VIRY.CZ

Logfile of random's system information tool 1.10 (written by random/random)
Run by David at 2014-09-29 16:51:57
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 117 GB (71%) free of 165 GB
Total RAM: 3063 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:52:00, on 29.9.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17280)
Boot mode: Normal

Running processes:
C:\Users\David\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\David.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: 092950600ea001325d04029365df3cb90063831 - {11111111-1111-1111-1111-110611381131} - C:\Program Files (x86)\HD01-V2.1V25.09\HD01-V2.1V25.09-bho.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [EEventManager] "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [EPLTarget\P0000000000000000] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIIME.EXE /EPT "EPLTarget\P0000000000000000" /M "XP-202 203 206 Series"
O4 - HKCU\..\Run: [PCSpeedUp] C:\Program Files (x86)\Zrychleni Pocitace\PCSUNotifier.exe
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\David\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\David\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) - ABBYY - C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EpsonBidirectionalService - SEIKO EPSON CORPORATION - C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
O23 - Service: Epson Scanner Service (EpsonScanSvc) - Unknown owner - C:\Windows\system32\EscSvc64.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PC Speed Up Service (PCSUService) - Unknown owner - C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10934 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe"
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
"C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe" -service
taskeng.exe {B9DE2F2A-5A7D-4CB6-8D4C-0028F46F21F6}
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
szndesktop.exe default start
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\EscSvc64.exe
taskeng.exe {F98E4F26-4058-4859-89F7-571D7DB917A5}
"C:\Program Files (x86)\HD01-V2.1V25.09\404706c9-cad6-4545-b734-bb2da6e27830.exe" 002128 5DCF9F05B2B54A159DA210E892F5DA1EIE 63831 1411634164 93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 HD01-V2.1V25.09
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k bthsvcs
"C:\Users\David\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe "1221679413-56489191-352450324-1667064763213064581-11947281271206705669-1590768033
"C:\Program Files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4-6.exe" /rawdata=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
"C:\Program Files (x86)\HD01-V2.1V25.09\702979fe-30c9-4d70-88f2-18a1e837303b.exe" /agentregpath='HD01-V2.1V25.09' /appid=63831 /srcid='002128' /subid='0' /zdata='0' /bic=5DCF9F05B2B54A159DA210E892F5DA1EIE /verifier=f110cc6411bb14b82f95f8ce9ac4988b /installerversion=1_35_09_16 /installationtime=1411634164 /statsdomain=http://stats.newclientstaticsrv.com /errorsdomain=http://errors.newclientstaticsrv.com /extensionname='Information' /torpedoiesleeps=1000 /torpedoieplugins=93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 /monetizationdomain=http://logs.newclientstaticsrv.com /runfrom='task' /externallog=''
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe"
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\iPod\bin\iPodService.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9223
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="5064.0.1565113815\1803922391" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,6,17 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x2a02 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.1930 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group4 pct:10d stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/Preperiod_A2_StableBookmarksIndexURLs/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_76/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --channel="5064.2.227572355\2044569929" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group4 pct:10d stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/Preperiod_A2_StableBookmarksIndexURLs/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_76/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --channel="5064.3.290625507\2021816105" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group4 pct:10d stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/Preperiod_A2_StableBookmarksIndexURLs/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_76/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --channel="5064.4.2129050230\499711646" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="5064.6.1423181176\1496184404" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group4 pct:10d stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/Preperiod_A2_StableBookmarksIndexURLs/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_76/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --channel="5064.8.957566804\529513397" /prefetch:673131151
"C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe" "C:\Users\David\Desktop\všte\5.semestr\rozvrh 5. semestr.pdf"
"C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe" --channel=3924.0.1520568182 --type=renderer "C:\Users\David\Desktop\všte\5.semestr\rozvrh 5. semestr.pdf"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group4 pct:10d stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/Preperiod_A2_StableBookmarksIndexURLs/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_76/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --channel="5064.12.20007642\401182394" /prefetch:673131151
C:\Windows\system32\AUDIODG.EXE 0x7a0
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group4 pct:10d stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/Preperiod_A2_StableBookmarksIndexURLs/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_76/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --channel="5064.13.681323319\939150702" /prefetch:673131151
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\David\Downloads\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\02775933-36b6-45b7-aeeb-cba227d606c4-1.job - C:\Program Files (x86)\HD01-V2.1V25.09\HD01-V2.1V25.09-codedownloader.exe /rawdata=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
C:\Windows\tasks\02775933-36b6-45b7-aeeb-cba227d606c4-11.job - C:\Program Files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4-11.exe /rawdata=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
C:\Windows\tasks\02775933-36b6-45b7-aeeb-cba227d606c4-2.job - C:\Program Files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4-2.exe /rawdata=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
C:\Windows\tasks\02775933-36b6-45b7-aeeb-cba227d606c4-3.job - C:\Program Files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4-3.exe /rawdata=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
C:\Windows\tasks\02775933-36b6-45b7-aeeb-cba227d606c4-4.job - C:\Program Files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4-4.exe /rawdata=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
C:\Windows\tasks\02775933-36b6-45b7-aeeb-cba227d606c4-5.job - C:\Program Files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4-5.exe /rawdata=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
C:\Windows\tasks\02775933-36b6-45b7-aeeb-cba227d606c4-5_user.job - C:\Program Files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4-5.exe /rawdata=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
C:\Windows\tasks\02775933-36b6-45b7-aeeb-cba227d606c4-6.job - C:\Program Files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4-6.exe /rawdata=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
C:\Windows\tasks\02775933-36b6-45b7-aeeb-cba227d606c4-7.job - C:\Program Files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4-7.exe /rawdata=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
C:\Windows\tasks\404706c9-cad6-4545-b734-bb2da6e27830.job - C:\Program Files (x86)\HD01-V2.1V25.09\404706c9-cad6-4545-b734-bb2da6e27830.exe 002128 5DCF9F05B2B54A159DA210E892F5DA1EIE 63831 1411634164 93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 HD01-V2.1V25.09
C:\Windows\tasks\702979fe-30c9-4d70-88f2-18a1e837303b.job - C:\Program Files (x86)\HD01-V2.1V25.09\702979fe-30c9-4d70-88f2-18a1e837303b.exe /agentregpath='HD01-V2.1V25.09' /appid=63831 /srcid='002128' /subid='0' /zdata='0' /bic=5DCF9F05B2B54A159DA210E892F5DA1EIE /verifier=f110cc6411bb14b82f95f8ce9ac4988b /installerversion=1_35_09_16 /installationtime=1411634164 /statsdomain=http://stats.newclientstaticsrv.com /errorsdomain=http://errors.newclientstaticsrv.com /extensionname='Information' /torpedoiesleeps=1000 /torpedoieplugins=93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 /monetizationdomain=http://logs.newclientstaticsrv.com /runfrom='task' /externallog=''
C:\Windows\tasks\AmiUpdXp.job - C:\Users\David\AppData\Local\1453\a20414.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\JAFF.job - C:\Users\David\AppData\Roaming\JAFF.exe /infocmdline=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
C:\Windows\tasks\PC SpeedUp Service Deactivator.job - C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe /dev0 /idle

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611381131}]
HD01-V2.1V25.09 - C:\Program Files (x86)\HD01-V2.1V25.09\HD01-V2.1V25.09-bho64.dll [2014-09-25 784280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-09-25 612248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]
Easy Photo Print - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2011-01-26 431104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2014-07-22 256456]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg64.dll [2014-07-22 346576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611381131}]
HD01-V2.1V25.09 - C:\Program Files (x86)\HD01-V2.1V25.09\HD01-V2.1V25.09-bho.dll [2014-09-25 582040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-09-25 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2014-07-22 194504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll [2014-07-22 1001936]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2014-08-27 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2014-07-22 256456]
{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - Easy Photo Print - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2011-01-26 431104]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2014-07-22 194504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-09-23 165912]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-23 385560]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-09-23 363544]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"EPLTarget\P0000000000000000"=C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIIME.EXE [2011-11-02 278112]
"PCSpeedUp"=C:\Program Files (x86)\Zrychleni Pocitace\PCSUNotifier.exe [2014-09-23 314664]
"cz.seznam.software.autoupdate"=C:\Users\David\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\David\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-01-17 421888]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-07-31 43816]
"EEventManager"=C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [2011-10-31 1058400]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-09-01 152392]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"DivXMediaServer"=C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe []
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-09-25 4085896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-23 261120]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-09-29 16:49:19 ----D---- C:\rsit
2014-09-29 16:49:19 ----D---- C:\Program Files\trend micro
2014-09-25 11:43:38 ----D---- C:\Users\David\AppData\Roaming\Dropbox
2014-09-25 11:37:47 ----D---- C:\Users\David\AppData\Roaming\AVAST Software
2014-09-25 11:34:41 ----A---- C:\Windows\system32\drivers\aswStm.sys
2014-09-25 11:34:40 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2014-09-25 11:34:40 ----A---- C:\Windows\system32\drivers\aswsp.sys
2014-09-25 11:34:40 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2014-09-25 11:34:39 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2014-09-25 11:34:38 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2014-09-25 11:34:37 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2014-09-25 11:34:37 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2014-09-25 11:34:32 ----A---- C:\Windows\system32\drivers\aswKbd.sys
2014-09-25 11:34:25 ----A---- C:\Windows\system32\aswBoot.exe
2014-09-25 11:34:05 ----A---- C:\Windows\avastSS.scr
2014-09-25 11:33:17 ----A---- C:\Windows\system32\drivers\aswNdisFlt.sys
2014-09-25 11:32:15 ----D---- C:\Program Files\AVAST Software
2014-09-25 10:53:42 ----A---- C:\awh3FEC.tmp
2014-09-25 10:40:29 ----A---- C:\awh7B97.tmp
2014-09-25 10:40:19 ----D---- C:\Users\David\AppData\Roaming\DivX
2014-09-25 10:39:22 ----D---- C:\Program Files (x86)\DivX
2014-09-25 10:38:26 ----D---- C:\ProgramData\DivX
2014-09-25 10:38:16 ----D---- C:\Program Files (x86)\Seznam.cz
2014-09-25 10:38:02 ----D---- C:\Users\David\AppData\Roaming\Seznam.cz
2014-09-25 10:37:54 ----D---- C:\Program Files (x86)\Zrychleni Pocitace
2014-09-25 10:36:23 ----A---- C:\Users\David\AppData\Roaming\JAFF.exe
2014-09-25 10:36:15 ----D---- C:\Program Files (x86)\globalUpdate
2014-09-25 10:36:11 ----D---- C:\Program Files (x86)\HD01-V2.1V25.09
2014-09-25 04:40:00 ----A---- C:\Windows\system32\drivers\nethfdrv.sys
2014-09-25 04:39:34 ----A---- C:\Windows\SYSWOW64\installd.exe
2014-09-24 10:57:44 ----A---- C:\Windows\SYSWOW64\tzres.dll
2014-09-24 10:57:44 ----A---- C:\Windows\system32\tzres.dll
2014-09-16 16:05:06 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-09-16 16:05:06 ----D---- C:\Program Files\iTunes
2014-09-16 16:05:06 ----D---- C:\Program Files\iPod
2014-09-16 16:05:06 ----D---- C:\Program Files (x86)\iTunes
2014-09-16 16:02:22 ----D---- C:\Program Files\Bonjour
2014-09-16 16:02:22 ----D---- C:\Program Files (x86)\Bonjour
2014-09-11 02:18:15 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-09-11 02:18:15 ----A---- C:\Windows\system32\ieui.dll
2014-09-11 02:18:14 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-09-11 02:18:14 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-09-11 02:18:14 ----A---- C:\Windows\system32\iernonce.dll
2014-09-11 02:18:13 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-09-11 02:18:13 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-09-11 02:18:13 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-09-11 02:18:13 ----A---- C:\Windows\system32\vbscript.dll
2014-09-11 02:18:13 ----A---- C:\Windows\system32\jscript9diag.dll
2014-09-11 02:18:13 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-11 02:18:13 ----A---- C:\Windows\system32\ieUnatt.exe
2014-09-11 02:18:13 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-09-11 02:18:13 ----A---- C:\Windows\system32\dxtrans.dll
2014-09-11 02:18:13 ----A---- C:\Windows\system32\dxtmsft.dll
2014-09-11 02:18:12 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-09-11 02:18:12 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-09-11 02:18:12 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-09-11 02:18:12 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-09-11 02:18:12 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-09-11 02:18:12 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-09-11 02:18:12 ----A---- C:\Windows\system32\msrating.dll
2014-09-11 02:18:12 ----A---- C:\Windows\system32\mshtmled.dll
2014-09-11 02:18:12 ----A---- C:\Windows\system32\msfeeds.dll
2014-09-11 02:18:12 ----A---- C:\Windows\system32\jsproxy.dll
2014-09-11 02:18:11 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-09-11 02:18:11 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-09-11 02:18:11 ----A---- C:\Windows\system32\iesetup.dll
2014-09-11 02:18:11 ----A---- C:\Windows\system32\iedkcs32.dll
2014-09-11 02:18:11 ----A---- C:\Windows\system32\ie4uinit.exe
2014-09-11 02:18:10 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-09-11 02:18:10 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-09-11 02:18:10 ----A---- C:\Windows\system32\mshtml.dll
2014-09-11 02:18:09 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-09-11 02:18:09 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-09-11 02:18:09 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-09-11 02:18:09 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-11 02:18:09 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-09-11 02:18:09 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-09-11 02:18:09 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-09-11 02:18:09 ----A---- C:\Windows\system32\ieapfltr.dll
2014-09-11 02:18:07 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-09-11 02:18:07 ----A---- C:\Windows\system32\wininet.dll
2014-09-11 02:18:07 ----A---- C:\Windows\system32\iertutil.dll
2014-09-11 02:18:06 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-09-11 02:18:06 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-09-11 02:18:06 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-09-11 02:18:06 ----A---- C:\Windows\system32\urlmon.dll
2014-09-11 02:18:06 ----A---- C:\Windows\system32\jscript9.dll
2014-09-11 02:18:04 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-09-11 02:18:04 ----A---- C:\Windows\system32\ieframe.dll
2014-09-11 02:18:03 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-09-11 02:11:15 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2014-09-11 02:11:15 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2014-09-11 00:09:29 ----A---- C:\Windows\system32\TSWorkspace.dll
2014-09-11 00:09:28 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2014-09-11 00:09:17 ----A---- C:\Windows\system32\d3d10warp.dll
2014-09-11 00:09:16 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2014-09-11 00:08:59 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-09-11 00:08:59 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-09-11 00:08:59 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-09-11 00:08:59 ----A---- C:\Windows\system32\lsasrv.dll
2014-09-11 00:08:59 ----A---- C:\Windows\system32\kerberos.dll
2014-09-11 00:08:54 ----A---- C:\Windows\system32\aepdu.dll
2014-09-11 00:08:54 ----A---- C:\Windows\system32\aeinv.dll
2014-09-02 20:03:22 ----D---- C:\Users\David\AppData\Roaming\Epson
2014-09-02 19:53:40 ----A---- C:\Windows\SYSWOW64\EEBUtil.dll
2014-09-02 19:53:40 ----A---- C:\Windows\SYSWOW64\EEBSDKIF.dll
2014-09-02 19:53:40 ----A---- C:\Windows\SYSWOW64\EEBDSCVR.dll
2014-09-02 19:53:40 ----A---- C:\Windows\SYSWOW64\EEBAPI.dll
2014-09-02 19:53:40 ----A---- C:\Windows\SYSWOW64\EBAPI.dll
2014-09-02 19:53:33 ----D---- C:\Program Files\Common Files\EPSON
2014-09-02 16:40:10 ----A---- C:\Windows\system32\drivers\GEARAspiWDM.sys
2014-09-02 16:40:09 ----DC---- C:\Windows\system32\DRVSTORE
2014-09-02 16:33:36 ----D---- C:\Users\David\AppData\Roaming\Apple Computer
2014-09-02 16:32:55 ----D---- C:\Program Files\Common Files\Apple
2014-09-02 16:26:42 ----D---- C:\Program Files (x86)\ABBYY FineReader 9.0 Sprint
2014-09-02 16:26:41 ----D---- C:\ProgramData\ABBYY
2014-09-02 16:23:38 ----D---- C:\ProgramData\UDL
2014-09-02 16:18:56 ----D---- C:\Program Files\EpsonNet
2014-09-02 16:18:56 ----A---- C:\Windows\system32\enspres.dll
2014-09-02 16:18:56 ----A---- C:\Windows\system32\ensppui.dll
2014-09-02 16:18:56 ----A---- C:\Windows\system32\ensppmon.dll
2014-09-02 16:18:56 ----A---- C:\Windows\system32\enpres.dll
2014-09-02 16:18:56 ----A---- C:\Windows\system32\enppui.dll
2014-09-02 16:18:56 ----A---- C:\Windows\system32\enppmon.dll
2014-09-02 16:18:55 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-09-02 16:18:53 ----D---- C:\Users\David\AppData\Roaming\InstallShield
2014-09-02 16:18:37 ----D---- C:\Program Files (x86)\EPSON Software
2014-09-02 16:17:52 ----A---- C:\Windows\system32\E_GCINST.DLL
2014-09-02 16:17:45 ----A---- C:\Windows\system32\E_ILMIME.DLL
2014-09-02 16:17:43 ----A---- C:\Windows\system32\E_IBCBIME.DLL
2014-09-02 16:17:27 ----D---- C:\ProgramData\EPSON
2014-09-02 16:16:52 ----A---- C:\Windows\system32\esxw2ud.dll
2014-09-02 16:16:52 ----A---- C:\Windows\system32\escsvc64.exe
2014-09-02 16:16:35 ----D---- C:\Program Files (x86)\epson
2014-09-02 14:08:44 ----D---- C:\ProgramData\Apple Computer
2014-09-01 18:23:25 ----D---- C:\Program Files\Microsoft Silverlight
2014-09-01 18:23:25 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-09-01 13:17:41 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-09-01 13:17:41 ----A---- C:\Windows\system32\shell32.dll
2014-08-30 17:09:18 ----D---- C:\Program Files (x86)\Windows 7 Activator
2014-08-30 16:48:48 ----A---- C:\Windows\Uninstall.cmd
2014-08-30 16:08:26 ----D---- C:\Users\David\AppData\Roaming\WinRAR
2014-08-30 16:08:06 ----D---- C:\Program Files\WinRAR

======List of files/folders modified in the last 1 month======

2014-09-29 16:52:00 ----D---- C:\Windows\Temp
2014-09-29 16:49:19 ----RD---- C:\Program Files
2014-09-29 08:48:28 ----D---- C:\Windows\system32\config
2014-09-29 08:00:47 ----D---- C:\Windows\system32\Tasks
2014-09-29 08:00:46 ----D---- C:\Windows\Tasks
2014-09-28 21:59:50 ----D---- C:\Windows\System32
2014-09-28 21:59:50 ----D---- C:\Windows\inf
2014-09-28 21:59:50 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-09-28 21:24:33 ----SHD---- C:\System Volume Information
2014-09-27 08:57:24 ----SHD---- C:\Windows\Installer
2014-09-26 22:24:25 ----D---- C:\Windows\SysWOW64
2014-09-26 09:21:36 ----D---- C:\Windows\rescache
2014-09-26 08:57:05 ----D---- C:\Windows\system32\wdi
2014-09-25 11:54:40 ----D---- C:\Windows\system32\drivers
2014-09-25 11:40:09 ----D---- C:\Program Files (x86)\Microsoft Office
2014-09-25 11:36:43 ----D---- C:\Windows\system32\catroot
2014-09-25 11:36:41 ----D---- C:\Windows\system32\DriverStore
2014-09-25 11:34:23 ----D---- C:\Windows
2014-09-25 11:32:15 ----D---- C:\ProgramData\AVAST Software
2014-09-25 10:47:29 ----D---- C:\Windows\system32\catroot2
2014-09-25 10:39:43 ----D---- C:\Program Files (x86)\Common Files
2014-09-25 10:39:22 ----RD---- C:\Program Files (x86)
2014-09-25 10:38:26 ----HD---- C:\ProgramData
2014-09-24 11:27:57 ----D---- C:\Windows\winsxs
2014-09-24 11:27:49 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-09-24 11:27:49 ----D---- C:\Windows\system32\cs-CZ
2014-09-24 10:21:27 ----D---- C:\Program Files (x86)\Internet Explorer
2014-09-15 12:55:26 ----D---- C:\Windows\Microsoft.NET
2014-09-15 12:45:34 ----RSD---- C:\Windows\assembly
2014-09-15 09:06:02 ----N---- C:\Windows\system32\MpSigStub.exe
2014-09-11 22:02:09 ----D---- C:\Program Files\Internet Explorer
2014-09-11 22:02:08 ----D---- C:\Windows\SYSWOW64\en-US
2014-09-11 22:02:08 ----D---- C:\Windows\system32\en-US
2014-09-11 02:23:36 ----D---- C:\ProgramData\Microsoft Help
2014-09-11 02:16:34 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-09-11 02:15:14 ----D---- C:\Windows\system32\MRT
2014-09-11 02:12:10 ----A---- C:\Windows\system32\MRT.exe
2014-09-11 02:11:05 ----SD---- C:\Windows\system32\CompatTel
2014-09-05 19:14:47 ----D---- C:\Windows\Logs
2014-09-02 22:31:56 ----A---- C:\Windows\win.ini
2014-09-02 19:53:33 ----D---- C:\Program Files\Common Files
2014-09-02 16:38:17 ----D---- C:\ProgramData\Apple
2014-09-02 16:18:37 ----SD---- C:\Users\David\AppData\Roaming\Microsoft
2014-09-02 16:16:35 ----D---- C:\Windows\twain_32
2014-09-02 16:14:07 ----D---- C:\Windows\system32\FxsTmp
2014-09-02 14:09:21 ----D---- C:\Program Files (x86)\QuickTime
2014-09-02 00:07:49 ----RSD---- C:\Windows\Fonts
2014-09-02 00:07:27 ----D---- C:\Program Files (x86)\Microsoft Works
2014-09-01 18:24:11 ----SD---- C:\ProgramData\Microsoft
2014-09-01 14:41:25 ----D---- C:\Windows\Prefetch
2014-08-30 17:10:22 ----A---- C:\Windows\SYSWOW64\slwga.dll
2014-08-30 17:10:22 ----A---- C:\Windows\system32\systemcpl.dll
2014-08-30 17:10:22 ----A---- C:\Windows\system32\slwga.dll
2014-08-30 17:10:19 ----A---- C:\Windows\SYSWOW64\user32.dll
2014-08-30 17:10:19 ----A---- C:\Windows\system32\user32.dll
2014-08-30 17:09:21 ----D---- C:\Windows\SYSWOW64\bitstreams
2014-08-30 17:01:06 ----D---- C:\Program Files (x86)\Windows 7 Ultimate Activator [ALL VERSIONS]
2014-08-30 16:52:30 ----D---- C:\Windows\system32\oobe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswNdisFlt;Avast! Firewall Driver; C:\Windows\system32\DRIVERS\aswNdisFlt.sys [2014-09-25 448400]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-09-25 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-09-25 224896]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2014-09-25 28184]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-09-25 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-09-25 1041168]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-09-25 427360]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 nethfdrv;nethfdrv; \??\C:\Windows\system32\drivers\nethfdrv.sys [2014-09-25 46160]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-09-25 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-09-25 79184]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-09-25 92008]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys [2009-06-10 1146880]
R3 athr;Atheros – ovladač pro zařízení pro rozšiřitelnou bezdrátovou síť LAN; C:\Windows\system32\DRIVERS\athrx.sys [2009-06-20 1394688]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-09-23 6180832]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATK64AMD.sys [2007-08-09 13680]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8023x64;Realtek 10/100 NIC Family NDIS x64 Driver; C:\Windows\system32\DRIVERS\Rtnic64.sys [2009-06-10 51712]
R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-05-14 759048]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-08-28 43336]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-09-25 50344]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2014-09-25 106488]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 EpsonBidirectionalService;EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [2006-12-19 94208]
R2 EpsonScanSvc;Epson Scanner Service; C:\Windows\system32\EscSvc64.exe [2011-12-12 135824]
R2 PCSUService;PC Speed Up Service; C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe [2014-09-23 430888]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-09-01 640840]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-22 116648]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-22 116648]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-07-22 194032]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-08-19 111616]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-07-22 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

stiahni a uloz na plochu ComboFix

potom spust pod uctom s administratorskym opravnenim


akcia trva cca. 5-10 minut, niekedy i dlhsie -, Pocas scanu nespustaj ziadne ine aplikacie

Nie je dovod na paniku ak stroj bude restartovany
upozornenie: ak pouzivas antispyware s rezidentnim stitem, ten pred scanom vypni.

po restarte aplikacie vytvori log, ulozeny na C:\Combofix.txt (jeho obsah vloz sem)

ComboFix 14-09-29.02 - David 30.09.2014 21:48:54.1.2 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.3063.1767 [GMT 2:00]
Spuštěný z: c:\users\David\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
FW: avast! Antivirus *Disabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NETHFDRV
-------\Service_nethfdrv
-------\Service_PCSUService
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-08-28 do 2014-09-30 )))))))))))))))))))))))))))))))
.
.
2014-09-30 19:56 . 2014-09-30 19:56 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-09-30 18:56 . 2014-09-09 02:05 11578928 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{397E317E-A21D-4EAA-BD85-669E1C6758D3}\mpengine.dll
2014-09-29 14:49 . 2014-09-29 14:52 -------- d-----w- c:\program files\trend micro
2014-09-29 14:49 . 2014-09-29 14:49 -------- d-----w- C:\rsit
2014-09-25 09:43 . 2014-09-25 09:45 -------- d-----w- c:\users\David\AppData\Roaming\Dropbox
2014-09-25 09:37 . 2014-09-25 09:37 -------- d-----w- c:\users\David\AppData\Roaming\AVAST Software
2014-09-25 09:34 . 2014-09-25 09:34 92008 ----a-w- c:\windows\system32\drivers\aswStm.sys
2014-09-25 09:34 . 2014-09-25 09:35 427360 ----a-w- c:\windows\system32\drivers\aswsp.sys
2014-09-25 09:34 . 2014-09-25 09:34 224896 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-09-25 09:34 . 2014-09-25 09:34 1041168 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2014-09-25 09:34 . 2014-09-25 09:34 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2014-09-25 09:34 . 2014-09-25 09:34 79184 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2014-09-25 09:34 . 2014-09-25 09:34 29208 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2014-09-25 09:34 . 2014-09-25 09:34 93568 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2014-09-25 09:34 . 2014-09-25 09:33 28184 ----a-w- c:\windows\system32\drivers\aswKbd.sys
2014-09-25 09:34 . 2014-09-25 09:34 307344 ----a-w- c:\windows\system32\aswBoot.exe
2014-09-25 09:34 . 2014-09-25 09:34 43152 ----a-w- c:\windows\avastSS.scr
2014-09-25 09:33 . 2014-09-25 09:33 448400 ----a-w- c:\windows\system32\drivers\aswNdisFlt.sys
2014-09-25 09:32 . 2014-09-25 09:32 -------- d-----w- c:\program files\AVAST Software
2014-09-25 08:53 . 2014-09-25 08:53 687 ----a-w- C:\awh3FEC.tmp
2014-09-25 08:40 . 2014-09-25 08:40 687 ----a-w- C:\awh7B97.tmp
2014-09-25 08:40 . 2014-09-25 08:40 -------- d-----w- c:\users\David\AppData\Roaming\DivX
2014-09-25 08:39 . 2014-09-25 08:44 -------- d-----w- c:\program files (x86)\Common Files\DivX Shared
2014-09-25 08:39 . 2014-09-25 08:44 -------- d-----w- c:\program files (x86)\DivX
2014-09-25 08:38 . 2014-09-25 08:44 -------- d-----w- c:\programdata\DivX
2014-09-25 08:38 . 2014-09-26 19:36 -------- d-----w- c:\users\David\AppData\Local\1453
2014-09-25 08:38 . 2014-09-25 08:38 -------- d-----w- c:\program files (x86)\Seznam.cz
2014-09-25 08:38 . 2014-09-30 18:51 -------- d-----w- c:\users\David\AppData\Roaming\Seznam.cz
2014-09-25 08:37 . 2014-09-30 18:48 -------- d-----w- c:\program files (x86)\Zrychleni Pocitace
2014-09-25 08:36 . 2014-09-25 08:36 1955736 ----a-w- c:\users\David\AppData\Roaming\JAFF.exe
2014-09-25 08:36 . 2014-09-25 08:36 -------- d-----w- c:\users\David\AppData\Local\globalUpdate
2014-09-25 08:36 . 2014-09-25 08:36 -------- d-----w- c:\program files (x86)\globalUpdate
2014-09-25 08:36 . 2014-09-25 08:37 -------- d-----w- c:\program files (x86)\HD01-V2.1V25.09
2014-09-25 08:35 . 2014-09-25 08:35 -------- d-----w- c:\program files (x86)\Common Files\Config
2014-09-25 02:40 . 2014-09-25 02:40 46160 ----a-w- c:\windows\system32\drivers\nethfdrv.sys
2014-09-25 02:39 . 2014-09-25 02:39 111104 ----a-w- c:\windows\SysWow64\installd.exe
2014-09-24 08:57 . 2014-09-09 22:11 2048 ----a-w- c:\windows\system32\tzres.dll
2014-09-24 08:57 . 2014-09-09 21:47 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2014-09-16 14:05 . 2014-09-16 14:06 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-09-16 14:05 . 2014-09-16 14:06 -------- d-----w- c:\program files\iTunes
2014-09-16 14:05 . 2014-09-16 14:06 -------- d-----w- c:\program files (x86)\iTunes
2014-09-16 14:05 . 2014-09-16 14:05 -------- d-----w- c:\program files\iPod
2014-09-16 14:02 . 2014-09-16 14:02 -------- d-----w- c:\program files\Bonjour
2014-09-16 14:02 . 2014-09-16 14:02 -------- d-----w- c:\program files (x86)\Bonjour
2014-09-12 09:43 . 2014-09-12 09:43 227728 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\nppdf32.dll
2014-09-11 00:11 . 2014-06-27 02:08 2777088 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2014-09-11 00:11 . 2014-06-27 01:45 2285056 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll
2014-09-10 22:09 . 2014-08-01 11:53 1031168 ----a-w- c:\windows\system32\TSWorkspace.dll
2014-09-10 22:09 . 2014-08-01 11:35 793600 ----a-w- c:\windows\SysWow64\TSWorkspace.dll
2014-09-10 22:09 . 2014-06-24 03:29 2565120 ----a-w- c:\windows\system32\d3d10warp.dll
2014-09-10 22:09 . 2014-06-24 02:59 1987584 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2014-09-10 22:08 . 2014-07-07 02:06 728064 ----a-w- c:\windows\system32\kerberos.dll
2014-09-10 22:08 . 2014-07-07 02:06 1460736 ----a-w- c:\windows\system32\lsasrv.dll
2014-09-10 22:08 . 2014-07-07 01:40 22016 ----a-w- c:\windows\SysWow64\secur32.dll
2014-09-10 22:08 . 2014-07-07 01:40 550912 ----a-w- c:\windows\SysWow64\kerberos.dll
2014-09-10 22:08 . 2014-07-07 01:39 96768 ----a-w- c:\windows\SysWow64\sspicli.dll
2014-09-10 22:08 . 2014-09-05 02:10 578048 ----a-w- c:\windows\system32\aepdu.dll
2014-09-10 22:08 . 2014-09-05 02:05 424448 ----a-w- c:\windows\system32\aeinv.dll
2014-09-02 18:03 . 2014-09-02 18:03 -------- d-----w- c:\users\David\AppData\Roaming\Epson
2014-09-02 17:53 . 2007-09-07 15:33 135168 ----a-w- c:\windows\SysWow64\EEBAPI.dll
2014-09-02 17:53 . 2007-03-28 16:26 65536 ----a-w- c:\windows\SysWow64\EEBUtil.dll
2014-09-02 17:53 . 2006-12-19 16:31 110592 ----a-w- c:\windows\SysWow64\EEBDSCVR.dll
2014-09-02 17:53 . 2006-12-19 16:20 77824 ----a-w- c:\windows\SysWow64\EBAPI.dll
2014-09-02 17:53 . 2003-12-16 23:01 55808 ----a-w- c:\windows\SysWow64\EEBSDKIF.dll
2014-09-02 17:53 . 2014-09-02 17:53 -------- d-----w- c:\program files\Common Files\EPSON
2014-09-02 14:40 . 2012-08-21 11:01 33240 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2014-09-02 14:40 . 2014-09-02 14:40 -------- dc----w- c:\windows\system32\DRVSTORE
2014-09-02 14:33 . 2014-09-23 17:21 -------- d-----w- c:\users\David\AppData\Roaming\Apple Computer
2014-09-02 14:32 . 2014-09-02 14:37 -------- d-----w- c:\program files\Common Files\Apple
2014-09-02 14:29 . 2014-09-02 14:29 -------- d-----w- c:\users\David\AppData\Local\ABBYY
2014-09-02 14:26 . 2014-09-02 14:31 -------- d-----w- c:\program files (x86)\ABBYY FineReader 9.0 Sprint
2014-09-02 14:26 . 2014-09-02 14:26 -------- d-----w- c:\programdata\ABBYY
2014-09-02 14:26 . 2014-09-02 14:26 -------- d-----w- c:\program files (x86)\Common Files\ABBYY
2014-09-02 14:23 . 2014-09-02 14:23 -------- d-----w- c:\programdata\UDL
2014-09-02 14:18 . 2014-09-02 14:18 -------- d-----w- c:\program files\EpsonNet
2014-09-02 14:18 . 2011-08-30 11:40 535040 ----a-w- c:\windows\system32\ensppui.dll
2014-09-02 14:18 . 2011-08-30 11:40 535040 ----a-w- c:\windows\system32\enppui.dll
2014-09-02 14:18 . 2011-08-30 11:38 558080 ----a-w- c:\windows\system32\ensppmon.dll
2014-09-02 14:18 . 2011-08-30 11:38 558080 ----a-w- c:\windows\system32\enppmon.dll
2014-09-02 14:18 . 2011-08-01 16:24 250880 ----a-w- c:\windows\system32\enspres.dll
2014-09-02 14:18 . 2011-08-01 16:24 250880 ----a-w- c:\windows\system32\enpres.dll
2014-09-02 14:18 . 2014-09-02 14:23 -------- d--h--w- c:\program files (x86)\InstallShield Installation Information
2014-09-02 14:18 . 2014-09-02 14:18 -------- d-----w- c:\users\David\AppData\Roaming\InstallShield
2014-09-02 14:18 . 2014-09-02 17:53 -------- d-----w- c:\program files (x86)\Common Files\EPSON
2014-09-02 14:18 . 2014-09-02 14:23 -------- d-----w- c:\program files (x86)\EPSON Software
2014-09-02 14:17 . 2007-04-10 01:06 10752 ----a-w- c:\windows\system32\E_GCINST.DLL
2014-09-02 14:17 . 2011-04-19 03:03 120320 ----a-w- c:\windows\system32\E_ILMIME.DLL
2014-09-02 14:17 . 2011-03-14 03:03 83968 ----a-w- c:\windows\system32\E_IBCBIME.DLL
2014-09-02 14:17 . 2014-09-02 17:54 -------- d-----w- c:\programdata\EPSON
2014-09-02 14:16 . 2011-12-11 22:00 465920 ----a-w- c:\windows\system32\esxw2ud.dll
2014-09-02 14:16 . 2011-12-11 22:00 135824 ----a-w- c:\windows\system32\escsvc64.exe
2014-09-02 14:16 . 2014-09-02 14:20 -------- d-----w- c:\program files (x86)\epson
2014-09-02 12:09 . 2014-09-02 12:09 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin6.dll
2014-09-02 12:09 . 2014-09-02 12:09 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2014-09-02 12:09 . 2014-09-02 12:09 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2014-09-02 12:09 . 2014-09-02 12:09 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2014-09-02 12:09 . 2014-09-02 12:09 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2014-09-02 12:09 . 2014-09-02 12:09 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2014-09-02 12:08 . 2014-09-16 14:05 -------- d-----w- c:\programdata\Apple Computer
2014-09-01 22:06 . 2014-09-01 22:06 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2014-09-01 16:23 . 2014-09-01 16:23 -------- d-----w- c:\program files\Microsoft Silverlight
2014-09-01 16:23 . 2014-09-01 16:23 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2014-09-01 11:17 . 2014-06-25 02:05 14175744 ----a-w- c:\windows\system32\shell32.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-09-15 07:06 . 2014-07-22 13:16 278152 ------w- c:\windows\system32\MpSigStub.exe
2014-09-11 00:12 . 2014-07-22 15:31 101694776 ----a-w- c:\windows\system32\MRT.exe
2014-08-30 15:10 . 2014-08-03 15:48 419840 ----a-w- c:\windows\system32\systemcpl.dll
2014-08-30 15:10 . 2014-08-03 15:48 14848 ----a-w- c:\windows\system32\slwga.dll
2014-08-30 15:10 . 2014-08-03 15:48 13824 ----a-w- c:\windows\SysWow64\slwga.dll
2014-08-30 15:10 . 2014-08-03 15:50 1008640 ----a-w- c:\windows\system32\user32.dll
2014-08-30 15:10 . 2014-08-03 15:49 833024 ----a-w- c:\windows\SysWow64\user32.dll
2014-08-30 14:48 . 2014-08-30 14:48 1397 ----a-w- c:\windows\Uninstall.cmd
2014-08-27 14:53 . 2014-08-27 14:53 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2014-08-23 02:07 . 2014-08-28 14:41 404480 ----a-w- c:\windows\system32\gdi32.dll
2014-08-23 01:45 . 2014-08-28 14:41 311808 ----a-w- c:\windows\SysWow64\gdi32.dll
2014-08-23 00:59 . 2014-08-28 14:41 3163648 ----a-w- c:\windows\system32\win32k.sys
2014-08-06 21:16 . 2014-08-06 21:16 942592 ----a-w- c:\windows\system32\jsIntl.dll
2014-08-06 21:16 . 2014-08-06 21:16 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2014-08-06 21:16 . 2014-08-06 21:16 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2014-08-06 21:16 . 2014-08-06 21:16 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2014-08-06 21:16 . 2014-08-06 21:16 81408 ----a-w- c:\windows\system32\icardie.dll
2014-08-06 21:16 . 2014-08-06 21:16 774144 ----a-w- c:\windows\system32\jscript.dll
2014-08-06 21:16 . 2014-08-06 21:16 77312 ----a-w- c:\windows\system32\tdc.ocx
2014-08-06 21:16 . 2014-08-06 21:16 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2014-08-06 21:16 . 2014-08-06 21:16 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2014-08-06 21:16 . 2014-08-06 21:16 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2014-08-06 21:16 . 2014-08-06 21:16 62464 ----a-w- c:\windows\system32\pngfilt.dll
2014-08-06 21:16 . 2014-08-06 21:16 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2014-08-06 21:16 . 2014-08-06 21:16 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2014-08-06 21:16 . 2014-08-06 21:16 48640 ----a-w- c:\windows\system32\mshtmler.dll
2014-08-06 21:16 . 2014-08-06 21:16 48128 ----a-w- c:\windows\system32\imgutil.dll
2014-08-06 21:16 . 2014-08-06 21:16 413696 ----a-w- c:\windows\system32\html.iec
2014-08-06 21:16 . 2014-08-06 21:16 30208 ----a-w- c:\windows\system32\licmgr10.dll
2014-08-06 21:16 . 2014-08-06 21:16 247808 ----a-w- c:\windows\system32\msls31.dll
2014-08-06 21:16 . 2014-08-06 21:16 243200 ----a-w- c:\windows\system32\webcheck.dll
2014-08-06 21:16 . 2014-08-06 21:16 235520 ----a-w- c:\windows\system32\url.dll
2014-08-06 21:16 . 2014-08-06 21:16 235008 ----a-w- c:\windows\system32\elshyph.dll
2014-08-06 21:16 . 2014-08-06 21:16 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2014-08-06 21:16 . 2014-08-06 21:16 167424 ----a-w- c:\windows\system32\iexpress.exe
2014-08-06 21:16 . 2014-08-06 21:16 147968 ----a-w- c:\windows\system32\occache.dll
2014-08-06 21:16 . 2014-08-06 21:16 143872 ----a-w- c:\windows\system32\wextract.exe
2014-08-06 21:16 . 2014-08-06 21:16 13824 ----a-w- c:\windows\system32\mshta.exe
2014-08-06 21:16 . 2014-08-06 21:16 135680 ----a-w- c:\windows\system32\iepeers.dll
2014-08-06 21:16 . 2014-08-06 21:16 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2014-08-06 21:16 . 2014-08-06 21:16 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2014-08-06 21:16 . 2014-08-06 21:16 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2014-08-06 21:16 . 2014-08-06 21:16 105984 ----a-w- c:\windows\system32\iesysprep.dll
2014-08-06 21:16 . 2014-08-06 21:16 101376 ----a-w- c:\windows\system32\inseng.dll
2014-08-06 21:14 . 2014-08-06 21:14 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-08-06 21:14 . 2014-08-06 21:14 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-08-06 21:14 . 2014-08-06 21:14 604160 ----a-w- c:\windows\SysWow64\d3d10level9.dll
2014-08-06 21:14 . 2014-08-06 21:14 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-08-06 21:14 . 2014-08-06 21:14 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-08-06 21:14 . 2014-08-06 21:14 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-08-06 21:14 . 2014-08-06 21:14 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-08-06 21:14 . 2014-08-06 21:14 522752 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2014-08-06 21:14 . 2014-08-06 21:14 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-08-06 21:14 . 2014-08-06 21:14 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-08-06 21:14 . 2014-08-06 21:14 364544 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2014-08-06 21:14 . 2014-08-06 21:14 363008 ----a-w- c:\windows\system32\dxgi.dll
2014-08-06 21:14 . 2014-08-06 21:14 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-08-06 21:14 . 2014-08-06 21:14 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-08-06 21:14 . 2014-08-06 21:14 333312 ----a-w- c:\windows\system32\d3d10_1core.dll
2014-08-06 21:14 . 2014-08-06 21:14 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2014-08-06 21:14 . 2014-08-06 21:14 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-08-06 21:14 . 2014-08-06 21:14 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-08-06 21:14 . 2014-08-06 21:14 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-08-06 21:14 . 2014-08-06 21:14 296960 ----a-w- c:\windows\system32\d3d10core.dll
2014-08-06 21:14 . 2014-08-06 21:14 2560 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-08-06 21:14 . 2014-08-06 21:14 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-08-06 21:14 . 2014-08-06 21:14 249856 ----a-w- c:\windows\SysWow64\d3d10_1core.dll
2014-08-06 21:14 . 2014-08-06 21:14 245248 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2014-08-06 21:14 . 2014-08-06 21:14 220160 ----a-w- c:\windows\SysWow64\d3d10core.dll
2014-08-06 21:14 . 2014-08-06 21:14 194560 ----a-w- c:\windows\system32\d3d10_1.dll
2014-08-06 21:14 . 2014-08-06 21:14 1682432 ----a-w- c:\windows\system32\XpsPrint.dll
2014-08-06 21:14 . 2014-08-06 21:14 1643520 ----a-w- c:\windows\system32\DWrite.dll
2014-08-06 21:14 . 2014-08-06 21:14 161792 ----a-w- c:\windows\SysWow64\d3d10_1.dll
2014-08-06 21:14 . 2014-08-06 21:14 1247744 ----a-w- c:\windows\SysWow64\DWrite.dll
2014-08-06 21:14 . 2014-08-06 21:14 1238528 ----a-w- c:\windows\system32\d3d10.dll
2014-08-06 21:14 . 2014-08-06 21:14 1175552 ----a-w- c:\windows\system32\FntCache.dll
2014-08-06 21:14 . 2014-08-06 21:14 1080832 ----a-w- c:\windows\SysWow64\d3d10.dll
2014-08-06 21:14 . 2014-08-06 21:14 10752 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-08-06 21:14 . 2014-08-06 21:14 10752 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-08-06 21:14 . 2014-08-06 21:14 648192 ----a-w- c:\windows\system32\d3d10level9.dll
2014-08-06 21:14 . 2014-08-06 21:14 293376 ----a-w- c:\windows\SysWow64\dxgi.dll
2014-08-06 21:14 . 2014-08-06 21:14 221184 ----a-w- c:\windows\system32\UIAnimation.dll
2014-08-06 21:14 . 2014-08-06 21:14 187392 ----a-w- c:\windows\SysWow64\UIAnimation.dll
2014-08-05 21:14 . 2014-08-05 21:14 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2014-08-05 21:14 . 2014-08-05 21:14 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2014-08-05 21:14 . 2014-08-05 21:14 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2014-08-05 21:14 . 2014-08-05 21:14 337408 ----a-w- c:\windows\SysWow64\html.iec
2014-08-05 21:14 . 2014-08-05 21:14 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2014-08-05 21:14 . 2014-08-05 21:14 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2014-08-05 21:14 . 2014-08-05 21:14 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2014-08-05 21:14 . 2014-08-05 21:14 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2014-08-05 21:14 . 2014-08-05 21:14 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2014-08-05 21:12 . 2014-08-05 21:12 207872 ----a-w- c:\windows\SysWow64\WindowsCodecsExt.dll
2014-08-05 21:12 . 2014-08-05 21:12 1158144 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2014-08-04 13:46 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2014-08-04 13:46 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2014-07-25 00:35 . 2014-07-25 00:35 875688 ----a-w- c:\windows\SysWow64\msvcr120_clr0400.dll
2014-07-24 21:47 . 2014-07-24 21:47 869544 ----a-w- c:\windows\system32\msvcr120_clr0400.dll
2014-07-14 02:02 . 2014-08-15 19:52 1216000 ----a-w- c:\windows\system32\rpcrt4.dll
2014-07-14 01:40 . 2014-08-15 19:52 664064 ----a-w- c:\windows\SysWow64\rpcrt4.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2014-08-30 . 2C353B6CE0C8D03225CAA2AF33B68D79 . 1008640 . . [6.1.7601.17514] .. c:\windows\system32\user32.dll
.
[-] 2014-08-30 . 861C4346F9281DC0380DE72C8D55D6BE . 833024 . . [6.1.7601.17514] .. c:\windows\SysWOW64\user32.dll
[7] 2010-11-20 . 5E0DB2D8B2750543CD2EBB9EA8E6CDD3 . 833024 . . [6.1.7601.17514] .. c:\windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e\user32.dll
[7] 2009-07-14 . E8B0FFC209E504CB7E79FC24E6C085F0 . 833024 . . [6.1.7600.16385] .. c:\windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_3382083abb6e47d4\user32.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EPLTarget\P0000000000000000"="c:\windows\system32\spool\DRIVERS\x64\3\E_IATIIME.EXE" [2011-11-02 278112]
"PCSpeedUp"="c:\program files (x86)\Zrychleni Pocitace\PCSUNotifier.exe" [2014-09-23 314664]
"cz.seznam.software.autoupdate"="c:\users\David\AppData\Roaming\Seznam.cz\szninstall.exe" [2013-05-16 1062472]
"cz.seznam.software.szndesktop"="c:\users\David\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" [2013-04-12 92664]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-08-21 959176]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2014-01-17 421888]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-07-31 43816]
"EEventManager"="c:\program files (x86)\Epson Software\Event Manager\EEventManager.exe" [2011-10-31 1058400]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-09-01 152392]
"seznam-listicka-distribuce"="c:\program files (x86)\Seznam.cz\distribution\szninstall.exe" [2013-05-16 1062472]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-09-25 4085896]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;WatAdminSvc;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 aswNdisFlt;Avast! Firewall Driver;c:\windows\system32\DRIVERS\aswNdisFlt.sys;c:\windows\SYSNATIVE\DRIVERS\aswNdisFlt.sys [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys;c:\windows\SYSNATIVE\drivers\aswKbd.sys [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;c:\program files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe;c:\program files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
S2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe;c:\program files\AVAST Software\Avast\afwServ.exe [x]
S2 EpsonScanSvc;Epson Scanner Service;c:\windows\system32\EscSvc64.exe;c:\windows\SYSNATIVE\EscSvc64.exe [x]
S3 RTL8023x64;Realtek 10/100 NIC Family NDIS x64 Driver;c:\windows\system32\DRIVERS\Rtnic64.sys;c:\windows\SYSNATIVE\DRIVERS\Rtnic64.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-09-25 07:38 1096520 ----a-w- c:\program files (x86)\Google\Chrome\Application\37.0.2062.124\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-09-30 c:\windows\Tasks\02775933-36b6-45b7-aeeb-cba227d606c4-1.job
- c:\program files (x86)\HD01-V2.1V25.09\HD01-V2.1V25.09-codedownloader.exe [2014-09-25 08:37]
.
2014-09-30 c:\windows\Tasks\02775933-36b6-45b7-aeeb-cba227d606c4-11.job
- c:\program files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4-11.exe [2014-09-25 08:36]
.
2014-09-30 c:\windows\Tasks\02775933-36b6-45b7-aeeb-cba227d606c4-2.job
- c:\program files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4-2.exe [2014-09-25 08:37]
.
2014-09-30 c:\windows\Tasks\02775933-36b6-45b7-aeeb-cba227d606c4-3.job
- c:\program files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4-3.exe [2014-09-25 08:36]
.
2014-09-30 c:\windows\Tasks\02775933-36b6-45b7-aeeb-cba227d606c4-4.job
- c:\program files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4-4.exe [2014-09-25 08:37]
.
2014-09-30 c:\windows\Tasks\02775933-36b6-45b7-aeeb-cba227d606c4-5.job
- c:\program files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4-5.exe [2014-09-25 08:37]
.
2014-09-30 c:\windows\Tasks\02775933-36b6-45b7-aeeb-cba227d606c4-5_user.job
- c:\program files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4-5.exe [2014-09-25 08:37]
.
2014-09-30 c:\windows\Tasks\02775933-36b6-45b7-aeeb-cba227d606c4-6.job
- c:\program files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4-6.exe [2014-09-25 08:37]
.
2014-09-30 c:\windows\Tasks\02775933-36b6-45b7-aeeb-cba227d606c4-7.job
- c:\program files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4-7.exe [2014-09-25 08:37]
.
2014-09-30 c:\windows\Tasks\404706c9-cad6-4545-b734-bb2da6e27830.job
- c:\program files (x86)\HD01-V2.1V25.09\404706c9-cad6-4545-b734-bb2da6e27830.exe [2014-09-25 08:36]
.
2014-09-30 c:\windows\Tasks\702979fe-30c9-4d70-88f2-18a1e837303b.job
- c:\program files (x86)\HD01-V2.1V25.09\702979fe-30c9-4d70-88f2-18a1e837303b.exe [2014-09-25 08:37]
.
2014-09-30 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-07-22 13:20]
.
2014-09-30 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-07-22 13:20]
.
2014-09-30 c:\windows\Tasks\JAFF.job
- c:\users\David\AppData\Roaming\JAFF.exe [2014-09-25 08:36]
.
2014-09-30 c:\windows\Tasks\PC SpeedUp Service Deactivator.job
- c:\program files (x86)\Zrychleni Pocitace\PCSUSD.exe [2014-09-25 17:26]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-09-25 09:34 634872 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-09-23 165912]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-09-23 385560]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-09-23 363544]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.seznam.cz/?clid=16194
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.0.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
BHO-{11111111-1111-1111-1111-110611381131} - (no file)
Wow6432Node-HKLM-Run-DivXMediaServer - c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
.
**************************************************************************
.
Celkový čas: 2014-09-30 22:05:13 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-09-30 20:05
.
Před spuštěním: Volných bajtů: 122 869 043 200
Po spuštění: Volných bajtů: 123 187 101 696
.
- - End Of File - - 03598F55764CD657FA17ADE89DFA6648
A36C5E4F47E84449FF07ED3517B43A31

poznas polozky v adresari c:\windows\Tasks ? - lebo ak nie, tak vsetko v adresari ZMAZ

vymazáno , co mám dělat dál ?

1. premenuj Combofix na Uninstall a spust = prebehne odinstalacia
2. prescanuj PC s MBAM

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 1.10.2014
Scan Time: 9:25:27
Logfile: vysledek.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.10.01.02
Rootkit Database: v2014.09.19.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: David

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 318753
Time Elapsed: 10 min, 54 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 23
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{22222222-2222-2222-2222-220622382231}, , [d5b143ccd7a589ad99652817a85d39c7],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440644384431}, , [d5b143ccd7a589ad99652817a85d39c7],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550655385531}, , [d5b143ccd7a589ad99652817a85d39c7],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660666386631}, , [d5b143ccd7a589ad99652817a85d39c7],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550655385531}, , [d5b143ccd7a589ad99652817a85d39c7],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660666386631}, , [d5b143ccd7a589ad99652817a85d39c7],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440644384431}, , [d5b143ccd7a589ad99652817a85d39c7],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\092950600ea001325d04029365df3cb90063831.Sandbox.1, , [d5b143ccd7a589ad99652817a85d39c7],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\092950600ea001325d04029365df3cb90063831.Sandbox, , [d5b143ccd7a589ad99652817a85d39c7],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\092950600ea001325d04029365df3cb90063831.Sandbox, , [d5b143ccd7a589ad99652817a85d39c7],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\092950600ea001325d04029365df3cb90063831.Sandbox.1, , [d5b143ccd7a589ad99652817a85d39c7],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220622382231}, , [d5b143ccd7a589ad99652817a85d39c7],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, , [295dc04f0b710333253fe350996a10f0],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\HD01-V2.1V25.09, , [e6a068a7106c61d5b39e3eccf013768a],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\HD01-V2.1V25.09-nv, , [ff8762ad6f0d181e85cc10faef14827e],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE, , [8501bc535b2190a60f330612d033a858],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\30935, , [2561f916cbb185b170f461d2748f6c94],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=10, , [3155e52aa3d9ec4af7237702c1439c64],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=4, , [ec9a34db7b0185b139e265145ba9a45c],
PUP.Optional.PlusHD.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HD01-V2.1V25.09, , [4d39828d91eb53e3f85b7991e81bc33d],
PUP.Optional.PlusHD.A, HKU\S-1-5-21-213127578-1996034143-3147555824-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HD01-V2.1V25.09, , [f1959d724636c571193a5dad6f943bc5],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-213127578-1996034143-3147555824-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, , [008638d7de9eff37c13216f58083a55b],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-213127578-1996034143-3147555824-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Info01HD-V2.1V25.09, , [dfa742cd76060f27fc5fd3371de658a8],

Registry Values: 1
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE|path, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, , [8501bc535b2190a60f330612d033a858]

Registry Data: 0
(No malicious items detected)

Folders: 12
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config, , [7e0858b7b4c870c62280dc3c45beb749],
PUP.Optional.OpenCandy, C:\Users\David\AppData\Roaming\OpenCandy, , [96f00a0537452b0bda47e2fd53af946c],
PUP.Optional.OpenCandy, C:\Users\David\AppData\Roaming\OpenCandy\6273B375D9E341E091A9A5D54B052D72, , [96f00a0537452b0bda47e2fd53af946c],
Trojan.Agent.BCM, C:\Windows\inf\mnconwwp, , [f195000ffb815cdaf0787f62c14111ef],
Trojan.Agent.BCM, C:\Windows\inf\mnconwwp\bitstreams, , [f195000ffb815cdaf0787f62c14111ef],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update, , [3f476ea1dca02115f619c930857d52ae],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0, , [3f476ea1dca02115f619c930857d52ae],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Download, , [3f476ea1dca02115f619c930857d52ae],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Install, , [3f476ea1dca02115f619c930857d52ae],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline, , [3f476ea1dca02115f619c930857d52ae],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline\{1A0A41B9-5CA1-4614-BF5F-DBC7027CC520}, , [3f476ea1dca02115f619c930857d52ae],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09, , [afd757b888f48ea8c8c356b1ef14f10f],

Files: 53
PUP.Optional.CrossRider.A, C:\Users\David\AppData\Roaming\JAFF.exe, , [4e38838c89f30234f47b50059a66ee12],
PUP.Optional.OpenCandy.A, C:\Users\David\AppData\Roaming\OpenCandy\6273B375D9E341E091A9A5D54B052D72\dlm.exe, , [02849976c8b456e03b3f99989e63a25e],
PUP.Optional.CrossRider.A, C:\Program Files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4-11.exe, , [63234fc027559c9ae38ce66f4fb1e61a],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4-2.exe, , [8bfb0609daa283b3ad515ce314f1b14f],
PUP.Optional.CrossRider.A, C:\Program Files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4-3.exe, , [117555bade9e72c4c5aae76e986844bc],
PUP.Optional.CrossRider.A, C:\Program Files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4-4.exe, , [ea9cdd32e9936dc9214fc491ec1437c9],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4-5.exe, , [0e789d72304c83b3718d033c73925aa6],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4-64.exe, , [3452b25d6319f83e50ae67d8dd28a65a],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4-7.exe, , [04826fa03745bd79629cfc43db2a45bb],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\HD01-V2.1V25.09-bg.exe, , [493dc54abdbfbf7707f70a35b352c43c],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\HD01-V2.1V25.09-bho.dll, , [d5b143ccd7a589ad99652817a85d39c7],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\HD01-V2.1V25.09-bho64.dll, , [d5b143ccd7a589ad99652817a85d39c7],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\HD01-V2.1V25.09-codedownloader.exe, , [ee98030cfb814fe7cd31b18e867fde22],
PUP.Optional.CrossRider.A, C:\Program Files (x86)\HD01-V2.1V25.09\utils.exe, , [a4e2f91624582a0ce3571e2e4eb224dc],
Riskware.Tool.CK, C:\Program Files (x86)\Windows 7 Activator\Windows 7 Activator.rar, , [bcca957a681462d47edc9a0f12f2be42],
PUP.Optional.Amonetize, C:\Users\David\Downloads\Nepotvrzeno 363275.crdownload, , [acdaac63f18bb185895506b2b74a1ae6],
PUP.Optional.OffersWizard.A, C:\Windows\System32\drivers\nethfdrv.sys, , [98eedf30ec90b383d7c91bf55aa959a7],
PUP.Optional.InstallD.A, C:\Windows\SysWOW64\installd.exe, , [e3a37c93cdaf072f3b238491c63d0bf5],
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config\ver.xml, , [7e0858b7b4c870c62280dc3c45beb749],
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config\data.xml, , [7e0858b7b4c870c62280dc3c45beb749],
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config\uninstinethnfd.exe, , [7e0858b7b4c870c62280dc3c45beb749],
PUP.Optional.OpenCandy, C:\Users\David\AppData\Roaming\OpenCandy\6273B375D9E341E091A9A5D54B052D72\6866.ico, , [96f00a0537452b0bda47e2fd53af946c],
PUP.Optional.OpenCandy, C:\Users\David\AppData\Roaming\OpenCandy\6273B375D9E341E091A9A5D54B052D72\AVG-PC-TuneUp2014-cz-CZ-p4v1.exe, , [96f00a0537452b0bda47e2fd53af946c],
Trojan.Agent.BCM, C:\Windows\inf\mnconwwp\diablo130302.cl, , [f195000ffb815cdaf0787f62c14111ef],
Trojan.Agent.BCM, C:\Windows\inf\mnconwwp\diakgcn121016.cl, , [f195000ffb815cdaf0787f62c14111ef],
Trojan.Agent.BCM, C:\Windows\inf\mnconwwp\libcurl-4.dll, , [f195000ffb815cdaf0787f62c14111ef],
Trojan.Agent.BCM, C:\Windows\inf\mnconwwp\libeay32.dll, , [f195000ffb815cdaf0787f62c14111ef],
Trojan.Agent.BCM, C:\Windows\inf\mnconwwp\libidn-11.dll, , [f195000ffb815cdaf0787f62c14111ef],
Trojan.Agent.BCM, C:\Windows\inf\mnconwwp\librtmp.dll, , [f195000ffb815cdaf0787f62c14111ef],
Trojan.Agent.BCM, C:\Windows\inf\mnconwwp\libssh2.dll, , [f195000ffb815cdaf0787f62c14111ef],
Trojan.Agent.BCM, C:\Windows\inf\mnconwwp\phatk121016.cl, , [f195000ffb815cdaf0787f62c14111ef],
Trojan.Agent.BCM, C:\Windows\inf\mnconwwp\poclbm130302.cl, , [f195000ffb815cdaf0787f62c14111ef],
Trojan.Agent.BCM, C:\Windows\inf\mnconwwp\scrypt130511.cl, , [f195000ffb815cdaf0787f62c14111ef],
Trojan.Agent.BCM, C:\Windows\inf\mnconwwp\ssleay32.dll, , [f195000ffb815cdaf0787f62c14111ef],
Trojan.Agent.BCM, C:\Windows\inf\mnconwwp\zlib1.dll, , [f195000ffb815cdaf0787f62c14111ef],
Trojan.Agent.BCM, C:\Windows\inf\mnconwwp\bitstreams\fpgaminer_top_fixed7_197MHz.ncd, , [f195000ffb815cdaf0787f62c14111ef],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\bgNova.html, , [afd757b888f48ea8c8c356b1ef14f10f],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4.crx, , [afd757b888f48ea8c8c356b1ef14f10f],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\02775933-36b6-45b7-aeeb-cba227d606c4.xpi, , [afd757b888f48ea8c8c356b1ef14f10f],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\HD01-V2.1V25.09.ico, , [afd757b888f48ea8c8c356b1ef14f10f],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\Interop.IWshRuntimeLibrary.dll, , [afd757b888f48ea8c8c356b1ef14f10f],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\Newtonsoft.Json.dll, , [afd757b888f48ea8c8c356b1ef14f10f],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\SuperSocket.ClientEngine.Common.dll, , [afd757b888f48ea8c8c356b1ef14f10f],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\SuperSocket.ClientEngine.Core.dll, , [afd757b888f48ea8c8c356b1ef14f10f],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\SuperSocket.ClientEngine.Protocol.dll, , [afd757b888f48ea8c8c356b1ef14f10f],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\Uninstall.exe, , [afd757b888f48ea8c8c356b1ef14f10f],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\WebSocket4Net.dll, , [afd757b888f48ea8c8c356b1ef14f10f],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\1293297481.mxaddon, , [afd757b888f48ea8c8c356b1ef14f10f],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\404706c9-cad6-4545-b734-bb2da6e27830.exe, , [afd757b888f48ea8c8c356b1ef14f10f],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\8051b863-6935-433f-b4d3-b2b9bd1b2fed.crx, , [afd757b888f48ea8c8c356b1ef14f10f],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\908c08af-998a-4bb7-aa26-d9a53e096c12.dll, , [afd757b888f48ea8c8c356b1ef14f10f],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\afa94cb0-0383-4e62-94b0-c7c10fcdd227.crx, , [afd757b888f48ea8c8c356b1ef14f10f],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD01-V2.1V25.09\background.html, , [afd757b888f48ea8c8c356b1ef14f10f],

Physical Sectors: 0
(No malicious items detected)


(end)

bol tam este vacsi svincik ako som cakal ,,,
vsetko najdene nechaj zmazat v MBAM - restart a mame hotovo