 247872]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-02-08 325656]
R2 NitroReaderDriverReadSpool2;NitroPDFReaderDriverCreatorReadSpool2; C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [2012-04-11 204304]
R2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [2011-12-12 793048]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2012-02-08 244904]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2012-11-02 2365792]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-02-08 2533400]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-07-08 641352]
S2 BackupStack;Computer Backup (MyPC Backup); C:\Program Files (x86)\MyPC Backup\BackupStack.exe []
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2014-05-04 2152736]
S2 PCSUService;PC Speed Up Service; C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe [2012-11-07 312176]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S2 supdate;Software Update Service (supdate); C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [2012-09-19 139576]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-06-19 111616]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-02-12 1255736]
S4 APNMCP;Ask Update Service; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [2013-08-16 164816]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc []
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /medsvc []
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

V logu toho vidim pozehnane. IObit nema s hrama nic spolecneho. Ale neodinstaloval jste vsechno, nebo se to nezdarilo. Odpalim to pak silou.


Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Clean
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.

Prý to dlouho běželo (cca tak 20 minut), ale vždy se to zasekne zde.

Zkuste to v nouzovem rezimu.

To samé i v nouzovém režimu.

Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu http://forum.viry.cz/viewtopic.php?f=29&t=137928 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 7.8.2014
Scan Time: 19:27:28
Logfile: log.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.08.07.07
Rootkit Database: v2014.08.04.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Samsung

Scan Type: Custom Scan
Result: Completed
Objects Scanned: 571674
Time Elapsed: 2 hr, 17 min, 23 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)

MBAM odinstalujte.


Pokud nemate, zazalohujte si radeji dulezita data (fotky, dokumenty, atd.)

Nepouzivejte ComboFix bez predchozi domluvy! Je to poruseni pravidel fora a ztratite tim narok na pomoc!

Stahnete ComboFix http://download.bleepingcomputer.com/sUBs/ComboFix.exe a ulozte ho na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Kliknete na ComboFix pravym mysidlem a levym na Spustit jako spravce
Odsouhlaste licencni podminky a nechte program pracovat. Jestli vam nabidne instalaci Konzoly pro zotaveni, souhlaste.
Po dobu skenu nic nespoustejte, nikam neklikejte.
Po dokonceni skenovani (muze dojit i k restartu pc) by se mel vytvorit log, ktery bude umisteny zde C:\ComboFix.txt
Jeho obsah sem zkopirujte

Kdyby po restartu nenabehl windows, restartujte znovu, mackejte klavesu F8 a zvolte - Posledni znama funkcni konfigurace
Kdyz windows nabehne, ale pri spousteni ruznych programu bude hlasena chyba, staci restartovat pc a bude to v poradku

ComboFix 14-08-06.02 - Samsung 10.08.2014 14:05:02.2.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3893.2371 [GMT 2:00]
Spu?t?n? z: c:\users\Samsung\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 5.0 *Disabled/Outdated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 5.0 *Disabled/Outdated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatn? v?mazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\prefs.js
c:\program files (x86)\Adblocker
c:\program files (x86)\Adblocker\HtIXv.dat
c:\program files (x86)\Adblocker\HtIXv.tlb
c:\program files (x86)\Adblocker\SZGM9f5g.dat
c:\program files (x86)\Adblocker\SZGM9f5g.tlb
c:\program files (x86)\Vaudiix
c:\program files (x86)\Vaudiix\WmnjGk.dat
c:\program files (x86)\Vaudiix\WmnjGk.tlb
c:\programdata\Adblocker
c:\programdata\Adblocker\AQS7kI1rt.dat
c:\programdata\Adblocker\hO2XNj.dat
c:\programdata\DisCountExTENsI
c:\programdata\DisCountExTENsI\b7tLzzq9TS.dat
c:\programdata\DisCountExTENsI\b7tLzzq9TS.tlb
c:\programdata\MySearch
c:\programdata\MySearch\BCDUApgVdw.dat
c:\programdata\Vaudiix
c:\programdata\Vaudiix\95t3_OH.dat
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\OmneMHcb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\z8tdVAy.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\hGOQCKxHL9.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\jNQO5V0lW1p.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\newtab.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\NKA7Vuiz.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\OmneMHcb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\z8tdVAy.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\hGOQCKxHL9.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\jNQO5V0lW1p.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\newtab.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\NKA7Vuiz.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\OmneMHcb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\z8tdVAy.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\hGOQCKxHL9.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\jNQO5V0lW1p.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\newtab.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\NKA7Vuiz.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\background.html
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\content.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\lsdb.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\manifest.json
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\OmneMHcb.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\background.html
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\content.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\lsdb.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\manifest.json
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\z8tdVAy.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\background.html
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\content.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\hGOQCKxHL9.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\lsdb.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\manifest.json
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\background.html
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\content.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\jNQO5V0lW1p.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\lsdb.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\manifest.json
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\newtab.html
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\background.html
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\content.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\lsdb.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\manifest.json
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\NKA7Vuiz.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\background.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\content.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\lsdb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\manifest.json
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\OmneMHcb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\background.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\content.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\lsdb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\manifest.json
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\z8tdVAy.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\background.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\content.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\hGOQCKxHL9.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\lsdb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\manifest.json
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\background.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\content.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\jNQO5V0lW1p.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\lsdb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\manifest.json
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\newtab.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\background.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\content.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\lsdb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\manifest.json
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\NKA7Vuiz.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\OmneMHcb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\z8tdVAy.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\hGOQCKxHL9.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\jNQO5V0lW1p.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\newtab.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\background.html
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\content.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\lsdb.js
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\manifest.json
c:\users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\NKA7Vuiz.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\OmneMHcb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\z8tdVAy.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\hGOQCKxHL9.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\jNQO5V0lW1p.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\newtab.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\background.html
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\NKA7Vuiz.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\OmneMHcb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\z8tdVAy.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\hGOQCKxHL9.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\jNQO5V0lW1p.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\newtab.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\NKA7Vuiz.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\background.html
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\content.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\lsdb.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\manifest.json
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\OmneMHcb.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\background.html
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\content.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\lsdb.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\manifest.json
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\z8tdVAy.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\background.html
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\content.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\hGOQCKxHL9.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\lsdb.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\manifest.json
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\background.html
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\content.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\jNQO5V0lW1p.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\lsdb.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\manifest.json
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\newtab.html
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\background.html
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\content.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\lsdb.js
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\manifest.json
c:\users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\NKA7Vuiz.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\background.html
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\content.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\lsdb.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\manifest.json
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\OmneMHcb.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\background.html
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\content.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\lsdb.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\manifest.json
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\z8tdVAy.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\background.html
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\content.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\hGOQCKxHL9.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\lsdb.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\manifest.json
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\background.html
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\content.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\jNQO5V0lW1p.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\lsdb.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\manifest.json
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\newtab.html
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\background.html
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\content.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\lsdb.js
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\manifest.json
c:\users\Guest\AppData\Local\Torch\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\NKA7Vuiz.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\OmneMHcb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\z8tdVAy.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\hGOQCKxHL9.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\jNQO5V0lW1p.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\newtab.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\NKA7Vuiz.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\OmneMHcb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\z8tdVAy.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\hGOQCKxHL9.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\jNQO5V0lW1p.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\newtab.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\NKA7Vuiz.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\OmneMHcb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\z8tdVAy.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\hGOQCKxHL9.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\jNQO5V0lW1p.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\newtab.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\NKA7Vuiz.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\background.html
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\content.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\OmneMHcb.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\background.html
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\content.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\z8tdVAy.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\background.html
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\content.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\hGOQCKxHL9.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\jNQO5V0lW1p.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\newtab.html
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\background.html
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\content.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\NKA7Vuiz.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\background.html
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\content.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\OmneMHcb.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\background.html
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\content.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\z8tdVAy.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\background.html
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\content.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\hGOQCKxHL9.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\jNQO5V0lW1p.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\newtab.html
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\background.html
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\content.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\NKA7Vuiz.js
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\background.html
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\content.js
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\lsdb.js
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\manifest.json
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\OmneMHcb.js
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\background.html
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\content.js
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\lsdb.js
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\manifest.json
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\z8tdVAy.js
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\background.html
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\content.js
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\hGOQCKxHL9.js
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\lsdb.js
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\manifest.json
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\background.html
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\content.js
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\jNQO5V0lW1p.js
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\lsdb.js
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\manifest.json
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\newtab.html
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\background.html
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\content.js
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\lsdb.js
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\manifest.json
c:\users\Samsung\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\NKA7Vuiz.js
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\background.html
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\content.js
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\lsdb.js
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\manifest.json
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\OmneMHcb.js
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\background.html
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\content.js
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\lsdb.js
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\manifest.json
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\z8tdVAy.js
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\background.html
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\content.js
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\hGOQCKxHL9.js
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\lsdb.js
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\manifest.json
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\background.html
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\content.js
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\jNQO5V0lW1p.js
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\lsdb.js
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\manifest.json
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\newtab.html
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\background.html
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\content.js
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\lsdb.js
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\manifest.json
c:\users\Samsung\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\NKA7Vuiz.js
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\background.html
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\content.js
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\lsdb.js
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\manifest.json
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\OmneMHcb.js
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\background.html
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\content.js
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\lsdb.js
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\manifest.json
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\z8tdVAy.js
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\background.html
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\content.js
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\hGOQCKxHL9.js
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\lsdb.js
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\manifest.json
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\background.html
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\content.js
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\jNQO5V0lW1p.js
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\lsdb.js
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\manifest.json
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\newtab.html
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\background.html
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\content.js
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\lsdb.js
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\manifest.json
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\NKA7Vuiz.js
c:\users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\background.html
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\content.js
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\lsdb.js
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\manifest.json
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\OmneMHcb.js
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\background.html
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\content.js
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\lsdb.js
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\manifest.json
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\z8tdVAy.js
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\background.html
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\content.js
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\hGOQCKxHL9.js
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\lsdb.js
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\manifest.json
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\background.html
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\content.js
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\jNQO5V0lW1p.js
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\lsdb.js
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\manifest.json
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\newtab.html
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\background.html
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\content.js
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\lsdb.js
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\manifest.json
c:\users\Samsung\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\NKA7Vuiz.js
c:\users\Samsung\AppData\Local\Packages\windows_ie_ac_001\AC\{182DDFA4-3880-DF7B-C123-085CEAE401CE}
c:\users\Samsung\AppData\Local\Packages\windows_ie_ac_001\AC\{182DDFA4-3880-DF7B-C123-085CEAE401CE}\Adblocker.2.9.dat
c:\users\Samsung\AppData\Local\Packages\windows_ie_ac_001\AC\{30650B1A-9060-EF7D-7864-27231C14BD96}
c:\users\Samsung\AppData\Local\Packages\windows_ie_ac_001\AC\{30650B1A-9060-EF7D-7864-27231C14BD96}\Adblocker.2.9.dat
c:\users\Samsung\AppData\Local\Packages\windows_ie_ac_001\AC\{336048D2-A3E7-E9B4-229E-490FA784F6EF}
c:\users\Samsung\AppData\Local\Packages\windows_ie_ac_001\AC\{336048D2-A3E7-E9B4-229E-490FA784F6EF}\Vaudiix.2.9.dat
c:\users\Samsung\AppData\Local\Packages\windows_ie_ac_001\AC\{C3032D18-65B8-774F-E875-1276C3FEB304}
c:\users\Samsung\AppData\Local\Packages\windows_ie_ac_001\AC\{C3032D18-65B8-774F-E875-1276C3FEB304}\DisCountExTENsI.2.9.dat
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\background.html
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\content.js
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\lsdb.js
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\manifest.json
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\enkpbejkfpnalhoingldehhhekgfjich\1.3\OmneMHcb.js
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\background.html
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\content.js
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\lsdb.js
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\manifest.json
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\ihpcdjelcodenkpfkbaficnkgkmljjbf\189\z8tdVAy.js
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\background.html
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\content.js
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\hGOQCKxHL9.js
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\lsdb.js
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\kidgbngfandbbkocnbbaikfglladpooa\1.3\manifest.json
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\background.html
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\content.js
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\jNQO5V0lW1p.js
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\lsdb.js
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\manifest.json
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\ncaihdahcdppnopdpbgfdmkaefhnipbi\2.1\newtab.html
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\background.html
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\content.js
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\lsdb.js
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\manifest.json
c:\users\Samsung\AppData\Local\Torch\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak\189\NKA7Vuiz.js
c:\users\Samsung\AppData\LocalLow\{182DDFA4-3880-DF7B-C123-085CEAE401CE}
c:\users\Samsung\AppData\LocalLow\{182DDFA4-3880-DF7B-C123-085CEAE401CE}\Adblocker.2.9.dat
c:\users\Samsung\AppData\LocalLow\{30650B1A-9060-EF7D-7864-27231C14BD96}
c:\users\Samsung\AppData\LocalLow\{30650B1A-9060-EF7D-7864-27231C14BD96}\Adblocker.2.9.dat
c:\users\Samsung\AppData\LocalLow\{336048D2-A3E7-E9B4-229E-490FA784F6EF}
c:\users\Samsung\AppData\LocalLow\{336048D2-A3E7-E9B4-229E-490FA784F6EF}\Vaudiix.2.9.dat
c:\users\Samsung\AppData\LocalLow\{C3032D18-65B8-774F-E875-1276C3FEB304}
c:\users\Samsung\AppData\LocalLow\{C3032D18-65B8-774F-E875-1276C3FEB304}\DisCountExTENsI.2.9.dat
.
.
((((((((((((((((((((((((((((((((((((((( Ovlada?e/Slu?by )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_PCSUService
.
.
((((((((((((((((((((((((( Soubory vytvo?en? od 2014-07-10 do 2014-08-10 )))))))))))))))))))))))))))))))
.
.
2014-08-10 12:16 . 2014-08-10 12:16 -------- d-----w- c:\users\Public\AppData\Local\temp
2014-08-10 12:16 . 2014-08-10 12:16 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-08-07 16:40 . 2014-08-07 16:40 -------- d-----w- c:\programdata\Malwarebytes
2014-07-31 18:35 . 2010-08-30 06:34 536576 ----a-w- c:\windows\SysWow64\sqlite3.dll
2014-07-31 18:34 . 2014-08-06 10:37 -------- d-----w- C:\AdwCleaner
2014-07-29 15:35 . 2014-07-29 19:09 -------- d-----w- c:\program files\trend micro
2014-07-29 15:30 . 2014-08-08 13:09 -------- d-----w- c:\program files (x86)\Application Updater
2014-07-29 15:30 . 2014-08-07 19:51 -------- d-----w- c:\program files (x86)\IObit Apps Toolbar
2014-07-28 21:02 . 2014-07-29 15:35 -------- d-----w- C:\rsit
2014-07-28 18:29 . 2014-07-28 18:30 -------- d-----w- c:\users\Samsung\AppData\Roaming\SkypEmoticons
2014-07-28 18:28 . 2014-08-08 13:09 -------- d-----w- c:\programdata\EZSoftware
2014-07-28 18:27 . 2014-07-28 18:27 -------- d-----w- c:\users\Samsung\AppData\Local\Packages
2014-07-28 18:27 . 2014-08-07 10:59 -------- d-----w- c:\programdata\fb6152e1da7df93e
2014-07-28 18:27 . 2014-07-28 18:27 -------- d-----w- c:\users\Samsung\AppData\Local\Torch
2014-07-28 18:27 . 2014-07-28 18:27 -------- d-----w- c:\users\Samsung\AppData\Local\Chromatic Browser
2014-07-28 18:27 . 2014-07-28 18:27 -------- d-----w- c:\users\Samsung\AppData\Local\Comodo
2014-07-28 18:27 . 2014-07-28 18:27 -------- d-----w- c:\users\HomeGroupUser$
2014-07-28 18:27 . 2014-07-28 18:27 -------- d-----w- c:\users\Guest
2014-07-28 18:27 . 2014-07-28 18:27 -------- d-----w- c:\users\Administrator
2014-07-28 18:26 . 2014-07-28 18:29 -------- d-----w- c:\programdata\InstallMate
2014-07-24 19:21 . 2014-07-24 19:21 -------- d-----w- c:\windows\system32\%LOCALAPPDATA%
2014-07-22 15:14 . 2014-07-22 15:14 -------- d-----w- c:\program files (x86)\GUM376E.tmp
2014-07-22 15:14 . 2014-07-22 15:14 6010880 ----a-w- c:\program files (x86)\GUT376F.tmp
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M v?pis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-07-09 20:10 . 2012-02-12 09:41 96441528 ----a-w- c:\windows\system32\MRT.exe
2014-07-02 03:09 . 2014-08-08 13:16 10924376 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{78A9EAE6-8826-49F1-A73D-8C47CA6D7EE3}\mpengine.dll
2014-06-30 02:09 . 2014-07-09 18:19 519168 ----a-w- c:\windows\system32\aepdu.dll
2014-06-30 02:04 . 2014-07-09 18:19 424448 ----a-w- c:\windows\system32\aeinv.dll
2014-06-20 20:14 . 2014-07-09 18:18 266424 ----a-w- c:\windows\system32\iedkcs32.dll
2014-06-19 01:39 . 2014-07-09 18:18 23464448 ----a-w- c:\windows\system32\mshtml.dll
2014-06-19 01:06 . 2014-07-09 18:18 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2014-06-19 01:06 . 2014-07-09 18:18 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll
2014-06-19 00:48 . 2014-07-09 18:18 2768384 ----a-w- c:\windows\system32\iertutil.dll
2014-06-19 00:42 . 2014-07-09 18:18 548352 ----a-w- c:\windows\system32\vbscript.dll
2014-06-19 00:42 . 2014-07-09 18:18 66048 ----a-w- c:\windows\system32\iesetup.dll
2014-06-19 00:41 . 2014-07-09 18:18 48640 ----a-w- c:\windows\system32\ieetwproxystub.dll
2014-06-19 00:41 . 2014-07-09 18:18 83968 ----a-w- c:\windows\system32\MshtmlDac.dll
2014-06-19 00:32 . 2014-07-09 18:18 51200 ----a-w- c:\windows\system32\jsproxy.dll
2014-06-19 00:31 . 2014-07-09 18:18 33792 ----a-w- c:\windows\system32\iernonce.dll
2014-06-19 00:26 . 2014-07-09 18:18 598016 ----a-w- c:\windows\system32\ieui.dll
2014-06-19 00:24 . 2014-07-09 18:18 139264 ----a-w- c:\windows\system32\ieUnatt.exe
2014-06-19 00:24 . 2014-07-09 18:18 111616 ----a-w- c:\windows\system32\ieetwcollector.exe
2014-06-19 00:23 . 2014-07-09 18:18 752640 ----a-w- c:\windows\system32\jscript9diag.dll
2014-06-19 00:14 . 2014-07-09 18:18 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2014-06-19 00:09 . 2014-07-09 18:18 452608 ----a-w- c:\windows\system32\dxtmsft.dll
2014-06-18 23:59 . 2014-07-09 18:18 38400 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
2014-06-18 23:56 . 2014-07-09 18:18 2724864 ----a-w- c:\windows\SysWow64\mshtml.tlb
2014-06-18 23:53 . 2014-07-09 18:18 195584 ----a-w- c:\windows\system32\msrating.dll
2014-06-18 23:51 . 2014-07-09 18:18 5721088 ----a-w- c:\windows\system32\jscript9.dll
2014-06-18 23:50 . 2014-07-09 18:18 85504 ----a-w- c:\windows\system32\mshtmled.dll
2014-06-18 23:48 . 2014-07-09 18:18 292864 ----a-w- c:\windows\system32\dxtrans.dll
2014-06-18 23:39 . 2014-07-09 18:18 608768 ----a-w- c:\windows\system32\ie4uinit.exe
2014-06-18 23:38 . 2014-07-09 18:18 455168 ----a-w- c:\windows\SysWow64\vbscript.dll
2014-06-18 23:37 . 2014-07-09 18:18 61952 ----a-w- c:\windows\SysWow64\iesetup.dll
2014-06-18 23:36 . 2014-07-09 18:18 51200 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll
2014-06-18 23:35 . 2014-07-09 18:18 62464 ----a-w- c:\windows\SysWow64\MshtmlDac.dll
2014-06-18 23:33 . 2014-07-09 18:18 631808 ----a-w- c:\windows\system32\msfeeds.dll
2014-06-18 23:27 . 2014-07-09 18:18 1249280 ----a-w- c:\windows\system32\mshtmlmedia.dll
2014-06-18 23:27 . 2014-07-09 18:18 2040832 ----a-w- c:\windows\system32\inetcpl.cpl
2014-06-18 23:23 . 2014-07-09 18:18 112128 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2014-06-18 23:22 . 2014-07-09 18:18 592896 ----a-w- c:\windows\SysWow64\jscript9diag.dll
2014-06-18 23:06 . 2014-07-09 18:18 32256 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2014-06-18 22:58 . 2014-07-09 18:18 2266112 ----a-w- c:\windows\system32\wininet.dll
2014-06-18 22:52 . 2014-07-09 18:18 4254720 ----a-w- c:\windows\SysWow64\jscript9.dll
2014-06-18 22:51 . 2014-07-09 18:18 13527040 ----a-w- c:\windows\system32\ieframe.dll
2014-06-18 22:46 . 2014-07-09 18:18 1068032 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2014-06-18 22:45 . 2014-07-09 18:18 1964544 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2014-06-18 22:34 . 2014-07-09 18:18 1393664 ----a-w- c:\windows\system32\urlmon.dll
2014-06-18 22:15 . 2014-07-09 18:18 846336 ----a-w- c:\windows\system32\ieapfltr.dll
2014-06-18 22:13 . 2014-07-09 18:18 1791488 ----a-w- c:\windows\SysWow64\wininet.dll
2014-06-18 02:18 . 2014-07-09 18:18 692736 ----a-w- c:\windows\system32\osk.exe
2014-06-18 01:51 . 2014-07-09 18:18 646144 ----a-w- c:\windows\SysWow64\osk.exe
2014-06-18 01:10 . 2014-07-09 18:18 3157504 ----a-w- c:\windows\system32\win32k.sys
2014-06-06 10:10 . 2014-07-09 18:18 624128 ----a-w- c:\windows\system32\qedit.dll
2014-06-06 09:44 . 2014-07-09 18:18 509440 ----a-w- c:\windows\SysWow64\qedit.dll
2014-06-05 14:45 . 2014-07-09 18:17 1460736 ----a-w- c:\windows\system32\lsasrv.dll
2014-06-05 14:26 . 2014-07-09 18:17 22016 ----a-w- c:\windows\SysWow64\secur32.dll
2014-06-05 14:25 . 2014-07-09 18:17 96768 ----a-w- c:\windows\SysWow64\sspicli.dll
2014-05-30 08:08 . 2014-07-09 18:18 210944 ----a-w- c:\windows\system32\wdigest.dll
2014-05-30 08:08 . 2014-07-09 18:18 86528 ----a-w- c:\windows\system32\TSpkg.dll
2014-05-30 08:08 . 2014-07-09 18:18 340992 ----a-w- c:\windows\system32\schannel.dll
2014-05-30 08:08 . 2014-07-09 18:18 314880 ----a-w- c:\windows\system32\msv1_0.dll
2014-05-30 08:08 . 2014-07-09 18:18 307200 ----a-w- c:\windows\system32\ncrypt.dll
2014-05-30 08:08 . 2014-07-09 18:18 728064 ----a-w- c:\windows\system32\kerberos.dll
2014-05-30 08:08 . 2014-07-09 18:18 22016 ----a-w- c:\windows\system32\credssp.dll
2014-05-30 07:52 . 2014-07-09 18:18 172032 ----a-w- c:\windows\SysWow64\wdigest.dll
2014-05-30 07:52 . 2014-07-09 18:18 65536 ----a-w- c:\windows\SysWow64\TSpkg.dll
2014-05-30 07:52 . 2014-07-09 18:18 247808 ----a-w- c:\windows\SysWow64\schannel.dll
2014-05-30 07:52 . 2014-07-09 18:18 220160 ----a-w- c:\windows\SysWow64\ncrypt.dll
2014-05-30 07:52 . 2014-07-09 18:18 259584 ----a-w- c:\windows\SysWow64\msv1_0.dll
2014-05-30 07:52 . 2014-07-09 18:18 550912 ----a-w- c:\windows\SysWow64\kerberos.dll
2014-05-30 07:52 . 2014-07-09 18:18 17408 ----a-w- c:\windows\SysWow64\credssp.dll
2014-05-30 06:45 . 2014-07-09 18:18 497152 ----a-w- c:\windows\system32\drivers\afd.sys
.
.
(((((((((((((((((((((((((((((((((( Spou?t?c? body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.

*Pozn?mka* pr?zdn? z?znamy a legitimn? v?choz? ?daje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{03EB0E9C-7A91-4381-A220-9B52B641CDB1}"= "c:\program files (x86)\IObit Apps Toolbar\IE\9.6\iobitappsToolbarIE.dll" [2014-07-28 1400128]
.
[HKEY_CLASSES_ROOT\clsid\{03eb0e9c-7a91-4381-a220-9b52b641cdb1}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
2014-07-28 11:13 1400128 ----a-w- c:\program files (x86)\IObit Apps Toolbar\IE\9.6\iobitappsToolbarIE.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{41545534-2D56-3700-76A7-7A786E7484D7}]
2013-08-16 08:49 12240 ----a-w- c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Passport.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{bfc39e47-d643-4dc2-aa1d-61377501c844}]
2011-10-31 11:02 81920 ----a-w- c:\program files (x86)\atube\atubeX.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{bfc39e47-d643-4dc2-aa1d-61377501c844}"= "c:\program files (x86)\atube\atubeX.dll" [2011-10-31 81920]
"{41545534-2D56-3700-76A7-7A786E7484D7}"= "c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Passport.dll" [2013-08-16 12240]
"{03EB0E9C-7A91-4381-A220-9B52B641CDB1}"= "c:\program files (x86)\IObit Apps Toolbar\IE\9.6\iobitappsToolbarIE.dll" [2014-07-28 1400128]
.
[HKEY_CLASSES_ROOT\clsid\{bfc39e47-d643-4dc2-aa1d-61377501c844}]
.
[HKEY_CLASSES_ROOT\clsid\{41545534-2d56-3700-76a7-7a786e7484d7}]
.
[HKEY_CLASSES_ROOT\clsid\{03eb0e9c-7a91-4381-a220-9b52b641cdb1}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ooVoo.exe"="c:\program files (x86)\ooVoo\oovoo.exe" [2012-08-20 27040888]
"EA Core"="c:\program files (x86)\Electronic Arts\EADM\Core.exe" [2009-03-28 3325952]
"WebcamMaxAutoRun"="c:\program files (x86)\WebcamMax\wcmmon.exe" [2011-07-17 1038848]
"cz.seznam.software.autoupdate"="c:\users\Samsung\AppData\Roaming\Seznam.cz\szninstall.exe" [2013-05-16 1062472]
"cz.seznam.software.szndesktop"="c:\users\Samsung\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" [2013-04-12 92664]
"iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2013-11-20 59720]
"ApplePhotoStreams"="c:\program files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2013-11-20 59720]
"AppleIEDAV"="c:\program files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe" [2013-11-15 1326408]
"uTorrent"="c:\users\Samsung\AppData\Roaming\uTorrent\updates\3.3.2_30303.exe" [2013-12-08 900440]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-05-08 21444224]
"iLivid"="c:\users\Samsung\AppData\Local\iLivid\iLivid.exe" [2014-05-25 7913472]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"RemoteControl10"="c:\program files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe" [2010-09-20 87336]
"CLMLServer"="c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe" [2009-11-02 103720]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"Guard.Mail.ru.gui"="c:\program files (x86)\Guard-ICQ\GuardICQ.exe" [2012-02-11 1564368]
"ApnUpdater"="c:\program files (x86)\Ask.com\Updater\Updater.exe" [2012-01-03 1391272]
"SSDMonitor"="c:\program files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe" [2011-12-12 103896]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-07-03 43816]
"seznam-listicka-distribuce"="c:\program files (x86)\Seznam.cz\distribution\szninstall.exe" [2013-03-21 1061960]
"ApnTBMon"="c:\program files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" [2013-08-16 1601488]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2014-01-17 421888]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-07-08 152392]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-10-22 1133856]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
R2 BackupStack;Computer Backup (MyPC Backup);c:\program files (x86)\MyPC Backup\BackupStack.exe;c:\program files (x86)\MyPC Backup\BackupStack.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 d0e87c27;PC-Sustainer;c:\windows\system32\rundll32.exe;c:\windows\SYSNATIVE\rundll32.exe [x]
R2 LiveUpdateSvc;LiveUpdate;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 supdate;Software Update Service (supdate);c:\program files (x86)\Software\Update\SoftwareUpdate.exe;c:\program files (x86)\Software\Update\SoftwareUpdate.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x]
R3 nmwcdnsux64;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsux64.sys;c:\windows\SYSNATIVE\drivers\nmwcdnsux64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Slu?ba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 APNMCP;Ask Update Service;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 SABI;SAMSUNG Kernel Driver For Windows 7;c:\windows\system32\Drivers\SABI.sys;c:\windows\SYSNATIVE\Drivers\SABI.sys [x]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [x]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfpr.sys [x]
S2 Guard.Mail.ru;Guard.Mail.ru;c:\program files (x86)\Guard-ICQ\GuardICQ.exe;c:\program files (x86)\Guard-ICQ\GuardICQ.exe [x]
S2 ICQ Service;ICQ Service;c:\program files (x86)\ICQ6Toolbar\ICQ Service.exe;c:\program files (x86)\ICQ6Toolbar\ICQ Service.exe [x]
S2 NitroReaderDriverReadSpool2;NitroPDFReaderDriverCreatorReadSpool2;c:\program files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe;c:\program files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [x]
S2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service;c:\program files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe;c:\program files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 BTWAMPFL;BTWAMPFL;c:\windows\system32\DRIVERS\btwampfl.sys;c:\windows\SYSNATIVE\DRIVERS\btwampfl.sys [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-07-28 18:09 1104200 ----a-w- c:\program files (x86)\Google\Chrome\Application\36.0.1985.125\Installer\chrmstp.exe
.
Obsah adres??e 'Napl?novan? ?lohy'
.
2014-08-06 c:\windows\Tasks\Registry Optimizer_DEFAULT.job
- c:\program files (x86)\WinZip Registry Optimizer\Winzipro.exe [2013-08-02 08:29]
.
2014-07-30 c:\windows\Tasks\Registry Optimizer_UPDATES.job
- c:\program files (x86)\WinZip Registry Optimizer\Winzipro.exe [2013-08-02 08:29]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{03EB0E9C-7A91-4381-A220-9B52B641CDB1}"= "c:\program files (x86)\IObit Apps Toolbar\IE\9.6\iobitappsToolbarIE64.dll" [2014-07-28 1998656]
.
[HKEY_CLASSES_ROOT\CLSID\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-02-08 161304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-02-08 386584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-02-08 415256]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-02-08 11660904]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-09-22 4035152]
.
------- Dopl?kov? sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://search.gboxapp.com/
uDefault_Search_URL = hxxp://www.Google.com
mStart Page = hxxp://search.gboxapp.com/
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <local>;*.local
uSearchAssistant = hxxp://www.Google.com/
uCustomizeSearch = hxxp://www.Google.com/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
IE: Odeslat obr?zek do za??zen? &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat str?nku do za??zen? &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: Upload to Facebook - c:\program files (x86)\WebcamMax\share\iecontext.htm
IE: {{14CD42DD-ABCD-3586-DCAB-40E3693E3737} - c:\program files (x86)\Stylish Profile\ct.htm
IE: {{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - c:\program files (x86)\ICQ7.7\ICQ.exe
TCP: DhcpNameServer = 213.46.172.37 213.46.172.36
TCP: Interfaces\{437DF307-EDD5-4A7C-B798-169505122258}: NameServer = 10.168.38.53
.
- - - - NEPLATN? POLO?KY ODSTRAN?N? Z REGISTRU - - - -
.
Toolbar-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
Wow6432Node-HKLM-Run-SearchSettings - c:\program files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
BHO-{10921475-03CE-4E04-90CE-E2E7EF20C814} - c:\program files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll
WebBrowser-{41545534-2D56-3700-76A7-7A786E7484D7} - (no file)
AddRemove-Funmoods - c:\users\Samsung\AppData\Roaming\Funmoods\UpdateProc\UpdateTask.exe
.
.
.
--------------------- ZAMKNUT? KL??E V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jin? spu?ten? procesy ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\CyberLink\Shared files\RichVideo.exe
c:\users\Samsung\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
c:\program files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
c:\windows\SysWOW64\RunDll32.exe
c:\program files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Celkov? ?as: 2014-08-10 14:27:43 - po??ta? byl restartov?n
ComboFix-quarantined-files.txt 2014-08-10 12:27
.
P?ed spu?t?n?m: 5?067?522?048
Po spu?t?n?: 6?382?592?000
.
- - End Of File - - 7335DC13B6AB8E02FDB91B586FEC5BCC

Ten ESET je nejaky stary. Funguje vubec? Plati jeste licence?



Otevrete si poznamkovy blok a zkopirujte do nej tento skript Vlevo nahore kliknete na napis Soubor
Kliknete na napis Ulozit jako...
Napiste spravne ten cerveny nazev CFScript a ulozte na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Pretahntete mysi tento vytvoreny textovy dokument nad ikonu ComboFix a pustte.
ComboFix by se mel spustit a vykonat prikazy.
Az skonci (muze dojit k restartu pc), mel by se objevit novy log, ten mi sem zase zkopirujte.

Kdyby po restartu nenabehl windows, restartujte znovu, mackejte klavesu F8 a zvolte - Posledni znama funkcni konfigurace
Kdyz windows nabehne, ale pri spousteni ruznych programu bude hlasena chyba, staci restartovat pc a bude to v poradku

Eset už je prý asi prošlý. Odinstaluji ho a nainstaluji tam nějaký free antivir. Avast nebo avg.


ComboFix 14-08-06.02 - Samsung 11.08.2014 21:05:14.3.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3893.2047 [GMT 2:00]
Spu?t?n? z: c:\users\Samsung\Desktop\ComboFixtext.exe
AV: ESET NOD32 Antivirus 5.0 *Enabled/Outdated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 5.0 *Enabled/Outdated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvo?en nov? Bod Obnoven?
.
.
((((((((((((((((((((((((( Soubory vytvo?en? od 2014-07-11 do 2014-08-11 )))))))))))))))))))))))))))))))
.
.
2014-08-11 20:42 . 2014-08-11 20:42 -------- d-----w- c:\users\Public\AppData\Local\temp
2014-08-11 20:42 . 2014-08-11 20:42 -------- d-----w- c:\users\Lubo?\AppData\Local\temp
2014-08-11 20:42 . 2014-08-11 20:42 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-08-08 13:16 . 2014-07-02 03:09 10924376 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{78A9EAE6-8826-49F1-A73D-8C47CA6D7EE3}\mpengine.dll
2014-08-07 16:40 . 2014-08-07 16:40 -------- d-----w- c:\programdata\Malwarebytes
2014-07-31 18:35 . 2010-08-30 06:34 536576 ----a-w- c:\windows\SysWow64\sqlite3.dll
2014-07-31 18:34 . 2014-08-06 10:37 -------- d-----w- C:\AdwCleaner
2014-07-29 15:35 . 2014-07-29 19:09 -------- d-----w- c:\program files\trend micro
2014-07-29 15:30 . 2014-08-08 13:09 -------- d-----w- c:\program files (x86)\Application Updater
2014-07-29 15:30 . 2014-08-07 19:51 -------- d-----w- c:\program files (x86)\IObit Apps Toolbar
2014-07-28 21:02 . 2014-07-29 15:35 -------- d-----w- C:\rsit
2014-07-28 18:29 . 2014-07-28 18:30 -------- d-----w- c:\users\Samsung\AppData\Roaming\SkypEmoticons
2014-07-28 18:28 . 2014-08-08 13:09 -------- d-----w- c:\programdata\EZSoftware
2014-07-28 18:27 . 2014-07-28 18:27 -------- d-----w- c:\users\Samsung\AppData\Local\Packages
2014-07-28 18:27 . 2014-08-07 10:59 -------- d-----w- c:\programdata\fb6152e1da7df93e
2014-07-28 18:27 . 2014-07-28 18:27 -------- d-----w- c:\users\Samsung\AppData\Local\Torch
2014-07-28 18:27 . 2014-07-28 18:27 -------- d-----w- c:\users\Samsung\AppData\Local\Chromatic Browser
2014-07-28 18:27 . 2014-07-28 18:27 -------- d-----w- c:\users\Samsung\AppData\Local\Comodo
2014-07-28 18:27 . 2014-07-28 18:27 -------- d-----w- c:\users\HomeGroupUser$
2014-07-28 18:27 . 2014-07-28 18:27 -------- d-----w- c:\users\Guest
2014-07-28 18:27 . 2014-07-28 18:27 -------- d-----w- c:\users\Administrator
2014-07-28 18:26 . 2014-07-28 18:29 -------- d-----w- c:\programdata\InstallMate
2014-07-24 19:21 . 2014-07-24 19:21 -------- d-----w- c:\windows\system32\%LOCALAPPDATA%
2014-07-22 15:14 . 2014-07-22 15:14 -------- d-----w- c:\program files (x86)\GUM376E.tmp
2014-07-22 15:14 . 2014-07-22 15:14 6010880 ----a-w- c:\program files (x86)\GUT376F.tmp
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M v?pis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-07-09 20:10 . 2012-02-12 09:41 96441528 ----a-w- c:\windows\system32\MRT.exe
2014-06-30 02:09 . 2014-07-09 18:19 519168 ----a-w- c:\windows\system32\aepdu.dll
2014-06-30 02:04 . 2014-07-09 18:19 424448 ----a-w- c:\windows\system32\aeinv.dll
2014-06-20 20:14 . 2014-07-09 18:18 266424 ----a-w- c:\windows\system32\iedkcs32.dll
2014-06-19 01:39 . 2014-07-09 18:18 23464448 ----a-w- c:\windows\system32\mshtml.dll
2014-06-19 01:06 . 2014-07-09 18:18 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2014-06-19 01:06 . 2014-07-09 18:18 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll
2014-06-19 00:48 . 2014-07-09 18:18 2768384 ----a-w- c:\windows\system32\iertutil.dll
2014-06-19 00:42 . 2014-07-09 18:18 548352 ----a-w- c:\windows\system32\vbscript.dll
2014-06-19 00:42 . 2014-07-09 18:18 66048 ----a-w- c:\windows\system32\iesetup.dll
2014-06-19 00:41 . 2014-07-09 18:18 48640 ----a-w- c:\windows\system32\ieetwproxystub.dll
2014-06-19 00:41 . 2014-07-09 18:18 83968 ----a-w- c:\windows\system32\MshtmlDac.dll
2014-06-19 00:32 . 2014-07-09 18:18 51200 ----a-w- c:\windows\system32\jsproxy.dll
2014-06-19 00:31 . 2014-07-09 18:18 33792 ----a-w- c:\windows\system32\iernonce.dll
2014-06-19 00:26 . 2014-07-09 18:18 598016 ----a-w- c:\windows\system32\ieui.dll
2014-06-19 00:24 . 2014-07-09 18:18 139264 ----a-w- c:\windows\system32\ieUnatt.exe
2014-06-19 00:24 . 2014-07-09 18:18 111616 ----a-w- c:\windows\system32\ieetwcollector.exe
2014-06-19 00:23 . 2014-07-09 18:18 752640 ----a-w- c:\windows\system32\jscript9diag.dll
2014-06-19 00:14 . 2014-07-09 18:18 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2014-06-19 00:09 . 2014-07-09 18:18 452608 ----a-w- c:\windows\system32\dxtmsft.dll
2014-06-18 23:59 . 2014-07-09 18:18 38400 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
2014-06-18 23:56 . 2014-07-09 18:18 2724864 ----a-w- c:\windows\SysWow64\mshtml.tlb
2014-06-18 23:53 . 2014-07-09 18:18 195584 ----a-w- c:\windows\system32\msrating.dll
2014-06-18 23:51 . 2014-07-09 18:18 5721088 ----a-w- c:\windows\system32\jscript9.dll
2014-06-18 23:50 . 2014-07-09 18:18 85504 ----a-w- c:\windows\system32\mshtmled.dll
2014-06-18 23:48 . 2014-07-09 18:18 292864 ----a-w- c:\windows\system32\dxtrans.dll
2014-06-18 23:39 . 2014-07-09 18:18 608768 ----a-w- c:\windows\system32\ie4uinit.exe
2014-06-18 23:38 . 2014-07-09 18:18 455168 ----a-w- c:\windows\SysWow64\vbscript.dll
2014-06-18 23:37 . 2014-07-09 18:18 61952 ----a-w- c:\windows\SysWow64\iesetup.dll
2014-06-18 23:36 . 2014-07-09 18:18 51200 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll
2014-06-18 23:35 . 2014-07-09 18:18 62464 ----a-w- c:\windows\SysWow64\MshtmlDac.dll
2014-06-18 23:33 . 2014-07-09 18:18 631808 ----a-w- c:\windows\system32\msfeeds.dll
2014-06-18 23:27 . 2014-07-09 18:18 1249280 ----a-w- c:\windows\system32\mshtmlmedia.dll
2014-06-18 23:27 . 2014-07-09 18:18 2040832 ----a-w- c:\windows\system32\inetcpl.cpl
2014-06-18 23:23 . 2014-07-09 18:18 112128 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2014-06-18 23:22 . 2014-07-09 18:18 592896 ----a-w- c:\windows\SysWow64\jscript9diag.dll
2014-06-18 23:06 . 2014-07-09 18:18 32256 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2014-06-18 22:58 . 2014-07-09 18:18 2266112 ----a-w- c:\windows\system32\wininet.dll
2014-06-18 22:52 . 2014-07-09 18:18 4254720 ----a-w- c:\windows\SysWow64\jscript9.dll
2014-06-18 22:51 . 2014-07-09 18:18 13527040 ----a-w- c:\windows\system32\ieframe.dll
2014-06-18 22:46 . 2014-07-09 18:18 1068032 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2014-06-18 22:45 . 2014-07-09 18:18 1964544 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2014-06-18 22:34 . 2014-07-09 18:18 1393664 ----a-w- c:\windows\system32\urlmon.dll
2014-06-18 22:15 . 2014-07-09 18:18 846336 ----a-w- c:\windows\system32\ieapfltr.dll
2014-06-18 22:13 . 2014-07-09 18:18 1791488 ----a-w- c:\windows\SysWow64\wininet.dll
2014-06-18 02:18 . 2014-07-09 18:18 692736 ----a-w- c:\windows\system32\osk.exe
2014-06-18 01:51 . 2014-07-09 18:18 646144 ----a-w- c:\windows\SysWow64\osk.exe
2014-06-18 01:10 . 2014-07-09 18:18 3157504 ----a-w- c:\windows\system32\win32k.sys
2014-06-06 10:10 . 2014-07-09 18:18 624128 ----a-w- c:\windows\system32\qedit.dll
2014-06-06 09:44 . 2014-07-09 18:18 509440 ----a-w- c:\windows\SysWow64\qedit.dll
2014-06-05 14:45 . 2014-07-09 18:17 1460736 ----a-w- c:\windows\system32\lsasrv.dll
2014-06-05 14:26 . 2014-07-09 18:17 22016 ----a-w- c:\windows\SysWow64\secur32.dll
2014-06-05 14:25 . 2014-07-09 18:17 96768 ----a-w- c:\windows\SysWow64\sspicli.dll
2014-05-30 08:08 . 2014-07-09 18:18 210944 ----a-w- c:\windows\system32\wdigest.dll
2014-05-30 08:08 . 2014-07-09 18:18 86528 ----a-w- c:\windows\system32\TSpkg.dll
2014-05-30 08:08 . 2014-07-09 18:18 340992 ----a-w- c:\windows\system32\schannel.dll
2014-05-30 08:08 . 2014-07-09 18:18 314880 ----a-w- c:\windows\system32\msv1_0.dll
2014-05-30 08:08 . 2014-07-09 18:18 307200 ----a-w- c:\windows\system32\ncrypt.dll
2014-05-30 08:08 . 2014-07-09 18:18 728064 ----a-w- c:\windows\system32\kerberos.dll
2014-05-30 08:08 . 2014-07-09 18:18 22016 ----a-w- c:\windows\system32\credssp.dll
2014-05-30 07:52 . 2014-07-09 18:18 172032 ----a-w- c:\windows\SysWow64\wdigest.dll
2014-05-30 07:52 . 2014-07-09 18:18 65536 ----a-w- c:\windows\SysWow64\TSpkg.dll
2014-05-30 07:52 . 2014-07-09 18:18 247808 ----a-w- c:\windows\SysWow64\schannel.dll
2014-05-30 07:52 . 2014-07-09 18:18 220160 ----a-w- c:\windows\SysWow64\ncrypt.dll
2014-05-30 07:52 . 2014-07-09 18:18 259584 ----a-w- c:\windows\SysWow64\msv1_0.dll
2014-05-30 07:52 . 2014-07-09 18:18 550912 ----a-w- c:\windows\SysWow64\kerberos.dll
2014-05-30 07:52 . 2014-07-09 18:18 17408 ----a-w- c:\windows\SysWow64\credssp.dll
2014-05-30 06:45 . 2014-07-09 18:18 497152 ----a-w- c:\windows\system32\drivers\afd.sys
.
.
(((((((((((((((((((((((((((((((((( Spou?t?c? body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Pozn?mka* pr?zdn? z?znamy a legitimn? v?choz? ?daje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{03EB0E9C-7A91-4381-A220-9B52B641CDB1}"= "c:\program files (x86)\IObit Apps Toolbar\IE\9.6\iobitappsToolbarIE.dll" [2014-07-28 1400128]
.
[HKEY_CLASSES_ROOT\clsid\{03eb0e9c-7a91-4381-a220-9b52b641cdb1}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
2014-07-28 11:13 1400128 ----a-w- c:\program files (x86)\IObit Apps Toolbar\IE\9.6\iobitappsToolbarIE.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{41545534-2D56-3700-76A7-7A786E7484D7}]
2013-08-16 08:49 12240 ----a-w- c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Passport.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{bfc39e47-d643-4dc2-aa1d-61377501c844}]
2011-10-31 11:02 81920 ----a-w- c:\program files (x86)\atube\atubeX.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{bfc39e47-d643-4dc2-aa1d-61377501c844}"= "c:\program files (x86)\atube\atubeX.dll" [2011-10-31 81920]
"{41545534-2D56-3700-76A7-7A786E7484D7}"= "c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Passport.dll" [2013-08-16 12240]
"{03EB0E9C-7A91-4381-A220-9B52B641CDB1}"= "c:\program files (x86)\IObit Apps Toolbar\IE\9.6\iobitappsToolbarIE.dll" [2014-07-28 1400128]
.
[HKEY_CLASSES_ROOT\clsid\{bfc39e47-d643-4dc2-aa1d-61377501c844}]
.
[HKEY_CLASSES_ROOT\clsid\{41545534-2d56-3700-76a7-7a786e7484d7}]
.
[HKEY_CLASSES_ROOT\clsid\{03eb0e9c-7a91-4381-a220-9b52b641cdb1}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ooVoo.exe"="c:\program files (x86)\ooVoo\oovoo.exe" [2012-08-20 27040888]
"EA Core"="c:\program files (x86)\Electronic Arts\EADM\Core.exe" [2009-03-28 3325952]
"WebcamMaxAutoRun"="c:\program files (x86)\WebcamMax\wcmmon.exe" [2011-07-17 1038848]
"cz.seznam.software.autoupdate"="c:\users\Samsung\AppData\Roaming\Seznam.cz\szninstall.exe" [2013-05-16 1062472]
"cz.seznam.software.szndesktop"="c:\users\Samsung\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" [2013-04-12 92664]
"iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2013-11-20 59720]
"ApplePhotoStreams"="c:\program files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2013-11-20 59720]
"AppleIEDAV"="c:\program files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe" [2013-11-15 1326408]
"uTorrent"="c:\users\Samsung\AppData\Roaming\uTorrent\updates\3.3.2_30303.exe" [2013-12-08 900440]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-05-08 21444224]
"iLivid"="c:\users\Samsung\AppData\Local\iLivid\iLivid.exe" [2014-05-25 7913472]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"RemoteControl10"="c:\program files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe" [2010-09-20 87336]
"CLMLServer"="c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe" [2009-11-02 103720]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"Guard.Mail.ru.gui"="c:\program files (x86)\Guard-ICQ\GuardICQ.exe" [2012-02-11 1564368]
"ApnUpdater"="c:\program files (x86)\Ask.com\Updater\Updater.exe" [2012-01-03 1391272]
"SSDMonitor"="c:\program files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe" [2011-12-12 103896]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-07-03 43816]
"seznam-listicka-distribuce"="c:\program files (x86)\Seznam.cz\distribution\szninstall.exe" [2013-03-21 1061960]
"ApnTBMon"="c:\program files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" [2013-08-16 1601488]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2014-01-17 421888]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-07-08 152392]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-10-22 1133856]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
R2 BackupStack;Computer Backup (MyPC Backup);c:\program files (x86)\MyPC Backup\BackupStack.exe;c:\program files (x86)\MyPC Backup\BackupStack.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 d0e87c27;PC-Sustainer;c:\windows\system32\rundll32.exe;c:\windows\SYSNATIVE\rundll32.exe [x]
R2 LiveUpdateSvc;LiveUpdate;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 supdate;Software Update Service (supdate);c:\program files (x86)\Software\Update\SoftwareUpdate.exe;c:\program files (x86)\Software\Update\SoftwareUpdate.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x]
R3 nmwcdnsux64;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsux64.sys;c:\windows\SYSNATIVE\drivers\nmwcdnsux64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [x]
R3 WatAdminSvc;Slu?ba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 APNMCP;Ask Update Service;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 SABI;SAMSUNG Kernel Driver For Windows 7;c:\windows\system32\Drivers\SABI.sys;c:\windows\SYSNATIVE\Drivers\SABI.sys [x]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [x]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfpr.sys [x]
S2 Guard.Mail.ru;Guard.Mail.ru;c:\program files (x86)\Guard-ICQ\GuardICQ.exe;c:\program files (x86)\Guard-ICQ\GuardICQ.exe [x]
S2 ICQ Service;ICQ Service;c:\program files (x86)\ICQ6Toolbar\ICQ Service.exe;c:\program files (x86)\ICQ6Toolbar\ICQ Service.exe [x]
S2 NitroReaderDriverReadSpool2;NitroPDFReaderDriverCreatorReadSpool2;c:\program files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe;c:\program files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [x]
S2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service;c:\program files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe;c:\program files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 BTWAMPFL;BTWAMPFL;c:\windows\system32\DRIVERS\btwampfl.sys;c:\windows\SYSNATIVE\DRIVERS\btwampfl.sys [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-08-10 18:26 1104200 ----a-w- c:\program files (x86)\Google\Chrome\Application\36.0.1985.125\Installer\chrmstp.exe
.
Obsah adres??e 'Napl?novan? ?lohy'
.
2014-08-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-08-10 18:26]
.
2014-08-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-08-10 18:26]
.
2014-08-10 c:\windows\Tasks\Registry Optimizer_DEFAULT.job
- c:\program files (x86)\WinZip Registry Optimizer\Winzipro.exe [2013-08-02 08:29]
.
2014-07-30 c:\windows\Tasks\Registry Optimizer_UPDATES.job
- c:\program files (x86)\WinZip Registry Optimizer\Winzipro.exe [2013-08-02 08:29]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
c:\program files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{03EB0E9C-7A91-4381-A220-9B52B641CDB1}"= "c:\program files (x86)\IObit Apps Toolbar\IE\9.6\iobitappsToolbarIE64.dll" [2014-07-28 1998656]
.
[HKEY_CLASSES_ROOT\CLSID\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-02-08 161304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-02-08 386584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-02-08 415256]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-02-08 11660904]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-09-22 4035152]
.
------- Dopl?kov? sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://search.gboxapp.com/
uDefault_Search_URL = hxxp://www.Google.com
mStart Page = hxxp://search.gboxapp.com/
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <local>;*.local
uSearchAssistant = hxxp://www.Google.com/
uCustomizeSearch = hxxp://www.Google.com/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
IE: Odeslat obr?zek do za??zen? &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat str?nku do za??zen? &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: Upload to Facebook - c:\program files (x86)\WebcamMax\share\iecontext.htm
IE: {{14CD42DD-ABCD-3586-DCAB-40E3693E3737} - c:\program files (x86)\Stylish Profile\ct.htm
IE: {{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - c:\program files (x86)\ICQ7.7\ICQ.exe
TCP: DhcpNameServer = 213.46.172.37 213.46.172.36
TCP: Interfaces\{437DF307-EDD5-4A7C-B798-169505122258}: NameServer = 10.168.38.53
.
- - - - NEPLATN? POLO?KY ODSTRAN?N? Z REGISTRU - - - -
.
Toolbar-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
WebBrowser-{41545534-2D56-3700-76A7-7A786E7484D7} - (no file)
.
.
.
--------------------- ZAMKNUT? KL??E V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkov? ?as: 2014-08-11 22:45:07
ComboFix-quarantined-files.txt 2014-08-11 20:45
.
P?ed spu?t?n?m: 4?382?605?312
Po spu?t?n?: 3?987?345?408
.
- - End Of File - - F4BB675D1A07140632A588E8FE47591F

AVG neeeeeeeee!!!!! Dejte tam Avast.

Combofix nemazal. Postupoval jste presne podle navodu?

Co je toto?

Holicz píše:ComboFix 14-08-06.02 - Samsung 11.08.2014 21:05:14.3.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3893.2047 [GMT 2:00]
Spu?t?n? z: c:\users\Samsung\Desktop\ComboFixtext.exe
AV: ESET NOD32 Antivirus 5.0 *Enabled/Outdated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 5.0 *Enabled/Outdated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvo?en nov? Bod Obnoven?

1.9. pro neaktivitu http://forum.viry.cz/viewtopic.php?f=12&t=123975