Kontrola logu

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
pasecak
Návštěvník
Návštěvník
Příspěvky: 124
Registrován: 26 Črc 2008 14:50

Kontrola logu

#1 Příspěvek od pasecak »

Počítač ze dne na den začal zlobit. Je pomalý, google chrome se někdy nepustí a pomůže až restart, připojení na internet přes kabel nefunguje. Přikládám log z RSIT

Logfile of random's system information tool 1.10 (written by random/random)
Run by Markéta at 2014-12-02 12:51:01
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 138 GB (30%) free of 457 GB
Total RAM: 3496 MB (28% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:51:14, on 2.12.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17420)
Boot mode: Normal

Running processes:
C:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE
C:\Program Files\Lenovo Fingerprint Reader\x86\BioMonitor.exe
C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
C:\Program Files (x86)\Lenovo\message center plus\mcplaunch.exe
C:\Program Files (x86)\Techgile\bin\Techgile.BOASHelper.exe
C:\Program Files (x86)\Lenovo\Access Connections\AcDeskBandHlpr.exe
C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
C:\Program Files\AVAST Software\Avast\browsercleanup.exe
C:\Users\Markéta\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\USB Camera\VM331STI.EXE
C:\Users\Markéta\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
C:\Program Files (x86)\Winamp\winampa.exe
C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\PROGRA~2\ThinkPad\UTILIT~1\SCHTASK.exe
C:\Windows\SysWOW64\ctfmon.exe
C:\Program Files (x86)\Techgile\bin\Techgile.expext.exe
C:\Program Files (x86)\Techgile\bin\Techgile.BrowserAdapter.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Markéta.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.default-search.net?sid=498&a ... 41&src=hmp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://g.msn.com/1ewenusDefaultPack/UP97_FRPage
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: 166090e0f32601317e4e5118752c52d60061752 - {11111111-1111-1111-1111-110611171152} - C:\Program Files (x86)\Internet Speed Checker\Internet Speed Checker-bho.dll
O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll
O2 - BHO: Techgile 1.0.0.4 - {7d2cbfb4-dfcd-4282-841a-c2a2a5299d7e} - C:\Program Files (x86)\Techgile\TechgileBHO.dll
O2 - BHO: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: IEPlugin - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\VIPAddOnForIE.dll
O3 - Toolbar: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331STI.EXE
O4 - HKLM\..\Run: [Dolby Advanced Audio v2] "C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [PWMTRV] rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
O4 - HKLM\..\Run: [Fastboot] "C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe"
O4 - HKLM\..\Run: [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
O4 - HKLM\..\Run: [Lenovo Registration] C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe /boot
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [EEventManager] C:\PROGRA~2\EPSONS~1\EVENTM~1\EEventManager.exe
O4 - HKLM\..\Run: [Absolute Notifier] "C:\Program Files (x86)\Absolute Software\Absolute Notifier\AbsoluteNotifier.exe"
O4 - HKLM\..\Run: [Intel AppUp(R) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Markéta\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Markéta\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Markéta\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O20 - AppInit_DLLs:
O23 - Service: Absolute Notifier (AbsoluteNotifier) - Absolute Software - C:\Program Files (x86)\Absolute Software\Absolute Notifier\AbsoluteNotifierService.exe
O23 - Service: AcPrfMgrSvc - Lenovo - C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
O23 - Service: AcSvc - Lenovo - C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Ask Update Service (APNMCP) - APN LLC. - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EpsonBidirectionalService - SEIKO EPSON CORPORATION - C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
O23 - Service: FastbootService - Lenovo - C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: TrueSuiteService (FPLService) - AuthenTec, Inc - C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HyperW7 Service (HyperW7Svc) - Lenovo Group Limited - C:\Program Files\Lenovo\RapidBoot\HyperW7Svc64.exe
O23 - Service: Lenovo PM Service (IBMPMSVC) - Unknown owner - C:\Windows\system32\ibmpmsvc.exe (file missing)
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Lenovo Camera Mute (LENOVO.CAMMUTE) - Lenovo Group Limited - C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
O23 - Service: Lenovo Microphone Mute (LENOVO.MICMUTE) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
O23 - Service: Lenovo Keyboard Noise Reduction (LENOVO.TPKNRSVC) - Lenovo Group Limited - C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
O23 - Service: ThinkVantage Virtual Camera Controller (LENOVO.TVTVCAM) - Lenovo Group Limited - C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
O23 - Service: Lenovo Auto Scroll (Lenovo.VIRTSCRLSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
O23 - Service: LSCWinService - Unknown owner - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Power Manager DBC Service - Lenovo - C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cisco EnergyWise Enabler (PwmEWSvc) - Lenovo Group Limited - C:\Program Files (x86)\ThinkPad\Utilities\PWMEWSVC.EXE
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: SmdmF Service (SmdmFService) - Aztec Media Inc - C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: System Update (SUService) - Unknown owner - C:\Program Files (x86)\Lenovo\System Update\SUService.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Unknown owner - C:\Windows\System32\TPHDEXLG64.exe (file missing)
O23 - Service: Lenovo Hotkey Client Loader (TPHKLOAD) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
O23 - Service: On Screen Display (TPHKSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Update Techgile - Unknown owner - C:\Program Files (x86)\Techgile\updateTechgile.exe
O23 - Service: Util Techgile - Unknown owner - C:\Program Files (x86)\Techgile\bin\utilTechgile.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VIPAppService - Symantec Corporation - C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 16955 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe"
C:\Windows\system32\ibmpmsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\system32\WLANExt.exe 26156176
\??\C:\Windows\system32\conhost.exe "-331050042-1884358237-468109766-992085130-17162222891828065369-1125571061051091681
C:\Windows\System32\spoolsv.exe
taskeng.exe {7C4A6838-0BB2-4E61-BAAD-4ABEEE3BD1DC}
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
"C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe"
"C:\Program Files (x86)\Absolute Software\Absolute Notifier\AbsoluteNotifierService.exe"
"C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe"
"C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
"C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE"
"C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE"
"C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Internet Speed Checker\88fc30e7-d9b2-4eaa-ba41-05dd3cce10c0.exe" /agentregpath='Internet Speed Checker' /appid=61752 /srcid='001726' /subid='0' /zdata='0' /bic=134CBAC868C040F18DA5FFDEF337D65DIE /verifier=6de280e72259fc94a6af3ea0093ec514 /installerversion=1_35_09_29 /installationtime=1416827772 /statsdomain=http://stats.newonlinedemoserv.com /errorsdomain=http://errors.newonlinedemoserv.com /extensionname='Information' /torpedoiesleeps=1000 /torpedoieplugins=93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 /monetizationdomain=http://logs.newonlinedemoserv.com /runfrom='task' /externallog=''
atieclxx
"C:\Program Files\Lenovo Fingerprint Reader\TouchControl.exe"
"C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe"
"C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe"
"C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe"
"C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe"
C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
"C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe"
"C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe"
"C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe" -monitor 520
"C:\Program Files (x86)\Settings Manager\smdmf\smdmfu.exe"
C:\PROGRA~1\LENOVO\HOTKEY\tpnumlkd.exe
"C:\Program Files (x86)\Techgile\bin\utilTechgile.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe"
WLIDSvcM.exe 3288
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe"
"C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\rundll32.exe "C:\Program Files\LENOVO\HOTKEY\hotkey.dll",InstallAudioHotkeyHook
taskeng.exe {2CA8AF91-1EAD-465A-BB47-7DE13EA78E84}
C:\PROGRA~1\Lenovo\HOTKEY\MKRMSG.EXE /UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.MediaKey
C:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE /UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.OnScreenDisplay
C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE /UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.ShortcutKey
"C:\Program Files\Lenovo Fingerprint Reader\x86\BioMonitor.exe" -Embedding
"C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe" /showasync
"C:\Program Files (x86)\Lenovo\message center plus\mcplaunch.exe" /start
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Techgile\updateTechgile.exe"
"C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe"
"C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
/w 910 /h 100 /cg 788f1ed5-429a-4ec3-bfa7-a313514f8c23 /gc 1 /ff 1 /ie 1 /is IM27lsCZ
"C:\Program Files (x86)\Lenovo\Access Connections\AcDeskBandHlpr.exe" -Embedding
"C:\Program Files (x86)\Techgile\bin\Techgile.PurBrowse64.exe" /l false /s false /c "Techgile" /t "C:\Program Files (x86)\Techgile\bin\TEMP" /i "http://apitechgilenet-a.akamaihd.net/gs ... 0000000000" /d {6a42a827-4aa4-4407-9673-d01c0f4ec37d}Gw64 /p 774537ee-ec82-4fa8-b3e5-217f568b9924:chrome /p 92d8d375-204c-4b82-8e60-d764c398f5d1:iexplore /h cdn.sharedaddomain.com,cdn.sharedaddomain2.com 0 10 "C:\Program Files (x86)\Techgile\bin\bau" true
\??\C:\Windows\system32\conhost.exe "631610128-1440892953-535165377-403502563-617056588-118189092-712829054630606526
"C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe" /IpNotifyInstance
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\System32\TpShocks.exe"
"C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe"
"C:\Program Files\Realtek\Audio\HDA\FMAPP.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\AVAST Software\Avast\browsercleanup.exe" /RunOnce
szndesktop.exe default start
"C:\Program Files (x86)\USB Camera\VM331STI.EXE"
"C:\Users\Markéta\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
"C:\Users\Markéta\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart
\??\C:\Windows\system32\conhost.exe "212965283-1597587499735590291017711813231196903-1658904421-865581474-1559465340
"C:\Windows\System32\rundll32.exe" C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
"C:\Windows\System32\rundll32.exe" C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
"C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
"C:\Program Files (x86)\Winamp\winampa.exe"
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\PROGRA~2\ThinkPad\UTILIT~1\SCHTASK.exe
C:\Windows\system32\svchost.exe -k SDRSVC
ctfmon.exe
/ieg 92d8d375-204c-4b82-8e60-d764c398f5d1 /is IM27lsCZ
/c 774537ee-ec82-4fa8-b3e5-217f568b9924 /i 92d8d375-204c-4b82-8e60-d764c398f5d1 /z "n=Techgile&is=IM27lsCZ&dpt=20"
/c 774537ee-ec82-4fa8-b3e5-217f568b9924 /i 92d8d375-204c-4b82-8e60-d764c398f5d1 /z "n=Techgile&is=IM27lsCZ&dpt=20"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="7920.0.1188705031\2122952390" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,16 --disable-accelerated-video-decode --gpu-vendor-id=0x1002 --gpu-device-id=0x9808 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=8.930.13.1100 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="DomRel-Enable/enable/EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/PP_Ethersuggest_A7_Stable_R8/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --disable-accelerated-video-decode --channel="7920.1.595216439\1429163305" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/DomRel-Enable/enable/EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/PP_Ethersuggest_A7_Stable_R8/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --disable-accelerated-video-decode --channel="7920.3.444081167\360731023" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/DomRel-Enable/enable/EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/PP_Ethersuggest_A7_Stable_R8/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --disable-accelerated-video-decode --channel="7920.4.115899568\1017510915" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/DomRel-Enable/enable/EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/PP_Ethersuggest_A7_Stable_R8/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --disable-accelerated-video-decode --channel="7920.7.1487584974\1182047956" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/DomRel-Enable/enable/EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/PP_Ethersuggest_A7_Stable_R8/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --disable-accelerated-video-decode --channel="7920.9.713772612\57227872" /prefetch:673131151
"C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-6.exe" /rawdata=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
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/DomRel-Enable/enable/EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/PP_Ethersuggest_A7_Stable_R8/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_27/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --disable-accelerated-video-decode --channel="7920.27.224932378\455590088" /prefetch:673131151
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}

"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files (x86)\TeamViewer\TeamViewer.exe"
"C:\Program Files (x86)\TeamViewer\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
"C:\Program Files (x86)\TeamViewer\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
"C:\Users\Markéta\Desktop\Downloads\RSITx64.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="7920.43.553684619\1916133925" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Users\Markéta\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\88fc30e7-d9b2-4eaa-ba41-05dd3cce10c0.job - C:\Program Files (x86)\Internet Speed Checker\88fc30e7-d9b2-4eaa-ba41-05dd3cce10c0.exe /agentregpath='Internet Speed Checker' /appid=61752 /srcid='001726' /subid='0' /zdata='0' /bic=134CBAC868C040F18DA5FFDEF337D65DIE /verifier=6de280e72259fc94a6af3ea0093ec514 /installerversion=1_35_09_29 /installationtime=1416827772 /statsdomain=http://stats.newonlinedemoserv.com /errorsdomain=http://errors.newonlinedemoserv.com /extensionname='Information' /torpedoiesleeps=1000 /torpedoieplugins=93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 /monetizationdomain=http://logs.newonlinedemoserv.com /runfrom='task' /externallog=''
C:\Windows\tasks\aafd54c2-7610-4163-86cd-02bca24a8713-1.job - C:\Program Files (x86)\Internet Speed Checker\Internet Speed Checker-codedownloader.exe /rawdata=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
C:\Windows\tasks\aafd54c2-7610-4163-86cd-02bca24a8713-11.job - C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-11.exe /rawdata=ont1yOYfonaJRj5RfBZxfd71Rq6RrGsDtHV4pZjQOAV3vzf/K7/Ct8NJyNuZD7ANP0slRv4N1XkEfm3dM3zL/wg5JWYxr8N5BVGfVQC0cr/i9AOwhSAucUqjVYYRmtNJR+CPmXcoSQjrlGQAEeT3vgLsnKEBDL5WlSzH4s2COtzG3sMDR8M1P7sjnhqoklywJvj695rk0qrPm7VOVBhPI1cvPqPwZt7gSD7cq+INeHxAcN3eGcpj3bTCoRvyF+vaS7QEEAbMP+XltCgR2rJoaH8awJfYp9hCfly/ydmA9ulM9+uMIiFJ5gxmnR2tTQsNXyKBUxERN30PRcDHKlQ5DXFuhBVYJsbICczTCX7XzC1jvg6RVA1ycdRO6VIzqYCxYICyx/8DpGBb/XXOCprqn2tSPEGVkM5kdiFY0129ZaOTf+JXOOLG3PymgmgNepko+NaAP4xaZjjRD0pHp8urF40Ook3TSQ35Nl0CMAOvKLCEynY5L1UZiMLsc1GKTY2NiPoBYMQ9xLogwDzo3SMAVD/Q9TGGq5kxEZrVBrjTO+/6ICPafP6qyf9lG8AzV7bgpKayBg21rk8QdHVsxloThvxjMrS45pPBrtZD+aVhpm62mg9gL0CVAje+S7U6NWfL2FyYBY7E5YxUTgB7vpRNB4DLyzkseAx2KQLF/kviOFp0FXJ9wBWrYnuTsELroMBRapKWXx/W0JIqwTKj9RGKE4VpL3/asIGvf2dRfM+63Wim5ZSFeZcJeAxLKM5zNgrcX0ZLQRGGvWQsXU3DsyBytp0HODYLPMWary5zwBLcClxRFfDKsNxi7Q1gkXGWMfEZrjAxDIe6fv6D42NH8AhYmTnBtYpDyyluwvcdabWzIc1MnrmdAm3RjCz5uS0jVngLXGZNa1C7hVAr2eSvHyGHl0QHopaXhtxeXEB5JPTvA2DMGc5yr8PHbh4tiN46uCtHgjOuNIaReY1mRhUNzoPmkrZ1fSE9b0E6SdFZG65kwRqWdB4ge18x0Ynn0FmmMygbmdjI2v7sWxgoj1k5YooHbS6C1Mq8zTxjsvr/db5WtmeDRMvn1Ndskj6CEF7tVvqcc65bA7K9ev+NxzFB2Wfk6hTDV+XHPvlhxiwMspZDJPqF2IfZ9F49ubWs0NR2ogBzr6okbAjkNHdP1soUroxrMS6MWcXSmqMFwQ3oqxxC+koelvesZR0TfECY04UxtzsVBeF1lhsoxvwbtS7D+pt2QoNfPlpsamjm9oZPow3OvVxsCKa6e/dXRSDZVxoT7vWVZdzlEA9btTF/eBMlyL9qkJtYW+ZRCwKYlZ9zTAKebXvifRe+MULAwTb+lzbIaS/xX6WgdZU4I2cUZWrMKdN3Grtu2XdjBq7g7P6EueNWoAy5mjGfo/q2xrPfNkA2eBR7sa57UOYdhcBHfNIu8+IdQmOBzXYWgIBDgokIZDPzmDD+KULbMLahwmKxDTiAXGiAu5TSzd+uYDTzC4PCJFHFUCzZmmX+hMm8DJzVdZu5EATqhpjIhPwD+wGxep58cajAN2Q6Q5dnNq8KP7OfvIzfUk7ot+foBB7lVuR9cVORY5D8EPvpQR4fwtlmHrdz/susuveFd9CrJ1Euaw1j7NC5wJIopDbnU+4VnPENu1AO0PaUmztpeeRzr5tkgq09hqr/+7rbv1JZ8sZN6akmNNxZ0iivZRVB8qiJctkC9mAFu15+CjDdkQ3NXgi9EGxFPNegy4ZER2SKCm2HEZuK7jiyehdGuHHzsXfwRp213wJ9FVcHGBbP96oQe4qCrb3yIxMIEc49be1oi5d1hfszPsREEA1tIfqGy058SJQ7OvIkSAONtec/PmUgcqeuTLP5EC23VWcdp6FQMreHS4ZdPFfsHE5vYFmiW/YnBe/oR6uHgs64VSnoo4RB+1ph4zZwYkKTNGffMhDK3GPov8Oc+cYG1wjzHdPe14XvKFF1+OFb/jg8izKoRm45ddgrgYj+lIOpSjjsFCXIirJyPNVR7tLCZ+q+YW3xXa4n3YyHGHBXs/+nKuQj3AaZmExB5Tjj36PYKfu2EG42+TvrPqi8dOQHUDf4zMd1ICxmZxw3U5bNd2gGhU6AHejv49HqFCcDr0XPNvNiUe5r7rU8TFnLflMtB+XUR0Wboa+K2sq4ND+v+0ENtrL4TP13HoEUmcrLNBvqP14U/pZr4MnsAdgPvR6ivR0AWTKPgqQ8ngfSPP9RVcUt4qa+Rs+POG2E5owODzJ2tIFAeC26z+zynbcu6u6DBEkhO91YH/i6t+jnODf7pQgOezfMkULE2zECRfD8n/+Mc2TzeCa8H9PCM369hgRRl7QsJ7LEtMu7e2vSLzGysIZRBBrLSTqxUqmwphQhkVZEFbG2NEV2c8CPHAaXb3T2AA==
C:\Windows\tasks\aafd54c2-7610-4163-86cd-02bca24a8713-2.job - C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-2.exe /rawdata=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
C:\Windows\tasks\aafd54c2-7610-4163-86cd-02bca24a8713-4.job - C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-4.exe /rawdata=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
C:\Windows\tasks\aafd54c2-7610-4163-86cd-02bca24a8713-5.job - C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-5.exe /rawdata=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
C:\Windows\tasks\aafd54c2-7610-4163-86cd-02bca24a8713-5_user.job - C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-5.exe /rawdata=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
C:\Windows\tasks\aafd54c2-7610-4163-86cd-02bca24a8713-6.job - C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-6.exe /rawdata=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
C:\Windows\tasks\aafd54c2-7610-4163-86cd-02bca24a8713-7.job - C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-7.exe /rawdata=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
C:\Windows\tasks\ccc604ab-476b-4053-8dd4-b9a5942a6df6.job - C:\Program Files (x86)\Internet Speed Checker\ccc604ab-476b-4053-8dd4-b9a5942a6df6.exe 001726 134CBAC868C040F18DA5FFDEF337D65DIE 61752 1416827772 93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 Internet Speed Checker
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2746081424-1949010188-3409447413-1003Core.job - C:\Users\Markéta\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2746081424-1949010188-3409447413-1003UA.job - C:\Users\Markéta\AppData\Local\Facebook\Update\FacebookUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611171152}]
Internet Speed Checker - C:\Program Files (x86)\Internet Speed Checker\Internet Speed Checker-bho64.dll [2014-11-24 809896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2011-06-08 81024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8590886E-EC8C-43C1-A32C-E4C2B0B6395B}]
TrueSuite Browser Helper Object - C:\Program Files\Lenovo Fingerprint Reader\IEBHO.DLL [2012-06-07 1930088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-11-25 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2014-03-27 256456]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14 2117216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C63CD127-A1CB-4D49-A4F7-D6F88A917BE6}]
Symantec VIP Access Add-On - C:\Program Files (x86)\Symantec\VIP Access Client\64bit\VIPAddOnForIE64.dll [2012-04-19 2443376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611171152}]
Internet Speed Checker - C:\Program Files (x86)\Internet Speed Checker\Internet Speed Checker-bho.dll [2014-11-24 719784]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2011-06-08 69760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7d2cbfb4-dfcd-4282-841a-c2a2a5299d7e}]
Techgile 1.0.0.4 - C:\Program Files (x86)\Techgile\TechgileBHO.dll [2014-11-26 250096]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8590886E-EC8C-43C1-A32C-E4C2B0B6395B}]
TrueSuite Browser Helper Object - C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll [2012-06-07 1772904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-25 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2014-03-27 194504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14 1709152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C63CD127-A1CB-4D49-A4F7-D6F88A917BE6}]
Symantec VIP Access Add-On - C:\Program Files (x86)\Symantec\VIP Access Client\VIPAddOnForIE.dll [2012-04-19 2109040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2014-03-27 256456]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046}
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2014-03-27 194504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-03-13 12452968]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2012-03-09 1158248]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-06-20 2881336]
"TpShocks"=C:\Windows\system32\TpShocks.exe [2012-09-20 228744]
"LENOVO.TPKNRRES"=C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [2012-06-01 290160]
""= []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"Facebook Update"=C:\Users\Markéta\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-05-18 138096]
"cz.seznam.software.autoupdate"=C:\Users\Markéta\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Markéta\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2014-11-21 7063832]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcWin7Hlpr]
C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe [2014-03-14 63832]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe [2012-03-06 1389856]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"331BigDog"=C:\Program Files (x86)\USB Camera\VM331STI.EXE [2011-11-24 548864]
"Dolby Advanced Audio v2"=C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [2011-06-01 506712]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-04-18 343168]
"PWMTRV"=rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor []
"Fastboot"=C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [2012-03-12 1095472]
"Intel AppUp(SM) center"=C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2012-10-04 156000]
"Lenovo Registration"=C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [2011-07-14 4351712]
"WinampAgent"=C:\Program Files (x86)\Winamp\winampa.exe [2011-12-09 74752]
"EEventManager"=C:\PROGRA~2\EPSONS~1\EVENTM~1\EEventManager.exe [2008-05-07 591696]
"Absolute Notifier"=C:\Program Files (x86)\Absolute Software\Absolute Notifier\AbsoluteNotifier.exe [2011-05-10 85672]
"Intel AppUp(R) center"=C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2012-10-04 156000]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-11-25 5226600]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]

C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Markéta\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
C:\Program Files\Lenovo\Bluetooth Software\BtwProximityCP.dll
ACGina

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-12-02 12:37:42 ----D---- C:\Program Files\trend micro
2014-12-02 12:37:38 ----D---- C:\rsit
2014-12-02 12:34:06 ----D---- C:\Users\Markéta\AppData\Roaming\TeamViewer
2014-12-02 11:56:15 ----A---- C:\Windows\system32\drivers\{6a42a827-4aa4-4407-9673-d01c0f4ec37d}Gw64.sys
2014-11-30 15:49:03 ----A---- C:\Windows\system32\drivers\{e3c33c98-5fdc-480c-9fe0-e550c4468a4b}Gw64.sys
2014-11-27 17:05:54 ----A---- C:\Windows\system32\drivers\{fb6e2902-a029-4535-854a-1a69a22df5f7}Gw64.sys
2014-11-26 08:59:12 ----A---- C:\Windows\system32\drivers\{24e0dbe9-5e04-4423-805e-fc8b4c7506a4}Gw64.sys
2014-11-25 19:27:57 ----D---- C:\Program Files\CCleaner
2014-11-25 17:45:12 ----A---- C:\Windows\system32\drivers\aswKbd.sys
2014-11-25 17:44:55 ----A---- C:\Windows\system32\aswBoot.exe
2014-11-25 17:44:43 ----A---- C:\Windows\avastSS.scr
2014-11-25 17:43:46 ----A---- C:\Windows\system32\drivers\aswNdisFlt.sys
2014-11-25 08:53:35 ----D---- C:\Windows\pss
2014-11-24 12:25:45 ----A---- C:\Windows\SYSWOW64\rlls.dll
2014-11-24 12:25:45 ----A---- C:\Windows\system32\rlls64.dll
2014-11-24 12:17:25 ----D---- C:\Program Files (x86)\ace51f2f-4b96-4aad-aeed-c48f5c03f963
2014-11-24 12:17:08 ----D---- C:\Program Files (x86)\globalUpdate
2014-11-24 12:16:55 ----D---- C:\Program Files (x86)\Internet Speed Checker
2014-11-24 12:12:24 ----D---- C:\Program Files (x86)\Seznam.cz
2014-11-24 12:11:47 ----D---- C:\Users\Markéta\AppData\Roaming\Seznam.cz
2014-11-24 12:07:12 ----A---- C:\Windows\system32\drivers\{b082a895-f2bc-40a0-9735-d7592e9e422c}Gw64.sys
2014-11-24 12:05:44 ----D---- C:\Users\Markéta\AppData\Roaming\Systweak
2014-11-24 12:05:38 ----A---- C:\Windows\system32\roboot64.exe
2014-11-24 12:03:20 ----D---- C:\Program Files (x86)\Linkey
2014-11-24 12:01:24 ----D---- C:\Program Files (x86)\Settings Manager
2014-11-24 12:01:22 ----D---- C:\ProgramData\smdmf
2014-11-24 11:58:55 ----D---- C:\Program Files (x86)\Techgile
2014-11-24 11:56:56 ----D---- C:\Program Files (x86)\RelevantKnowledge
2014-11-23 10:41:11 ----D---- C:\Adjustment Program
2014-11-19 11:31:12 ----A---- C:\Windows\system32\pku2u.dll
2014-11-19 11:31:12 ----A---- C:\Windows\system32\kerberos.dll
2014-11-19 11:31:11 ----A---- C:\Windows\SYSWOW64\pku2u.dll
2014-11-19 11:31:10 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-11-19 11:25:08 ----D---- C:\Users\Markéta\AppData\Roaming\LSC
2014-11-12 14:59:37 ----A---- C:\Windows\system32\termsrv.dll
2014-11-12 14:59:36 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-11-12 14:59:35 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2014-11-12 14:59:35 ----A---- C:\Windows\system32\adtschema.dll
2014-11-12 14:59:34 ----A---- C:\Windows\system32\lsasrv.dll
2014-11-12 14:59:32 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-11-12 14:59:32 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2014-11-12 14:59:32 ----A---- C:\Windows\system32\msaudite.dll
2014-11-12 14:59:31 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-11-12 14:59:14 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-11-12 14:59:14 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-11-12 14:59:13 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-11-12 14:59:13 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-11-12 14:59:13 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-11-12 14:59:11 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-11-12 14:59:11 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-11-12 14:59:11 ----A---- C:\Windows\system32\iernonce.dll
2014-11-12 14:59:11 ----A---- C:\Windows\system32\ie4uinit.exe
2014-11-12 14:59:10 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-11-12 14:59:09 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-11-12 14:59:09 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-11-12 14:59:09 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 14:59:07 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-11-12 14:59:01 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-11-12 14:59:01 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-11-12 14:59:00 ----A---- C:\Windows\system32\urlmon.dll
2014-11-12 14:59:00 ----A---- C:\Windows\system32\iedkcs32.dll
2014-11-12 14:58:59 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-11-12 14:58:56 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-11-12 14:58:56 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-11-12 14:58:56 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 14:58:55 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-11-12 14:58:54 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-11-12 14:58:54 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-11-12 14:58:54 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 14:58:54 ----A---- C:\Windows\system32\dxtrans.dll
2014-11-12 14:58:53 ----A---- C:\Windows\system32\msfeeds.dll
2014-11-12 14:58:52 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-11-12 14:58:50 ----A---- C:\Windows\system32\iesetup.dll
2014-11-12 14:58:49 ----A---- C:\Windows\system32\ieapfltr.dll
2014-11-12 14:58:45 ----A---- C:\Windows\system32\iertutil.dll
2014-11-12 14:58:43 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-11-12 14:58:42 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-11-12 14:58:41 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-11-12 14:58:41 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-11-12 14:58:40 ----A---- C:\Windows\system32\jsproxy.dll
2014-11-12 14:58:40 ----A---- C:\Windows\system32\ieUnatt.exe
2014-11-12 14:58:39 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-11-12 14:58:39 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-11-12 14:58:37 ----A---- C:\Windows\system32\dxtmsft.dll
2014-11-12 14:58:36 ----A---- C:\Windows\system32\ieui.dll
2014-11-12 14:58:35 ----A---- C:\Windows\system32\ieframe.dll
2014-11-12 14:58:33 ----A---- C:\Windows\system32\mshtmled.dll
2014-11-12 14:58:32 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-11-12 14:58:31 ----A---- C:\Windows\system32\jscript9diag.dll
2014-11-12 14:58:31 ----A---- C:\Windows\system32\jscript9.dll
2014-11-12 14:58:29 ----A---- C:\Windows\system32\vbscript.dll
2014-11-12 14:58:28 ----A---- C:\Windows\system32\wininet.dll
2014-11-12 14:58:26 ----A---- C:\Windows\system32\msrating.dll
2014-11-12 14:58:26 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-11-12 14:58:23 ----A---- C:\Windows\system32\mshtml.dll
2014-11-12 14:57:56 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-11-12 14:57:56 ----A---- C:\Windows\system32\msxml3.dll
2014-11-12 14:57:55 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-11-12 14:57:55 ----A---- C:\Windows\system32\msxml3r.dll
2014-11-12 14:57:54 ----A---- C:\Windows\system32\IMJP10K.DLL
2014-11-12 14:57:53 ----A---- C:\Windows\SYSWOW64\IMJP10K.DLL
2014-11-12 14:57:51 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2014-11-12 14:57:51 ----A---- C:\Windows\system32\audiosrv.dll
2014-11-12 14:57:51 ----A---- C:\Windows\system32\AUDIOKSE.dll
2014-11-12 14:57:50 ----A---- C:\Windows\system32\EncDump.dll
2014-11-12 14:57:50 ----A---- C:\Windows\system32\AudioSes.dll
2014-11-12 14:57:50 ----A---- C:\Windows\system32\AudioEng.dll
2014-11-12 14:57:49 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2014-11-12 14:57:49 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2014-11-12 14:57:41 ----A---- C:\Windows\system32\schannel.dll
2014-11-12 14:57:40 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-11-12 14:57:40 ----A---- C:\Windows\system32\ncrypt.dll
2014-11-12 14:57:39 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-11-12 14:57:38 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-11-12 14:57:37 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-11-12 14:57:37 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-11-12 14:57:37 ----A---- C:\Windows\system32\wdigest.dll
2014-11-12 14:57:37 ----A---- C:\Windows\system32\TSpkg.dll
2014-11-12 14:57:37 ----A---- C:\Windows\system32\msv1_0.dll
2014-11-12 14:57:36 ----A---- C:\Windows\system32\credssp.dll
2014-11-12 14:57:35 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-11-12 14:57:15 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-11-12 14:57:15 ----A---- C:\Windows\system32\packager.dll
2014-11-12 14:57:14 ----A---- C:\Windows\system32\win32k.sys
2014-11-12 14:57:07 ----A---- C:\Windows\system32\msi.dll
2014-11-12 14:57:06 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-11-12 14:56:57 ----A---- C:\Windows\system32\oleaut32.dll
2014-11-12 14:56:55 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2014-11-06 17:11:31 ----D---- C:\Program Files (x86)\VNT
2014-11-06 17:11:30 ----D---- C:\ProgramData\AskPartnerNetwork
2014-11-06 17:11:30 ----D---- C:\Program Files (x86)\AskPartnerNetwork
2014-11-06 17:10:49 ----D---- C:\ProgramData\APN
2014-11-06 17:10:48 ----D---- C:\ProgramData\YTD Video Downloader
2014-11-06 17:10:28 ----D---- C:\Program Files (x86)\GreenTree Applications

======List of files/folders modified in the last 1 month======

2014-12-02 12:51:12 ----D---- C:\Windows\Temp
2014-12-02 12:41:37 ----D---- C:\Program Files (x86)\TeamViewer
2014-12-02 12:37:42 ----D---- C:\Program Files
2014-12-02 12:34:27 ----D---- C:\Windows\system32\Tasks
2014-12-02 12:34:09 ----RSD---- C:\Windows\Fonts
2014-12-02 12:06:07 ----SHD---- C:\Windows\Installer
2014-12-02 12:05:40 ----HD---- C:\ProgramData
2014-12-02 12:05:36 ----D---- C:\Program Files (x86)
2014-12-02 12:04:05 ----D---- C:\Windows\system32\config
2014-12-02 12:02:07 ----A---- C:\Windows\win.ini
2014-12-02 12:00:19 ----D---- C:\Program Files (x86)\ICQ6Toolbar
2014-12-02 11:57:46 ----D---- C:\Users\Markéta\AppData\Roaming\Dropbox
2014-12-02 11:56:15 ----D---- C:\Windows\system32\drivers
2014-12-02 11:50:30 ----D---- C:\Windows\Tasks
2014-12-01 20:00:04 ----D---- C:\Users\Markéta\AppData\Roaming\vlc
2014-11-30 21:02:05 ----SHD---- C:\System Volume Information
2014-11-30 15:37:15 ----D---- C:\Windows
2014-11-27 22:21:43 ----D---- C:\Program Files (x86)\PDFCreator
2014-11-27 22:21:25 ----D---- C:\Windows\Panther
2014-11-27 22:21:25 ----D---- C:\Windows\inf
2014-11-27 22:21:17 ----D---- C:\Windows\Logs
2014-11-27 22:21:17 ----D---- C:\Windows\debug
2014-11-25 17:47:11 ----D---- C:\Windows\system32\DriverStore
2014-11-25 17:44:55 ----D---- C:\Windows\System32
2014-11-25 08:34:38 ----D---- C:\Users\Markéta\AppData\Roaming\Skype
2014-11-24 13:23:33 ----D---- C:\Windows\system32\GroupPolicy
2014-11-24 12:25:45 ----D---- C:\Windows\SysWOW64
2014-11-24 12:17:48 ----D---- C:\Program Files (x86)\ABBYY FineReader 6.0 Sprint
2014-11-20 10:19:39 ----D---- C:\Windows\winsxs
2014-11-18 12:18:12 ----RSD---- C:\Windows\assembly
2014-11-18 12:17:20 ----D---- C:\Program Files\Lenovo
2014-11-18 12:16:32 ----D---- C:\Windows\Downloaded Installations
2014-11-14 10:31:06 ----D---- C:\Program Files (x86)\ICQ6.5
2014-11-13 14:59:56 ----D---- C:\Windows\Microsoft.NET
2014-11-13 07:56:20 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-11-13 07:56:20 ----D---- C:\Windows\system32\cs-CZ
2014-11-13 07:56:19 ----D---- C:\Windows\SYSWOW64\en-US
2014-11-13 07:56:19 ----D---- C:\Program Files\Internet Explorer
2014-11-13 07:56:18 ----D---- C:\Windows\system32\en-US
2014-11-13 07:56:17 ----D---- C:\Program Files (x86)\Internet Explorer
2014-11-13 00:07:21 ----D---- C:\Windows\system32\MRT
2014-11-12 23:57:37 ----A---- C:\Windows\system32\MRT.exe
2014-11-12 14:56:24 ----D---- C:\Windows\system32\catroot2
2014-11-05 07:48:15 ----D---- C:\Windows\Prefetch
2014-11-04 14:30:58 ----N---- C:\Windows\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amd_sata;amd_sata; C:\Windows\system32\DRIVERS\amd_sata.sys [2011-10-28 80512]
R0 amd_xata;amd_xata; C:\Windows\system32\DRIVERS\amd_xata.sys [2011-10-28 42624]
R0 aswNdisFlt;Avast! Firewall Driver; C:\Windows\system32\DRIVERS\aswNdisFlt.sys [2014-11-25 449936]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-25 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-25 267632]
R0 Fastboot;Fastboot; C:\Windows\System32\DRIVERS\Fastboot.sys [2012-03-12 71440]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 Shockprf;Shockprf; C:\Windows\System32\DRIVERS\Apsx64.sys [2012-07-23 148328]
R0 TPDIGIMN;TPDIGIMN; C:\Windows\System32\DRIVERS\ApsHM64.sys [2011-12-29 25416]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2014-11-25 28184]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-25 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-25 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-25 436624]
R1 F06DEFF2-5B9C-490D-910F-35D3A9119622;F06DEFF2-5B9C-490D-910F-35D3A9119622; \??\C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfmgrc2.cfg [2014-11-15 41872]
R1 PHCORE;PHCORE; \??\C:\Program Files\Lenovo\RapidBoot\PHCORE64.SYS [2012-03-27 33344]
R1 TPPWRIF;TPPWRIF; C:\Windows\System32\drivers\Tppwr64v.sys [2012-04-11 19784]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-25 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-25 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-25 116728]
R2 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2010-01-27 47632]
R3 amdhub30;AMD USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\amdhub30.sys [2011-10-25 102528]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-04-18 10721280]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-04-18 327168]
R3 amdxhc;AMD USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\amdxhc.sys [2011-10-25 219776]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-02-23 95760]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2012-08-02 4747840]
R3 IBMPMDRV;IBMPMDRV; C:\Windows\system32\DRIVERS\ibmpmdrv.sys [2012-02-29 42312]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-03-13 4766952]
R3 psadd;Lenovo Parties Service Access Device Driver; C:\Windows\system32\DRIVERS\psadd.sys [2011-12-26 40248]
R3 RSPCIESTOR;Realtek PCIE CardReader Driver; C:\Windows\system32\DRIVERS\RtsPStor.sys [2012-06-14 339600]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-11-23 648808]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2012-06-20 431928]
R3 TVTI2C;Lenovo SM bus driver; C:\Windows\system32\DRIVERS\Tvti2c.sys [2011-05-29 40248]
R3 tvtvcamd;ThinkVantage Virtual Camera; C:\Windows\system32\DRIVERS\tvtvcamd.sys [2011-12-08 27432]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2011-12-13 56448]
R3 vm331avs;Digital Camera 1; C:\Windows\System32\Drivers\vm331avs.sys [2012-02-29 952832]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
S3 bcbtums;Bluetooth RAM Firmware Download USB Filter; C:\Windows\system32\drivers\bcbtums.sys [2012-03-05 138280]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-12-08 80384]
S3 btwampfl;btwampfl Bluetooth filter driver; \??\C:\Windows\system32\drivers\btwampfl.sys [2012-03-05 615464]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2012-03-05 184872]
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\DRIVERS\btwavdt.sys [2012-03-05 210984]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2012-03-05 39976]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2012-03-05 21544]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 38400]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AbsoluteNotifier;Absolute Notifier; C:\Program Files (x86)\Absolute Software\Absolute Notifier\AbsoluteNotifierService.exe [2011-05-10 10920]
R2 AcPrfMgrSvc;AcPrfMgrSvc; C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe [2014-03-14 133464]
R2 AcSvc;AcSvc; C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe [2014-03-14 272728]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-04 64704]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-04-18 235520]
R2 APNMCP;Ask Update Service; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [2014-10-30 166296]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-25 50344]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2014-11-25 104416]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2012-03-06 952608]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-07-14 1390176]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-07-14 1767520]
R2 EPSON_EB_RPCV4_01;EPSON V5 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE [2007-12-17 163840]
R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE [2007-01-11 126464]
R2 EpsonBidirectionalService;EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [2006-12-19 94208]
R2 FastbootService;FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [2012-03-12 169776]
R2 FPLService;TrueSuiteService; C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe [2012-06-07 328552]
R2 IBMPMSVC;Lenovo PM Service; C:\Windows\system32\ibmpmsvc.exe [2012-04-11 47440]
R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2012-05-30 2445968]
R2 LENOVO.CAMMUTE;Lenovo Camera Mute; C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe [2012-06-01 58224]
R2 LENOVO.MICMUTE;Lenovo Microphone Mute; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [2014-04-07 110128]
R2 LENOVO.TPKNRSVC;Lenovo Keyboard Noise Reduction; C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe [2012-06-01 61296]
R2 LENOVO.TVTVCAM;ThinkVantage Virtual Camera Controller; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [2012-06-01 179568]
R2 Lenovo.VIRTSCRLSVC;Lenovo Auto Scroll; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [2012-08-10 136288]
R2 SmdmFService;SmdmF Service; C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe [2014-11-15 3572240]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2014-11-28 5419792]
R2 TPHKLOAD;Lenovo Hotkey Client Loader; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [2014-06-10 124400]
R2 TPHKSVC;On Screen Display; C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe [2014-04-01 126512]
R2 Update Techgile;Update Techgile; C:\Program Files (x86)\Techgile\updateTechgile.exe [2014-12-02 524016]
R2 Util Techgile;Util Techgile; C:\Program Files (x86)\Techgile\bin\utilTechgile.exe [2014-12-02 524016]
R2 VIPAppService;VIPAppService; C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe [2012-04-19 84080]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-23 136176]
S2 HyperW7Svc;HyperW7 Service; C:\Program Files\Lenovo\RapidBoot\HyperW7Svc64.exe [2012-03-27 145472]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-23 136176]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-09-17 194032]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-06 114688]
S3 LSCWinService;LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [2014-10-16 272776]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 Power Manager DBC Service;Power Manager DBC Service; C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE [2012-04-11 1662528]
S3 PwmEWSvc;Cisco EnergyWise Enabler; C:\Program Files (x86)\ThinkPad\Utilities\PWMEWSVC.EXE [2012-04-11 1665088]
S3 SUService;System Update; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [2014-02-21 24120]
S3 TPHDEXLGSVC;ThinkPad HDD APS Logging Service; C:\Windows\System32\TPHDEXLG64.exe [2011-12-29 49480]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-09-18 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

altrok
Moderátor
Moderátor
Příspěvky: 7328
Registrován: 15 Lis 2012 22:26
Místo/Bydliště: Znojmo

Re: Kontrola logu

#2 Příspěvek od altrok »

Hezky den Vam preju :bye:

:arrow: Pokud nepouzivate, odinstalutje
  • Google Toolbar
  • Skype Click to Call
  • Seznam Software (listicka, postak atd.)
:arrow: V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

:arrow: Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
  • ukoncete vsechny programy
  • kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
  • kliknete na Scan, pote na Clean
  • po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.

pasecak
Návštěvník
Návštěvník
Příspěvky: 124
Registrován: 26 Črc 2008 14:50

Re: Kontrola logu

#3 Příspěvek od pasecak »

# AdwCleaner v4.103 - Report created 02/12/2014 at 16:32:01
# Updated 01/12/2014 by Xplode
# Database : 2014-12-01.2 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Markéta - MARKÉTA-THINKP
# Running from : C:\Users\Markéta\Desktop\adwcleaner_4.103.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : F06DEFF2-5B9C-490D-910F-35D3A9119622
[#] Service Deleted : SmdmFService
[#] Service Deleted : Update Techgile
[#] Service Deleted : Util Techgile
Service Deleted : {24e0dbe9-5e04-4423-805e-fc8b4c7506a4}Gw64
Service Deleted : {6a42a827-4aa4-4407-9673-d01c0f4ec37d}Gw64
Service Deleted : {b082a895-f2bc-40a0-9735-d7592e9e422c}Gw64
Service Deleted : {e3c33c98-5fdc-480c-9fe0-e550c4468a4b}Gw64
Service Deleted : {fb6e2902-a029-4535-854a-1a69a22df5f7}Gw64

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\apn
Folder Deleted : C:\ProgramData\ICQ\ICQToolbar
Folder Deleted : C:\ProgramData\Partner
[!] Folder Deleted : C:\ProgramData\smdmf
Folder Deleted : C:\ProgramData\ytd video downloader
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader
Folder Deleted : C:\Program Files (x86)\Amazon\ABB
Folder Deleted : C:\Program Files (x86)\globalUpdate
Folder Deleted : C:\Program Files (x86)\GreenTree Applications
Folder Deleted : C:\Program Files (x86)\ICQ6Toolbar
Folder Deleted : C:\Program Files (x86)\Linkey
Folder Deleted : C:\Program Files (x86)\RelevantKnowledge
[!] Folder Deleted : C:\Program Files (x86)\Settings Manager
[!] Folder Deleted : C:\Program Files (x86)\Techgile
Folder Deleted : C:\Program Files (x86)\Internet Speed Checker
[!] Folder Deleted : C:\Program Files (x86)\Techgile
Folder Deleted : C:\Program Files (x86)\Common Files\Software Update Utility
Folder Deleted : C:\Windows\Util
Folder Deleted : C:\Users\Markéta\AppData\Local\globalUpdate
Folder Deleted : C:\Users\MARKTA~1\AppData\Local\Temp\apn
Folder Deleted : C:\Users\Markéta\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Markéta\AppData\Roaming\pdfforge
Folder Deleted : C:\Users\Markéta\AppData\Roaming\Systweak
Folder Deleted : C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\sepherdwilbur@aol.com
Folder Deleted : C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam
File Deleted : C:\Windows\SysWOW64\rlls.dll
File Deleted : C:\Windows\System32\roboot64.exe
File Deleted : C:\Windows\System32\drivers\{24e0dbe9-5e04-4423-805e-fc8b4c7506a4}Gw64.sys
File Deleted : C:\Windows\System32\drivers\{6a42a827-4aa4-4407-9673-d01c0f4ec37d}Gw64.sys
File Deleted : C:\Windows\System32\drivers\{b082a895-f2bc-40a0-9735-d7592e9e422c}Gw64.sys
File Deleted : C:\Windows\System32\drivers\{e3c33c98-5fdc-480c-9fe0-e550c4468a4b}Gw64.sys
File Deleted : C:\Windows\System32\drivers\{fb6e2902-a029-4535-854a-1a69a22df5f7}Gw64.sys
File Deleted : C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.azlyrics.com_0.localstorage
File Deleted : C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.azlyrics.com_0.localstorage-journal
File Deleted : C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Deleted : C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
File Deleted : C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pbjikboenpfhbbejgkoklgkhjpfogcam_0.localstorage
File Deleted : C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage
File Deleted : C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal

***** [ Scheduled Tasks ] *****

Task Deleted : 88fc30e7-d9b2-4eaa-ba41-05dd3cce10c0
Task Deleted : aafd54c2-7610-4163-86cd-02bca24a8713-1
Task Deleted : aafd54c2-7610-4163-86cd-02bca24a8713-11
Task Deleted : aafd54c2-7610-4163-86cd-02bca24a8713-2
Task Deleted : aafd54c2-7610-4163-86cd-02bca24a8713-4
Task Deleted : aafd54c2-7610-4163-86cd-02bca24a8713-5
Task Deleted : aafd54c2-7610-4163-86cd-02bca24a8713-6
Task Deleted : aafd54c2-7610-4163-86cd-02bca24a8713-7

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Key Deleted : HKLM\SOFTWARE\Classes\AlxSSB.AlxTBSSB
Key Deleted : HKLM\SOFTWARE\Classes\AlxSSB.AlxTBSSB.1
Key Deleted : HKLM\SOFTWARE\Classes\AppID\dnu.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ICQ Service.exe
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdate
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook
Key Deleted : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook.1
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Deleted : HKLM\SOFTWARE\Classes\S
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x86]
Key Deleted : HKLM\SOFTWARE\Classes\SettingsManagerIEHelper.DNSGuard.1
Key Deleted : HKLM\SOFTWARE\Classes\SettingsManagerIEHelper.DNSGuard
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Update Techgile
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Util Techgile
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1F02FB61-2BE5-4C16-8199-AEAA16EB0342}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5D723752-5899-47E8-99B4-62C824EF9E13}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E1164984-B567-47BD-A7FF-240C2594404A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E57091A7-B5F0-4C42-9329-72ED3E59ED31}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E1842850-FB16-4471-B327-7343FBAED55C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7D2CBFB4-DFCD-4282-841A-C2A2A5299D7E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622172252}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AA760BA8-5862-4BC5-9263-4452CBC0B264}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655175552}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666176652}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{34FF23C3-C89F-4E8B-98D2-0D531202580F}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{DA9FC525-41ED-4C00-B046-946DA7CDD305}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{93D511B5-143B-4A99-ABFC-B5B78AD0AE1B}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644174452}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{edb15ac4-64a4-4217-ad1e-bd8af929342e}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7D2CBFB4-DFCD-4282-841A-C2A2A5299D7E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{008F6853-9CB4-41C5-A950-39D55E5E06BA}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EA582743-9076-4178-9AA6-7393FDF4D5CE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F443A627-5009-4323-9C1D-7FD598D0D712}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{008F6853-9CB4-41C5-A950-39D55E5E06BA}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EA582743-9076-4178-9AA6-7393FDF4D5CE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F443A627-5009-4323-9C1D-7FD598D0D712}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E57091A7-B5F0-4C42-9329-72ED3E59ED31}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{E1842850-FB16-4471-B327-7343FBAED55C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622172252}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{AA760BA8-5862-4BC5-9263-4452CBC0B264}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655175552}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666176652}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{34FF23C3-C89F-4E8B-98D2-0D531202580F}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2498}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4DC8-84D1-F5D7BAF2DB0C}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2498}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2498}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}
Key Deleted : HKCU\Software\Alexa Internet
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\ICQ\ICQToolbar
Key Deleted : HKCU\Software\InstalledBrowserExtensions
Key Deleted : HKCU\Software\Linkey
Key Deleted : HKCU\Software\SmdmF
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\Techgile
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\Internet Speed Checker
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\ICQ\ICQToolbar
Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : HKLM\SOFTWARE\PIP
Key Deleted : HKLM\SOFTWARE\SmdmF
Key Deleted : HKLM\SOFTWARE\Techgile
Key Deleted : HKLM\SOFTWARE\Internet Speed Checker
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D08D9F98-1C78-4704-87E6-368B0023D831}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Settings Manager
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}
Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Techgile

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17420

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]

-\\ Mozilla Firefox v


-\\ Google Chrome v38.0.2125.104

[C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.mp3skull.me/dosearch.php?q={searchTerms}
[C:\Users\Markéta\AppData\Local\Chromium\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.default-search.net/search?sid=498&a ... earchTerms}

-\\ Chromium v

[C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.mp3skull.me/dosearch.php?q={searchTerms}
[C:\Users\Markéta\AppData\Local\Chromium\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.default-search.net/search?sid=498&a ... earchTerms}

-\\ Comodo Dragon v

[C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.mp3skull.me/dosearch.php?q={searchTerms}
[C:\Users\Markéta\AppData\Local\Chromium\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.default-search.net/search?sid=498&a ... earchTerms}

*************************

AdwCleaner[R0].txt - [21208 octets] - [02/12/2014 16:24:27]
AdwCleaner[S0].txt - [19241 octets] - [02/12/2014 16:32:01]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [19302 octets] ##########

altrok
Moderátor
Moderátor
Příspěvky: 7328
Registrován: 15 Lis 2012 22:26
Místo/Bydliště: Znojmo

Re: Kontrola logu

#4 Příspěvek od altrok »

:arrow: Ulozte na plochu zoek.exe http://hijackthis.nl/smeenk/zoek.htm
  • spustte jako spravce
  • do velkeho okna zkopirujte script uvedeny nize
  • kliknete na Run script
  • po restartu na Vas vyskoci log (pripadne jej najdete v C:\zoek-results.log) - vlozte mi jej do pristi odpovedi

    Kód: Vybrat vše

    autoclean;
    emptyclsid;
    iedefaults;
    FFdefaults;
    CHRdefaults;
    emptyalltemp;
    resethosts;
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.

pasecak
Návštěvník
Návštěvník
Příspěvky: 124
Registrován: 26 Črc 2008 14:50

Re: Kontrola logu

#5 Příspěvek od pasecak »

Zoek.exe v5.0.0.0 Updated 29-11-2014
Tool run by Mark‚ta on st 03.12.2014 at 11:11:34,98.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\MARKTA~1\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

3.12.2014 11:18:54 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\Amazon deleted successfully
C:\PROGRA~2\COMMON~1\Symantec Shared deleted successfully
C:\Program Files\Google deleted successfully
C:\Users\MARKTA~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\EPSON deleted successfully
C:\PROGRA~3\AMD deleted successfully
C:\PROGRA~3\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} deleted successfully
C:\Windows\serviceprofiles\networkservice\AppData\\LocalLow deleted successfully
C:\Users\MARKTA~1\AppData\Local\LSC deleted successfully
C:\Users\MARKTA~1\AppData\Local\VeriSign deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AA58ED58-01DD-4D91-8333-CF10577473F7} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AA58ED58-01DD-4D91-8333-CF10577473F7} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1087B0CF-FD0F-4F49-8BF4-87675D0BDC7} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{109566AE-7762-4EE8-8DD3-CC85959D9563} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{14F799D-80E0-4E7D-8416-CB3AEE149BC} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1595CCD4-D82B-4A4B-A6C0-6247B8F9EF26} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1A7F55C4-6E8B-4042-AFA4-E9EC56AD884D} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1DCFA514-A4E1-464D-A53F-95BD3DB0E7D} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1F6B1D11-2B1E-4844-A5A2-AAE2C81564FB} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{20E3FC5F-E646-46A3-9666-9E79A7E39B15} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21C7E148-736C-49E3-B67C-B3C0D12FCD98} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{22D06F61-E137-4DC0-AFD5-C180A08137} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{26F406B3-902B-4455-8738-AA2DC66B9E1D} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2A720448-98AC-47E6-BBEA-FA369F623D2E} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2AC0BE1-829D-4CE0-951B-34EC5FBBD64} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2DDB0C67-3294-4940-9796-CECE71902244} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2F02FA71-F74C-4B8A-825A-8A6DF4EF73EC} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{320833D1-E097-4922-9645-13E9B5E7A1AC} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3217B40E-CCA7-4AAA-B0AB-B7ECDEEEDACA} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{32798F25-CDB2-44F6-9CFB-E16CEF8D8738} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{33D50A96-95FD-4C8D-98B1-5ED3DF5D160} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{33D946D0-B5AB-4724-8A5B-2934BFF4212F} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{349A730D-2EBA-4923-99FB-98B19E8AE46} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{35E9684C-FA61-4FC0-9EE6-2F99E8FCBC3D} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{38EFD85D-CEF8-418D-9D1D-51EB35C64721} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4543EE31-828C-45AA-B11F-F6716A551C} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4634955A-3A6D-4FB7-AD93-3DA715351CB8} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{48C897B3-77AF-4249-B19D-598529B18674} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{494D5DA7-21AB-42BB-A915-37403F301A29} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4AD4F9D2-3BA0-4EE7-BCCD-F29C2792F098} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4C1D2816-DA72-49BA-ADF-FAB3EBED8F9} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4D1E79CB-4D48-4E3C-A95A-D46CC65E897D} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4E6B763E-FDE1-4D41-992A-27FBB9A24C87} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4F4FDDCC-E82E-4EEA-9F10-453C26BA9CFD} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{50769A0D-2CF8-4249-85BC-4194FBD410FB} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{52162962-5578-4D97-8720-1D0799B58C0} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{54A7FC2E-A12D-4E4B-A13C-A647623C64} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{554A5D04-EB92-457D-9E3D-AD27C03146AD} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5558ECAF-1035-49A8-BE3-CA7937EB4BEA} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{569C121F-E96A-4B8B-AEDC-4B55D8C7452} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5bf3aff2-9203-4cc9-830a-76c31a302a36} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{606C35B1-D4B6-4522-BA38-2D838D1C9AE} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{60BDD58A-E437-456B-95B-BF76849A1C1A} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62B28127-6CC6-4EA3-B940-D8839B48E464} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{65040030-35ED-45FF-BC63-6C7319A847FA} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{671C24B7-6022-45F8-B96F-194747CFD7DE} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68176885-D810-49F3-8C63-3FF53FA97A60} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6899DC0C-E33D-4704-8EAC-4F80F21622A4} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6902D722-254F-42A0-BB74-9E5ACF97235D} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{730D6E60-6BD5-44C3-B761-583E796FE14C} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{75E29C14-8B0F-48A7-BB1E-A8F4EC788FBB} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{77563199-2003-492A-A4CA-94E9C1A43AC} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{79A4F4BF-B5FE-4F02-85C8-CCDAC19CA4F} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7CCE14CE-2D70-44EA-91D1-A8EE90DE7C9D} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7EE8D8B-2D3A-44D0-A286-8614E129333E} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{80A7BC08-E133-4C05-B989-A697D7714560} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{845FEC-10C8-4D96-930-8B7EF4FDD740} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{859A184-EF9B-4B30-BC41-C0E88FD9EF9C} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8836F948-1959-4AD5-82D7-E7F4B92D7F86} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88657C7C-2E5D-405B-B6BA-30EEE0ABB6E} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{89F1B451-9653-490C-B7B6-9FA6FD58269} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8A2DC41D-5653-4553-84BA-0EB739CFCA3} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8B655C04-E587-465F-A567-F0EA6FC6FB90} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8C8A2422-CA0-48C9-9BF3-BE9A9560D52C} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8FEBAA44-27BE-41E9-9C5-A4415A977266} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{931A9956-BF24-442C-A3C4-E2BB4A2AC8D0} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{938ff128-85c4-4f5f-ae50-e85f5e0dbb91} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{93A878D3-A733-4793-9C6D-6E3F8EFA642E} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{94CC3A2C-B97-4B63-A3DC-A9F56364517} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{95B430CB-57FF-4795-ACCB-55D0C1904252} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{96BF0421-E2B5-47DA-B1CE-B75704B253F} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A47DA604-6FBF-42BE-AB69-A1173CED1F5} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A4FF92F5-D720-47E0-81C6-7EC74CF6E4F4} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a59ef130-b307-41f1-9348-4ea16eb7d6b7} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A7AD2E66-FACC-466C-9BD5-356A3C5E270} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AC221E37-6B20-459C-B655-1A38E4E20A2} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ACDBEA6C-63EB-4208-BC6B-1454F1563541} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AD647686-304E-420D-9659-39E5F8DFD26} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AD746CD3-54D-4E02-9EAE-6CBE363074B} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B15CBC59-3AE0-455A-B5AE-18A202D9DE1} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B7D5C6EC-F417-4611-86D7-BCFB93A6E48} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B8936971-1A30-4162-A126-AAA4265C74B} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B99F1588-A27A-43CA-819C-FEC0433C4696} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BDE91B84-6BB7-48AF-9141-2E18E9DED2B} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C3167D5E-1340-4266-8054-683275E6082} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C51E01C7-91B9-4542-85FB-6E7C8F17D66} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C5A2186F-3CC1-4468-8B63-4C47156D638} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C6DFB452-C472-47D2-BAE-674A26BCBC2C} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{cb9ca797-64fd-4bac-9338-5465307f082d} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CC79319C-83A6-4363-8B35-50AF70B1AEFB} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D3A0ED91-75B-4049-9F5F-A9C91C9A3B91} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D40C1BCA-DDDC-40A6-8E79-D8BC46FCA98C} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D4668928-93B7-4497-A76B-B49298312C76} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D50C327F-F194-4935-A18A-CE6BBC17C984} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7ABC1BF-FD5-4104-9EA4-2C1311572FF8} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DA040584-7C3A-44AF-85FF-B8C8A3DBDF2} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DCC3C5EC-B6EE-482A-A3FF-1928AE747324} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DF4952BB-E2E2-4347-879E-4AF88F89B0B5} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DF703B37-5E53-4D96-8471-EA70F82DFFD5} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E3B6BCB5-237C-4BCF-8E8A-1783768CB840} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E69D5896-6208-4104-9D5D-58ED29F8D2} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEDACCC3-FAC2-4AE5-A4BF-561E674618AF} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EFC4C4BC-48C8-4232-A24C-65CA3F012D3} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F1127BB5-F5C1-4B19-BDE7-586776813CF5} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F1F35316-5E21-4E2B-9192-DE78249BD6CB} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F31313F3-5D89-4D6D-9A57-FBB1565D2E9F} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F555D923-B95D-4A7F-86CB-82454DE9E5F2} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F991A703-5846-4961-8E29-EDE2E7878AC} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FA450661-C6C3-4AED-88C5-138AA029B1FC} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FBCA35F2-52E0-4B28-9A79-DC3E6DD27BAD} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611171152} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611171152} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5bf3aff2-9203-4cc9-830a-76c31a302a36} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{938ff128-85c4-4f5f-ae50-e85f5e0dbb91} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a59ef130-b307-41f1-9348-4ea16eb7d6b7} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{cb9ca797-64fd-4bac-9338-5465307f082d} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Approved Extensions\{008F6853-9CB4-41C5-A950-39D55E5E06BA} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Approved Extensions\{AA58ED58-01DD-4D91-8333-CF10577473F7} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Approved Extensions\{F443A627-5009-4323-9C1D-7FD598D0D712} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Approved Extensions\{54739D49-AC03-4C57-9264-C5195596B3A1} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110611171152} deleted successfully
HKEY_USERS\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully

==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\MARKTA~1\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\prefs.js:
user_pref("browser.search.defaultenginename", "Яндекс");
user_pref("browser.search.selectedEngine", "Яндекс");
user_pref("keyword.URL", "http://yandex.ru/yandsearch?win=86&clid=1946583&text=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", false);

Added to C:\Users\MARKTA~1\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

==== Deleting Files \ Folders ======================

C:\PROGRA~3\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} not found
C:\PROGRA~2\GUTFF27.tmp deleted
C:\PROGRA~2\GUMFF26.tmp deleted
C:\PROGRA~2\VDownloader deleted
C:\PROGRA~2\ace51f2f-4b96-4aad-aeed-c48f5c03f963 deleted
C:\PROGRA~3\AbsoluteNotifier.txt deleted
C:\PROGRA~3\smdmf deleted
C:\PROGRA~3\ICQ deleted
C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-5_user.job deleted
C:\Users\Public\AlexaNSISPlugin.1232.dll deleted
C:\Windows\tasks\ccc604ab-476b-4053-8dd4-b9a5942a6df6.job deleted
C:\Windows\SysNative\rlls64.dll deleted
C:\windows\SysNative\GroupPolicy\machine deleted
C:\windows\SysNative\GroupPolicy\gpt.ini deleted
C:\Users\Public\Desktop\YTD Video Downloader.lnk deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"VIP5X@verisign.com"="C:\Program Files (x86)\Symantec\VIP Access Client" [29.06.2014 10:18]

==== Firefox Extensions ======================

==== Firefox Plugins ======================


==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
cdkedefaddcdlpmiafhicjnkbogjiogj - C:\Program Files\Lenovo Fingerprint Reader\x86\tschrome.crx[14.03.2012 06:31]
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[25.11.2014 17:44]

History 2 - MARKTA~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\cahejgbbfgmlmjgdjlibphdjeldhagkp
Website Logon - MARKTA~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdkedefaddcdlpmiafhicjnkbogjiogj
Youtube looper - MARKTA~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfllkgkeiciklnenppokkgkmbjnoeodn
AdBlock - MARKTA~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom
Avast Online Security - MARKTA~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
Techgile - MARKTA~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\lopihlgfpjplglnakljkodnmefjkoedi
Google Dictionary (by Google) - MARKTA~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgijmajocgfcbeboacabfgobmjgjcoja

==== Chromium Fix ======================

C:\Users\MARKTA~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.metrolyrics.com_0.localstorage deleted successfully
C:\Users\MARKTA~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.metrolyrics.com_0.localstorage-journal deleted successfully
C:\Users\MARKTA~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_answers.ask.com_0.localstorage deleted successfully
C:\Users\MARKTA~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_answers.ask.com_0.localstorage-journal deleted successfully
C:\Users\MARKTA~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\lopihlgfpjplglnakljkodnmefjkoedi deleted successfully
C:\Users\MARKTA~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lopihlgfpjplglnakljkodnmefjkoedi_0.localstorage deleted successfully
C:\Users\MARKTA~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lopihlgfpjplglnakljkodnmefjkoedi_0.localstorage-journal deleted successfully
C:\Users\MARKTA~1\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lopihlgfpjplglnakljkodnmefjkoedi deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"Default_Page_URL"="http://www.google.com/ig/redirectdomain ... &bmod=LENP"
"ICQ Search"="http://www.google.com"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\y]
@="http://yandex.ru/yandsearch?win=86&clid=1946583&text=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="C:\\ProgramData\\ICQ\\ICQNewTab\\newTab.html"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="C:\\ProgramData\\ICQ\\ICQNewTab\\newTab.html"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"ICQ Search"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?sourceid=i ... NP_csCZ502"

==== Reset Google Chrome ======================

C:\Users\MARKTA~1\AppData\Local\Chromium\User Data\Default\Preferences was reset successfully
C:\Users\MARKTA~1\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\MARKTA~1\AppData\Local\Nichrome\User Data\Default\Preferences was reset successfully
C:\Users\MARKTA~1\AppData\Local\Xpom\User Data\Default\Preferences was reset successfully
C:\Users\MARKTA~1\AppData\Local\Chromium\User Data\Default\Web Data was reset successfully
C:\Users\MARKTA~1\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\MARKTA~1\AppData\Local\Nichrome\User Data\Default\Web Data was reset successfully
C:\Users\MARKTA~1\AppData\Local\Xpom\User Data\Default\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\MARKTA~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\MARKTA~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

C:\Users\MARKTA~1\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=108 folders=11 14185433 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\MARKTA~1\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\MARKTA~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on st 03.12.2014 at 15:50:09,86 ======================

altrok
Moderátor
Moderátor
Příspěvky: 7328
Registrován: 15 Lis 2012 22:26
Místo/Bydliště: Znojmo

Re: Kontrola logu

#6 Příspěvek od altrok »

:arrow: Pocitaci by se melo z toho nejhorsiho oddechnout.

:arrow: Dejte novy log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.

pasecak
Návštěvník
Návštěvník
Příspěvky: 124
Registrován: 26 Črc 2008 14:50

Re: Kontrola logu

#7 Příspěvek od pasecak »

FRST
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-12-2014 02
Ran by Markéta (administrator) on MARKÉTA-THINKP on 09-12-2014 18:10:50
Running from C:\Users\Markéta\Desktop
Loaded Profile: Markéta (Available profiles: Markéta)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AuthenTec, Inc) C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe
(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe
(Absolute Software) C:\Program Files (x86)\Absolute Software\Absolute Notifier\AbsoluteNotifierService.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Just Develop It) C:\Program Files (x86)\MyPC Backup\BackupStack.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
(AuthenTec Inc.) C:\Program Files\Lenovo Fingerprint Reader\TouchControl.exe
(AMD) C:\Windows\System32\atieclxx.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
(Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Aztec Media Inc) C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe
(Aztec Media Inc) C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
(Aztec Media Inc) C:\Program Files (x86)\Settings Manager\smdmf\smdmfu.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\mkrmsg.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe
(AuthenTec Inc.) C:\Program Files\Lenovo Fingerprint Reader\x86\BioMonitor.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcDeskBandHlpr.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Dropbox, Inc.) C:\Users\Markéta\AppData\Roaming\Dropbox\bin\Dropbox.exe
(MyPCBackup.com) C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE
() C:\Program Files (x86)\Techgile\bin\utilTechgile.exe
() C:\Program Files (x86)\Techgile\bin\Techgile.PurBrowse64.exe
() C:\Program Files (x86)\Techgile\bin\Techgile.BrowserAdapter.exe
() C:\Program Files (x86)\Techgile\bin\Techgile.BrowserAdapter64.exe
() C:\Program Files (x86)\Techgile\updateTechgile.exe
(forum.viry.cz) C:\Users\Markéta\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12452968 2012-03-13] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-03-09] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2881336 2012-06-20] (Synaptics Incorporated)
HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [228744 2012-09-20] (Lenovo.)
HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [290160 2012-06-01] (Lenovo Group Limited)
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2011-11-24] (Vimicro)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2012-04-18] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [PWMTRV] => rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
HKLM-x32\...\Run: [Fastboot] => C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [1095472 2012-03-12] (Lenovo)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2012-10-04] (Intel Corporation)
HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4351712 2011-07-14] (Lenovo, Inc.)
HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [74752 2011-12-09] (Nullsoft, Inc.)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [591696 2008-05-07] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [Absolute Notifier] => C:\Program Files (x86)\Absolute Software\Absolute Notifier\AbsoluteNotifier.exe [85672 2011-05-10] (Absolute Software)
HKLM-x32\...\Run: [Intel AppUp(R) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2012-10-04] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5226600 2014-11-25] (AVAST Software)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\...\Run: [Facebook Update] => C:\Users\Markéta\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-05-18] (Facebook Inc.)
HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7063832 2014-11-21] (Piriform Ltd)
HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\...\MountPoints2: {618c58eb-58b6-11e2-956d-047d7bff73d8} - D:\LaunchU3.exe -a
HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\...\MountPoints2: {a48a47d9-dcb3-11e1-9b45-806e6f6e6963} - Q:\LenovoQDrive.exe
Lsa: [Notification Packages] scecli C:\Program Files\Lenovo\Bluetooth Software\BtwProximityCP.dll ACGina
Startup: C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Markéta\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/welcome/thinkpad
HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain ... &bmod=LENP
HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=6826
HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com/welcome/thinkpad
HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Main,ICQ Search = http://www.icq.com/search/results.php?q ... &ch_id=osd
HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Main,First Home Page = http://g.msn.com/1ewenusDefaultPack/UP97_FRPage
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = http://www.default-search.net/search?si ... earchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = http://www.default-search.net/search?si ... earchTerms}
SearchScopes: HKLM-x32 -> {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = http://slirsredirect.search.aol.com/red ... 19-09-2012
SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> DefaultScope {08011321-3136-4E16-99F7-448F80A6F853} URL = https://search.yahoo.com/search?fr=chr- ... earchTerms}
SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> 10F22169C6C3CD210C727B662726EAD8 URL = http://videa.seznam.cz/?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> 351DD7AD0CD3C8D133EE1C792A79DE0E URL = http://www.google.com/search?sourceid=i ... NP_csCZ502
SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> 43D7F7558CE167D97CE7A9913861817D URL = http://www.zbozi.cz/?sourceid=quicksear ... earchTerms}
SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> 726385007D264C9C8961FB6A287DF1DE URL = http://www.mapy.cz/?sourceid=quicksearc ... earchTerms}
SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> E005305E00C384F28D40B50D2C9BA4A6 URL = http://www.firmy.cz/phr/{searchTerms}
SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> yandex.ru-191536 URL = http://www.google.com/search?sourceid=i ... NP_csCZ502
SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> {08011321-3136-4E16-99F7-448F80A6F853} URL = https://search.yahoo.com/search?fr=chr- ... earchTerms}
SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = http://www.icq.com/search/results.php?q ... &ch_id=osd
SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = http://www.default-search.net/search?si ... earchTerms}
SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = http://slirsredirect.search.aol.com/red ... 19-09-2012
BHO: No Name -> {11111111-1111-1111-1111-110611171152} -> No File
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: TrueSuite Browser Helper Object -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files\Lenovo Fingerprint Reader\IEBHO.DLL (AuthenTec Inc.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Symantec VIP Access Add-On -> {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} -> C:\Program Files (x86)\Symantec\VIP Access Client\64bit\VIPAddOnForIE64.dll (Symantec Corporation)
BHO-x32: No Name -> {11111111-1111-1111-1111-110611171152} -> No File
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: TrueSuite Browser Helper Object -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll (AuthenTec Inc.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Symantec VIP Access Add-On -> {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} -> C:\Program Files (x86)\Symantec\VIP Access Client\VIPAddOnForIE.dll (Symantec Corporation)
BHO-x32: No Name -> {D5FEC983-01DB-414A-9456-AF95AC9ED7B5} -> No File
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM-x32 - No Name - {855F3B16-6D32-4fe6-8A56-BBB695989046} - No File
Toolbar: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> No Name - {91397D20-1446-11D4-8AF4-0040CA1127B6} - No File
Handler-x32: http - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 147.230.16.140 147.230.16.1

FireFox:
========
FF ProfilePath: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default
FF Homepage: hxxp://www.seznam.cz/?clid=6826
FF DefaultSearchEngine: Yahoo!
FF SelectedSearchEngine: Yahoo!
FF Keyword.URL: https://search.yahoo.com/search?fr=gree ... =501549&p=
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll No File
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll No File
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2746081424-1949010188-3409447413-1003: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Markéta\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKU\S-1-5-21-2746081424-1949010188-3409447413-1003: intel.com/AppUp -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll (Intel)
FF Plugin HKU\S-1-5-21-2746081424-1949010188-3409447413-1003: intel.com/AppUpx64 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
FF user.js: detected! => C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\user.js
FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\firmy.cz-165547.xml
FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\mapy.cz-165547.xml
FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\seznam.cz-165546.xml
FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\videa.seznam.cz-165547.xml
FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\yandex.ru-191537.xml
FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\zbozi.cz-165546.xml
FF Extension: No Name - C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\sepherdwilbur@aol.com [2014-11-24]
FF Extension: No Name - C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2014-11-24]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-10-14]
FF HKLM-x32\...\Firefox\Extensions: [VIP5X@verisign.com] - C:\Program Files (x86)\Symantec\VIP Access Client
FF Extension: Symantec VIP Access Add-On - C:\Program Files (x86)\Symantec\VIP Access Client [2012-08-02]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://www.msn.com/?pc=UP97&ocid=UP97DHP"
CHR DefaultSuggestURL: Default -> http://ssmsp.ask.com/query?sstype=prefi ... earchTerms}
CHR Profile: C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-03]
CHR Extension: (Dokumenty Google) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-03]
CHR Extension: (Disk Google) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-03]
CHR Extension: (YouTube) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-03]
CHR Extension: (History 2) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\cahejgbbfgmlmjgdjlibphdjeldhagkp [2013-04-24]
CHR Extension: (Vyhledávání Google) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-03]
CHR Extension: (AdBlock) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-12-08]
CHR Extension: (Avast Online Security) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-10-04]
CHR Extension: (Google Dictionary (by Google)) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgijmajocgfcbeboacabfgobmjgjcoja [2013-04-24]
CHR Extension: (Peněženka Google) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Rychlý přesun Google) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc [2013-04-24]
CHR Extension: (Gmail) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-03]
CHR HKLM\...\Chrome\Extension: [aaaaadgepjkdffhjbkfjgnnffnfcffbg] - No Path
CHR HKLM-x32\...\Chrome\Extension: [aaaaadgepjkdffhjbkfjgnnffnfcffbg] - No Path
CHR HKLM-x32\...\Chrome\Extension: [aminlpmkfcdibgpgfajlgnamicjckkjf] - No Path
CHR HKLM-x32\...\Chrome\Extension: [cdkedefaddcdlpmiafhicjnkbogjiogj] - C:\Program Files\Lenovo Fingerprint Reader\x86\tschrome.crx [2012-03-14]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-25]
CHR HKLM-x32\...\Chrome\Extension: [jdkihdhlegcdggknokfekoemkjjnjhgi] - No Path
CHR HKLM-x32\...\Chrome\Extension: [pbjikboenpfhbbejgkoklgkhjpfogcam] - C:\Program Files (x86)\Amazon\ABB\AmazonChrome-lenovo-abb.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [pchfckkccldkbclgdepkaonamkignanh] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AbsoluteNotifier; C:\Program Files (x86)\Absolute Software\Absolute Notifier\AbsoluteNotifierService.exe [10920 2011-05-10] (Absolute Software) [File not signed]
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166296 2014-11-21] (APN LLC.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-25] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [104416 2014-11-25] (AVAST Software)
R2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [53832 2014-11-25] (Just Develop It) <==== ATTENTION
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [952608 2012-03-06] (Broadcom Corporation.)
R2 EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed]
R2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [169776 2012-03-12] (Lenovo)
R2 FPLService; C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe [328552 2012-06-07] (AuthenTec, Inc)
S2 gupdate; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [136176 2014-10-23] () [File not signed]
S3 gupdatem; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [136176 2014-10-23] () [File not signed]
R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [179568 2012-06-01] (Lenovo Group Limited)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272776 2014-10-16] ()
R2 SmdmFService; C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe [3572240 2014-11-15] (Aztec Media Inc)
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [24120 2014-02-21] ()
R2 Update Techgile; C:\Program Files (x86)\Techgile\updateTechgile.exe [523504 2014-12-09] ()
R2 Util Techgile; C:\Program Files (x86)\Techgile\bin\utilTechgile.exe [523504 2014-12-09] ()
R2 VIPAppService; C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe [84080 2012-04-19] (Symantec Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-25] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-11-25] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-25] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449936 2014-11-25] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-25] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-25] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-25] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-25] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-25] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-25] ()
S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [138280 2012-03-05] (Broadcom Corporation.)
R1 F06DEFF2-5B9C-490D-910F-35D3A9119622; C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfmgrc2.cfg [41872 2014-11-15] (Aztec Media Inc)
R0 Fastboot; C:\Windows\System32\DRIVERS\Fastboot.sys [71440 2012-03-12] (Windows (R) Win 7 DDK provider)
R2 npf; C:\Windows\System32\drivers\npf.sys [47632 2010-01-27] (CACE Technologies, Inc.)
R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [40248 2011-05-29] (Lenovo Information Product(ShenZhen China) Inc.)
R3 tvtvcamd; C:\Windows\System32\DRIVERS\tvtvcamd.sys [27432 2011-12-08] (ThinkVantage Communications Utility)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [952832 2012-02-29] (Vimicro Corporation)
R1 {24e0dbe9-5e04-4423-805e-fc8b4c7506a4}Gw64; C:\Windows\System32\drivers\{24e0dbe9-5e04-4423-805e-fc8b4c7506a4}Gw64.sys [48784 2014-11-25] (StdLib)
R1 {670b17cf-f53d-46d2-a0f0-771be0b4f802}Gw64; C:\Windows\System32\drivers\{670b17cf-f53d-46d2-a0f0-771be0b4f802}Gw64.sys [48784 2014-12-06] (StdLib)
R1 {7594955a-29b6-4548-9263-89299555d649}Gw64; C:\Windows\System32\drivers\{7594955a-29b6-4548-9263-89299555d649}Gw64.sys [48784 2014-12-05] (StdLib)
R1 {b082a895-f2bc-40a0-9735-d7592e9e422c}Gw64; C:\Windows\System32\drivers\{b082a895-f2bc-40a0-9735-d7592e9e422c}Gw64.sys [48784 2014-11-23] (StdLib)
R1 {e3c33c98-5fdc-480c-9fe0-e550c4468a4b}Gw64; C:\Windows\System32\drivers\{e3c33c98-5fdc-480c-9fe0-e550c4468a4b}Gw64.sys [48784 2014-11-29] (StdLib)
R1 {fb6e2902-a029-4535-854a-1a69a22df5f7}Gw64; C:\Windows\System32\drivers\{fb6e2902-a029-4535-854a-1a69a22df5f7}Gw64.sys [48784 2014-11-27] (StdLib)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-09 18:10 - 2014-12-09 18:12 - 00031541 _____ () C:\Users\Markéta\Desktop\FRST.txt
2014-12-09 18:10 - 2014-12-09 18:11 - 00000000 ____D () C:\FRST
2014-12-09 18:09 - 2014-12-09 18:09 - 00112640 _____ (forum.viry.cz) C:\Users\Markéta\Desktop\FRSTLauncher.exe
2014-12-09 11:52 - 2014-12-09 11:52 - 00021491 _____ () C:\Users\Markéta\AppData\Local\recently-used.xbel
2014-12-08 20:32 - 2014-12-09 11:42 - 00000802 _____ () C:\Windows\setupact.log
2014-12-08 20:32 - 2014-12-08 20:32 - 00000000 _____ () C:\Windows\setuperr.log
2014-12-08 14:23 - 2014-12-08 14:23 - 02119680 _____ (Farbar) C:\Users\Markéta\Desktop\FRST64.exe
2014-12-08 12:16 - 2014-12-08 12:16 - 20677582 _____ () C:\Users\Markéta\Documents\Breathe Again.mp4
2014-12-08 11:49 - 2014-12-08 11:49 - 08869968 _____ () C:\Users\Markéta\Documents\Scenic City Dance Center_ _Warrior_ _ Stacey's Lyrical Class.mp4
2014-12-07 20:41 - 2014-12-07 20:41 - 121739329 _____ () C:\Users\Markéta\Documents\_Titanium_ at Scenic City Dance Center Advanced Lyrical.mp4
2014-12-07 20:38 - 2014-12-07 20:38 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork
2014-12-07 20:38 - 2014-12-07 20:38 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork
2014-12-07 20:31 - 2014-12-07 20:31 - 00004030 _____ () C:\Windows\System32\Tasks\LaunchSignup
2014-12-07 20:31 - 2014-12-07 20:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader
2014-12-07 20:30 - 2014-12-07 20:30 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-12-07 20:26 - 2014-12-08 11:30 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2014-12-07 20:26 - 2014-12-07 20:37 - 00000000 ____D () C:\ProgramData\YTD Video Downloader
2014-12-07 20:26 - 2014-12-07 20:31 - 00001264 _____ () C:\Users\Public\Desktop\YTD Video Downloader.lnk
2014-12-07 20:25 - 2014-12-07 20:25 - 00000000 ____D () C:\Program Files (x86)\GreenTree Applications
2014-12-07 17:11 - 2014-12-07 17:11 - 00000000 __SHD () C:\Users\Markéta\AppData\Local\EmieBrowserModeList
2014-12-07 17:09 - 2014-12-07 17:09 - 00000681 _____ () C:\Users\Markéta\Desktop\Total Commander 64 bit.lnk
2014-12-07 16:55 - 2014-12-07 17:10 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Yandex
2014-12-07 16:55 - 2014-12-07 16:55 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Opera Software
2014-12-07 16:43 - 2014-12-07 16:43 - 00000000 ____D () C:\Users\Markéta\AppData\Local\VeriSign
2014-12-07 09:59 - 2014-12-06 18:51 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{670b17cf-f53d-46d2-a0f0-771be0b4f802}Gw64.sys
2014-12-05 17:21 - 2014-12-05 17:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge
2014-12-05 15:40 - 2014-11-25 17:44 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-12-05 15:29 - 2014-12-05 03:03 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{7594955a-29b6-4548-9263-89299555d649}Gw64.sys
2014-12-05 15:27 - 2014-12-05 15:27 - 00000000 ____D () C:\ProgramData\APN
2014-12-03 11:17 - 2014-12-03 15:50 - 00033958 _____ () C:\zoek-results.log
2014-12-03 11:11 - 2014-12-05 15:24 - 00000000 ____D () C:\zoek_backup
2014-12-02 19:57 - 2014-12-02 19:57 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\pdfforge
2014-12-02 16:24 - 2014-12-02 16:32 - 00000000 ____D () C:\AdwCleaner
2014-12-02 12:37 - 2014-12-05 15:25 - 00000000 ____D () C:\Program Files\trend micro
2014-12-02 12:37 - 2014-12-02 12:38 - 00000000 ____D () C:\rsit
2014-12-02 12:34 - 2014-12-02 12:34 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\TeamViewer
2014-11-30 15:49 - 2014-11-29 23:48 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{e3c33c98-5fdc-480c-9fe0-e550c4468a4b}Gw64.sys
2014-11-30 15:47 - 2014-11-30 15:47 - 00000000 _____ () C:\unp304119482420430550.mdmp
2014-11-27 17:05 - 2014-11-27 06:47 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{fb6e2902-a029-4535-854a-1a69a22df5f7}Gw64.sys
2014-11-26 08:59 - 2014-11-25 13:25 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{24e0dbe9-5e04-4423-805e-fc8b4c7506a4}Gw64.sys
2014-11-25 19:28 - 2014-11-25 19:28 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-11-25 19:28 - 2014-11-25 19:28 - 00000793 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-11-25 19:27 - 2014-11-25 19:28 - 00000000 ____D () C:\Program Files\CCleaner
2014-11-25 17:47 - 2014-12-05 16:01 - 00001941 _____ () C:\Users\Public\Desktop\Avast Internet Security.lnk
2014-11-25 17:47 - 2014-12-05 16:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-11-25 17:45 - 2014-11-25 17:44 - 00028184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2014-11-25 17:44 - 2014-11-25 17:44 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-11-25 17:43 - 2014-11-25 17:43 - 00449936 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys
2014-11-25 08:53 - 2014-11-25 08:53 - 00000000 ____D () C:\Windows\pss
2014-11-24 22:46 - 2014-11-24 22:46 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2014-11-24 12:25 - 2013-08-17 00:00 - 00859416 _____ (TMRG, Inc.) C:\Windows\system32\rlls64.dll
2014-11-24 12:25 - 2013-08-17 00:00 - 00593688 _____ (TMRG, Inc.) C:\Windows\SysWOW64\rlls.dll
2014-11-24 12:18 - 2014-12-09 12:18 - 00004500 _____ () C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-4.job
2014-11-24 12:18 - 2014-12-09 12:18 - 00003474 _____ () C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-1.job
2014-11-24 12:18 - 2014-12-09 12:18 - 00002452 _____ () C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-5.job
2014-11-24 12:18 - 2014-12-09 12:18 - 00002116 _____ () C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-2.job
2014-11-24 12:18 - 2014-12-09 12:18 - 00001460 _____ () C:\Windows\Tasks\88fc30e7-d9b2-4eaa-ba41-05dd3cce10c0.job
2014-11-24 12:18 - 2014-11-24 12:18 - 00007530 _____ () C:\Windows\System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-4
2014-11-24 12:18 - 2014-11-24 12:18 - 00006504 _____ () C:\Windows\System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-1
2014-11-24 12:18 - 2014-11-24 12:18 - 00005482 _____ () C:\Windows\System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-5
2014-11-24 12:18 - 2014-11-24 12:18 - 00005146 _____ () C:\Windows\System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-2
2014-11-24 12:18 - 2014-11-24 12:18 - 00004490 _____ () C:\Windows\System32\Tasks\88fc30e7-d9b2-4eaa-ba41-05dd3cce10c0
2014-11-24 12:18 - 2014-11-24 12:18 - 00002452 _____ () C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-5_user.job
2014-11-24 12:17 - 2014-12-09 17:17 - 00005524 _____ () C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-6.job
2014-11-24 12:17 - 2014-12-09 12:18 - 00005524 _____ () C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-7.job
2014-11-24 12:17 - 2014-12-09 12:18 - 00005190 _____ () C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-11.job
2014-11-24 12:17 - 2014-12-05 15:27 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-11-24 12:17 - 2014-12-05 15:25 - 00000000 ____D () C:\Program Files (x86)\ace51f2f-4b96-4aad-aeed-c48f5c03f963
2014-11-24 12:17 - 2014-11-24 12:17 - 00008554 _____ () C:\Windows\System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-7
2014-11-24 12:17 - 2014-11-24 12:17 - 00008552 _____ () C:\Windows\System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-6
2014-11-24 12:17 - 2014-11-24 12:17 - 00008220 _____ () C:\Windows\System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-11
2014-11-24 12:17 - 2014-11-24 12:17 - 00000656 _____ () C:\Windows\Tasks\ccc604ab-476b-4053-8dd4-b9a5942a6df6.job
2014-11-24 12:16 - 2014-12-05 21:53 - 00000000 ____D () C:\Program Files (x86)\Internet Speed Checker
2014-11-24 12:12 - 2014-11-24 12:12 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-11-24 12:11 - 2014-12-05 16:45 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Seznam.cz
2014-11-24 12:07 - 2014-11-23 22:23 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{b082a895-f2bc-40a0-9735-d7592e9e422c}Gw64.sys
2014-11-24 12:05 - 2014-08-29 17:02 - 00020296 _____ () C:\Windows\system32\roboot64.exe
2014-11-24 12:01 - 2014-12-09 18:10 - 00000000 ____D () C:\ProgramData\smdmf
2014-11-24 12:01 - 2014-12-05 15:25 - 00000000 ____D () C:\Program Files (x86)\Settings Manager
2014-11-24 11:58 - 2014-12-09 17:31 - 00000000 ____D () C:\Program Files (x86)\Techgile
2014-11-24 11:56 - 2014-12-05 21:50 - 00000000 ____D () C:\Program Files (x86)\RelevantKnowledge
2014-11-23 10:41 - 2014-11-23 10:41 - 00000000 ____D () C:\Adjustment Program
2014-11-19 11:31 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 11:31 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-19 11:31 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-19 11:31 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-11-19 11:25 - 2014-11-25 22:32 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\LSC
2014-11-18 17:08 - 2014-11-18 17:08 - 12229025 _____ () C:\Users\Markéta\Documents\Tango With The Sheriff (Partner Line Dance).mp4
2014-11-12 22:37 - 2014-11-12 22:37 - 45619002 _____ () C:\Users\Markéta\Documents\Dumb Ways to Die.mp4
2014-11-12 22:04 - 2014-11-12 22:04 - 65383691 _____ () C:\Users\Markéta\Documents\SocialErasmus week - Life in a wheelchair l by ESN Liberec.mp4
2014-11-12 22:00 - 2014-11-12 22:00 - 91410903 _____ () C:\Users\Markéta\Documents\SocialErasmus week - Day about health without health l by ESN Liberec.mp4
2014-11-12 14:59 - 2014-11-07 20:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 14:59 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-11-12 14:59 - 2014-11-06 05:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 14:59 - 2014-11-06 04:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 14:59 - 2014-11-06 04:35 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 14:59 - 2014-11-06 04:30 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 14:59 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-11-12 14:59 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-11-12 14:59 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-11-12 14:59 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-11-12 14:59 - 2014-11-06 04:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 14:59 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-11-12 14:59 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-12 14:59 - 2014-11-06 03:41 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 14:59 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-11-12 14:59 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-11-12 14:59 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-11-12 14:59 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-11-12 14:59 - 2014-11-06 03:04 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 14:59 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-11-12 14:59 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-11-12 14:59 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 14:59 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 14:59 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 14:59 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 14:59 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 14:59 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-11-12 14:59 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-11-12 14:59 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-11-12 14:59 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-11-12 14:58 - 2014-11-06 05:03 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 14:58 - 2014-11-06 05:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 14:58 - 2014-11-06 04:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 14:58 - 2014-11-06 04:46 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 14:58 - 2014-11-06 04:44 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 14:58 - 2014-11-06 04:43 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 14:58 - 2014-11-06 04:36 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 14:58 - 2014-11-06 04:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 14:58 - 2014-11-06 04:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 14:58 - 2014-11-06 04:29 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 14:58 - 2014-11-06 04:23 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 14:58 - 2014-11-06 04:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 14:58 - 2014-11-06 04:16 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 14:58 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-11-12 14:58 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-11-12 14:58 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-11-12 14:58 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-11-12 14:58 - 2014-11-06 04:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 14:58 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-11-12 14:58 - 2014-11-06 04:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 14:58 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-11-12 14:58 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-11-12 14:58 - 2014-11-06 03:57 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 14:58 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-11-12 14:58 - 2014-11-06 03:41 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 14:58 - 2014-11-06 03:39 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 14:58 - 2014-11-06 03:38 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 14:58 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-11-12 14:58 - 2014-11-06 03:30 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 14:58 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-11-12 14:58 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-11-12 14:58 - 2014-11-06 03:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 14:58 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-11-12 14:58 - 2014-11-06 02:53 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 14:58 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-11-12 14:57 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 14:57 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-11-12 14:57 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 14:57 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-11-12 14:57 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 14:57 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 14:57 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 14:57 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 14:57 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 14:57 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 14:57 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-11-12 14:57 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-11-12 14:57 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-11-12 14:57 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 14:57 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 14:57 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 14:57 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 14:57 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 14:57 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 14:57 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-11-12 14:57 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-11-12 14:57 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-11-12 14:57 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-11-12 14:57 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-11-12 14:57 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-11-12 14:57 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 14:57 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 14:57 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-11-12 14:57 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-11-12 14:57 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-12 14:57 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2014-11-12 14:56 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 14:56 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-09 18:09 - 2012-08-02 16:37 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-09 17:32 - 2009-07-14 03:34 - 00000601 _____ () C:\Windows\win.ini
2014-12-09 16:22 - 2012-08-02 16:09 - 01371413 _____ () C:\Windows\WindowsUpdate.log
2014-12-09 16:14 - 2014-05-18 21:09 - 00000936 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2746081424-1949010188-3409447413-1003UA.job
2014-12-09 13:28 - 2012-09-20 19:05 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\vlc
2014-12-09 12:09 - 2012-08-02 16:37 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-09 11:52 - 2012-11-10 16:43 - 00000000 ____D () C:\Users\Markéta\.gimp-2.8
2014-12-09 09:29 - 2009-07-14 05:45 - 00031472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-09 09:29 - 2009-07-14 05:45 - 00031472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-09 09:27 - 2013-01-10 15:37 - 00000000 ___RD () C:\Users\Markéta\Dropbox
2014-12-09 09:27 - 2013-01-10 15:34 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Dropbox
2014-12-09 09:21 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-08 22:54 - 2014-05-18 21:09 - 00000914 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2746081424-1949010188-3409447413-1003Core.job
2014-12-08 11:32 - 2012-10-14 10:35 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-12-07 17:26 - 2012-08-02 16:42 - 00000000 ____D () C:\ProgramData\Norton
2014-12-07 17:10 - 2013-08-20 18:15 - 00000000 ____D () C:\Users\Markéta\AppData\Local\Yandex
2014-12-07 17:09 - 2012-12-17 22:56 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2014-12-07 14:39 - 2012-09-21 13:17 - 00000000 ____D () C:\Users\Markéta\Desktop\Hudba
2014-12-07 12:14 - 2012-10-07 13:54 - 00000000 ____D () C:\Users\Markéta\Desktop\Markéta
2014-12-07 10:25 - 2012-10-11 11:23 - 00000000 ____D () C:\Users\Markéta\AppData\Local\CrashDumps
2014-12-06 22:26 - 2013-03-10 21:39 - 00000000 ____D () C:\Users\Markéta\Desktop\Scéňáček
2014-12-06 15:30 - 2013-07-13 16:34 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-12-06 15:12 - 2012-08-02 16:37 - 00000000 ____D () C:\Program Files\Google
2014-12-06 15:12 - 2012-08-02 16:37 - 00000000 ____D () C:\Program Files (x86)\Google
2014-12-05 21:53 - 2012-11-22 10:52 - 00000000 ____D () C:\Program Files (x86)\ICQ6Toolbar
2014-12-05 21:53 - 2012-09-19 12:53 - 00000000 ____D () C:\Program Files (x86)\Winamp Toolbar
2014-12-05 17:27 - 2012-09-17 14:49 - 00000000 ____D () C:\Users\Markéta\AppData\Local\Google
2014-12-05 15:39 - 2012-09-19 12:53 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-12-05 15:30 - 2012-09-17 14:42 - 00093248 _____ () C:\Users\Markéta\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-05 15:26 - 2014-10-23 11:04 - 00000000 ____D () C:\Program Files (x86)\GUMFF26.tmp
2014-12-05 15:26 - 2012-09-17 14:38 - 00000000 ____D () C:\Users\Markéta
2014-12-05 15:25 - 2014-11-06 17:11 - 00000000 ____D () C:\Users\Markéta\AppData\Local\AskPartnerNetwork
2014-12-05 15:25 - 2013-04-28 13:15 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2014-12-05 15:25 - 2013-03-25 23:33 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\OpenCandy
2014-12-05 15:25 - 2012-11-22 10:51 - 00000000 ____D () C:\ProgramData\ICQ
2014-12-05 15:25 - 2012-09-19 12:53 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Winamp
2014-12-05 15:25 - 2012-09-17 14:40 - 00000000 ____D () C:\Program Files (x86)\Amazon
2014-12-05 15:25 - 2012-09-17 14:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Password Vault
2014-12-05 15:25 - 2012-08-02 16:48 - 00000000 ____D () C:\Windows\util
2014-12-05 15:25 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\GroupPolicy
2014-12-05 15:24 - 2012-08-02 15:36 - 00000000 ____D () C:\ProgramData\Lenovo
2014-12-05 15:24 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-11-27 22:21 - 2012-11-14 15:00 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-11-27 22:21 - 2011-02-24 18:03 - 00000000 ____D () C:\Windows\Panther
2014-11-27 17:25 - 2012-10-10 10:03 - 00000000 ____D () C:\Users\Markéta\Desktop\Filmy
2014-11-25 20:28 - 2013-01-18 20:17 - 00001081 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-11-25 20:28 - 2013-01-18 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-11-25 17:45 - 2012-10-14 10:35 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-11-25 17:44 - 2014-10-03 12:18 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-11-25 17:44 - 2014-10-03 12:18 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-11-25 17:44 - 2014-10-03 12:11 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-11-25 17:44 - 2014-10-03 12:11 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-11-25 17:44 - 2012-10-14 10:35 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-11-25 17:44 - 2012-10-14 10:35 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-11-25 17:44 - 2012-10-14 10:35 - 00083280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-11-25 08:34 - 2012-09-24 12:55 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Skype
2014-11-24 12:17 - 2012-09-19 09:19 - 00000000 ____D () C:\Program Files (x86)\ABBYY FineReader 6.0 Sprint
2014-11-21 14:46 - 2009-07-14 06:08 - 00032626 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-11-18 12:19 - 2012-08-02 16:46 - 00000000 ____D () C:\Windows\System32\Tasks\TVT
2014-11-18 12:17 - 2012-08-02 16:34 - 00000000 ____D () C:\Windows\System32\Tasks\Lenovo
2014-11-18 12:17 - 2012-08-02 16:18 - 00000000 ____D () C:\Program Files\Lenovo
2014-11-18 12:16 - 2012-08-02 16:34 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-11-16 14:32 - 2013-01-10 15:35 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-11-13 07:58 - 2009-07-14 05:45 - 00380864 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-13 00:07 - 2013-07-12 21:08 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-12 23:57 - 2012-10-24 08:19 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-09 11:21 - 2012-11-12 18:13 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zařízení Bluetooth

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.1232.dll


Some content of TEMP:
====================
C:\Users\Markéta\AppData\Local\Temp\BackupSetup.exe
C:\Users\Markéta\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpoxc7z6.dll
C:\Users\Markéta\AppData\Local\Temp\ochelper.exe
C:\Users\Markéta\AppData\Local\Temp\sender.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\88fc30e7-d9b2-4eaa-ba41-05dd3cce10c0.job => C:\Program Files (x86)\Internet Speed Checker\88fc30e7-d9b2-4eaa-ba41-05dd3cce10c0.exe <==== ATTENTION
Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-1.job => C:\Program Files (x86)\Internet Speed Checker\Internet Speed Checker-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-11.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-2.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-2.exe <==== ATTENTION
Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-4.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-4.exe <==== ATTENTION
Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-5.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-5_user.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-6.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-7.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\ccc604ab-476b-4053-8dd4-b9a5942a6df6.job => C:\Program Files (x86)\Internet Speed Checker\ccc604ab-476b-4053-8dd4-b9a5942a6df6.exe <==== ATTENTION
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2746081424-1949010188-3409447413-1003Core.job => C:\Users\Markéta\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2746081424-1949010188-3409447413-1003UA.job => C:\Users\Markéta\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Mark�ta\Desktop" je 265186 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcWin7Hlpr
C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk
C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================
Addition
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-12-2014 02
Ran by Markéta at 2014-12-09 18:13:53
Running from C:\Users\Markéta\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.22beta (HKLM-x32\...\7-Zip) (Version: - )
ABBYY FineReader 6.0 Sprint (HKLM-x32\...\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}) (Version: 6.00.1395.4512 - ABBYY Software House)
Absolute Notifier (HKLM-x32\...\{EBE939ED-4612-45FD-A39E-77AC199C4273}) (Version: 1.4.3.10 - Absolute Software)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated)
Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.0.12.36 - Adobe Systems Incorporated)
Adobe Reader X (10.1.12) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.12 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{9201666D-7E8D-4774-E69E-3FE160609F7F}) (Version: 3.0.864.0 - Advanced Micro Devices, Inc.)
aTube Catcher (HKLM-x32\...\aTube Catcher) (Version: 2.9.1347 - DsNET Corp)
Audacity 2.0.2 (HKLM-x32\...\Audacity_is1) (Version: 2.0.2 - Audacity Team)
Avast Internet Security (HKLM-x32\...\avast) (Version: 10.0.2208 - AVAST Software)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 5.100.82.130 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.00 - Piriform)
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Create Recovery Media (HKLM-x32\...\{50DC5136-21E8-48BC-97E5-1AD055F6B0B6}) (Version: 1.20.0.00 - Lenovo Group Limited)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.7000.7 - Dolby Laboratories Inc)
Download Updater (AOL LLC) (HKLM-x32\...\SoftwareUpdUtility) (Version: - ) <==== ATTENTION
Dropbox (HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\...\Dropbox) (Version: 2.10.52 - Dropbox, Inc.)
Epson Event Manager (HKLM-x32\...\{48F22622-1CC2-4A83-9C1E-644DD96F832D}) (Version: 2.01.00 - SEIKO EPSON Corporation)
EPSON PX700W Series Printer Uninstall (HKLM\...\EPSON PX700W Series) (Version: - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - )
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4j - SEIKO EPSON CORPORATION)
Evernote v. 4.2.3 (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 4.2.3.15 - Evernote Corp.)
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
GeoGebra 4.2 (HKLM-x32\...\GeoGebra 4.2) (Version: 4.2.60.0 - International GeoGebra Institute)
GIMP 2.8.2 (HKLM\...\GIMP-2_is1) (Version: 2.8.2 - The GIMP Team)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 38.0.2125.104 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Integrated Camera (HKLM-x32\...\{ADE16A9D-FBDC-4ECC-B6BD-9C31E51D0332}) (Version: 5.12.423.3 - Vimicro)
Intel AppUp(R) center (HKLM-x32\...\Intel AppUp(SM) center 33057) (Version: 41504 - Intel)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Lenovo Auto Scroll Utility (HKLM\...\LenovoAutoScrollUtility) (Version: 1.33 - )
Lenovo Bluetooth with Enhanced Data Rate Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.2500 - Broadcom Corporation)
Lenovo Patch Utility (HKLM-x32\...\{6E6E7725-C7BC-4C39-8B3F-14B67331A120}) (Version: 1.3.0.9 - Lenovo Group Limited)
Lenovo Patch Utility (HKLM-x32\...\{A7BB9BBD-DFE4-4276-820A-7CD141FC09E6}) (Version: 1.3.0.007 - Lenovo Group Limited)
Lenovo Patch Utility 64 bit (HKLM\...\{0369F866-2CE0-4EB9-B426-88FA122C6E82}) (Version: 1.3.0.9 - Lenovo Group Limited)
Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.65.05.21 - )
Lenovo Registration (HKLM-x32\...\{6707C034-ED6B-4B6A-B21F-969B3606FBDE}) (Version: 1.0.4 - Lenovo Inc.)
Lenovo SimpleTap (HKLM\...\{BF601122-9F0A-41A9-BA06-3158D9FB4B80}) (Version: 3.2.0004.00 - Lenovo Group Limited)
Lenovo Solution Center (HKLM\...\{4C2B6F96-3AED-4E3F-8DCE-917863D1E6B1}) (Version: 2.7.003.00 - Lenovo Group Limited)
Lenovo System Update (HKLM-x32\...\{25C64847-B900-48AD-A164-1B4F9B774650}) (Version: 5.05.0009 - Lenovo)
Lenovo User Guide (HKLM-x32\...\{13F59938-C595-479C-B479-F171AB9AF64F}) (Version: 1.0.0009.00 - Lenovo Group Limited)
Lenovo Warranty Information (HKLM-x32\...\{FD4EC278-C1B1-4496-99ED-C0BE1B0AA521}) (Version: 1.0.0005.00 - Lenovo)
Lenovo Welcome (HKLM-x32\...\{2DC26D10-CC6A-494F-BEA3-B5BC21126D5E}) (Version: 3.1.0020.00 - Lenovo Group Limited)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Message Center Plus (HKLM\...\{C2C2DB64-1BCE-4FA7-962D-457795ECCEC0}) (Version: 3.3.0004.00 - Lenovo Group Limited)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110405-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
MyPC Backup (HKLM\...\MyPC Backup) (Version: - JDi Backup Ltd) <==== ATTENTION
On Screen Display (HKLM\...\OnScreenDisplay) (Version: 8.42.20 - )
OpenOffice.org 3.2 (HKLM-x32\...\{5DE71D48-01EB-4BF2-A643-50FE6C9B6AC9}) (Version: 3.2.9483 - OpenOffice.org)
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (HKLM-x32\...\{B6190387-0036-4BEB-8D74-A0AFC5F14706}) (Version: 15.4.5722.2 - Microsoft Corporation)
Password Vault (HKLM\...\{C5BB9380-D729-410A-A440-061EBCADCCB9}) (Version: 5.4.100.232 - AuthenTec, Inc.)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.5.1 - Frank Heindörfer, Philip Chinery)
Polda II (HKLM-x32\...\Polda II_is1) (Version: - )
Power Manager (HKLM-x32\...\{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}) (Version: 6.20 - )
RapidBoot (HKLM\...\{5E2652DF-743F-482B-A593-C95F431A5769}) (Version: 1.20 - Lenovo)
RapidBoot HDD Accelerator (HKLM-x32\...\Fastboot) (Version: 1.0.5.9 - Lenovo)
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 7.50.1123.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6591 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.8400.28121 - Realtek Semiconductor Corp.)
RelevantKnowledge (HKLM-x32\...\{d08d9f98-1c78-4704-87e6-368b0023d831}) (Version: 1.3.336.320 - TMRG, Inc.) <==== ATTENTION
Search App by Ask (HKLM-x32\...\{5347542D-5350-006A-76A7-A758B70C1500}) (Version: 12.21.0.3795 - APN, LLC) <==== ATTENTION
Settings Manager (HKLM-x32\...\Settings Manager) (Version: 5.0.0.14591 - Aztec Media Inc) <==== ATTENTION
Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)
STATGRAPHICS Centurion XVI.II - x64 (HKLM\...\{0D38B19E-2071-4305-B033-3E4D9AF0EBD1}) (Version: 16.02.0004 - StatPoint Technologies, Inc.)
SugarSync Manager (HKLM-x32\...\SugarSync) (Version: 1.9.97.122348 - SugarSync, Inc.)
ThinkPad UltraNav Driver (HKLM\...\SynTPDeinstKey) (Version: 16.1.4.17 - )
ThinkVantage Access Connections (HKLM-x32\...\{8E537894-A559-4D60-B3CB-F4485E3D24E3}) (Version: 6.21 - Lenovo)
ThinkVantage Active Protection System (HKLM\...\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}) (Version: 1.77.0.9 - Lenovo)
ThinkVantage Communications Utility (HKLM\...\{88C6A6D9-324C-46E8-BA87-563D14021442}_is1) (Version: 3.0.34.0 - Lenovo)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.01 - Ghisler Software GmbH)
Ve stínu havrana (HKLM-x32\...\Ve stínu havrana_is1) (Version: - CINEMAX, s.r.o.)
VIP Access (HKLM-x32\...\{E8D46836-CD55-453C-A107-A59EC51CB8DC}) (Version: 2.0.5.13 - VeriSign)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Winamp (HKLM-x32\...\Winamp) (Version: 5.623 - Nullsoft, Inc)
Winamp Detector Plug-in (HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Driver Package - Lenovo 1.65.05.20 (02/29/2012 1.65.05.20) (HKLM\...\E3535F123E7F666D573665142F90D3E5004DC326) (Version: 02/29/2012 1.65.05.20 - Lenovo)
Windows Driver Package - Synaptics (SynTP) Mouse (06/21/2012 16.1.4.17) (HKLM\...\FE61CFFCEFBF4E2D83AE176443D33414275365FC) (Version: 06/21/2012 16.1.4.17 - Synaptics)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
WinPcap 4.1.1 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.1753 - CACE Technologies)
YTD Video Downloader 4.8.7 (HKLM-x32\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 4.8.7 - GreenTree Applications SRL) <==== ATTENTION

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Markéta\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003_Classes\CLSID\{9E506282-69D3-5ABA-9C1D-15994B37F4AC}\InprocServer32 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
CustomCLSID: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003_Classes\CLSID\{9E506282-69D3-5ABA-9C1D-15994B37F4AD}\InprocServer32 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
CustomCLSID: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Markéta\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Markéta\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Markéta\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Markéta\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Markéta\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Markéta\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Markéta\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Markéta\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

==================== Restore Points =========================

30-11-2014 15:10:44 Windows Update
30-11-2014 19:57:42 Windows Zálohování
02-12-2014 15:51:51 Removed Skype Click to Call
03-12-2014 10:18:03 zoek.exe restore point
05-12-2014 13:28:47 Windows Update
05-12-2014 14:17:58 Operace obnovení
05-12-2014 14:27:36 avast! antivirus system restore point
05-12-2014 15:59:42 Windows Update
06-12-2014 14:26:29 Removed Skype Click to Call
07-12-2014 19:07:56 Windows Zálohování
09-12-2014 08:40:28 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0E5EA387-6287-45F8-92E2-B1E461D553BE} - System32\Tasks\Program k provádění aktualizací online Adobe => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21] (Adobe Systems Incorporated)
Task: {11508792-6460-42AF-8630-AF983FD96879} - System32\Tasks\PMTask => C:\Program Files (x86)\ThinkPad\Utilities\PWMIDTSV.EXE [2012-04-11] (Lenovo Group Limited)
Task: {1D5DE66C-6E72-4685-B7FF-C85329AA1D4D} - System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-4 => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-4.exe [2014-11-24] (Speedchecker) <==== ATTENTION
Task: {2A91F7DA-56FD-4BA4-B852-D763A5D645FC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-23] ()
Task: {328D2695-11C0-4AAA-9D6D-D8F51DD587E8} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-11-21] (Piriform Ltd)
Task: {3BDF2891-A1C6-4BC6-9295-0856BF65FE8A} - System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-11 => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-11.exe [2014-11-24] (Speedchecker) <==== ATTENTION
Task: {3BFB2C8C-1A67-4DE6-ADAC-AF3275712619} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [2014-10-16] (Lenovo)
Task: {40C0ED8D-13C9-41FE-99E9-2307687A200C} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2014-02-13] (Lenovo)
Task: {40DE9962-B689-4110-B50B-2D09893C960D} - System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-1 => C:\Program Files (x86)\Internet Speed Checker\Internet Speed Checker-codedownloader.exe [2014-11-24] (Speedchecker) <==== ATTENTION
Task: {41EBE298-3668-46CF-98F0-E81F4410C4B6} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe [2014-11-25] (MyPC Backup) <==== ATTENTION
Task: {43AEFBC9-C38C-4159-8399-A38226053308} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2014-02-21] ()
Task: {481EA983-195F-4658-A1B7-07479D6F7C55} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-11-25] (AVAST Software)
Task: {54259E84-AAC1-499B-B5C5-EA31D125147A} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2014-10-16] ()
Task: {5AC3EB82-2810-4C28-BDB3-69F91C33D6C7} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2746081424-1949010188-3409447413-1003Core => C:\Users\Markéta\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-05-18] (Facebook Inc.)
Task: {735275A8-8164-4123-A113-2714BB02D2A3} - System32\Tasks\Lenovo\Message Center Plus Launcher => C:\Program Files (x86)\Lenovo\message center plus\mcplaunch.exe [2014-09-13] (Lenovo)
Task: {7A9AE44D-ED34-47AA-8B77-0A3547D5E6AB} - System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-6 => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-6.exe <==== ATTENTION
Task: {8C1C904D-0F01-46C1-9545-AC63DB3B460E} - System32\Tasks\DiskUpdate => C:\SWTOOLS\OSFIXES\DISKUPDT\DiskUpdate.exe [2009-02-10] ()
Task: {9615E881-78EB-4D30-8369-82E44CBE9B29} - System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-2 => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-2.exe [2014-11-24] (Speedchecker) <==== ATTENTION
Task: {979F125A-BE72-4378-89D3-9273CD213D34} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2014-10-16] ()
Task: {9C975D83-E8E6-4A03-BF80-1136DE1BF28C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-23] ()
Task: {9E4B22F7-A681-4E34-8DFC-C814F5BB67B1} - System32\Tasks\Lenovo\SimpleTap\Start SimpleTap for Markéta-ThinkP.Markéta => C:\Program Files\Lenovo\SimpleTap\SimpleTap.exe [2012-05-16] (Lenovo)
Task: {AE88E7EC-6E4F-4E9B-81D0-569F174AB6B9} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2746081424-1949010188-3409447413-1003
Task: {B39CBCC5-0F35-4805-BA13-543D5E21601E} - System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-5 => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-5.exe [2014-11-24] (Speedchecker) <==== ATTENTION
Task: {CB8A11A3-ED7C-485E-A7D0-EDAD10CEA4EE} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-08-08] (Lenovo)
Task: {D2A88F85-5A3E-4869-BB39-4863EC5EE5F4} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2746081424-1949010188-3409447413-1003UA => C:\Users\Markéta\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-05-18] (Facebook Inc.)
Task: {D9A33284-D758-428F-9A66-874FCBD7DD36} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2014-10-16] (Lenovo)
Task: {E31915C4-7134-48A4-97F3-F1E2C603E8DE} - System32\Tasks\88fc30e7-d9b2-4eaa-ba41-05dd3cce10c0 => C:\Program Files (x86)\Internet Speed Checker\88fc30e7-d9b2-4eaa-ba41-05dd3cce10c0.exe <==== ATTENTION
Task: {E3FA6C23-0F72-4F63-972D-448D4EC45186} - System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-7 => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-7.exe [2014-11-24] (Speedchecker) <==== ATTENTION
Task: C:\Windows\Tasks\88fc30e7-d9b2-4eaa-ba41-05dd3cce10c0.job => C:\Program Files (x86)\Internet Speed Checker\88fc30e7-d9b2-4eaa-ba41-05dd3cce10c0.exe <==== ATTENTION
Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-1.job => C:\Program Files (x86)\Internet Speed Checker\Internet Speed Checker-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-11.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-2.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-2.exe <==== ATTENTION
Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-4.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-4.exe <==== ATTENTION
Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-5.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-5_user.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-6.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-7.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\ccc604ab-476b-4053-8dd4-b9a5942a6df6.job => C:\Program Files (x86)\Internet Speed Checker\ccc604ab-476b-4053-8dd4-b9a5942a6df6.exe <==== ATTENTION
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2746081424-1949010188-3409447413-1003Core.job => C:\Users\Markéta\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2746081424-1949010188-3409447413-1003UA.job => C:\Users\Markéta\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

altrok
Moderátor
Moderátor
Příspěvky: 7328
Registrován: 15 Lis 2012 22:26
Místo/Bydliště: Znojmo

Re: Kontrola logu

#8 Příspěvek od altrok »

:arrow: Vsechna havet je zpet :roll: nepouzil jste po AdwCleaneru bod obnoveni ci neco podobneho?

:arrow: Mate tam jeste vice haveti nez na zacatku cisteni, takze je mozne, ze se bude branit a Fix selze. Spustte ho kdyztak v nouzovem rezimu.

  • Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
  • ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
  • znovu spustte FRST a kliknete na Fix
  • po restartu na Vas vyskoci fixlog (pripadne bude ulozen na Plose), jehoz obsah mi vlozte do pristi odpovedi

    Kód: Vybrat vše

    Start
    CloseProcesses:
    HKLM\...\Run: [] => [X]
    HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
    HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\...\Run: [Facebook Update] => C:\Users\Markéta\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-05-18] (Facebook Inc.)
    HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7063832 2014-11-21] (Piriform Ltd)
    HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\...\MountPoints2: {618c58eb-58b6-11e2-956d-047d7bff73d8} - D:\LaunchU3.exe -a
    HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\...\MountPoints2: {a48a47d9-dcb3-11e1-9b45-806e6f6e6963} - Q:\LenovoQDrive.exe
    GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
    CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
    
    HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Main,ICQ Search = http://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd
    HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Main,First Home Page = http://g.msn.com/1ewenusDefaultPack/UP97_FRPage
    SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = http://www.default-search.net/search?si ... &src=ds&p={searchTerms}
    SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = http://www.default-search.net/search?si ... &src=ds&p={searchTerms}
    SearchScopes: HKLM-x32 -> {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = http://slirsredirect.search.aol.com/red ... 685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20120919115347459&tb_oid=19-09-2012&tb_mrud=19-09-2012
    SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> DefaultScope {08011321-3136-4E16-99F7-448F80A6F853} URL = https://search.yahoo.com/search?fr=chr- ... =501549&p={searchTerms}
    SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> 10F22169C6C3CD210C727B662726EAD8 URL = http://videa.seznam.cz/?q={searchTerms}
    SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> 351DD7AD0CD3C8D133EE1C792A79DE0E URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENP_csCZ502
    SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> 43D7F7558CE167D97CE7A9913861817D URL = http://www.zbozi.cz/?sourceid=quicksearch_6826&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> 726385007D264C9C8961FB6A287DF1DE URL = http://www.mapy.cz/?sourceid=quicksearch_6826&query={searchTerms}
    SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> E005305E00C384F28D40B50D2C9BA4A6 URL = http://www.firmy.cz/phr/{searchTerms}
    SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> yandex.ru-191536 URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENP_csCZ502
    SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> {08011321-3136-4E16-99F7-448F80A6F853} URL = https://search.yahoo.com/search?fr=chr- ... =501549&p={searchTerms}
    SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = http://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd
    SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://search.seznam.cz/?sourceid=quicksearch_6826&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = http://www.default-search.net/search?si ... &src=ds&p={searchTerms}
    SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = http://slirsredirect.search.aol.com/red ... 685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20120919115347459&tb_oid=19-09-2012&tb_mrud=19-09-2012
    BHO: No Name -> {11111111-1111-1111-1111-110611171152} -> No File
    BHO-x32: No Name -> {11111111-1111-1111-1111-110611171152} -> No File
    BHO-x32: No Name -> {D5FEC983-01DB-414A-9456-AF95AC9ED7B5} -> No File
    Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
    Toolbar: HKLM-x32 - No Name - {855F3B16-6D32-4fe6-8A56-BBB695989046} - No File
    Toolbar: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
    Toolbar: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> No Name - {91397D20-1446-11D4-8AF4-0040CA1127B6} - No File
    
    FF DefaultSearchEngine: Yahoo!
    FF SelectedSearchEngine: Yahoo!
    FF Keyword.URL: https://search.yahoo.com/search?fr=gree ... =501549&p=
    FF Plugin: @microsoft.com/GENUINE -> disabled No File
    FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
    FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll No File
    FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll No File
    FF user.js: detected! => C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\user.js
    FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\videa.seznam.cz-165547.xml
    FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\yahoo_ff.xml
    FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\yandex.ru-191537.xml
    
    CHR DefaultSuggestURL: Default -> http://ssmsp.ask.com/query?sstype=prefix&li=ff&q={searchTerms}
    CHR HKLM\...\Chrome\Extension: [aaaaadgepjkdffhjbkfjgnnffnfcffbg] - No Path
    CHR HKLM-x32\...\Chrome\Extension: [aaaaadgepjkdffhjbkfjgnnffnfcffbg] - No Path
    CHR HKLM-x32\...\Chrome\Extension: [aminlpmkfcdibgpgfajlgnamicjckkjf] - No Path
    CHR HKLM-x32\...\Chrome\Extension: [jdkihdhlegcdggknokfekoemkjjnjhgi] - No Path
    CHR HKLM-x32\...\Chrome\Extension: [pchfckkccldkbclgdepkaonamkignanh] - No Path
    
    R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166296 2014-11-21] (APN LLC.)
    R2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [53832 2014-11-25] (Just Develop It) <==== ATTENTION
    R2 Update Techgile; C:\Program Files (x86)\Techgile\updateTechgile.exe [523504 2014-12-09] ()
    R2 Util Techgile; C:\Program Files (x86)\Techgile\bin\utilTechgile.exe [523504 2014-12-09] ()
    R2 SmdmFService; C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe [3572240 2014-11-15] (Aztec Media Inc)
    R1 F06DEFF2-5B9C-490D-910F-35D3A9119622; C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfmgrc2.cfg [41872 2014-11-15] (Aztec Media Inc)
    R1 {24e0dbe9-5e04-4423-805e-fc8b4c7506a4}Gw64; C:\Windows\System32\drivers\{24e0dbe9-5e04-4423-805e-fc8b4c7506a4}Gw64.sys [48784 2014-11-25] (StdLib)
    R1 {670b17cf-f53d-46d2-a0f0-771be0b4f802}Gw64; C:\Windows\System32\drivers\{670b17cf-f53d-46d2-a0f0-771be0b4f802}Gw64.sys [48784 2014-12-06] (StdLib)
    R1 {7594955a-29b6-4548-9263-89299555d649}Gw64; C:\Windows\System32\drivers\{7594955a-29b6-4548-9263-89299555d649}Gw64.sys [48784 2014-12-05] (StdLib)
    R1 {b082a895-f2bc-40a0-9735-d7592e9e422c}Gw64; C:\Windows\System32\drivers\{b082a895-f2bc-40a0-9735-d7592e9e422c}Gw64.sys [48784 2014-11-23] (StdLib)
    R1 {e3c33c98-5fdc-480c-9fe0-e550c4468a4b}Gw64; C:\Windows\System32\drivers\{e3c33c98-5fdc-480c-9fe0-e550c4468a4b}Gw64.sys [48784 2014-11-29] (StdLib)
    R1 {fb6e2902-a029-4535-854a-1a69a22df5f7}Gw64; C:\Windows\System32\drivers\{fb6e2902-a029-4535-854a-1a69a22df5f7}Gw64.sys [48784 2014-11-27] (StdLib)
    C:\Program Files (x86)\AskPartnerNetwork
    C:\Program Files (x86)\MyPC Backup
    C:\Program Files (x86)\Techgile
    C:\Program Files (x86)\Settings Manager
    C:\Windows\System32\drivers\{24e0dbe9-5e04-4423-805e-fc8b4c7506a4}Gw64.sys
    C:\Windows\System32\drivers\{670b17cf-f53d-46d2-a0f0-771be0b4f802}Gw64.sys
    C:\Windows\System32\drivers\{7594955a-29b6-4548-9263-89299555d649}Gw64.sys
    C:\Windows\System32\drivers\{b082a895-f2bc-40a0-9735-d7592e9e422c}Gw64.sys
    C:\Windows\System32\drivers\{e3c33c98-5fdc-480c-9fe0-e550c4468a4b}Gw64.sys
    C:\Windows\System32\drivers\{fb6e2902-a029-4535-854a-1a69a22df5f7}Gw64.sys
    
    2014-12-07 20:38 - 2014-12-07 20:38 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork
    2014-12-07 20:38 - 2014-12-07 20:38 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork
    2014-12-07 20:30 - 2014-12-07 20:30 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
    2014-12-07 20:26 - 2014-12-08 11:30 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
    2014-12-07 20:31 - 2014-12-07 20:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader
    2014-12-07 20:26 - 2014-12-07 20:37 - 00000000 ____D () C:\ProgramData\YTD Video Downloader
    2014-12-07 20:26 - 2014-12-07 20:31 - 00001264 _____ () C:\Users\Public\Desktop\YTD Video Downloader.lnk
    2014-12-07 16:55 - 2014-12-07 17:10 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Yandex
    2014-12-05 15:27 - 2014-12-05 15:27 - 00000000 ____D () C:\ProgramData\APN
    2014-12-03 11:17 - 2014-12-03 15:50 - 00033958 _____ () C:\zoek-results.log
    2014-12-03 11:11 - 2014-12-05 15:24 - 00000000 ____D () C:\zoek_backup
    2014-12-02 16:24 - 2014-12-02 16:32 - 00000000 ____D () C:\AdwCleaner
    2014-12-02 12:37 - 2014-12-05 15:25 - 00000000 ____D () C:\Program Files\trend micro
    2014-12-02 12:37 - 2014-12-02 12:38 - 00000000 ____D () C:\rsit
    2014-11-24 12:17 - 2014-12-05 15:27 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
    2014-11-24 12:17 - 2014-12-05 15:25 - 00000000 ____D () C:\Program Files (x86)\ace51f2f-4b96-4aad-aeed-c48f5c03f963
    2014-11-24 12:17 - 2014-11-24 12:17 - 00008554 _____ () C:\Windows\System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-7
    2014-11-24 12:17 - 2014-11-24 12:17 - 00008552 _____ () C:\Windows\System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-6
    2014-11-24 12:17 - 2014-11-24 12:17 - 00008220 _____ () C:\Windows\System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-11
    2014-11-24 12:17 - 2014-11-24 12:17 - 00000656 _____ () C:\Windows\Tasks\ccc604ab-476b-4053-8dd4-b9a5942a6df6.job
    2014-11-24 12:16 - 2014-12-05 21:53 - 00000000 ____D () C:\Program Files (x86)\Internet Speed Checker
    2014-11-24 12:12 - 2014-11-24 12:12 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
    2014-11-24 12:11 - 2014-12-05 16:45 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Seznam.cz
    2014-11-24 12:07 - 2014-11-23 22:23 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{b082a895-f2bc-40a0-9735-d7592e9e422c}Gw64.sys
    2014-11-24 12:05 - 2014-08-29 17:02 - 00020296 _____ () C:\Windows\system32\roboot64.exe
    2014-11-24 12:01 - 2014-12-09 18:10 - 00000000 ____D () C:\ProgramData\smdmf
    2014-11-24 12:01 - 2014-12-05 15:25 - 00000000 ____D () C:\Program Files (x86)\Settings Manager
    2014-11-24 11:58 - 2014-12-09 17:31 - 00000000 ____D () C:\Program Files (x86)\Techgile
    2014-12-05 21:53 - 2012-11-22 10:52 - 00000000 ____D () C:\Program Files (x86)\ICQ6Toolbar
    2014-12-05 21:53 - 2012-09-19 12:53 - 00000000 ____D () C:\Program Files (x86)\Winamp Toolbar
    2014-12-05 15:25 - 2014-11-06 17:11 - 00000000 ____D () C:\Users\Markéta\AppData\Local\AskPartnerNetwork
    2014-12-05 15:25 - 2013-03-25 23:33 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\OpenCandy
    
    Task: {1D5DE66C-6E72-4685-B7FF-C85329AA1D4D} - System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-4 => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-4.exe [2014-11-24] (Speedchecker) <==== ATTENTION
    Task: {3BDF2891-A1C6-4BC6-9295-0856BF65FE8A} - System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-11 => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-11.exe [2014-11-24] (Speedchecker) <==== ATTENTION
    Task: {40DE9962-B689-4110-B50B-2D09893C960D} - System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-1 => C:\Program Files (x86)\Internet Speed Checker\Internet Speed Checker-codedownloader.exe [2014-11-24] (Speedchecker) <==== ATTENTION
    Task: {41EBE298-3668-46CF-98F0-E81F4410C4B6} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe [2014-11-25] (MyPC Backup) <==== ATTENTION
    Task: {7A9AE44D-ED34-47AA-8B77-0A3547D5E6AB} - System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-6 => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-6.exe <==== ATTENTION
    Task: {9615E881-78EB-4D30-8369-82E44CBE9B29} - System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-2 => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-2.exe [2014-11-24] (Speedchecker) <==== ATTENTION
    Task: {AE88E7EC-6E4F-4E9B-81D0-569F174AB6B9} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2746081424-1949010188-3409447413-1003
    Task: {B39CBCC5-0F35-4805-BA13-543D5E21601E} - System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-5 => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-5.exe [2014-11-24] (Speedchecker) <==== ATTENTION
    Task: {E31915C4-7134-48A4-97F3-F1E2C603E8DE} - System32\Tasks\88fc30e7-d9b2-4eaa-ba41-05dd3cce10c0 => C:\Program Files (x86)\Internet Speed Checker\88fc30e7-d9b2-4eaa-ba41-05dd3cce10c0.exe <==== ATTENTION
    Task: {E3FA6C23-0F72-4F63-972D-448D4EC45186} - System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-7 => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-7.exe [2014-11-24] (Speedchecker) <==== ATTENTION
    Task: C:\Windows\Tasks\88fc30e7-d9b2-4eaa-ba41-05dd3cce10c0.job => C:\Program Files (x86)\Internet Speed Checker\88fc30e7-d9b2-4eaa-ba41-05dd3cce10c0.exe <==== ATTENTION
    Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-1.job => C:\Program Files (x86)\Internet Speed Checker\Internet Speed Checker-codedownloader.exe <==== ATTENTION
    Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-11.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-11.exe <==== ATTENTION
    Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-2.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-2.exe <==== ATTENTION
    Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-4.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-4.exe <==== ATTENTION
    Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-5.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-5.exe <==== ATTENTION
    Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-5_user.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-5.exe <==== ATTENTION
    Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-6.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-6.exe <==== ATTENTION
    Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-7.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-7.exe <==== ATTENTION
    Task: C:\Windows\Tasks\ccc604ab-476b-4053-8dd4-b9a5942a6df6.job => C:\Program Files (x86)\Internet Speed Checker\ccc604ab-476b-4053-8dd4-b9a5942a6df6.exe <==== ATTENTION
    Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2746081424-1949010188-3409447413-1003Core.job => C:\Users\Markéta\AppData\Local\Facebook\Update\FacebookUpdate.exe
    Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2746081424-1949010188-3409447413-1003UA.job => C:\Users\Markéta\AppData\Local\Facebook\Update\FacebookUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    C:\Program Files (x86)\Internet Speed Checker
    
    CMD: del "C:\Program Files (x86)\*.tmp"
    Hosts:
    EmptyTemp:
    End
    
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.

pasecak
Návštěvník
Návštěvník
Příspěvky: 124
Registrován: 26 Črc 2008 14:50

Re: Kontrola logu

#9 Příspěvek od pasecak »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 07-12-2014 02
Ran by Markéta at 2014-12-09 22:18:02 Run:1
Running from C:\Users\Markéta\Desktop
Loaded Profile: Markéta (Available profiles: Markéta)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\...\Run: [Facebook Update] => C:\Users\Markéta\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-05-18] (Facebook Inc.)
HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7063832 2014-11-21] (Piriform Ltd)
HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\...\MountPoints2: {618c58eb-58b6-11e2-956d-047d7bff73d8} - D:\LaunchU3.exe -a
HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\...\MountPoints2: {a48a47d9-dcb3-11e1-9b45-806e6f6e6963} - Q:\LenovoQDrive.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Main,ICQ Search = http://www.icq.com/search/results.php?q ... &ch_id=osd
HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Main,First Home Page = http://g.msn.com/1ewenusDefaultPack/UP97_FRPage
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = http://www.default-search.net/search?si ... &src=ds&p={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = http://www.default-search.net/search?si ... &src=ds&p={searchTerms}
SearchScopes: HKLM-x32 -> {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = http://slirsredirect.search.aol.com/red ... 685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20120919115347459&tb_oid=19-09-2012&tb_mrud=19-09-2012
SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> DefaultScope {08011321-3136-4E16-99F7-448F80A6F853} URL = https://search.yahoo.com/search?fr=chr- ... =501549&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> 10F22169C6C3CD210C727B662726EAD8 URL = http://videa.seznam.cz/?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> 351DD7AD0CD3C8D133EE1C792A79DE0E URL = http://www.google.com/search?sourceid=i ... NP_csCZ502
SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> 43D7F7558CE167D97CE7A9913861817D URL = http://www.zbozi.cz/?sourceid=quicksear ... earchTerms}
SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> 726385007D264C9C8961FB6A287DF1DE URL = http://www.mapy.cz/?sourceid=quicksearc ... earchTerms}
SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> E005305E00C384F28D40B50D2C9BA4A6 URL = http://www.firmy.cz/phr/{searchTerms}
SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> yandex.ru-191536 URL = http://www.google.com/search?sourceid=i ... NP_csCZ502
SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> {08011321-3136-4E16-99F7-448F80A6F853} URL = https://search.yahoo.com/search?fr=chr- ... =501549&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = http://www.icq.com/search/results.php?q ... &ch_id=osd
SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = http://www.default-search.net/search?si ... &src=ds&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = http://slirsredirect.search.aol.com/red ... 685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20120919115347459&tb_oid=19-09-2012&tb_mrud=19-09-2012
BHO: No Name -> {11111111-1111-1111-1111-110611171152} -> No File
BHO-x32: No Name -> {11111111-1111-1111-1111-110611171152} -> No File
BHO-x32: No Name -> {D5FEC983-01DB-414A-9456-AF95AC9ED7B5} -> No File
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM-x32 - No Name - {855F3B16-6D32-4fe6-8A56-BBB695989046} - No File
Toolbar: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003 -> No Name - {91397D20-1446-11D4-8AF4-0040CA1127B6} - No File

FF DefaultSearchEngine: Yahoo!
FF SelectedSearchEngine: Yahoo!
FF Keyword.URL: https://search.yahoo.com/search?fr=gree ... =501549&p=
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll No File
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll No File
FF user.js: detected! => C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\user.js
FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\videa.seznam.cz-165547.xml
FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\yandex.ru-191537.xml

CHR DefaultSuggestURL: Default -> http://ssmsp.ask.com/query?sstype=prefi ... earchTerms}
CHR HKLM\...\Chrome\Extension: [aaaaadgepjkdffhjbkfjgnnffnfcffbg] - No Path
CHR HKLM-x32\...\Chrome\Extension: [aaaaadgepjkdffhjbkfjgnnffnfcffbg] - No Path
CHR HKLM-x32\...\Chrome\Extension: [aminlpmkfcdibgpgfajlgnamicjckkjf] - No Path
CHR HKLM-x32\...\Chrome\Extension: [jdkihdhlegcdggknokfekoemkjjnjhgi] - No Path
CHR HKLM-x32\...\Chrome\Extension: [pchfckkccldkbclgdepkaonamkignanh] - No Path

R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166296 2014-11-21] (APN LLC.)
R2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [53832 2014-11-25] (Just Develop It) <==== ATTENTION
R2 Update Techgile; C:\Program Files (x86)\Techgile\updateTechgile.exe [523504 2014-12-09] ()
R2 Util Techgile; C:\Program Files (x86)\Techgile\bin\utilTechgile.exe [523504 2014-12-09] ()
R2 SmdmFService; C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe [3572240 2014-11-15] (Aztec Media Inc)
R1 F06DEFF2-5B9C-490D-910F-35D3A9119622; C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfmgrc2.cfg [41872 2014-11-15] (Aztec Media Inc)
R1 {24e0dbe9-5e04-4423-805e-fc8b4c7506a4}Gw64; C:\Windows\System32\drivers\{24e0dbe9-5e04-4423-805e-fc8b4c7506a4}Gw64.sys [48784 2014-11-25] (StdLib)
R1 {670b17cf-f53d-46d2-a0f0-771be0b4f802}Gw64; C:\Windows\System32\drivers\{670b17cf-f53d-46d2-a0f0-771be0b4f802}Gw64.sys [48784 2014-12-06] (StdLib)
R1 {7594955a-29b6-4548-9263-89299555d649}Gw64; C:\Windows\System32\drivers\{7594955a-29b6-4548-9263-89299555d649}Gw64.sys [48784 2014-12-05] (StdLib)
R1 {b082a895-f2bc-40a0-9735-d7592e9e422c}Gw64; C:\Windows\System32\drivers\{b082a895-f2bc-40a0-9735-d7592e9e422c}Gw64.sys [48784 2014-11-23] (StdLib)
R1 {e3c33c98-5fdc-480c-9fe0-e550c4468a4b}Gw64; C:\Windows\System32\drivers\{e3c33c98-5fdc-480c-9fe0-e550c4468a4b}Gw64.sys [48784 2014-11-29] (StdLib)
R1 {fb6e2902-a029-4535-854a-1a69a22df5f7}Gw64; C:\Windows\System32\drivers\{fb6e2902-a029-4535-854a-1a69a22df5f7}Gw64.sys [48784 2014-11-27] (StdLib)
C:\Program Files (x86)\AskPartnerNetwork
C:\Program Files (x86)\MyPC Backup
C:\Program Files (x86)\Techgile
C:\Program Files (x86)\Settings Manager
C:\Windows\System32\drivers\{24e0dbe9-5e04-4423-805e-fc8b4c7506a4}Gw64.sys
C:\Windows\System32\drivers\{670b17cf-f53d-46d2-a0f0-771be0b4f802}Gw64.sys
C:\Windows\System32\drivers\{7594955a-29b6-4548-9263-89299555d649}Gw64.sys
C:\Windows\System32\drivers\{b082a895-f2bc-40a0-9735-d7592e9e422c}Gw64.sys
C:\Windows\System32\drivers\{e3c33c98-5fdc-480c-9fe0-e550c4468a4b}Gw64.sys
C:\Windows\System32\drivers\{fb6e2902-a029-4535-854a-1a69a22df5f7}Gw64.sys

2014-12-07 20:38 - 2014-12-07 20:38 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork
2014-12-07 20:38 - 2014-12-07 20:38 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork
2014-12-07 20:30 - 2014-12-07 20:30 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-12-07 20:26 - 2014-12-08 11:30 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2014-12-07 20:31 - 2014-12-07 20:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader
2014-12-07 20:26 - 2014-12-07 20:37 - 00000000 ____D () C:\ProgramData\YTD Video Downloader
2014-12-07 20:26 - 2014-12-07 20:31 - 00001264 _____ () C:\Users\Public\Desktop\YTD Video Downloader.lnk
2014-12-07 16:55 - 2014-12-07 17:10 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Yandex
2014-12-05 15:27 - 2014-12-05 15:27 - 00000000 ____D () C:\ProgramData\APN
2014-12-03 11:17 - 2014-12-03 15:50 - 00033958 _____ () C:\zoek-results.log
2014-12-03 11:11 - 2014-12-05 15:24 - 00000000 ____D () C:\zoek_backup
2014-12-02 16:24 - 2014-12-02 16:32 - 00000000 ____D () C:\AdwCleaner
2014-12-02 12:37 - 2014-12-05 15:25 - 00000000 ____D () C:\Program Files\trend micro
2014-12-02 12:37 - 2014-12-02 12:38 - 00000000 ____D () C:\rsit
2014-11-24 12:17 - 2014-12-05 15:27 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-11-24 12:17 - 2014-12-05 15:25 - 00000000 ____D () C:\Program Files (x86)\ace51f2f-4b96-4aad-aeed-c48f5c03f963
2014-11-24 12:17 - 2014-11-24 12:17 - 00008554 _____ () C:\Windows\System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-7
2014-11-24 12:17 - 2014-11-24 12:17 - 00008552 _____ () C:\Windows\System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-6
2014-11-24 12:17 - 2014-11-24 12:17 - 00008220 _____ () C:\Windows\System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-11
2014-11-24 12:17 - 2014-11-24 12:17 - 00000656 _____ () C:\Windows\Tasks\ccc604ab-476b-4053-8dd4-b9a5942a6df6.job
2014-11-24 12:16 - 2014-12-05 21:53 - 00000000 ____D () C:\Program Files (x86)\Internet Speed Checker
2014-11-24 12:12 - 2014-11-24 12:12 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-11-24 12:11 - 2014-12-05 16:45 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Seznam.cz
2014-11-24 12:07 - 2014-11-23 22:23 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{b082a895-f2bc-40a0-9735-d7592e9e422c}Gw64.sys
2014-11-24 12:05 - 2014-08-29 17:02 - 00020296 _____ () C:\Windows\system32\roboot64.exe
2014-11-24 12:01 - 2014-12-09 18:10 - 00000000 ____D () C:\ProgramData\smdmf
2014-11-24 12:01 - 2014-12-05 15:25 - 00000000 ____D () C:\Program Files (x86)\Settings Manager
2014-11-24 11:58 - 2014-12-09 17:31 - 00000000 ____D () C:\Program Files (x86)\Techgile
2014-12-05 21:53 - 2012-11-22 10:52 - 00000000 ____D () C:\Program Files (x86)\ICQ6Toolbar
2014-12-05 21:53 - 2012-09-19 12:53 - 00000000 ____D () C:\Program Files (x86)\Winamp Toolbar
2014-12-05 15:25 - 2014-11-06 17:11 - 00000000 ____D () C:\Users\Markéta\AppData\Local\AskPartnerNetwork
2014-12-05 15:25 - 2013-03-25 23:33 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\OpenCandy

Task: {1D5DE66C-6E72-4685-B7FF-C85329AA1D4D} - System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-4 => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-4.exe [2014-11-24] (Speedchecker) <==== ATTENTION
Task: {3BDF2891-A1C6-4BC6-9295-0856BF65FE8A} - System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-11 => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-11.exe [2014-11-24] (Speedchecker) <==== ATTENTION
Task: {40DE9962-B689-4110-B50B-2D09893C960D} - System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-1 => C:\Program Files (x86)\Internet Speed Checker\Internet Speed Checker-codedownloader.exe [2014-11-24] (Speedchecker) <==== ATTENTION
Task: {41EBE298-3668-46CF-98F0-E81F4410C4B6} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe [2014-11-25] (MyPC Backup) <==== ATTENTION
Task: {7A9AE44D-ED34-47AA-8B77-0A3547D5E6AB} - System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-6 => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-6.exe <==== ATTENTION
Task: {9615E881-78EB-4D30-8369-82E44CBE9B29} - System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-2 => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-2.exe [2014-11-24] (Speedchecker) <==== ATTENTION
Task: {AE88E7EC-6E4F-4E9B-81D0-569F174AB6B9} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2746081424-1949010188-3409447413-1003
Task: {B39CBCC5-0F35-4805-BA13-543D5E21601E} - System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-5 => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-5.exe [2014-11-24] (Speedchecker) <==== ATTENTION
Task: {E31915C4-7134-48A4-97F3-F1E2C603E8DE} - System32\Tasks\88fc30e7-d9b2-4eaa-ba41-05dd3cce10c0 => C:\Program Files (x86)\Internet Speed Checker\88fc30e7-d9b2-4eaa-ba41-05dd3cce10c0.exe <==== ATTENTION
Task: {E3FA6C23-0F72-4F63-972D-448D4EC45186} - System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-7 => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-7.exe [2014-11-24] (Speedchecker) <==== ATTENTION
Task: C:\Windows\Tasks\88fc30e7-d9b2-4eaa-ba41-05dd3cce10c0.job => C:\Program Files (x86)\Internet Speed Checker\88fc30e7-d9b2-4eaa-ba41-05dd3cce10c0.exe <==== ATTENTION
Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-1.job => C:\Program Files (x86)\Internet Speed Checker\Internet Speed Checker-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-11.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-2.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-2.exe <==== ATTENTION
Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-4.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-4.exe <==== ATTENTION
Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-5.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-5_user.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-6.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-7.job => C:\Program Files (x86)\Internet Speed Checker\aafd54c2-7610-4163-86cd-02bca24a8713-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\ccc604ab-476b-4053-8dd4-b9a5942a6df6.job => C:\Program Files (x86)\Internet Speed Checker\ccc604ab-476b-4053-8dd4-b9a5942a6df6.exe <==== ATTENTION
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2746081424-1949010188-3409447413-1003Core.job => C:\Users\Markéta\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2746081424-1949010188-3409447413-1003UA.job => C:\Users\Markéta\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\Internet Speed Checker

CMD: del "C:\Program Files (x86)\*.tmp"
Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\seznam-listicka-distribuce => value deleted successfully.
HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Windows\CurrentVersion\Run\\Facebook Update => value deleted successfully.
HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Monitoring => value deleted successfully.
"HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{618c58eb-58b6-11e2-956d-047d7bff73d8}" => Key deleted successfully.
"HKCR\CLSID\{618c58eb-58b6-11e2-956d-047d7bff73d8}" => Key not found.
"HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a48a47d9-dcb3-11e1-9b45-806e6f6e6963}" => Key deleted successfully.
"HKCR\CLSID\{a48a47d9-dcb3-11e1-9b45-806e6f6e6963}" => Key not found.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Main\\ICQ Search => value deleted successfully.
HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Main\\First Home Page => value deleted successfully.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully.
"HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key not found.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2498}" => Key deleted successfully.
"HKCR\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2498}" => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2498}" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2498}" => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}" => Key not found.
HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\10F22169C6C3CD210C727B662726EAD8" => Key deleted successfully.
"HKCR\CLSID\10F22169C6C3CD210C727B662726EAD8" => Key not found.
"HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\351DD7AD0CD3C8D133EE1C792A79DE0E" => Key deleted successfully.
"HKCR\CLSID\351DD7AD0CD3C8D133EE1C792A79DE0E" => Key not found.
"HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\43D7F7558CE167D97CE7A9913861817D" => Key deleted successfully.
"HKCR\CLSID\43D7F7558CE167D97CE7A9913861817D" => Key not found.
"HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\726385007D264C9C8961FB6A287DF1DE" => Key deleted successfully.
"HKCR\CLSID\726385007D264C9C8961FB6A287DF1DE" => Key not found.
"HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\E005305E00C384F28D40B50D2C9BA4A6" => Key deleted successfully.
"HKCR\CLSID\E005305E00C384F28D40B50D2C9BA4A6" => Key not found.
"HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\yandex.ru-191536" => Key deleted successfully.
"HKCR\CLSID\yandex.ru-191536" => Key not found.
"HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{08011321-3136-4E16-99F7-448F80A6F853}" => Key deleted successfully.
"HKCR\CLSID\{08011321-3136-4E16-99F7-448F80A6F853}" => Key not found.
"HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}" => Key deleted successfully.
"HKCR\CLSID\{6552C7DD-90A4-4387-B795-F8F96747DE19}" => Key not found.
"HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" => Key deleted successfully.
"HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" => Key not found.
"HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2498}" => Key deleted successfully.
"HKCR\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2498}" => Key not found.
"HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}" => Key deleted successfully.
"HKCR\CLSID\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611171152}" => Key deleted successfully.
"HKCR\CLSID\{11111111-1111-1111-1111-110611171152}" => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611171152}" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611171152}" => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}" => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => value deleted successfully.
"HKCR\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}" => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{855F3B16-6D32-4fe6-8A56-BBB695989046} => value deleted successfully.
"HKCR\Wow6432Node\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}" => Key not found.
HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => value deleted successfully.
"HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}" => Key not found.
HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{91397D20-1446-11D4-8AF4-0040CA1127B6} => value deleted successfully.
"HKCR\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}" => Key not found.
Firefox DefaultSearchEngine deleted successfully.
Firefox SelectedSearchEngine deleted successfully.
Firefox Keyword.URL deleted successfully.
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4" => Key deleted successfully.
C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\user.js => Moved successfully.
C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\videa.seznam.cz-165547.xml => Moved successfully.
C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\yahoo_ff.xml => Moved successfully.
C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\yandex.ru-191537.xml => Moved successfully.
Chrome DefaultSuggestURL not detected.
"HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaadgepjkdffhjbkfjgnnffnfcffbg" => Key deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\aaaaadgepjkdffhjbkfjgnnffnfcffbg" => Key deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\aminlpmkfcdibgpgfajlgnamicjckkjf" => Key deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jdkihdhlegcdggknokfekoemkjjnjhgi" => Key deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pchfckkccldkbclgdepkaonamkignanh" => Key deleted successfully.
APNMCP => Service deleted successfully.
BackupStack => Service deleted successfully.
Update Techgile => Unable to stop service
Update Techgile => Service deleted successfully.
Util Techgile => Unable to stop service
Util Techgile => Service deleted successfully.
SmdmFService => Unable to stop service
SmdmFService => Error deleting Service
F06DEFF2-5B9C-490D-910F-35D3A9119622 => Unable to stop service
F06DEFF2-5B9C-490D-910F-35D3A9119622 => Error deleting Service
{24e0dbe9-5e04-4423-805e-fc8b4c7506a4}Gw64 => Service stopped successfully.
{24e0dbe9-5e04-4423-805e-fc8b4c7506a4}Gw64 => Service deleted successfully.
{670b17cf-f53d-46d2-a0f0-771be0b4f802}Gw64 => Service stopped successfully.
{670b17cf-f53d-46d2-a0f0-771be0b4f802}Gw64 => Service deleted successfully.
{7594955a-29b6-4548-9263-89299555d649}Gw64 => Service stopped successfully.
{7594955a-29b6-4548-9263-89299555d649}Gw64 => Service deleted successfully.
{b082a895-f2bc-40a0-9735-d7592e9e422c}Gw64 => Service stopped successfully.
{b082a895-f2bc-40a0-9735-d7592e9e422c}Gw64 => Service deleted successfully.
{e3c33c98-5fdc-480c-9fe0-e550c4468a4b}Gw64 => Service stopped successfully.
{e3c33c98-5fdc-480c-9fe0-e550c4468a4b}Gw64 => Service deleted successfully.
{fb6e2902-a029-4535-854a-1a69a22df5f7}Gw64 => Service stopped successfully.
{fb6e2902-a029-4535-854a-1a69a22df5f7}Gw64 => Service deleted successfully.
C:\Program Files (x86)\AskPartnerNetwork => Moved successfully.
C:\Program Files (x86)\MyPC Backup => Moved successfully.

"C:\Program Files (x86)\Techgile" directory move:

C:\Program Files (x86)\Techgile\dogebobifcbinokmjlmngefnmaaapblo.crx => Moved successfully.
C:\Program Files (x86)\Techgile\updateTechgile.exe => Moved successfully.
C:\Program Files (x86)\Techgile\bin\1faf557f055a41eabf98.dll => Moved successfully.
C:\Program Files (x86)\Techgile\bin\1faf557f055a41eabf9864.dll => Moved successfully.
C:\Program Files (x86)\Techgile\bin\670b17cff53d46d2a0f0.dll => Moved successfully.
C:\Program Files (x86)\Techgile\bin\670b17cff53d46d2a0f064.dll => Moved successfully.
C:\Program Files (x86)\Techgile\bin\7594955a29b645489263.dll => Moved successfully.
C:\Program Files (x86)\Techgile\bin\7594955a29b64548926364.dll => Moved successfully.
C:\Program Files (x86)\Techgile\bin\7za.exe => Moved successfully.
C:\Program Files (x86)\Techgile\bin\BrowserAdapter.7z => Moved successfully.
C:\Program Files (x86)\Techgile\bin\sqlite3.dll => Moved successfully.
C:\Program Files (x86)\Techgile\bin\Techgile.BrowserAdapter.exe => Moved successfully.
C:\Program Files (x86)\Techgile\bin\Techgile.BrowserAdapter64.exe => Moved successfully.
C:\Program Files (x86)\Techgile\bin\Techgile.PurBrowse64.exe => Moved successfully.
C:\Program Files (x86)\Techgile\bin\Techgile.PurBrowseG.zip => Moved successfully.
C:\Program Files (x86)\Techgile\bin\tmp19C5.tmp => Moved successfully.
C:\Program Files (x86)\Techgile\bin\tmp1C7A.tmp => Moved successfully.
C:\Program Files (x86)\Techgile\bin\tmpB797.tmp => Moved successfully.
C:\Program Files (x86)\Techgile\bin\tmpC2A3.tmp => Moved successfully.
C:\Program Files (x86)\Techgile\bin\tmpC531.tmp => Moved successfully.
C:\Program Files (x86)\Techgile\bin\utilTechgile.exe => Moved successfully.
C:\Program Files (x86)\Techgile\bin\{1faf557f-055a-41ea-bf98-8743d653dfbd}.dll => Moved successfully.
C:\Program Files (x86)\Techgile\bin\{1faf557f-055a-41ea-bf98-8743d653dfbd}64.dll => Moved successfully.
C:\Program Files (x86)\Techgile\bin\{670b17cf-f53d-46d2-a0f0-771be0b4f802}.dll => Moved successfully.
C:\Program Files (x86)\Techgile\bin\{670b17cf-f53d-46d2-a0f0-771be0b4f802}64.dll => Moved successfully.
C:\Program Files (x86)\Techgile\bin\{7594955a-29b6-4548-9263-89299555d649}.dll => Moved successfully.
C:\Program Files (x86)\Techgile\bin\{7594955a-29b6-4548-9263-89299555d649}64.dll => Moved successfully.
C:\Program Files (x86)\Techgile\bin\plugins\Techgile.BOAS.dll => Moved successfully.
C:\Program Files (x86)\Techgile\bin\plugins\Techgile.Bromon.dll => Moved successfully.
C:\Program Files (x86)\Techgile\bin\plugins\Techgile.BroStats.dll => Moved successfully.
C:\Program Files (x86)\Techgile\bin\plugins\Techgile.BrowserAdapter.dll => Moved successfully.
C:\Program Files (x86)\Techgile\bin\plugins\Techgile.CompatibilityChecker.dll => Moved successfully.
C:\Program Files (x86)\Techgile\bin\plugins\Techgile.ExpExt.dll => Moved successfully.
C:\Program Files (x86)\Techgile\bin\plugins\Techgile.FFUpdate.dll => Moved successfully.
C:\Program Files (x86)\Techgile\bin\plugins\Techgile.GCUpdate.dll => Moved successfully.
C:\Program Files (x86)\Techgile\bin\plugins\Techgile.IEUpdate.dll => Moved successfully.
C:\Program Files (x86)\Techgile\bin\plugins\Techgile.PurBrowseG.dll => Moved successfully.
Could not move "C:\Program Files (x86)\Techgile" directory. => Scheduled to move on reboot.


"C:\Program Files (x86)\Settings Manager" directory move:

Could not move "C:\Program Files (x86)\Settings Manager\smdmf\favicon.ico" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\Helper.dll" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\Internet Explorer Settings.exe" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\smdmf.dll" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\smdmfbho.dll" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\smdmfldr.dll" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\smdmfldr_u.dll" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\smdmfmgrc2.cfg" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\smdmfu.exe" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\tbicon.exe" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\Uninstall.exe" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\x64\Internet Explorer Settings.exe" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmf.dll" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfbho.dll" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfldr.dll" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfldr_u.dll" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfmgrc2.cfg" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager" directory. => Scheduled to move on reboot.

C:\Windows\System32\drivers\{24e0dbe9-5e04-4423-805e-fc8b4c7506a4}Gw64.sys => Moved successfully.
C:\Windows\System32\drivers\{670b17cf-f53d-46d2-a0f0-771be0b4f802}Gw64.sys => Moved successfully.
C:\Windows\System32\drivers\{7594955a-29b6-4548-9263-89299555d649}Gw64.sys => Moved successfully.
C:\Windows\System32\drivers\{b082a895-f2bc-40a0-9735-d7592e9e422c}Gw64.sys => Moved successfully.
C:\Windows\System32\drivers\{e3c33c98-5fdc-480c-9fe0-e550c4468a4b}Gw64.sys => Moved successfully.
C:\Windows\System32\drivers\{fb6e2902-a029-4535-854a-1a69a22df5f7}Gw64.sys => Moved successfully.
C:\ProgramData\AskPartnerNetwork => Moved successfully.
"C:\Program Files (x86)\AskPartnerNetwork" => File/Directory not found.
C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup => Moved successfully.
"C:\Program Files (x86)\MyPC Backup" => File/Directory not found.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader => Moved successfully.
C:\ProgramData\YTD Video Downloader => Moved successfully.
C:\Users\Public\Desktop\YTD Video Downloader.lnk => Moved successfully.
C:\Users\Markéta\AppData\Roaming\Yandex => Moved successfully.
C:\ProgramData\APN => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\rsit => Moved successfully.
C:\Program Files (x86)\globalUpdate => Moved successfully.
C:\Program Files (x86)\ace51f2f-4b96-4aad-aeed-c48f5c03f963 => Moved successfully.
C:\Windows\System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-7 => Moved successfully.
C:\Windows\System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-6 => Moved successfully.
C:\Windows\System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-11 => Moved successfully.
C:\Windows\Tasks\ccc604ab-476b-4053-8dd4-b9a5942a6df6.job => Moved successfully.
C:\Program Files (x86)\Internet Speed Checker => Moved successfully.
C:\Program Files (x86)\Seznam.cz => Moved successfully.
C:\Users\Markéta\AppData\Roaming\Seznam.cz => Moved successfully.
"C:\Windows\system32\Drivers\{b082a895-f2bc-40a0-9735-d7592e9e422c}Gw64.sys" => File/Directory not found.
C:\Windows\system32\roboot64.exe => Moved successfully.

"C:\ProgramData\smdmf" directory move:

Could not move "C:\ProgramData\smdmf\coordinator.cfg" => Scheduled to move on reboot.
Could not move "C:\ProgramData\smdmf\general.cfg" => Scheduled to move on reboot.
Could not move "C:\ProgramData\smdmf\S-1-5-21-2746081424-1949010188-3409447413-1003.cfg" => Scheduled to move on reboot.
Could not move "C:\ProgramData\smdmf" directory. => Scheduled to move on reboot.


"C:\Program Files (x86)\Settings Manager" directory move:

Could not move "C:\Program Files (x86)\Settings Manager\smdmf\favicon.ico" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\Helper.dll" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\Internet Explorer Settings.exe" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\smdmf.dll" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\smdmfbho.dll" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\smdmfldr.dll" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\smdmfldr_u.dll" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\smdmfmgrc2.cfg" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\smdmfu.exe" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\tbicon.exe" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\Uninstall.exe" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\x64\Internet Explorer Settings.exe" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmf.dll" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfbho.dll" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfldr.dll" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfldr_u.dll" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfmgrc2.cfg" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll" => Scheduled to move on reboot.
Could not move "C:\Program Files (x86)\Settings Manager" directory. => Scheduled to move on reboot.


"C:\Program Files (x86)\Techgile" directory move:

Could not move "C:\Program Files (x86)\Techgile" directory. => Scheduled to move on reboot.

C:\Program Files (x86)\ICQ6Toolbar => Moved successfully.
C:\Program Files (x86)\Winamp Toolbar => Moved successfully.
C:\Users\Markéta\AppData\Local\AskPartnerNetwork => Moved successfully.
C:\Users\Markéta\AppData\Roaming\OpenCandy => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1D5DE66C-6E72-4685-B7FF-C85329AA1D4D}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1D5DE66C-6E72-4685-B7FF-C85329AA1D4D}" => Key deleted successfully.
C:\Windows\System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-4 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\aafd54c2-7610-4163-86cd-02bca24a8713-4" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3BDF2891-A1C6-4BC6-9295-0856BF65FE8A}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3BDF2891-A1C6-4BC6-9295-0856BF65FE8A}" => Key deleted successfully.
C:\Windows\System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-11 not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\aafd54c2-7610-4163-86cd-02bca24a8713-11" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{40DE9962-B689-4110-B50B-2D09893C960D}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{40DE9962-B689-4110-B50B-2D09893C960D}" => Key deleted successfully.
C:\Windows\System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-1 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\aafd54c2-7610-4163-86cd-02bca24a8713-1" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{41EBE298-3668-46CF-98F0-E81F4410C4B6}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{41EBE298-3668-46CF-98F0-E81F4410C4B6}" => Key deleted successfully.
C:\Windows\System32\Tasks\LaunchSignup => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LaunchSignup" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7A9AE44D-ED34-47AA-8B77-0A3547D5E6AB}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7A9AE44D-ED34-47AA-8B77-0A3547D5E6AB}" => Key deleted successfully.
C:\Windows\System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-6 not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\aafd54c2-7610-4163-86cd-02bca24a8713-6" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9615E881-78EB-4D30-8369-82E44CBE9B29}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9615E881-78EB-4D30-8369-82E44CBE9B29}" => Key deleted successfully.
C:\Windows\System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-2 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\aafd54c2-7610-4163-86cd-02bca24a8713-2" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{AE88E7EC-6E4F-4E9B-81D0-569F174AB6B9}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AE88E7EC-6E4F-4E9B-81D0-569F174AB6B9}" => Key deleted successfully.
C:\Windows\System32\Tasks\Games\UpdateCheck_S-1-5-21-2746081424-1949010188-3409447413-1003 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Games\UpdateCheck_S-1-5-21-2746081424-1949010188-3409447413-1003" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B39CBCC5-0F35-4805-BA13-543D5E21601E}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B39CBCC5-0F35-4805-BA13-543D5E21601E}" => Key deleted successfully.
C:\Windows\System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-5 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\aafd54c2-7610-4163-86cd-02bca24a8713-5" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E31915C4-7134-48A4-97F3-F1E2C603E8DE}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E31915C4-7134-48A4-97F3-F1E2C603E8DE}" => Key deleted successfully.
C:\Windows\System32\Tasks\88fc30e7-d9b2-4eaa-ba41-05dd3cce10c0 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\88fc30e7-d9b2-4eaa-ba41-05dd3cce10c0" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E3FA6C23-0F72-4F63-972D-448D4EC45186}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E3FA6C23-0F72-4F63-972D-448D4EC45186}" => Key deleted successfully.
C:\Windows\System32\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-7 not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\aafd54c2-7610-4163-86cd-02bca24a8713-7" => Key deleted successfully.
C:\Windows\Tasks\88fc30e7-d9b2-4eaa-ba41-05dd3cce10c0.job => Moved successfully.
C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-1.job => Moved successfully.
C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-11.job => Moved successfully.
C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-2.job => Moved successfully.
C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-4.job => Moved successfully.
C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-5.job => Moved successfully.
C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-5_user.job => Moved successfully.
C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-6.job => Moved successfully.
C:\Windows\Tasks\aafd54c2-7610-4163-86cd-02bca24a8713-7.job => Moved successfully.
C:\Windows\Tasks\ccc604ab-476b-4053-8dd4-b9a5942a6df6.job not found.
C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2746081424-1949010188-3409447413-1003Core.job => Moved successfully.
C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2746081424-1949010188-3409447413-1003UA.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
"C:\Program Files (x86)\Internet Speed Checker" => File/Directory not found.

========= del "C:\Program Files (x86)\*.tmp" =========


========= End of CMD: =========

C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 1013.3 MB temporary data.

=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-12-09 22:35:58)<=

C:\Program Files (x86)\Techgile => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\favicon.ico => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\Helper.dll => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\Internet Explorer Settings.exe => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\smdmf.dll => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\smdmfbho.dll => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\smdmfldr.dll => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\smdmfldr_u.dll => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\smdmfmgrc2.cfg => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\smdmfu.exe => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\tbicon.exe => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\Uninstall.exe => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\x64\Internet Explorer Settings.exe => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmf.dll => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfbho.dll => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfldr.dll => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfldr_u.dll => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfmgrc2.cfg => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll => Is moved successfully.
C:\Program Files (x86)\Settings Manager => Is moved successfully.
C:\ProgramData\smdmf\coordinator.cfg => Moved successfully.
C:\ProgramData\smdmf\general.cfg => Moved successfully.
C:\ProgramData\smdmf\S-1-5-21-2746081424-1949010188-3409447413-1003.cfg => Moved successfully.
C:\ProgramData\smdmf => Moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\favicon.ico => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\Helper.dll => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\Internet Explorer Settings.exe => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\smdmf.dll => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\smdmfbho.dll => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\smdmfldr.dll => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\smdmfldr_u.dll => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\smdmfmgrc2.cfg => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\smdmfu.exe => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\tbicon.exe => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\Uninstall.exe => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\x64\Internet Explorer Settings.exe => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmf.dll => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfbho.dll => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfldr.dll => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfldr_u.dll => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfmgrc2.cfg => Is moved successfully.
C:\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll => Is moved successfully.
C:\Program Files (x86)\Settings Manager => Is moved successfully.
C:\Program Files (x86)\Techgile => Is moved successfully.

==== End of Fixlog ====

altrok
Moderátor
Moderátor
Příspěvky: 7328
Registrován: 15 Lis 2012 22:26
Místo/Bydliště: Znojmo

Re: Kontrola logu

#10 Příspěvek od altrok »

:arrow: Cast jeste zustala, ale pocitaci by se melo ulevit... dejte prosim novy FRST log (i Addition.txt). Nedavejte logy do quote/citace.
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.

pasecak
Návštěvník
Návštěvník
Příspěvky: 124
Registrován: 26 Črc 2008 14:50

Re: Kontrola logu

#11 Příspěvek od pasecak »

Nejde mi nahrát přípona tak to musím sem dát takhle.


FRST

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-12-2014 02
Ran by Markéta (administrator) on MARKÉTA-THINKP on 10-12-2014 09:13:39
Running from C:\Users\Markéta\Desktop
Loaded Profile: Markéta (Available profiles: Markéta)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AuthenTec, Inc) C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe
(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe
(Absolute Software) C:\Program Files (x86)\Absolute Software\Absolute Notifier\AbsoluteNotifierService.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
(Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcDeskBandHlpr.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\mkrmsg.exe
(AuthenTec Inc.) C:\Program Files\Lenovo Fingerprint Reader\TouchControl.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(AuthenTec Inc.) C:\Program Files\Lenovo Fingerprint Reader\x86\BioMonitor.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
(Dropbox, Inc.) C:\Users\Markéta\AppData\Roaming\Dropbox\bin\Dropbox.exe
(MyPCBackup.com) C:\FRST\Quarantine\C\Program Files (x86)\MyPC Backup\MyPC Backup.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE
(Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe
(forum.viry.cz) C:\Users\Markéta\Desktop\FRSTLauncher.exe
() C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCTaskService.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12452968 2012-03-13] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-03-09] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2881336 2012-06-20] (Synaptics Incorporated)
HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [228744 2012-09-20] (Lenovo.)
HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [290160 2012-06-01] (Lenovo Group Limited)
HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2011-11-24] (Vimicro)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2012-04-18] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [PWMTRV] => rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
HKLM-x32\...\Run: [Fastboot] => C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [1095472 2012-03-12] (Lenovo)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2012-10-04] (Intel Corporation)
HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4351712 2011-07-14] (Lenovo, Inc.)
HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [74752 2011-12-09] (Nullsoft, Inc.)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [591696 2008-05-07] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [Absolute Notifier] => C:\Program Files (x86)\Absolute Software\Absolute Notifier\AbsoluteNotifier.exe [85672 2011-05-10] (Absolute Software)
HKLM-x32\...\Run: [Intel AppUp(R) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2012-10-04] (Intel Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5226600 2014-11-25] (AVAST Software)
Lsa: [Notification Packages] scecli C:\Program Files\Lenovo\Bluetooth Software\BtwProximityCP.dll ACGina
Startup: C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Markéta\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\FRST\Quarantine\C\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/welcome/thinkpad
HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain ... &bmod=LENP
HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=6826
HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com/welcome/thinkpad
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: TrueSuite Browser Helper Object -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files\Lenovo Fingerprint Reader\IEBHO.DLL (AuthenTec Inc.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Symantec VIP Access Add-On -> {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} -> C:\Program Files (x86)\Symantec\VIP Access Client\64bit\VIPAddOnForIE64.dll (Symantec Corporation)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: TrueSuite Browser Helper Object -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll (AuthenTec Inc.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Symantec VIP Access Add-On -> {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} -> C:\Program Files (x86)\Symantec\VIP Access Client\VIPAddOnForIE.dll (Symantec Corporation)
Handler-x32: http - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 147.230.16.140 147.230.16.1

FireFox:
========
FF ProfilePath: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default
FF Homepage: hxxp://www.seznam.cz/?clid=6826
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2746081424-1949010188-3409447413-1003: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Markéta\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKU\S-1-5-21-2746081424-1949010188-3409447413-1003: intel.com/AppUp -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll (Intel)
FF Plugin HKU\S-1-5-21-2746081424-1949010188-3409447413-1003: intel.com/AppUpx64 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\firmy.cz-165547.xml
FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\mapy.cz-165547.xml
FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\seznam.cz-165546.xml
FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\zbozi.cz-165546.xml
FF Extension: No Name - C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\sepherdwilbur@aol.com [2014-11-24]
FF Extension: No Name - C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2014-11-24]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-10-14]
FF HKLM-x32\...\Firefox\Extensions: [VIP5X@verisign.com] - C:\Program Files (x86)\Symantec\VIP Access Client
FF Extension: Symantec VIP Access Add-On - C:\Program Files (x86)\Symantec\VIP Access Client [2012-08-02]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://www.msn.com/?pc=UP97&ocid=UP97DHP"
CHR DefaultSuggestURL: Default -> http://ssmsp.ask.com/query?sstype=prefi ... earchTerms}
CHR Profile: C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-03]
CHR Extension: (Dokumenty Google) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-03]
CHR Extension: (Disk Google) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-03]
CHR Extension: (YouTube) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-03]
CHR Extension: (History 2) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\cahejgbbfgmlmjgdjlibphdjeldhagkp [2013-04-24]
CHR Extension: (Vyhledávání Google) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-03]
CHR Extension: (AdBlock) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-12-08]
CHR Extension: (Avast Online Security) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-10-04]
CHR Extension: (Google Dictionary (by Google)) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgijmajocgfcbeboacabfgobmjgjcoja [2013-04-24]
CHR Extension: (Peněženka Google) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Rychlý přesun Google) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc [2013-04-24]
CHR Extension: (Gmail) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-03]
CHR HKLM-x32\...\Chrome\Extension: [cdkedefaddcdlpmiafhicjnkbogjiogj] - C:\Program Files\Lenovo Fingerprint Reader\x86\tschrome.crx [2012-03-14]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-25]
CHR HKLM-x32\...\Chrome\Extension: [pbjikboenpfhbbejgkoklgkhjpfogcam] - C:\Program Files (x86)\Amazon\ABB\AmazonChrome-lenovo-abb.crx [Not Found]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AbsoluteNotifier; C:\Program Files (x86)\Absolute Software\Absolute Notifier\AbsoluteNotifierService.exe [10920 2011-05-10] (Absolute Software) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-25] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [104416 2014-11-25] (AVAST Software)
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [952608 2012-03-06] (Broadcom Corporation.)
R2 EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed]
R2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [169776 2012-03-12] (Lenovo)
R2 FPLService; C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe [328552 2012-06-07] (AuthenTec, Inc)
S2 gupdate; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [136176 2014-10-23] () [File not signed]
S3 gupdatem; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [136176 2014-10-23] () [File not signed]
R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [179568 2012-06-01] (Lenovo Group Limited)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272776 2014-10-16] ()
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [24120 2014-02-21] ()
R2 VIPAppService; C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe [84080 2012-04-19] (Symantec Corporation)
S2 SmdmFService; C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-25] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-11-25] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-25] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449936 2014-11-25] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-25] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-25] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-25] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-25] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-25] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-25] ()
S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [138280 2012-03-05] (Broadcom Corporation.)
R0 Fastboot; C:\Windows\System32\DRIVERS\Fastboot.sys [71440 2012-03-12] (Windows (R) Win 7 DDK provider)
R2 npf; C:\Windows\System32\drivers\npf.sys [47632 2010-01-27] (CACE Technologies, Inc.)
R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [40248 2011-05-29] (Lenovo Information Product(ShenZhen China) Inc.)
R3 tvtvcamd; C:\Windows\System32\DRIVERS\tvtvcamd.sys [27432 2011-12-08] (ThinkVantage Communications Utility)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [952832 2012-02-29] (Vimicro Corporation)
R1 {1faf557f-055a-41ea-bf98-8743d653dfbd}Gw64; C:\Windows\System32\drivers\{1faf557f-055a-41ea-bf98-8743d653dfbd}Gw64.sys [48784 2014-12-09] (StdLib)
S1 F06DEFF2-5B9C-490D-910F-35D3A9119622; \??\C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfmgrc2.cfg [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-10 09:13 - 2014-12-10 09:16 - 00023031 _____ () C:\Users\Markéta\Desktop\FRST.txt
2014-12-09 22:33 - 2014-12-09 22:33 - 00001910 _____ () C:\Windows\PFRO.log
2014-12-09 22:13 - 2014-12-09 22:13 - 00112640 _____ (forum.viry.cz) C:\Users\Markéta\Desktop\FRSTLauncher.exe
2014-12-09 22:05 - 2014-12-09 22:05 - 00001149 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-12-09 22:05 - 2014-12-09 22:05 - 00001137 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-12-09 21:37 - 2014-12-09 12:29 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{1faf557f-055a-41ea-bf98-8743d653dfbd}Gw64.sys
2014-12-09 18:10 - 2014-12-10 09:13 - 00000000 ____D () C:\FRST
2014-12-09 11:52 - 2014-12-09 11:52 - 00021491 _____ () C:\Users\Markéta\AppData\Local\recently-used.xbel
2014-12-08 20:32 - 2014-12-10 09:13 - 00001361 _____ () C:\Windows\setupact.log
2014-12-08 20:32 - 2014-12-08 20:32 - 00000000 _____ () C:\Windows\setuperr.log
2014-12-08 14:23 - 2014-12-08 14:23 - 02119680 _____ (Farbar) C:\Users\Markéta\Desktop\FRST64.exe
2014-12-08 12:16 - 2014-12-08 12:16 - 20677582 _____ () C:\Users\Markéta\Documents\Breathe Again.mp4
2014-12-08 11:49 - 2014-12-08 11:49 - 08869968 _____ () C:\Users\Markéta\Documents\Scenic City Dance Center_ _Warrior_ _ Stacey's Lyrical Class.mp4
2014-12-07 20:41 - 2014-12-07 20:41 - 121739329 _____ () C:\Users\Markéta\Documents\_Titanium_ at Scenic City Dance Center Advanced Lyrical.mp4
2014-12-07 20:25 - 2014-12-07 20:25 - 00000000 ____D () C:\Program Files (x86)\GreenTree Applications
2014-12-07 17:11 - 2014-12-07 17:11 - 00000000 __SHD () C:\Users\Markéta\AppData\Local\EmieBrowserModeList
2014-12-07 17:09 - 2014-12-07 17:09 - 00000681 _____ () C:\Users\Markéta\Desktop\Total Commander 64 bit.lnk
2014-12-07 16:55 - 2014-12-07 16:55 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Opera Software
2014-12-07 16:43 - 2014-12-07 16:43 - 00000000 ____D () C:\Users\Markéta\AppData\Local\VeriSign
2014-12-05 17:21 - 2014-12-05 17:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge
2014-12-05 15:40 - 2014-11-25 17:44 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-12-02 19:57 - 2014-12-02 19:57 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\pdfforge
2014-12-02 12:34 - 2014-12-09 22:05 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\TeamViewer
2014-11-30 15:47 - 2014-11-30 15:47 - 00000000 _____ () C:\unp304119482420430550.mdmp
2014-11-25 19:28 - 2014-11-25 19:28 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-11-25 19:28 - 2014-11-25 19:28 - 00000793 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-11-25 19:27 - 2014-11-25 19:28 - 00000000 ____D () C:\Program Files\CCleaner
2014-11-25 17:47 - 2014-12-05 16:01 - 00001941 _____ () C:\Users\Public\Desktop\Avast Internet Security.lnk
2014-11-25 17:47 - 2014-12-05 16:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-11-25 17:45 - 2014-11-25 17:44 - 00028184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2014-11-25 17:44 - 2014-11-25 17:44 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-11-25 17:43 - 2014-11-25 17:43 - 00449936 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys
2014-11-25 08:53 - 2014-11-25 08:53 - 00000000 ____D () C:\Windows\pss
2014-11-24 22:46 - 2014-12-09 22:34 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-11-24 12:25 - 2013-08-17 00:00 - 00859416 _____ (TMRG, Inc.) C:\Windows\system32\rlls64.dll
2014-11-24 12:25 - 2013-08-17 00:00 - 00593688 _____ (TMRG, Inc.) C:\Windows\SysWOW64\rlls.dll
2014-11-24 11:56 - 2014-12-05 21:50 - 00000000 ____D () C:\Program Files (x86)\RelevantKnowledge
2014-11-23 10:41 - 2014-11-23 10:41 - 00000000 ____D () C:\Adjustment Program
2014-11-19 11:31 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 11:31 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-19 11:31 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-19 11:31 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-11-19 11:25 - 2014-11-25 22:32 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\LSC
2014-11-18 17:08 - 2014-11-18 17:08 - 12229025 _____ () C:\Users\Markéta\Documents\Tango With The Sheriff (Partner Line Dance).mp4
2014-11-12 22:37 - 2014-11-12 22:37 - 45619002 _____ () C:\Users\Markéta\Documents\Dumb Ways to Die.mp4
2014-11-12 22:04 - 2014-11-12 22:04 - 65383691 _____ () C:\Users\Markéta\Documents\SocialErasmus week - Life in a wheelchair l by ESN Liberec.mp4
2014-11-12 22:00 - 2014-11-12 22:00 - 91410903 _____ () C:\Users\Markéta\Documents\SocialErasmus week - Day about health without health l by ESN Liberec.mp4
2014-11-12 14:59 - 2014-11-07 20:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 14:59 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-11-12 14:59 - 2014-11-06 05:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 14:59 - 2014-11-06 04:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 14:59 - 2014-11-06 04:35 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 14:59 - 2014-11-06 04:30 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 14:59 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-11-12 14:59 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-11-12 14:59 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-11-12 14:59 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-11-12 14:59 - 2014-11-06 04:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 14:59 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-11-12 14:59 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-12 14:59 - 2014-11-06 03:41 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 14:59 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-11-12 14:59 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-11-12 14:59 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-11-12 14:59 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-11-12 14:59 - 2014-11-06 03:04 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 14:59 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-11-12 14:59 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-11-12 14:59 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 14:59 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 14:59 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 14:59 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 14:59 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 14:59 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-11-12 14:59 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-11-12 14:59 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-11-12 14:59 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-11-12 14:58 - 2014-11-06 05:03 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 14:58 - 2014-11-06 05:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 14:58 - 2014-11-06 04:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 14:58 - 2014-11-06 04:46 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 14:58 - 2014-11-06 04:44 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 14:58 - 2014-11-06 04:43 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 14:58 - 2014-11-06 04:36 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 14:58 - 2014-11-06 04:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 14:58 - 2014-11-06 04:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 14:58 - 2014-11-06 04:29 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 14:58 - 2014-11-06 04:23 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 14:58 - 2014-11-06 04:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 14:58 - 2014-11-06 04:16 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 14:58 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-11-12 14:58 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-11-12 14:58 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-11-12 14:58 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-11-12 14:58 - 2014-11-06 04:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 14:58 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-11-12 14:58 - 2014-11-06 04:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 14:58 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-11-12 14:58 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-11-12 14:58 - 2014-11-06 03:57 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 14:58 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-11-12 14:58 - 2014-11-06 03:41 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 14:58 - 2014-11-06 03:39 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 14:58 - 2014-11-06 03:38 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 14:58 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-11-12 14:58 - 2014-11-06 03:30 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 14:58 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-11-12 14:58 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-11-12 14:58 - 2014-11-06 03:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 14:58 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-11-12 14:58 - 2014-11-06 02:53 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 14:58 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-11-12 14:57 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 14:57 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-11-12 14:57 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 14:57 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-11-12 14:57 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 14:57 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 14:57 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 14:57 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 14:57 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 14:57 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 14:57 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-11-12 14:57 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-11-12 14:57 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-11-12 14:57 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 14:57 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 14:57 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 14:57 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 14:57 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 14:57 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 14:57 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-11-12 14:57 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-11-12 14:57 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-11-12 14:57 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-11-12 14:57 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-11-12 14:57 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-11-12 14:57 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 14:57 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 14:57 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-11-12 14:57 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-11-12 14:57 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-12 14:57 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2014-11-12 14:56 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 14:56 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-10 09:15 - 2012-08-02 16:09 - 01446597 _____ () C:\Windows\WindowsUpdate.log
2014-12-10 09:10 - 2009-07-14 05:45 - 00031472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-10 09:10 - 2009-07-14 05:45 - 00031472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-10 09:04 - 2013-01-10 15:37 - 00000000 ___RD () C:\Users\Markéta\Dropbox
2014-12-10 09:04 - 2013-01-10 15:34 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Dropbox
2014-12-10 09:02 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-09 22:37 - 2012-10-14 10:35 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-12-09 22:36 - 2012-09-17 14:42 - 00093248 _____ () C:\Users\Markéta\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-09 22:33 - 2009-07-14 05:45 - 00381568 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-09 22:31 - 2012-09-18 08:25 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2014-12-09 22:31 - 2009-07-14 03:34 - 00000601 _____ () C:\Windows\win.ini
2014-12-09 22:19 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\GroupPolicy
2014-12-09 22:07 - 2012-09-20 19:05 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\vlc
2014-12-09 22:05 - 2013-04-28 13:15 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2014-12-09 11:52 - 2012-11-10 16:43 - 00000000 ____D () C:\Users\Markéta\.gimp-2.8
2014-12-07 17:26 - 2012-08-02 16:42 - 00000000 ____D () C:\ProgramData\Norton
2014-12-07 17:10 - 2013-08-20 18:15 - 00000000 ____D () C:\Users\Markéta\AppData\Local\Yandex
2014-12-07 17:09 - 2012-12-17 22:56 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2014-12-07 14:39 - 2012-09-21 13:17 - 00000000 ____D () C:\Users\Markéta\Desktop\Hudba
2014-12-07 12:14 - 2012-10-07 13:54 - 00000000 ____D () C:\Users\Markéta\Desktop\Markéta
2014-12-07 10:25 - 2012-10-11 11:23 - 00000000 ____D () C:\Users\Markéta\AppData\Local\CrashDumps
2014-12-06 22:26 - 2013-03-10 21:39 - 00000000 ____D () C:\Users\Markéta\Desktop\Scéňáček
2014-12-06 15:30 - 2013-07-13 16:34 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-12-06 15:12 - 2012-08-02 16:37 - 00000000 ____D () C:\Program Files\Google
2014-12-06 15:12 - 2012-08-02 16:37 - 00000000 ____D () C:\Program Files (x86)\Google
2014-12-05 17:27 - 2012-09-17 14:49 - 00000000 ____D () C:\Users\Markéta\AppData\Local\Google
2014-12-05 15:39 - 2012-09-19 12:53 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-12-05 15:26 - 2014-10-23 11:04 - 00000000 ____D () C:\Program Files (x86)\GUMFF26.tmp
2014-12-05 15:26 - 2012-09-17 14:38 - 00000000 ____D () C:\Users\Markéta
2014-12-05 15:25 - 2012-11-22 10:51 - 00000000 ____D () C:\ProgramData\ICQ
2014-12-05 15:25 - 2012-09-19 12:53 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Winamp
2014-12-05 15:25 - 2012-09-17 14:40 - 00000000 ____D () C:\Program Files (x86)\Amazon
2014-12-05 15:25 - 2012-09-17 14:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Password Vault
2014-12-05 15:25 - 2012-08-02 16:48 - 00000000 ____D () C:\Windows\util
2014-12-05 15:24 - 2012-08-02 15:36 - 00000000 ____D () C:\ProgramData\Lenovo
2014-12-05 15:24 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-11-27 22:21 - 2012-11-14 15:00 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-11-27 22:21 - 2011-02-24 18:03 - 00000000 ____D () C:\Windows\Panther
2014-11-27 17:25 - 2012-10-10 10:03 - 00000000 ____D () C:\Users\Markéta\Desktop\Filmy
2014-11-25 20:28 - 2013-01-18 20:17 - 00001081 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-11-25 20:28 - 2013-01-18 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-11-25 17:45 - 2012-10-14 10:35 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-11-25 17:44 - 2014-10-03 12:18 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-11-25 17:44 - 2014-10-03 12:18 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-11-25 17:44 - 2014-10-03 12:11 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-11-25 17:44 - 2014-10-03 12:11 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-11-25 17:44 - 2012-10-14 10:35 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-11-25 17:44 - 2012-10-14 10:35 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-11-25 17:44 - 2012-10-14 10:35 - 00083280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-11-25 08:34 - 2012-09-24 12:55 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Skype
2014-11-24 12:17 - 2012-09-19 09:19 - 00000000 ____D () C:\Program Files (x86)\ABBYY FineReader 6.0 Sprint
2014-11-21 14:46 - 2009-07-14 06:08 - 00032626 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-11-18 12:19 - 2012-08-02 16:46 - 00000000 ____D () C:\Windows\System32\Tasks\TVT
2014-11-18 12:17 - 2012-08-02 16:34 - 00000000 ____D () C:\Windows\System32\Tasks\Lenovo
2014-11-18 12:17 - 2012-08-02 16:18 - 00000000 ____D () C:\Program Files\Lenovo
2014-11-18 12:16 - 2012-08-02 16:34 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-11-16 14:32 - 2013-01-10 15:35 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-11-13 00:07 - 2013-07-12 21:08 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-12 23:57 - 2012-10-24 08:19 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.1232.dll


Some content of TEMP:
====================
C:\Users\Markéta\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp3nryf2.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================


==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Mark�ta\Desktop" je 265186 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcWin7Hlpr
C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk
C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================


%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%


Addition


Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-12-2014 02
Ran by Markéta at 2014-12-10 09:17:32
Running from C:\Users\Markéta\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.22beta (HKLM-x32\...\7-Zip) (Version: - )
ABBYY FineReader 6.0 Sprint (HKLM-x32\...\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}) (Version: 6.00.1395.4512 - ABBYY Software House)
Absolute Notifier (HKLM-x32\...\{EBE939ED-4612-45FD-A39E-77AC199C4273}) (Version: 1.4.3.10 - Absolute Software)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated)
Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.0.12.36 - Adobe Systems Incorporated)
Adobe Reader X (10.1.12) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.12 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{9201666D-7E8D-4774-E69E-3FE160609F7F}) (Version: 3.0.864.0 - Advanced Micro Devices, Inc.)
aTube Catcher (HKLM-x32\...\aTube Catcher) (Version: 2.9.1347 - DsNET Corp)
Audacity 2.0.2 (HKLM-x32\...\Audacity_is1) (Version: 2.0.2 - Audacity Team)
Avast Internet Security (HKLM-x32\...\avast) (Version: 10.0.2208 - AVAST Software)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 5.100.82.130 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.00 - Piriform)
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Create Recovery Media (HKLM-x32\...\{50DC5136-21E8-48BC-97E5-1AD055F6B0B6}) (Version: 1.20.0.00 - Lenovo Group Limited)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.7000.7 - Dolby Laboratories Inc)
Download Updater (AOL LLC) (HKLM-x32\...\SoftwareUpdUtility) (Version: - ) <==== ATTENTION
Dropbox (HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\...\Dropbox) (Version: 2.10.52 - Dropbox, Inc.)
Epson Event Manager (HKLM-x32\...\{48F22622-1CC2-4A83-9C1E-644DD96F832D}) (Version: 2.01.00 - SEIKO EPSON Corporation)
EPSON PX700W Series Printer Uninstall (HKLM\...\EPSON PX700W Series) (Version: - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - )
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4j - SEIKO EPSON CORPORATION)
Evernote v. 4.2.3 (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 4.2.3.15 - Evernote Corp.)
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
GeoGebra 4.2 (HKLM-x32\...\GeoGebra 4.2) (Version: 4.2.60.0 - International GeoGebra Institute)
GIMP 2.8.2 (HKLM\...\GIMP-2_is1) (Version: 2.8.2 - The GIMP Team)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 38.0.2125.104 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Integrated Camera (HKLM-x32\...\{ADE16A9D-FBDC-4ECC-B6BD-9C31E51D0332}) (Version: 5.12.423.3 - Vimicro)
Intel AppUp(R) center (HKLM-x32\...\Intel AppUp(SM) center 33057) (Version: 41504 - Intel)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Lenovo Auto Scroll Utility (HKLM\...\LenovoAutoScrollUtility) (Version: 1.33 - )
Lenovo Bluetooth with Enhanced Data Rate Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.2500 - Broadcom Corporation)
Lenovo Patch Utility (HKLM-x32\...\{6E6E7725-C7BC-4C39-8B3F-14B67331A120}) (Version: 1.3.0.9 - Lenovo Group Limited)
Lenovo Patch Utility (HKLM-x32\...\{A7BB9BBD-DFE4-4276-820A-7CD141FC09E6}) (Version: 1.3.0.007 - Lenovo Group Limited)
Lenovo Patch Utility 64 bit (HKLM\...\{0369F866-2CE0-4EB9-B426-88FA122C6E82}) (Version: 1.3.0.9 - Lenovo Group Limited)
Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.65.05.21 - )
Lenovo Registration (HKLM-x32\...\{6707C034-ED6B-4B6A-B21F-969B3606FBDE}) (Version: 1.0.4 - Lenovo Inc.)
Lenovo SimpleTap (HKLM\...\{BF601122-9F0A-41A9-BA06-3158D9FB4B80}) (Version: 3.2.0004.00 - Lenovo Group Limited)
Lenovo Solution Center (HKLM\...\{4C2B6F96-3AED-4E3F-8DCE-917863D1E6B1}) (Version: 2.7.003.00 - Lenovo Group Limited)
Lenovo System Update (HKLM-x32\...\{25C64847-B900-48AD-A164-1B4F9B774650}) (Version: 5.05.0009 - Lenovo)
Lenovo User Guide (HKLM-x32\...\{13F59938-C595-479C-B479-F171AB9AF64F}) (Version: 1.0.0009.00 - Lenovo Group Limited)
Lenovo Warranty Information (HKLM-x32\...\{FD4EC278-C1B1-4496-99ED-C0BE1B0AA521}) (Version: 1.0.0005.00 - Lenovo)
Lenovo Welcome (HKLM-x32\...\{2DC26D10-CC6A-494F-BEA3-B5BC21126D5E}) (Version: 3.1.0020.00 - Lenovo Group Limited)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Message Center Plus (HKLM\...\{C2C2DB64-1BCE-4FA7-962D-457795ECCEC0}) (Version: 3.3.0004.00 - Lenovo Group Limited)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110405-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
MyPC Backup (HKLM\...\MyPC Backup) (Version: - JDi Backup Ltd) <==== ATTENTION
On Screen Display (HKLM\...\OnScreenDisplay) (Version: 8.42.20 - )
OpenOffice.org 3.2 (HKLM-x32\...\{5DE71D48-01EB-4BF2-A643-50FE6C9B6AC9}) (Version: 3.2.9483 - OpenOffice.org)
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (HKLM-x32\...\{B6190387-0036-4BEB-8D74-A0AFC5F14706}) (Version: 15.4.5722.2 - Microsoft Corporation)
Password Vault (HKLM\...\{C5BB9380-D729-410A-A440-061EBCADCCB9}) (Version: 5.4.100.232 - AuthenTec, Inc.)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.5.1 - Frank Heindörfer, Philip Chinery)
Polda II (HKLM-x32\...\Polda II_is1) (Version: - )
Power Manager (HKLM-x32\...\{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}) (Version: 6.20 - )
RapidBoot (HKLM\...\{5E2652DF-743F-482B-A593-C95F431A5769}) (Version: 1.20 - Lenovo)
RapidBoot HDD Accelerator (HKLM-x32\...\Fastboot) (Version: 1.0.5.9 - Lenovo)
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 7.50.1123.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6591 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.8400.28121 - Realtek Semiconductor Corp.)
RelevantKnowledge (HKLM-x32\...\{d08d9f98-1c78-4704-87e6-368b0023d831}) (Version: 1.3.336.320 - TMRG, Inc.) <==== ATTENTION
Search App by Ask (HKLM-x32\...\{5347542D-5350-006A-76A7-A758B70C1500}) (Version: 12.21.0.3795 - APN, LLC) <==== ATTENTION
Settings Manager (HKLM-x32\...\Settings Manager) (Version: 5.0.0.14591 - Aztec Media Inc) <==== ATTENTION
Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)
STATGRAPHICS Centurion XVI.II - x64 (HKLM\...\{0D38B19E-2071-4305-B033-3E4D9AF0EBD1}) (Version: 16.02.0004 - StatPoint Technologies, Inc.)
SugarSync Manager (HKLM-x32\...\SugarSync) (Version: 1.9.97.122348 - SugarSync, Inc.)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)
ThinkPad UltraNav Driver (HKLM\...\SynTPDeinstKey) (Version: 16.1.4.17 - )
ThinkVantage Access Connections (HKLM-x32\...\{8E537894-A559-4D60-B3CB-F4485E3D24E3}) (Version: 6.21 - Lenovo)
ThinkVantage Active Protection System (HKLM\...\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}) (Version: 1.77.0.9 - Lenovo)
ThinkVantage Communications Utility (HKLM\...\{88C6A6D9-324C-46E8-BA87-563D14021442}_is1) (Version: 3.0.34.0 - Lenovo)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.01 - Ghisler Software GmbH)
Ve stínu havrana (HKLM-x32\...\Ve stínu havrana_is1) (Version: - CINEMAX, s.r.o.)
VIP Access (HKLM-x32\...\{E8D46836-CD55-453C-A107-A59EC51CB8DC}) (Version: 2.0.5.13 - VeriSign)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Winamp (HKLM-x32\...\Winamp) (Version: 5.623 - Nullsoft, Inc)
Winamp Detector Plug-in (HKU\S-1-5-21-2746081424-1949010188-3409447413-1003\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Driver Package - Lenovo 1.65.05.20 (02/29/2012 1.65.05.20) (HKLM\...\E3535F123E7F666D573665142F90D3E5004DC326) (Version: 02/29/2012 1.65.05.20 - Lenovo)
Windows Driver Package - Synaptics (SynTP) Mouse (06/21/2012 16.1.4.17) (HKLM\...\FE61CFFCEFBF4E2D83AE176443D33414275365FC) (Version: 06/21/2012 16.1.4.17 - Synaptics)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
WinPcap 4.1.1 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.1753 - CACE Technologies)
YTD Video Downloader 4.8.7 (HKLM-x32\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 4.8.7 - GreenTree Applications SRL) <==== ATTENTION

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Markéta\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003_Classes\CLSID\{9E506282-69D3-5ABA-9C1D-15994B37F4AC}\InprocServer32 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
CustomCLSID: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003_Classes\CLSID\{9E506282-69D3-5ABA-9C1D-15994B37F4AD}\InprocServer32 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
CustomCLSID: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Markéta\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Markéta\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Markéta\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Markéta\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Markéta\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Markéta\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Markéta\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2746081424-1949010188-3409447413-1003_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Markéta\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

==================== Restore Points =========================

30-11-2014 15:10:44 Windows Update
30-11-2014 19:57:42 Windows Zálohování
02-12-2014 15:51:51 Removed Skype Click to Call
03-12-2014 10:18:03 zoek.exe restore point
05-12-2014 13:28:47 Windows Update
05-12-2014 14:17:58 Operace obnovení
05-12-2014 14:27:36 avast! antivirus system restore point
05-12-2014 15:59:42 Windows Update
06-12-2014 14:26:29 Removed Skype Click to Call
07-12-2014 19:07:56 Windows Zálohování
09-12-2014 08:40:28 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2014-12-09 22:31 - 00000035 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0E5EA387-6287-45F8-92E2-B1E461D553BE} - System32\Tasks\Program k provádění aktualizací online Adobe => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21] (Adobe Systems Incorporated)
Task: {11508792-6460-42AF-8630-AF983FD96879} - System32\Tasks\PMTask => C:\Program Files (x86)\ThinkPad\Utilities\PWMIDTSV.EXE [2012-04-11] (Lenovo Group Limited)
Task: {2A91F7DA-56FD-4BA4-B852-D763A5D645FC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-23] ()
Task: {328D2695-11C0-4AAA-9D6D-D8F51DD587E8} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-11-21] (Piriform Ltd)
Task: {3BFB2C8C-1A67-4DE6-ADAC-AF3275712619} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [2014-10-16] (Lenovo)
Task: {40C0ED8D-13C9-41FE-99E9-2307687A200C} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2014-02-13] (Lenovo)
Task: {43AEFBC9-C38C-4159-8399-A38226053308} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2014-02-21] ()
Task: {481EA983-195F-4658-A1B7-07479D6F7C55} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-11-25] (AVAST Software)
Task: {54259E84-AAC1-499B-B5C5-EA31D125147A} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2014-10-16] ()
Task: {5AC3EB82-2810-4C28-BDB3-69F91C33D6C7} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2746081424-1949010188-3409447413-1003Core => C:\Users\Markéta\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-05-18] (Facebook Inc.)
Task: {735275A8-8164-4123-A113-2714BB02D2A3} - System32\Tasks\Lenovo\Message Center Plus Launcher => C:\Program Files (x86)\Lenovo\message center plus\mcplaunch.exe [2014-09-13] (Lenovo)
Task: {8C1C904D-0F01-46C1-9545-AC63DB3B460E} - System32\Tasks\DiskUpdate => C:\SWTOOLS\OSFIXES\DISKUPDT\DiskUpdate.exe [2009-02-10] ()
Task: {979F125A-BE72-4378-89D3-9273CD213D34} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2014-10-16] ()
Task: {9C975D83-E8E6-4A03-BF80-1136DE1BF28C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-23] ()
Task: {9E4B22F7-A681-4E34-8DFC-C814F5BB67B1} - System32\Tasks\Lenovo\SimpleTap\Start SimpleTap for Markéta-ThinkP.Markéta => C:\Program Files\Lenovo\SimpleTap\SimpleTap.exe [2012-05-16] (Lenovo)
Task: {CB8A11A3-ED7C-485E-A7D0-EDAD10CEA4EE} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-08-08] (Lenovo)
Task: {D2A88F85-5A3E-4869-BB39-4863EC5EE5F4} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2746081424-1949010188-3409447413-1003UA => C:\Users\Markéta\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-05-18] (Facebook Inc.)
Task: {D9A33284-D758-428F-9A66-874FCBD7DD36} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2014-10-16] (Lenovo)

==================== Loaded Modules (whitelisted) =============

altrok
Moderátor
Moderátor
Příspěvky: 7328
Registrován: 15 Lis 2012 22:26
Místo/Bydliště: Znojmo

Re: Kontrola logu

#12 Příspěvek od altrok »

:arrow: Velikost plochy by nemela presahovat 200 MB. Snizuje se pak start i samotny chod celeho PC.

:arrow: Udelejte krok s fixlistem a potom stahnete novy AdwCleaner a udelejte znovu Scan a Clean (viz muj prvni post).
  • Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
  • ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
  • znovu spustte FRST a kliknete na Fix
  • po restartu na Vas vyskoci fixlog (pripadne bude ulozen na Plose), jehoz obsah mi vlozte do pristi odpovedi

    Kód: Vybrat vše

    Start
    CloseProcesses:
    DeleteQuarantine:
    RemoveDirectory: C:\Program Files (x86)\Settings Manager
    DisableService: SmdmFService
    DisableService: F06DEFF2-5B9C-490D-910F-35D3A9119622
    DisableService: Update Techgile
    DisableService: Util Techgile
    Startup: C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
    ShortcutTarget: MyPC Backup.lnk -> C:\FRST\Quarantine\C\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
    FF Extension: No Name - C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\sepherdwilbur@aol.com [2014-11-24]
    CHR DefaultSuggestURL: Default -> http://ssmsp.ask.com/query?sstype=prefix&li=ff&q={searchTerms}
    S2 SmdmFService; C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe [X]
    R1 {1faf557f-055a-41ea-bf98-8743d653dfbd}Gw64; C:\Windows\System32\drivers\{1faf557f-055a-41ea-bf98-8743d653dfbd}Gw64.sys [48784 2014-12-09] (StdLib)
    S1 F06DEFF2-5B9C-490D-910F-35D3A9119622; \??\C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfmgrc2.cfg [X]
    C:\Windows\System32\drivers\{1faf557f-055a-41ea-bf98-8743d653dfbd}Gw64.sys
    C:\Program Files (x86)\Settings Manager
    
    2014-12-09 21:37 - 2014-12-09 12:29 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{1faf557f-055a-41ea-bf98-8743d653dfbd}Gw64.sys
    2014-11-24 11:56 - 2014-12-05 21:50 - 00000000 ____D () C:\Program Files (x86)\RelevantKnowledge
    2014-12-07 17:10 - 2013-08-20 18:15 - 00000000 ____D () C:\Users\Markéta\AppData\Local\Yandex
    cmd: del C:\Program Files (x86)\*.tmp
    cmd: del "C:\Program Files (x86)\*.tmp"
    2014-12-05 15:26 - 2014-10-23 11:04 - 00000000 ____D () C:\Program Files (x86)\GUMFF26.tmp
    Hosts:
    EmptyTemp:
    End
    
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.

pasecak
Návštěvník
Návštěvník
Příspěvky: 124
Registrován: 26 Črc 2008 14:50

Re: Kontrola logu

#13 Příspěvek od pasecak »

FixLog:


Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 07-12-2014 02
Ran by Markéta at 2014-12-10 17:40:39 Run:2
Running from C:\Users\Markéta\Desktop
Loaded Profile: Markéta (Available profiles: Markéta)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
DeleteQuarantine:
RemoveDirectory: C:\Program Files (x86)\Settings Manager
DisableService: SmdmFService
DisableService: F06DEFF2-5B9C-490D-910F-35D3A9119622
DisableService: Update Techgile
DisableService: Util Techgile
Startup: C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\FRST\Quarantine\C\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
FF Extension: No Name - C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\sepherdwilbur@aol.com [2014-11-24]
CHR DefaultSuggestURL: Default -> http://ssmsp.ask.com/query?sstype=prefi ... earchTerms}
S2 SmdmFService; C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe [X]
R1 {1faf557f-055a-41ea-bf98-8743d653dfbd}Gw64; C:\Windows\System32\drivers\{1faf557f-055a-41ea-bf98-8743d653dfbd}Gw64.sys [48784 2014-12-09] (StdLib)
S1 F06DEFF2-5B9C-490D-910F-35D3A9119622; \??\C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfmgrc2.cfg [X]
C:\Windows\System32\drivers\{1faf557f-055a-41ea-bf98-8743d653dfbd}Gw64.sys
C:\Program Files (x86)\Settings Manager

2014-12-09 21:37 - 2014-12-09 12:29 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{1faf557f-055a-41ea-bf98-8743d653dfbd}Gw64.sys
2014-11-24 11:56 - 2014-12-05 21:50 - 00000000 ____D () C:\Program Files (x86)\RelevantKnowledge
2014-12-07 17:10 - 2013-08-20 18:15 - 00000000 ____D () C:\Users\Markéta\AppData\Local\Yandex
cmd: del C:\Program Files (x86)\*.tmp
cmd: del "C:\Program Files (x86)\*.tmp"
2014-12-05 15:26 - 2014-10-23 11:04 - 00000000 ____D () C:\Program Files (x86)\GUMFF26.tmp
Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
"C:\FRST\Quarantine" => Removed successfully.
"C:\Program Files (x86)\Settings Manager" => File/Directory not found.
SmdmFService service was disabled
F06DEFF2-5B9C-490D-910F-35D3A9119622 service was disabled
Update Techgile service key not found.
Util Techgile service key not found.
C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk => Moved successfully.
C:\FRST\Quarantine\C\Program Files (x86)\MyPC Backup\MyPC Backup.exe not found.
C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\sepherdwilbur@aol.com => Moved successfully.
Chrome DefaultSuggestURL not detected.
SmdmFService => Service deleted successfully.
{1faf557f-055a-41ea-bf98-8743d653dfbd}Gw64 => Service stopped successfully.
{1faf557f-055a-41ea-bf98-8743d653dfbd}Gw64 => Service deleted successfully.
F06DEFF2-5B9C-490D-910F-35D3A9119622 => Service deleted successfully.
C:\Windows\System32\drivers\{1faf557f-055a-41ea-bf98-8743d653dfbd}Gw64.sys => Moved successfully.
"C:\Program Files (x86)\Settings Manager" => File/Directory not found.
"C:\Windows\system32\Drivers\{1faf557f-055a-41ea-bf98-8743d653dfbd}Gw64.sys" => File/Directory not found.
C:\Program Files (x86)\RelevantKnowledge => Moved successfully.
C:\Users\Markéta\AppData\Local\Yandex => Moved successfully.

========= del C:\Program Files (x86)\*.tmp =========

Syst�m nem��e nal�zt uveden� soubor.

========= End of CMD: =========


========= del "C:\Program Files (x86)\*.tmp" =========


========= End of CMD: =========

C:\Program Files (x86)\GUMFF26.tmp => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 65.2 MB temporary data.


The system needed a reboot.

==== End of Fixlog ====


%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%



AdwCleaner


# AdwCleaner v4.105 - Report created 10/12/2014 at 17:58:29
# Updated 08/12/2014 by Xplode
# Database : 2014-12-08.2 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Markéta - MARKÉTA-THINKP
# Running from : C:\Users\Markéta\Desktop\adwcleaner_4.105.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge
Folder Deleted : C:\Program Files (x86)\Amazon\ABB
Folder Deleted : C:\Program Files (x86)\GreenTree Applications
Folder Deleted : C:\Program Files (x86)\Common Files\Software Update Utility
Folder Deleted : C:\Windows\Util
Folder Deleted : C:\Users\Markéta\AppData\Roaming\pdfforge
Folder Deleted : C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
Folder Deleted : C:\Users\Markéta\AppData\Roaming\Opera Software\Opera Stable\Extensions\bbglkiiiofelplniblholffbhhjmdhhi
File Deleted : C:\Windows\SysWOW64\rlls.dll

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Key Deleted : HKLM\SOFTWARE\Classes\AlxSSB.AlxTBSSB
Key Deleted : HKLM\SOFTWARE\Classes\AlxSSB.AlxTBSSB.1
Key Deleted : HKLM\SOFTWARE\Classes\AppID\dnu.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ICQ Service.exe
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdate
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook
Key Deleted : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook.1
Key Deleted : HKLM\SOFTWARE\Classes\S
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x86]
Key Deleted : HKLM\SOFTWARE\Classes\SettingsManagerIEHelper.DNSGuard.1
Key Deleted : HKLM\SOFTWARE\Classes\SettingsManagerIEHelper.DNSGuard
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1F02FB61-2BE5-4C16-8199-AEAA16EB0342}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5D723752-5899-47E8-99B4-62C824EF9E13}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E1164984-B567-47BD-A7FF-240C2594404A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E57091A7-B5F0-4C42-9329-72ED3E59ED31}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E1842850-FB16-4471-B327-7343FBAED55C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622172252}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AA760BA8-5862-4BC5-9263-4452CBC0B264}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655175552}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666176652}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{DA9FC525-41ED-4C00-B046-946DA7CDD305}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{93D511B5-143B-4A99-ABFC-B5B78AD0AE1B}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644174452}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{91397D20-1446-11D4-8AF4-0040CA1127B6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E57091A7-B5F0-4C42-9329-72ED3E59ED31}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{E1842850-FB16-4471-B327-7343FBAED55C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622172252}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{AA760BA8-5862-4BC5-9263-4452CBC0B264}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655175552}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666176652}
Key Deleted : HKCU\Software\Alexa Internet
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\AskPartnerNetwork
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\ICQ\ICQToolbar
Key Deleted : HKCU\Software\InstalledBrowserExtensions
Key Deleted : HKCU\Software\Linkey
Key Deleted : HKCU\Software\SmdmF
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\Video Player
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\Internet Speed Checker
Key Deleted : HKLM\SOFTWARE\AskPartnerNetwork
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\ICQ\ICQToolbar
Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : HKLM\SOFTWARE\PIP
Key Deleted : HKLM\SOFTWARE\SmdmF
Key Deleted : HKLM\SOFTWARE\Techgile
Key Deleted : HKLM\SOFTWARE\Internet Speed Checker
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D08D9F98-1C78-4704-87E6-368B0023D831}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Settings Manager
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}
Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17420


-\\ Mozilla Firefox v


-\\ Google Chrome v38.0.2125.104


-\\ Chromium v


-\\ Comodo Dragon v


-\\ Opera v0.0.0.0


*************************

AdwCleaner[R0].txt - [13019 octets] - [10/12/2014 17:50:57]
AdwCleaner[S0].txt - [12314 octets] - [10/12/2014 17:58:29]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [12375 octets] ##########

altrok
Moderátor
Moderátor
Příspěvky: 7328
Registrován: 15 Lis 2012 22:26
Místo/Bydliště: Znojmo

Re: Kontrola logu

#14 Příspěvek od altrok »

Takze jeste uklidime.
A pokud nejsou dotazy ci jine problemy, je to ode mne vse.

Na pravidelnou udrzbu doporucim alespon jednou tydne pouzit CCleaner.
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.

Odpovědět