Reklamy,pomalý chod Ntb

Zpráva

glutamen · #1 Příspěvek od **glutamen** » 21 pro 2014 18:05

Dobrý den. Poslední dobou mi během prohlížení (Chrome) vyskakuje příliš mnoho reklam. Je pak téměř nemožné surfovat - dokonce i v rámci vyhledávání přes Google se po zobrazení výsledků objeví reklama v novém okně. Ntb je celkově hodně pomalé. Prosím o kontrolu logu. Předem děkuji.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Kantor at 2014-12-21 17:59:24
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 186 GB (64%) free of 290 GB
Total RAM: 2935 MB (29% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:59:26, on 21.12.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17496)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE
C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\Kantor\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardService.exe
C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardTools.exe
C:\Program Files (x86)\SMART Technologies\Education Software\DesktopMenu.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\SMART Technologies\Education Software\Aware.exe
C:\Program Files (x86)\SMART Technologies\Education Software\ResponseSoftwareService.exe
C:\Program Files (x86)\SMART Technologies\Education Software\Marker.exe
C:\windows\SysWOW64\RunDll32.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Users\Kantor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kantor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kantor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kantor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kantor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kantor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kantor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kantor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Kantor.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=16194
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: 092950600ea001325d04029365df3cb90063831 - {11111111-1111-1111-1111-110611381131} - (no file)
O2 - BHO: SMART Notebook Download Utility - {67BCF957-85FC-4036-8DC4-D4D80E00A77B} - C:\Program Files (x86)\SMART Technologies\Education Software\Win32\NotebookPlugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [RoxWatchTray] "c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe"
O4 - HKLM\..\Run: [SMART Board Service] "C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardService.exe" -d
O4 - HKLM\..\Run: [SMART Board Tools] "C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardTools.exe"
O4 - HKLM\..\Run: [Response Desktop Menu] "C:\Program Files (x86)\SMART Technologies\Education Software\DesktopMenu.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Kantor\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Kantor\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Kantor\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Kantor\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\RunOnce: [Adobe Speed Launcher] 1419179246
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: @C:\windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Response Hardware - SMART Technologies - C:\Program Files (x86)\SMART Technologies\Education Software\ResponseHardwareService.exe
O23 - Service: RoxMediaDB12OEM - Sonic Solutions - c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe
O23 - Service: Roxio Hard Drive Watcher 12 (RoxWatch12) - Sonic Solutions - c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks SAS - C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
O23 - Service: SMART Helper Service (SMARTHelperService) - SMART Technologies ULC - C:\Program Files (x86)\SMART Technologies\Education Software\SMARTHelperService.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14474 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
winlogon.exe
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
/QuitInfo:000000000000040C;0000000000000428; /AddRef;
C:\windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\windows\system32\WLANExt.exe 25794368
\??\C:\windows\system32\conhost.exe "-9965020102309395771372928512-5004582651549281100858479266-1674822291672536804
/QuitInfo:00000000000006B4;00000000000006CC; /AddRef;
/QuitInfo:00000000000006C4;00000000000006D0;
"C:\windows\system32\Dwm.exe"
/loadhooks /Parent:0000000000000610
C:\windows\Explorer.EXE
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\IDT\WDM\AESTSr64.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\SMART Technologies\Education Software\ResponseHardwareService.exe"
"C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE"
"C:\Program Files (x86)\SMART Technologies\Education Software\SMARTHelperService.exe"
C:\windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
C:\windows\system32\SearchIndexer.exe /Embedding
C:\windows\system32\svchost.exe -k bthsvcs
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\DellTPad\Apoint.exe"
WLIDSvcM.exe 1028
"C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE" C:\Users\Kantor
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE"
"C:\Program Files\Dell\QuickSet\quickset.exe"
"C:\Windows\WindowsMobile\wmdc.exe"
C:\windows\system32\svchost.exe -k WindowsMobile
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files\DellTPad\ApMsgFwd.exe" -s{05FA8492-C047-4207-BE65-780D8591C113}
szndesktop.exe default start
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Users\Kantor\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\windows\system32\conhost.exe "4476456481627001721-1469358957370607386808832820-742786983-1946561377745898112
"C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardService.exe" -d
"C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardTools.exe"
"Apntex.exe"
\??\C:\windows\system32\conhost.exe "561565692124239478675777880-19453742671041292665-1219916357-2049329117-1916524867
"C:\Program Files\DellTPad\HidFind.exe"
"C:\Program Files (x86)\SMART Technologies\Education Software\DesktopMenu.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\SMART Technologies\Education Software\Aware.exe"
"C:\Program Files (x86)\SMART Technologies\Education Software\ResponseSoftwareService.exe"
"C:\Program Files (x86)\SMART Technologies\Education Software\\Marker.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
C:\windows\system32\wbem\unsecapp.exe -Embedding
C:\windows\SysWOW64\RunDll32.exe "C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe"
"C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\windows\system32\svchost.exe -k SDRSVC
"C:\windows\system32\wuauclt.exe"
taskeng.exe {96DDFAB0-593D-4B20-A91B-2D1CD44D82CB}
"C:\Program Files\Dell Support Center\pcdrcui.exe" -backgroundmon scripts\defaultscan.xml -st PCDoctorBackgroundMonitorTask

"C:\Users\Kantor\AppData\Local\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9223
"C:\Users\Kantor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="5376.0.1518994685\1154536637" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,6,17,38 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x0046 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2342 --ignored=" --type=renderer " /prefetch:822062411
"C:\Users\Kantor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group5 pct:10e stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/Hivemind_A1_Stable_R7_Postperiod/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Control/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_07/UMA-Uniformity-Trial-1-Percent/group_73/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --channel="5376.1.581227701\456387700" /prefetch:673131151
"C:\Users\Kantor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group5 pct:10e stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/Hivemind_A1_Stable_R7_Postperiod/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Control/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_07/UMA-Uniformity-Trial-1-Percent/group_73/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --channel="5376.4.1914095341\2017148943" /prefetch:673131151
"C:\Users\Kantor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group5 pct:10e stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/Hivemind_A1_Stable_R7_Postperiod/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Control/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_07/UMA-Uniformity-Trial-1-Percent/group_73/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --channel="5376.5.1771320829\1340495625" /prefetch:673131151
"C:\Users\Kantor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="5376.8.1909997847\944359604" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Users\Kantor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group5 pct:10e stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/Hivemind_A1_Stable_R7_Postperiod/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Control/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_07/UMA-Uniformity-Trial-1-Percent/group_73/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --channel="5376.9.1249184204\1508272943" /prefetch:673131151
C:\windows\system32\vssvc.exe
C:\windows\System32\svchost.exe -k swprv
"./pcdrrealtime.p5x" run -e -i 0 -lang cs -cust dell -var dsc -bd "C:/ProgramData/PCDr/5803/" -ePid 1504
C:\windows\system32\sppsvc.exe
C:\windows\System32\svchost.exe -k WerSvcGroup
"C:\Users\Kantor\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group5 pct:10e stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/Hivemind_A1_Stable_R7_Postperiod/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Control/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_07/UMA-Uniformity-Trial-1-Percent/group_73/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --channel="5376.15.1776121490\273059891" /prefetch:673131151
"./pcdrharddrive.p5x" run -e -lang cs -cust dell -var dsc -bd "C:/ProgramData/PCDr/5803/" -ePid 1504
C:\windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Kantor\Downloads\RSITx64.exe"
C:\windows\system32\DllHost.exe /Processid:{F32D97DF-E3E5-4CB9-9E3E-0EB5B4E49801}
"C:\Program Files\AVAST Software\Avast\setup\instup.exe" /instop:check_for_updates

======Scheduled tasks folder======

C:\windows\tasks\a4b2dbdf-04cf-4218-9019-f89c003cd0b5-1.job - C:\Program Files (x86)\HD-V2.2V11.11\HD-V2.2V11.11-codedownloader.exe /rawdata=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
C:\windows\tasks\a4b2dbdf-04cf-4218-9019-f89c003cd0b5-11.job - C:\Program Files (x86)\HD-V2.2V11.11\a4b2dbdf-04cf-4218-9019-f89c003cd0b5-11.exe /rawdata=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
C:\windows\tasks\a4b2dbdf-04cf-4218-9019-f89c003cd0b5-2.job - C:\Program Files (x86)\HD-V2.2V11.11\a4b2dbdf-04cf-4218-9019-f89c003cd0b5-2.exe /rawdata=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
C:\windows\tasks\a4b2dbdf-04cf-4218-9019-f89c003cd0b5-3.job - C:\Program Files (x86)\HD-V2.2V11.11\a4b2dbdf-04cf-4218-9019-f89c003cd0b5-3.exe /rawdata=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
C:\windows\tasks\a4b2dbdf-04cf-4218-9019-f89c003cd0b5-4.job - C:\Program Files (x86)\HD-V2.2V11.11\a4b2dbdf-04cf-4218-9019-f89c003cd0b5-4.exe /rawdata=Ux0r4eY/lsTfKfYJ+1vWCskUStn8JmG8OMSNe94sIqj/vFYUm/QdZOxvRBsitUocpWm0uYFcgEj6j3tY+4m1PD4Feoc1WQp3pVcytHcTifzrRodpO2j6jp+eQdHtVp1jpuyHks3wpW7ySSXlPUG37m51FNJztIIsdGQ64d7ZqJAoMHBfKP6e0BVLEqqUPxuPil/JE8Li22hHuXrxUA2W8qJ0tdkqhmT4KAPvdIXqdh2F7iosP1+qDApinnYOARMxPPAX/ZuelRmcGz+9yLFfUjjU7QQzNSH5zaXcPu7OkouLmiD+z78/wPuc6wLw3QQudiHjFisSad+2+fNBJJxcyibbahBxwwy/Y9Njsk43WMRl46jYBAiemwnMBJINvIHNYVVq6xBbqHCv51nLirsmqJh9kSuHYpfGszMkhvQA6azDV5Ilqjbif3mCQ4PmHIfTOTSj4MMvk+RdNTEjIfilyobLKJKFczlAEVbOvxI+axXzIEIwVaYFJeKssf/dZ3zbf3dH109fVzXQu/3P2k5vjPr+Kr+UvZ6WdGwFMKBPl1E358JMgcBPEKGRTWVHFU/oxShisXMN0932fgX21K+48dk8IiFiuKYR1Yq2af0QvBmBLgTlLqYjfOW7i93m0VdW2A8RUKQAVIjEKknhFvpMKZgN49UQlxti1EHZkOcih4oFXI+w5XmVAXymx3jwKZz/tkf0BN1Z9EDAOFNI4oKcC0QmPfkvHNcjXq9awIoQf6322kS+MQQg9iPafu9k9HLnx37SFn+IADavtFCyNneUKAl1psvE/J03RnUpDgHclVSog/M9+vNfWGQaxo6VfF9Uqc5rJkWm4OHxW9JE/gylFS7aGygzLeQT1vJXvePmsw9kCW0A7s7ulvZU0BWZaG6QmGqwh9teO95bYmsLD2HFycODsGRdUmmgTeg6UOI8ecpYaaxWzK54y1J4Td44AkbuUCgxrSVmA1sd3GQggjmPvZnzsjXXVasAHXmnJFOkPvK3HPXZHvC8kMZhSCmy/0WKspgTHcp6PvtwDlqboA9iPygivvl2YW739aK+5plOE21cxmRIHffB1rq+4XJhz5I11y5KTxqEScMES2CJaQU3uh1U7TIycXkwQCY4JXCvZL5AHC+viz7/2SscCnZ9bLx2KWBKWURpaRFIDr4DDHYAMbTk9nmqsScqFlPsR3QAOTQGb8GQJpwwWiIw0niRfAxkNVWHob5VHKohpsa3QIVjbORbcNx+tjazGg0V1CEDJV9oWYSgROyutuFhyAxbV0U7WQg4UXkD+SHqJ3WPpLX4XjTPwhizfIv8e7Ccxp7scx3HrcsJSuHMBKXaJbFTdi6J+zJgECkDilF392E6eBMnoThkVVWeXqTJlcQwwocp6wUjivWCb3znt+yCE0u4hHdiUn4BC8yXMDaj3WmGAZgeAM/QN2lH6ke5NbwpUL425oyJLIfv8ZiA2tjuU7U9ZEQJhJu4QH3RMGMd2c5rWU/di6xaSvq4BcfP1PPG16n7McOAP9C7SBtSU4CniuOvtYbPPASMBqU28tToBQLIe6pCjpO+MjWlxL4/SgSfVubrWFqez8Ns0ZUR8rOJlcpgq4zJwxBfn6TrT/dtFF7JDlsqB9lWMof6brpiUM59/hAwl3vzwY/v/USnuyoB1kIu6PZpKVDJL1igK8LwKV+yv9K9uZZY/vpRrkKR8FnOu3WBH5VkPUCS8mehVHQ88Q7gjIRZXedhSpBa4vsjYlRtyfv0k79lGogmboXgsXGeva8pr6nn5cTpPa2XsP+YyrBmu5OJzhSotzeGLPIPjiRYE3BFA5YMRQ7vkSPo+DN+y2J/f9euIKETVke3U+vkgVN46ZSdlH92g3WlkKtot7LGSuTserxpcj6NUwLb7srInkC2KrHPnrBon5zXbwKCGm5vimXeR73xVvvg0NxeRzqrjRay1R5hfN210zyztQOgxCzWNse5p2nIiIytn5qywAxe3OueFxDKRb3JD4rSgLZky7YYloytqozSmCV9HO2ujeg8e4C+kgwW9YhADOse4rJrelCo
C:\windows\tasks\a4b2dbdf-04cf-4218-9019-f89c003cd0b5-5.job - C:\Program Files (x86)\HD-V2.2V11.11\a4b2dbdf-04cf-4218-9019-f89c003cd0b5-5.exe /rawdata=KyPoaYFz4vks/x6COju60WkRboirLLnh4uoXh5WbeU222bh5F2OxoUSqxNkAXNmbfveqRqnN7iEKI4u1xgeeziMsuF/UKZmaZoaEsGjypKPhbmDEiQbcmruBBZp2II3DIEUO4uHjcLY707tuq2ifRK9XPuCAeXiaAL2qhmcALt+GiOScC/YZk9Sf0AS3kZilIM7WGUb+g2b+6kbOK1w59nJI5LeD6wm/VO3Y5yt2ILnRIKryKBydxjheYN+HF9JOnjrZWZAkozIKYQ9aM3kTlq0LrMTAmqNyuyd4wXl+JfS1gvK72+eSxqO93N0Q0LRZ4R1I9mwSHemOeV4x+ef+fnHIGdSHgA1pMnetmfgHeWMGm+SbJUd3ZAnCtv55vIM/ZVJAY81tr2fVojE87leHLXpm6Le3Uh22gIxEs8U1TM/ZCPv7++PFvAbV1avtWlfn0I9ciGdRnHTcnBGa/ZIwft4/G9Ujy6jc3DcWKpHRkBCw5mRGE9pnTVfRJ4IEbJzieJp1zGrrTFxtcDk7/81NZ3+PU1PFMF4OkDz/aOKTMCdLcYmT5fbPWZWrKOdiJw2vOvyQnmuC63WmdMaulD/p2UKBMwjhS9nZkLhFQNux3AYNNpJYz4HfoHP0xxA2qOls2XXqm626dVugcd7HI9AjVbriiFcYyos8n6fr0SZmwDJwBG4wETB/Rv0+4XSkyL8qz4J5eSxGc4x5EN5aQiXO4AGexIa+ThWVBbjJrWJYFqT5OESYh3jGgld8ghHoH/LocD9oL2/Dj4JO8VS4nb9oFDjoXw3yGeT0evk8JxPve/tS9CreItdE7M0ZnYdLVKWGi0mDAtHHwdw5crFKyVMTCLkULmvEOY30DGqG3F2okgBTC2R77TPYNVZQ4H2pWTJ/n2D8ubuDiGFA/Tne6A9+1QkrecdfIrk4Y/7g90mQNjxj5i7sWFf1WAOqJXD7ImnVRMGSr4eoxGlvYxLGAQCfv/HjHC8NZuKLk56FlbtJshjz8sDUuo5CnI7NgyVQ+EhB
C:\windows\tasks\a4b2dbdf-04cf-4218-9019-f89c003cd0b5-5_user.job - C:\Program Files (x86)\HD-V2.2V11.11\a4b2dbdf-04cf-4218-9019-f89c003cd0b5-5.exe /rawdata=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
C:\windows\tasks\a4b2dbdf-04cf-4218-9019-f89c003cd0b5-6.job - C:\Program Files (x86)\HD-V2.2V11.11\a4b2dbdf-04cf-4218-9019-f89c003cd0b5-6.exe /rawdata=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
C:\windows\tasks\a4b2dbdf-04cf-4218-9019-f89c003cd0b5-7.job - C:\Program Files (x86)\HD-V2.2V11.11\a4b2dbdf-04cf-4218-9019-f89c003cd0b5-7.exe /rawdata=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
C:\windows\tasks\Adobe Flash Player Updater.job - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\windows\tasks\d9f6fa3c-5d13-4fdb-b244-a5f59d71d484.job - C:\Program Files (x86)\HD-V2.2V11.11\d9f6fa3c-5d13-4fdb-b244-a5f59d71d484.exe 002128 96B88B31CD2748FB8B16B550566AE6C8IE 63831 1415740058 93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 HD-V2.2V11.11
C:\windows\tasks\eb76b463-cf89-46cb-a818-4dbec55512c5.job - C:\Program Files (x86)\HD-V2.2V11.11\eb76b463-cf89-46cb-a818-4dbec55512c5.exe /agentregpath='HD-V2.2V11.11' /appid=63831 /srcid='002128' /subid='0' /zdata='0' /bic=96B88B31CD2748FB8B16B550566AE6C8IE /verifier=b7f528f71b7b5acfa6b626727dd12582 /installerversion=1_35_09_29 /installationtime=1415740058 /statsdomain=http://stats.newonlinedatastack.com /errorsdomain=http://errors.newonlinedatastack.com /extensionname='Information' /torpedoiesleeps=1000 /torpedoieplugins=93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 /monetizationdomain=http://logs.newonlinedatastack.com /runfrom='task' /externallog=''
C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000Core.job - C:\Users\Kantor\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver
C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000UA.job - C:\Users\Kantor\AppData\Local\Facebook\Update\FacebookUpdate.exe /ua /installsource scheduler
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000Core.job - C:\Users\Kantor\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000UA.job - C:\Users\Kantor\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\windows\tasks\PCDoctorBackgroundMonitorTask.job - c:\Program Files\Dell Support Center\uaclauncher.exe -backgroundmon scripts\defaultscan.xml -st PCDoctorBackgroundMonitorTask --ignoresecondarysplash --runsilently
C:\windows\tasks\SystemToolsDailyTest.job - c:\Program Files\Dell Support Center\pcdrcui.exe -silentenumeration -st SystemToolsDailyTest

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611381131}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{67BCF957-85FC-4036-8DC4-D4D80E00A77B}]
SMART Notebook Download Utility - C:\Program Files (x86)\SMART Technologies\Education Software\Win64\NotebookPlugin.dll [2011-06-23 309104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-07-19 612248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-10-05 49440]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611381131}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{67BCF957-85FC-4036-8DC4-D4D80E00A77B}]
SMART Notebook Download Utility - C:\Program Files (x86)\SMART Technologies\Education Software\Win32\NotebookPlugin.dll [2011-06-23 226160]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-09-08 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-07-19 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-09-08 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-03-30 167960]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-03-30 391704]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-03-30 418840]
"Apoint"=C:\Program Files\DellTPad\Apoint.exe [2011-03-29 608112]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2011-05-27 1128448]
"QuickSet"=C:\Program Files\Dell\QuickSet\QuickSet.exe [2011-03-24 3668336]
"Windows Mobile Device Center"=C:\windows\WindowsMobile\wmdc.exe [2007-05-31 660360]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-10-01 22067296]
"Google Update"=C:\Users\Kantor\AppData\Local\Google\Update\GoogleUpdate.exe [2012-04-27 116648]
"cz.seznam.software.autoupdate"=C:\Users\Kantor\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Kantor\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
"Facebook Update"=C:\Users\Kantor\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-12-14 138096]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Adobe Speed Launcher"=1419179246 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-11-20 1021128]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2014-12-03 40336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Desktop Disc Tool]
c:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe [2010-11-17 514544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Facebook Update]
C:\Users\Kantor\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-12-14 138096]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Kantor\AppData\Local\Google\Update\GoogleUpdate.exe [2012-04-27 116648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Optimizer Pro]
C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDVD9LanguageShortcut]
C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe [2010-04-29 50472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl9]
C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe [2009-07-06 87336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-07-25 256896]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Kantor^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk]
C:\PROGRA~2\MICROS~1\Office14\ONENOTEM.EXE [2013-06-25 228552]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Dell Webcam Central"=C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [2011-04-13 503942]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2011-01-13 283160]
""= []
"RoxWatchTray"=c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe [2010-11-25 240112]
"SMART Board Service"=C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardService.exe [2011-10-04 1686384]
"SMART Board Tools"=C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardTools.exe [2011-06-23 9800560]
"Response Desktop Menu"=C:\Program Files (x86)\SMART Technologies\Education Software\DesktopMenu.exe [2011-06-23 1900912]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-07-31 4085896]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-07-25 256896]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-11-20 1021128]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2011-03-26 385024]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-12-13 03:33:37 ----D---- C:\windows\system32\appraiser
2014-12-13 03:06:01 ----A---- C:\windows\SYSWOW64\rrinstaller.exe
2014-12-13 03:06:01 ----A---- C:\windows\SYSWOW64\mfps.dll
2014-12-13 03:06:01 ----A---- C:\windows\SYSWOW64\mfpmp.exe
2014-12-13 03:06:01 ----A---- C:\windows\SYSWOW64\mferror.dll
2014-12-13 03:06:01 ----A---- C:\windows\SYSWOW64\mf.dll
2014-12-13 03:06:01 ----A---- C:\windows\system32\rrinstaller.exe
2014-12-13 03:06:01 ----A---- C:\windows\system32\mfps.dll
2014-12-13 03:06:01 ----A---- C:\windows\system32\mfpmp.exe
2014-12-13 03:06:01 ----A---- C:\windows\system32\mferror.dll
2014-12-13 03:05:59 ----A---- C:\windows\system32\mf.dll
2014-12-12 19:52:55 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2014-12-12 19:52:55 ----A---- C:\windows\SYSWOW64\iernonce.dll
2014-12-12 19:52:55 ----A---- C:\windows\SYSWOW64\ieetwproxystub.dll
2014-12-12 19:52:55 ----A---- C:\windows\system32\ieetwproxystub.dll
2014-12-12 19:52:55 ----A---- C:\windows\system32\ieetwcollector.exe
2014-12-12 19:52:54 ----A---- C:\windows\SYSWOW64\urlmon.dll
2014-12-12 19:52:54 ----A---- C:\windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-12-12 19:52:54 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2014-12-12 19:52:54 ----A---- C:\windows\system32\iernonce.dll
2014-12-12 19:52:54 ----A---- C:\windows\system32\ie4uinit.exe
2014-12-12 19:52:53 ----A---- C:\windows\SYSWOW64\mshtml.dll
2014-12-12 19:52:53 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2014-12-12 19:52:53 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2014-12-12 19:52:53 ----A---- C:\windows\system32\JavaScriptCollectionAgent.dll
2014-12-12 19:52:52 ----A---- C:\windows\SYSWOW64\iesetup.dll
2014-12-12 19:52:52 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2014-12-12 19:52:51 ----A---- C:\windows\system32\urlmon.dll
2014-12-12 19:52:51 ----A---- C:\windows\system32\iedkcs32.dll
2014-12-12 19:52:50 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2014-12-12 19:52:50 ----A---- C:\windows\SYSWOW64\jscript9diag.dll
2014-12-12 19:52:50 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2014-12-12 19:52:50 ----A---- C:\windows\SYSWOW64\iertutil.dll
2014-12-12 19:52:50 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2014-12-12 19:52:50 ----A---- C:\windows\system32\ieetwcollectorres.dll
2014-12-12 19:52:49 ----A---- C:\windows\SYSWOW64\ieui.dll
2014-12-12 19:52:49 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2014-12-12 19:52:49 ----A---- C:\windows\system32\msfeeds.dll
2014-12-12 19:52:49 ----A---- C:\windows\system32\dxtrans.dll
2014-12-12 19:52:48 ----A---- C:\windows\SYSWOW64\ieframe.dll
2014-12-12 19:52:48 ----A---- C:\windows\system32\iesetup.dll
2014-12-12 19:52:47 ----A---- C:\windows\system32\ieapfltr.dll
2014-12-12 19:52:46 ----A---- C:\windows\system32\iertutil.dll
2014-12-12 19:52:45 ----A---- C:\windows\SYSWOW64\vbscript.dll
2014-12-12 19:52:45 ----A---- C:\windows\SYSWOW64\mshtmlmedia.dll
2014-12-12 19:52:45 ----A---- C:\windows\SYSWOW64\jscript9.dll
2014-12-12 19:52:44 ----A---- C:\windows\SYSWOW64\wininet.dll
2014-12-12 19:52:44 ----A---- C:\windows\SYSWOW64\MshtmlDac.dll
2014-12-12 19:52:44 ----A---- C:\windows\system32\jsproxy.dll
2014-12-12 19:52:44 ----A---- C:\windows\system32\ieUnatt.exe
2014-12-12 19:52:43 ----A---- C:\windows\SYSWOW64\msrating.dll
2014-12-12 19:52:40 ----A---- C:\windows\system32\dxtmsft.dll
2014-12-12 19:52:39 ----A---- C:\windows\system32\ieui.dll
2014-12-12 19:52:38 ----A---- C:\windows\system32\mshtmled.dll
2014-12-12 19:52:38 ----A---- C:\windows\system32\ieframe.dll
2014-12-12 19:52:37 ----A---- C:\windows\system32\mshtmlmedia.dll
2014-12-12 19:52:37 ----A---- C:\windows\system32\jscript9diag.dll
2014-12-12 19:52:36 ----A---- C:\windows\system32\wininet.dll
2014-12-12 19:52:36 ----A---- C:\windows\system32\vbscript.dll
2014-12-12 19:52:36 ----A---- C:\windows\system32\jscript9.dll
2014-12-12 19:52:35 ----A---- C:\windows\system32\msrating.dll
2014-12-12 19:52:35 ----A---- C:\windows\system32\MshtmlDac.dll
2014-12-12 19:52:34 ----A---- C:\windows\system32\mshtml.dll
2014-12-12 19:51:58 ----A---- C:\windows\system32\invagent.dll
2014-12-12 19:51:58 ----A---- C:\windows\system32\appraiser.dll
2014-12-12 19:51:58 ----A---- C:\windows\system32\aitstatic.exe
2014-12-12 19:51:58 ----A---- C:\windows\system32\aepic.dll
2014-12-12 19:51:58 ----A---- C:\windows\system32\aeinv.dll
2014-12-12 19:51:57 ----A---- C:\windows\system32\generaltel.dll
2014-12-12 19:51:57 ----A---- C:\windows\system32\devinv.dll
2014-12-12 19:51:56 ----A---- C:\windows\system32\aepdu.dll
2014-12-12 19:51:30 ----A---- C:\windows\system32\WindowsCodecs.dll
2014-12-12 19:51:29 ----A---- C:\windows\SYSWOW64\WindowsCodecs.dll
2014-12-12 19:51:28 ----A---- C:\windows\system32\drivers\tdx.sys
2014-12-12 19:45:55 ----A---- C:\windows\SYSWOW64\charmap.exe
2014-12-12 19:45:55 ----A---- C:\windows\system32\charmap.exe
2014-12-12 19:45:54 ----A---- C:\windows\system32\WsmSvc.dll
2014-12-12 19:45:53 ----A---- C:\windows\SYSWOW64\WsmSvc.dll
2014-12-12 19:45:53 ----A---- C:\windows\system32\WsmWmiPl.dll
2014-12-12 19:45:53 ----A---- C:\windows\system32\WSManMigrationPlugin.dll
2014-12-12 19:45:53 ----A---- C:\windows\system32\WSManHTTPConfig.exe
2014-12-12 19:45:52 ----A---- C:\windows\SYSWOW64\WsmWmiPl.dll
2014-12-12 19:45:52 ----A---- C:\windows\SYSWOW64\WSManMigrationPlugin.dll
2014-12-12 19:45:52 ----A---- C:\windows\system32\WsmAuto.dll
2014-12-12 19:45:51 ----A---- C:\windows\SYSWOW64\WsmAuto.dll
2014-12-12 19:45:51 ----A---- C:\windows\SYSWOW64\WSManHTTPConfig.exe
2014-12-12 19:42:22 ----A---- C:\windows\SYSWOW64\tzres.dll
2014-12-12 19:42:22 ----A---- C:\windows\system32\tzres.dll

======List of files/folders modified in the last 1 month======

2014-12-21 17:59:25 ----D---- C:\Program Files\trend micro
2014-12-21 17:59:12 ----AD---- C:\windows\Temp
2014-12-21 17:58:46 ----D---- C:\windows\system32\config
2014-12-21 17:39:58 ----SHD---- C:\System Volume Information
2014-12-21 17:37:40 ----D---- C:\windows\system32\catroot2
2014-12-21 17:37:40 ----D---- C:\windows\system32\catroot
2014-12-21 17:37:37 ----D---- C:\Program Files (x86)\Dell DataSafe Local Backup
2014-12-21 17:37:35 ----D---- C:\windows\winsxs
2014-12-21 17:35:08 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2014-12-21 17:31:14 ----D---- C:\Users\Kantor\AppData\Roaming\Seznam.cz
2014-12-21 17:30:06 ----D---- C:\Users\Kantor\AppData\Roaming\Skype
2014-12-21 17:27:38 ----A---- C:\windows\SYSWOW64\log.txt
2014-12-14 20:53:12 ----SHD---- C:\windows\Installer
2014-12-14 20:51:45 ----D---- C:\windows\Tasks
2014-12-14 17:48:31 ----D---- C:\windows\inf
2014-12-14 17:48:31 ----AD---- C:\windows\System32
2014-12-14 17:48:31 ----A---- C:\windows\system32\PerfStringBackup.INI
2014-12-13 03:33:37 ----SD---- C:\windows\system32\CompatTel
2014-12-13 03:33:37 ----SD---- C:\ProgramData\Microsoft
2014-12-13 03:33:37 ----D---- C:\windows\SysWOW64
2014-12-13 03:33:37 ----D---- C:\windows\AppCompat
2014-12-13 03:33:36 ----D---- C:\windows\SYSWOW64\cs-CZ
2014-12-13 03:33:36 ----D---- C:\windows\system32\drivers
2014-12-13 03:33:36 ----D---- C:\Program Files\Internet Explorer
2014-12-13 03:33:35 ----D---- C:\windows\SYSWOW64\en-US
2014-12-13 03:33:35 ----D---- C:\windows\system32\en-US
2014-12-13 03:33:35 ----D---- C:\windows\system32\cs-CZ
2014-12-13 03:33:35 ----D---- C:\windows\PolicyDefinitions
2014-12-13 03:33:34 ----D---- C:\Program Files (x86)\Internet Explorer
2014-12-13 03:17:24 ----D---- C:\ProgramData\Microsoft Help
2014-12-13 03:15:21 ----D---- C:\windows\system32\MRT
2014-12-13 03:09:22 ----A---- C:\windows\system32\MRT.exe
2014-12-10 22:07:11 ----D---- C:\windows\Prefetch
2014-12-07 21:57:05 ----RD---- C:\Program Files (x86)
2014-12-07 21:57:00 ----D---- C:\windows\system32\Tasks
2014-11-26 22:24:46 ----D---- C:\Users\Kantor\AppData\Roaming\uTorrent
2014-11-24 14:04:56 ----N---- C:\windows\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswNdisFlt;Avast! Firewall Driver; C:\windows\system32\DRIVERS\aswNdisFlt.sys [2014-07-19 448400]
R0 aswRvrt;avast! Revert; C:\windows\system32\drivers\aswRvrt.sys [2014-07-19 65776]
R0 aswVmm;avast! VM Monitor; C:\windows\system32\drivers\aswVmm.sys [2014-07-19 224896]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2011-01-12 439320]
R0 PxHlpa64;PxHlpa64; C:\windows\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswKbd;aswKbd; C:\windows\system32\drivers\aswKbd.sys [2014-07-19 28184]
R1 aswRdr;aswRdr; C:\windows\system32\drivers\aswRdr2.sys [2014-07-19 93568]
R1 aswSnx;aswSnx; C:\windows\system32\drivers\aswSnx.sys [2014-11-23 1041168]
R1 aswSP;aswSP; C:\windows\system32\drivers\aswSP.sys [2014-07-19 427360]
R1 aswTdi;avast! Network Shield Support; C:\windows\system32\drivers\aswTdi.sys [2013-12-19 64288]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 ISODrive;ISO DVD/CD-ROM Device Driver; \??\C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [2013-11-21 115448]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswHwid;avast! HardwareID; C:\windows\system32\drivers\aswHwid.sys [2014-07-19 29208]
R2 aswMonFlt;aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [2014-07-19 79184]
R2 aswStm;aswStm; C:\windows\system32\drivers\aswStm.sys [2014-07-19 92008]
R3 ApfiltrService;Alps Touch Pad Filter Driver for Windows x64; C:\windows\system32\DRIVERS\Apfiltr.sys [2011-04-01 355960]
R3 BCM43XX;DW WLAN Card Driver; C:\windows\system32\DRIVERS\bcmwl664.sys [2011-08-18 4719168]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 BTWAMPFL;btwampfl; C:\windows\system32\DRIVERS\btwampfl.sys [2011-08-18 349736]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2011-08-18 106536]
R3 btwavdt;Bluetooth AVDT; C:\windows\system32\DRIVERS\btwavdt.sys [2011-08-18 138280]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2011-08-18 39464]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2011-08-18 21416]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver; C:\windows\system32\DRIVERS\CtClsFlt.sys [2011-01-20 176096]
R3 HECIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2009-09-18 56344]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2011-03-26 12262336]
R3 Impcd;Impcd; C:\windows\system32\DRIVERS\Impcd.sys [2010-02-27 158976]
R3 IntcDAud;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
R3 PCDSRVC{1E208CE0-FB7451FF-06020101}_0;PCDSRVC{1E208CE0-FB7451FF-06020101}_0 - PCDR Kernel Mode Service Helper Driver; \??\c:\program files\dell support center\pcdsrvc_x64.pkms [2011-03-18 25072]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 SMARTMouseFilterx64;HID-compliant mouse; C:\windows\system32\DRIVERS\SMARTMouseFilterx64.sys [2011-07-13 13168]
R3 SMARTVHidMiniVistaAmd64;SMART HID Device; C:\windows\system32\DRIVERS\SMARTVHidMiniVistaAmd64.sys [2011-07-13 16368]
R3 SMARTVTabletPCx64;SMART Virtual TabletPC; C:\windows\system32\DRIVERS\SMARTVTabletPCx64.sys [2011-07-13 24944]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10301; C:\windows\system32\DRIVERS\stwrt64.sys [2011-05-27 528384]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 dmvsc;dmvsc; C:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUStor.sys [2010-10-30 250984]
S3 s3cap;s3cap; C:\windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usb_rndisx;Adaptér USB RNDIS; C:\windows\system32\drivers\usb8023x.sys [2013-02-12 19968]
S3 usbscan;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 vmbus;vmbus; C:\windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WimFltr;WimFltr; C:\windows\system32\DRIVERS\wimfltr.sys [2006-11-01 151656]
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088]
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-07-19 50344]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2014-07-19 106488]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2011-01-13 956192]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-01-13 13336]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-07-02 325656]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\windows\system32\svchost.exe [2009-07-14 27136]
R2 Response Hardware;Response Hardware; C:\Program Files (x86)\SMART Technologies\Education Software\ResponseHardwareService.exe [2011-06-23 19312]
R2 SftService;SoftThinks Agent Service; C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE [2011-07-08 1692480]
R2 SMARTHelperService;SMART Helper Service; C:\Program Files (x86)\SMART Technologies\Education Software\SMARTHelperService.exe [2011-10-04 475504]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10101; C:\Program Files\IDT\WDM\STacSV64.exe [2011-05-27 301568]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-07-02 2533400]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\windows\system32\svchost.exe [2009-07-14 27136]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 RoxWatch12;Roxio Hard Drive Watcher 12; c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-11-25 219632]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-21 267440]
S3 AppMgmt;@appmgmts.dll,-3250; C:\windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;ASP.NET State Service; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2013-12-23 655624]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2014-11-22 114688]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\windows\System32\svchost.exe [2009-07-14 27136]
S3 RoxMediaDB12OEM;RoxMediaDB12OEM; c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-11-25 1116656]
S3 stllssvr;stllssvr; c:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe [2010-11-08 74392]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2012-04-27 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 21 pro 2014 18:06

Zdravim

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Po spusteni probehne stazeni databaze
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize

Kód: Vybrat vše

autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;

Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

glutamen · #3 Příspěvek od **glutamen** » 21 pro 2014 19:10

Dobrý den. Zde log z AdwCleaneru. Bohužel se mi nepodaří spustit zoek.exe. Proces běží,ale žádné okno mi bohužel nechce naskočit.

# AdwCleaner v4.106 - Report created 21/12/2014 at 19:01:46
# Updated 21/12/2014 by Xplode
# Database : 2014-12-21.4 [Live]
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : Kantor - NB02
# Running from : C:\Users\Kantor\Desktop\adwcleaner_4.106.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\apn
Folder Deleted : C:\ProgramData\OptimizerPro
Folder Deleted : C:\Program Files (x86)\globalUpdate
Folder Deleted : C:\Program Files (x86)\ShopSave Toolbar
Folder Deleted : C:\Program Files (x86)\HD-V2.2V11.11
Folder Deleted : C:\Users\Kantor\AppData\Local\globalUpdate
Folder Deleted : C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
Folder Deleted : C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Extensions\plimopelmdneikoknbgpopffpbmlhgpa
File Deleted : C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Deleted : C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
File Deleted : C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage
File Deleted : C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal
File Deleted : C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_plimopelmdneikoknbgpopffpbmlhgpa_0.localstorage
File Deleted : C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_plimopelmdneikoknbgpopffpbmlhgpa_0.localstorage-journal
File Deleted : C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\plimopelmdneikoknbgpopffpbmlhgpa
File Deleted : C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_plimopelmdneikoknbgpopffpbmlhgpa_0

***** [ Scheduled Tasks ] *****

Task Deleted : a4b2dbdf-04cf-4218-9019-f89c003cd0b5-1
Task Deleted : a4b2dbdf-04cf-4218-9019-f89c003cd0b5-11
Task Deleted : a4b2dbdf-04cf-4218-9019-f89c003cd0b5-2
Task Deleted : a4b2dbdf-04cf-4218-9019-f89c003cd0b5-3
Task Deleted : a4b2dbdf-04cf-4218-9019-f89c003cd0b5-4
Task Deleted : a4b2dbdf-04cf-4218-9019-f89c003cd0b5-5
Task Deleted : a4b2dbdf-04cf-4218-9019-f89c003cd0b5-5_user
Task Deleted : a4b2dbdf-04cf-4218-9019-f89c003cd0b5-6
Task Deleted : a4b2dbdf-04cf-4218-9019-f89c003cd0b5-7
Task Deleted : d9f6fa3c-5d13-4fdb-b244-a5f59d71d484
Task Deleted : eb76b463-cf89-46cb-a818-4dbec55512c5

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622382231}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655385531}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666386631}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644384431}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6ca1119c-09bd-4fd4-921c-fbb11479d16c}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{cde41f9b-e6ee-4032-9682-675dca1f5529}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622382231}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655385531}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666386631}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6ca1119c-09bd-4fd4-921c-fbb11479d16c}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{cde41f9b-e6ee-4032-9682-675dca1f5529}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\DD28F25B7E954D949D70BD52C3023996
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\InstalledBrowserExtensions
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\HD-V2.2V11.11
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : HKLM\SOFTWARE\HD-V2.2V11.11
Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17496

-\\ Google Chrome v

*************************

AdwCleaner[R0].txt - [13266 octets] - [22/07/2014 21:34:43]
AdwCleaner[R1].txt - [9495 octets] - [21/12/2014 18:44:16]
AdwCleaner[S0].txt - [13358 octets] - [22/07/2014 21:37:05]
AdwCleaner[S1].txt - [9385 octets] - [21/12/2014 19:01:46]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [9445 octets] ##########

glutamen · #4 Příspěvek od **glutamen** » 21 pro 2014 19:40

Tak se mi nějak podařilo Zoek spustit. Zde log:

Zoek.exe v5.0.0.0 Updated 21-December-2014
Tool run by Kantor on ne 21.12.2014 at 19:07:57,08.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Kantor\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

21.12.2014 19:13:18 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\MSXML 4.0 deleted successfully
C:\PROGRA~3\Oracle deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11643F4B-911A-4F24-85E7-8C9BCF29CAE} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{122FBB5A-5C92-4EF3-8B4B-14C7FE5B1ED3} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{16B906CF-F698-4987-9026-9968C61C57C3} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{16EF5E44-EAB7-47C9-A3BA-12C7DAF6652B} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{17D1BF03-F384-4AA4-83DC-87D84667CEA8} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{19AB7CC6-FA02-40AD-91F-93B4BBFA43} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{19FD85B5-E25C-4EC5-AD25-1C465587CB62} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1A1404D5-BF8E-4C35-AC66-64E9AAD4D56} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1A6F88A6-1532-4D2E-A1F1-439F6928F8E} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1C2DA6A5-4D5F-4F90-8BB2-3DABC2BD7341} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1C2E683F-3381-48FC-805C-AF28FE44EDD3} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1CE97210-22D1-48C6-884B-A046D48E41A8} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1D3C8F04-A409-4AC8-85C3-3F21D163EDA} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1E01C579-4E88-43C8-8757-FD827FF8FFEF} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1F57FC89-3A04-4378-A09D-ABE0A44FBD48} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2009791B-EB93-4C2E-9EC0-C79799B7D65} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{204C39F4-3967-4DA3-A39A-F3E0F250A165} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{215A94C-7245-46CC-991D-1E4F5A802A34} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21D74282-A281-4E48-B18F-95BB4858555B} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{237A5C09-D7FF-400E-912A-BA72C349CED} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{24B9D87F-B670-49AC-861-95F472448940} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{24DCD93F-5E45-4B2B-8F43-7AB29E3691A} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{27BA5F5A-1567-49AA-AB9-2E54E12FA66A} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{282553BF-89A6-4270-9538-68FE14DA72C} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{283E4654-877F-44D4-B41E-C4A9375C7DB} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2871A337-6723-42AA-AEEF-BD92257FF447} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28AD1D07-E52A-4997-B06A-2FF86D23BCB9} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2B151DC5-1377-4871-9764-FA3F33708B8E} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2CEDCC50-3E75-476C-A3BC-41BF5D17B4A} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2F9EA8B7-98D0-4F1A-8E94-EF9A04B612B} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{311E3F4C-22A2-491C-8B77-98BB9BEE5EE7} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{319830DE-54C2-4852-A2F4-DC5388A733ED} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{31C04398-224-4858-ACC3-A8D2B2A2522E} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{330E10A6-E215-4D99-9BDA-63A9468EA52} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3379E59F-9CA0-409B-B9EC-AADE9180FA91} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348742F0-593C-4CEC-B44D-BB992F536D0} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{34ADE0BF-9E46-41E3-BC72-AD9BAA7C5BEA} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{36E84B20-B2FB-4B8B-A831-3878102E6A36} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{390F6803-AE32-42C9-B67C-50EDAC26EAA5} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3AA0DA57-BEF0-4950-B9FE-DFB02548C05A} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3B2CF3AE-9955-4502-A1C9-FF9C1E5A7149} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3C50C0A6-394E-4744-B241-36DF795152B1} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3ECA96C0-6433-4EB2-9918-9FA98AE4F589} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3F9BF5B8-6D70-4C0A-9E32-2F8CB45DB36} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4057075E-316E-490F-9DAC-55F8779433E9} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{44D7A02-3F5A-457C-9BCF-306B114BC54B} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{46DBC3E5-D27-4104-A781-25B429E076} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{476F7201-8794-48E8-85C2-F371F1DC692A} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4778116B-3F8D-44D7-97BA-641131E6DF4} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{48900325-66BB-4E33-8223-513FE6DC4643} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{48A28DD6-F572-4F76-961A-1E544F4666CD} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4B4BC59-6E4F-4BF8-83C6-9DDA1AA99886} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4B6B6B44-BF8-40BC-B3A1-9C4F4EE4A993} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4D186EF3-2651-4C9A-88D9-BE664A708BCD} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4F667DF-78D7-4CB9-BC8E-8FA8EA8AF7F} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4FC85F69-F770-41E3-A416-BCF8D45735F2} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{52B83A63-FAD3-4602-8E13-3A476399C869} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{54B6E7C4-C55E-4FA4-BFCA-C4185E450F0} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{57428B37-A6BD-4A6C-8211-75DF8D8555C} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{58227FEE-BA20-41C7-96DB-2E17CEB4BDB8} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{586DE564-7448-4FD7-A055-2C9F9614841C} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{58CE2BFF-8319-4674-B937-179630871047} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59154500-6394-44BD-A8AF-BA6F2F8E052} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{634BD646-AD97-40BF-B073-5CBBBD9F3270} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{64BB59C8-34D7-422C-9023-DCD5D19081F2} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{64E96AD3-1C5B-4DD0-A983-BA33191F9AB6} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6BBCA067-DEF4-4690-B23D-C8D898197E9} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6BD95633-A83-496E-8022-D488D3CF9D23} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6C535078-CE0C-4B69-A528-2AD8AE497917} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6ca1119c-09bd-4fd4-921c-fbb11479d16c} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6CBB89BA-5CB5-4A8C-B1C7-A54E8B52D1DF} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6CC2152B-A079-4D66-8654-A718394C6711} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6D8B4E96-C5A2-4615-8185-4237A44B28C2} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6DF95BE6-1B1-4BE9-95D-136F4A5FE663} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7508169A-3B37-46A0-8D59-8ADF20D989E2} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{76100276-9495-4E23-B183-3F74590DF8C} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{761D22EA-4659-4377-939D-F88FB2221434} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{77F3ED5-310A-46EE-8E99-34B918A6401F} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{78684BBA-A343-44B1-91AD-4FC8E763BC} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7AE0BE96-6B23-4414-9167-C95210147FAD} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7B3C00B8-F94E-4204-84CF-6F31A7AD8451} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7B3F2CA8-8CC5-47AC-9CDD-747C89FE9D60} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7B9B6BF9-C1E5-49FC-BBFA-7360C553B38} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7CED95E0-CCFC-4DED-8E67-33E1E3A89C88} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7DD44489-C59B-449B-93EA-566D8864F989} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{81C92DD1-14F7-4438-B090-7F14A95D90EB} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{82C89EBF-EA50-475B-83D9-EF4CBDE3D453} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{863B697F-5F02-4203-A4E8-EA659D381A2} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{865EE797-DA4B-4F63-B049-DC5B859A56AD} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{876877A1-D3A8-4F5E-B873-7757A63B7DE} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{87D2892A-43B9-4746-89C5-FDF9BD22C7} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88B278E5-D214-4AC6-8216-9761F49DDCFA} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8A8D299D-7690-4A7C-92A0-C0113F8748C4} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8B0B66B7-D544-4598-9D80-90C6351D597F} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8EC220CE-617C-45C7-A221-7360C8D693D3} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{90B4F93D-75BD-46A8-BABF-D15351C919FF} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170EB0C-43CE-43CA-B02E-84289B9286BB} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{94E74380-CF8E-482A-9E69-A37E51768634} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{94FD33C1-6B15-4352-A2F7-55E7E0B9EF73} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{958DA989-8EAD-422A-ABCC-3F1DCD3A71} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9A18F3AD-B93E-4D8D-A912-954BFEF97E84} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C26C997-6166-427C-A3E-D475A8F28F6A} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9CC54F29-783E-4844-A990-7E38A4B92680} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9F0A34B5-CB52-46C2-9320-ADDAA8F945B2} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9F18012D-CAC6-4648-97CD-138E366298C9} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A011E51D-26E5-4333-BF7E-7E9985CE7C80} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A07E5B4E-B2F9-4D63-AEA2-4AFA325B4E1F} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A20C629B-40F1-436D-89FA-F5385FF373FC} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A2D7E5E7-7EAE-4E39-9952-EFC45C0D5B4} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5EEA259-DA82-40A0-9E86-55237AEA48C8} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A779357F-427B-4751-BB50-433F18F03954} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A842E512-2579-46DD-8512-2EE7294C7F41} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A91C7118-A318-4E08-9C5F-8AE91225FE0} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A94ACE7F-6A25-4C22-A7F5-E5264E6ED6} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A990394C-1C4B-4FE9-941E-ED8468D9796B} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AADC7093-B177-4DD2-BD33-5CC97FE2682B} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AD648139-1B88-4322-A9F7-3B966A2537C} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ADB8CF67-B2F5-4E11-A588-043B8BDE7FE} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AE85467C-8CB6-4A03-944A-F2F57BAA4557} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AE8FFFD-7CAE-410D-8255-D0CA8EF2D9F2} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B446B648-631A-4184-8191-6576A766241} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B4EBBBF0-5A86-45A1-8FBD-F04754DAE2DE} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B5E62ADC-B518-4E63-80E8-C79B75D7A4D1} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B6766ADE-B310-4025-AB4E-3ECC11BD927E} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B6A8D066-60A2-47FD-A7E4-63DCEC7F4F2F} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B6EAD8BF-BE9E-49FF-8DD-BC2EB5DC285} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B8B4FD81-2255-4F2B-AAEC-6DC9F7E75D9C} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BACE9154-ADA-4CF8-B6BA-BF7B5AE683A6} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BB64E5A5-741D-4EF4-8011-CD92A8C9B9DB} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BBABA194-3584-4F74-A81D-9E9BBE3657AA} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BE05D39E-4816-4008-AEAA-5C2E548431D} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C096EC23-66AB-4059-9448-275F75AA4965} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C275921A-E2E5-4B02-9C9E-A023B2B06DBC} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C3A13387-9AC2-411B-A8A8-FE4153DB10D3} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C4769D77-99E-440C-9228-FCEE2EF99B94} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C524868E-A8F-40B8-93C2-944138222F0} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C6B719AD-BE9B-48F7-9C31-D2C8A5B451F1} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7060010-39A2-4DCB-95D7-5BCEBE02046} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7ABB15D-4ABC-470C-980-47E0213243B} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7DE2D4-6062-4830-AAE7-9B36429AE1F2} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C99143EB-5B53-4E39-BF1D-681EA1E37293} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CAF7599-C49B-46E0-8E7E-414B2595DF3D} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CBA9CFF8-9A5A-470A-9C86-8C94F1C770AE} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCA6CE4C-90CA-40D1-AD41-156E794ADEB} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{cde41f9b-e6ee-4032-9682-675dca1f5529} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CEAB58C4-8F82-49D3-A852-D1FD58C9F4C} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CF862AD4-CCA-49DA-BA93-FAEBC1574EAE} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D0DB132A-8C47-4550-B351-31174C19139F} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1333A84-9923-4E43-B1A1-4C6E358729C6} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1ECE4C9-E0DF-4EA9-A1DA-786099697A} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D28090EB-FB3E-47AE-A8E3-31BCE8CFD6E} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D6454CB5-46F0-4BAA-918C-70E08173DE32} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D6F4C968-647F-479E-A748-A186E2C648FF} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7A06D5D-4D16-4992-997-F5F4B62B3719} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DBB4C422-6623-4D4B-9A25-1F43E862CA} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DC72B01B-8260-437D-B460-E95A52FC7136} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB03FAD-1D6F-431C-84C4-AA65A8C299BE} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DFC3C66C-2EE-4A29-9F2E-87D66FD6D799} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E2301723-76ED-4DDA-9583-6E5BD1C1D866} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E3F22A0F-7727-4643-ABFD-4EC6936D2469} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E509948B-983C-43D9-84DB-6EAD89538FF0} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7570599-FA1A-486A-BE85-A7BCB3F15AA} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E9EFA8C0-37D8-4FDF-A5EC-B27C6892A6CB} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E9F7702D-895-41A1-8BF-8AE05535B969} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EB26DEAF-5B5-4080-962B-9083A0CC7B8A} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EBB21EFD-E557-469B-A786-12F152E9BDC} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ED478312-6A18-48F6-98ED-70395DA146CC} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EE6541A2-1D27-4426-BF56-BCF549B88617} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EF7AADAC-D417-46BA-BC41-8CE5A3D0B117} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F63C2EED-EFE3-4CBB-98F7-869A2C0AD46} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F90AF71F-A09C-469F-9CEE-3432301188B} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F923780F-29FA-4E1A-9951-7D6FABFE28BD} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F9367440-F61A-432D-B480-62B8E0D98940} deleted successfully
HKEY_USERS\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FF379579-D04B-4265-94B9-951630D38241} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611381131} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611381131} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Approved Extensions\{6CC4BF79-7708-4ECB-8F2B-A11264A67989} deleted successfully
HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Approved Extensions\{6CC4BF79-7708-4ECB-8F2B-A11264A67989} deleted successfully
HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Approved Extensions\{033BE5FC-ED4C-48A0-8F07-E0128384D828} deleted successfully
HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Approved Extensions\{033BE5FC-ED4C-48A0-8F07-E0128384D828} deleted successfully

==== Deleting Services ======================

==== Deleting Files \ Folders ======================

C:\PROGRA~2\fdaddbf9-dcb8-4aa4-86dd-96082d923501 deleted
C:\user.js deleted
C:\PROGRA~3\InstallMate deleted
C:\windows\SysNative\config\systemprofile\Searches deleted
C:\Users\Kantor\Desktop\Continue installation .lnk deleted
C:\Users\Kantor\AppData\Roaming\OXGE.exe deleted
C:\Users\Kantor\AppData\Roaming\ZNFDUOUQ.exe deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [19.07.2014 07:53]

==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[19.07.2014 07:53]

pflmllfnnabikmfkkaddkoolinlfninn - Kantor\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflmllfnnabikmfkkaddkoolinlfninn

==== Chromium Fix ======================

C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.incredibar.com_0.localstorage deleted successfully
C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.incredibar.com_0.localstorage-journal deleted successfully
C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage deleted successfully
C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal deleted successfully
C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.biznesfinder.pl_0.localstorage deleted successfully
C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.biznesfinder.pl_0.localstorage-journal deleted successfully
C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.williamhill.com_0.localstorage deleted successfully
C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.williamhill.com_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.seznam.cz/?clid=16194"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.seznam.cz/?clid=16194"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{100FF96D-3942-4FBE-91EC-06492926A023} Firmy.cz Url="http://www.firmy.cz/?q={searchTerms}&so ... arch_16194"
{21ECF58F-6B68-4161-9674-1B396DAE8254} Seznam TV Program Url="http://tv.seznam.cz/hledej?w={searchTer ... arch_16194"
{2D16920A-2078-41A1-9B15-3383FD7E1F04} Seznam Url="http://search.seznam.cz/?q={searchTerms ... arch_16194"
{5944B43B-6204-4C43-931D-2FA00E880249} Novinky.cz Url="http://www.novinky.cz/hledej?w={searchT ... arch_16194"
{9B26D52A-041B-417C-81BB-D47146ED7DF3} Slovnˇk EN/CZ Url="http://slovnik.seznam.cz/?q={searchTerm ... arch_16194"
{C4EFE85A-CF0E-472C-BE22-8BC06E821E8B} Mapy.cz Url="http://www.mapy.cz/?query={searchTerms} ... arch_16194"
{D6862CF2-B903-4E3F-BE03-538FFD1EAB2C} Encyklopedie Seznam Url="http://encyklopedie.seznam.cz/search?q= ... arch_16194"
{DA47AD91-29D5-4870-B913-AEC9D75ED95E} Slovnˇk CZ/EN Url="http://slovnik.seznam.cz/?q={searchTerm ... arch_16194"
{E9E56287-CCA3-4123-BFF6-A64CF5B9A84F} Zbo§ˇ.cz Url="http://www.zbozi.cz/?q={searchTerms}&r= ... arch_16194"

==== Reset Google Chrome ======================

C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== shortcuts on Users Desktops ======================

C:\Users\Kantor\Desktop\BS.Player FREE.lnk - C:\Program Files (x86)\Webteh\BSplayer\bsplayer.exe
C:\Users\Kantor\Desktop\Desktop.lnk - C:\Users\Kantor\Desktop
C:\Users\Kantor\Desktop\Google Chrome.lnk - C:\Users\Kantor\AppData\Local\Google\Chrome\Application\chrome.exe --remote-debugging-port=9223
C:\Users\Kantor\Desktop\Rosetta Stone Version 3.lnk - C:\windows\Installer\{99011A6E-5200-11DE-BDB8-7ACD56D89593}\MainIcon.exe
C:\Users\Kantor\Desktop\SMART Notebook 10.lnk - C:\Program Files (x86)\SMART Technologies\Education Software\Notebook.exe
C:\Users\Kantor\Desktop\Video Edit Master.lnk - C:\Users\Kantor\AppData\Roaming\Microsoft\Installer\{35A99221-DAF4-4769-880F-ECC57548FBCC}\_5820AE36D624D2041047F0.exe
C:\Users\Kantor\Desktop\PRACA\Aktualní mzdy 2012.lnk -
C:\Users\Kantor\Desktop\PRYWATNE\Fotki\Fotolab Fotosvet 4.lnk - C:\Program Files (x86)\Fotolab\Fotolab Fotosvet 4\Fotolab Fotosvet 4.exe
C:\Users\Kantor\Desktop\PRYWATNE\Mama\CEWE prezentace fotografií.lnk -

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\Adobe Reader X.lnk - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
C:\Users\Public\Desktop\avast Premier.lnk -
C:\Users\Public\Desktop\avast SafeZone.lnk -
C:\Users\Public\Desktop\CDSM Designer.lnk - C:\CDSM\CDSM_Designer\MPR500 Pro 5\AlbumMaker.exe
C:\Users\Public\Desktop\Response Simulátor.lnk -
C:\Users\Public\Desktop\Roxio Creator Starter.lnk - C:\Program Files (x86)\Roxio\OEM\Roxio Central 5\RoxioCentralFx.exe
C:\Users\Public\Desktop\SMART Notebook 10.lnk - C:\Program Files (x86)\SMART Technologies\Education Software\Notebook.exe
C:\Users\Public\Desktop\trakAxPC.lnk - C:\windows\Installer\{ABBA0799-F982-414C-9A8B-17EB03D39677}\_644DB78AE1AB52B2CDA4B9.exe
C:\Users\Public\Desktop\UltraISO.lnk - C:\Program Files (x86)\UltraISO\UltraISO.exe

==== shortcuts in Users Start Menu ======================

C:\Users\Kantor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Users\Kantor\AppData\Local\Google\Chrome\Application\chrome.exe --remote-debugging-port=9223

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk - C:\windows\Installer\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\SC_Reader.ico
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\Skype.lnk - C:\Program Files (x86)\Skype\Phone\Skype.exe

==== shortcuts in Quick Launch ======================

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Kantor\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BS.Player FREE.lnk - C:\Program Files (x86)\Webteh\BSplayer\bsplayer.exe
C:\Users\Kantor\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Kantor\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Kantor\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Kantor\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Users\Kantor\AppData\Local\Google\Chrome\Application\chrome.exe --remote-debugging-port=9223
C:\Users\Kantor\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Kantor\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk - C:\windows\explorer.exe
C:\Users\Kantor\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk - C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1

==== shortcuts After Repair ======================

C:\Users\Kantor\Desktop\Google Chrome.lnk - C:\Users\Kantor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kantor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Users\Kantor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kantor\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Users\Kantor\AppData\Local\Google\Chrome\Application\chrome.exe

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{B9A4DB7C-48A4-23FF-0331-C528F9759111} deleted successfully
HKEY_CURRENT_USER\Software\Policies\Google deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Optimizer Pro deleted successfully

==== Empty IE Cache ======================

C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Kantor\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Kantor\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=25 folders=5 5485389 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Kantor\AppData\Local\Temp will be emptied at reboot
C:\windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\windows\Temp successfully emptied
C:\Users\Kantor\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on ne 21.12.2014 at 19:38:14,41 ======================

#5 Příspěvek od **vyosek** » 21 pro 2014 23:07

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

glutamen · #6 Příspěvek od **glutamen** » 04 led 2015 18:54

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-01-2015
Ran by Kantor (administrator) on NB02 on 04-01-2015 18:50:28
Running from C:\Users\Kantor\Desktop
Loaded Profile: Kantor (Available profiles: Kantor)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(SMART Technologies) C:\Program Files (x86)\SMART Technologies\Education Software\ResponseHardwareService.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(SMART Technologies ULC) C:\Program Files (x86)\SMART Technologies\Education Software\SMARTHelperService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe
(SMART Technologies) C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardService.exe
(SMART Technologies ULC) C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardTools.exe
(SMART Technologies) C:\Program Files (x86)\SMART Technologies\Education Software\DesktopMenu.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(SMART Technologies ULC) C:\Program Files (x86)\SMART Technologies\Education Software\Aware.exe
(SMART Technologies ULC) C:\Program Files (x86)\SMART Technologies\Education Software\Marker.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(forum.viry.cz) C:\Users\Kantor\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [608112 2011-03-29] (Alps Electric Co., Ltd.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-05-27] (IDT, Inc.)
HKLM\...\Run: [QuickSet] => C:\Program Files\Dell\QuickSet\QuickSet.exe [3668336 2011-03-24] (Dell Inc.)
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM-x32\...\Run: [Dell Webcam Central] => C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [503942 2011-04-13] (Creative Technology Ltd)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-13] (Intel Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [RoxWatchTray] => c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe [240112 2010-11-25] (Sonic Solutions)
HKLM-x32\...\Run: [SMART Board Service] => C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardService.exe [1686384 2011-10-04] (SMART Technologies)
HKLM-x32\...\Run: [SMART Board Tools] => C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardTools.exe [9800560 2011-06-23] (SMART Technologies ULC)
HKLM-x32\...\Run: [Response Desktop Menu] => C:\Program Files (x86)\SMART Technologies\Education Software\DesktopMenu.exe [1900912 2011-06-23] (SMART Technologies)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5226600 2014-12-27] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2567624206-476957557-1667233093-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30877280 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-2567624206-476957557-1667233093-1000\...\Run: [Google Update] => C:\Users\Kantor\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-04-27] (Google Inc.)
HKU\S-1-5-21-2567624206-476957557-1667233093-1000\...\Run: [Facebook Update] => C:\Users\Kantor\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-12-14] (Facebook Inc.)
HKU\S-1-5-21-2567624206-476957557-1667233093-1000\...\MountPoints2: {7d3ab80f-3711-11e2-912f-9439e5d2745e} - E:\AutoRun.exe {D2D77DC2-8299-11D1-8949-444553540000} 5.2066.1.A11B02 PID_0083
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=UP97&ocid=UP97DHP
SearchScopes: HKLM -> {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKLM-x32 -> {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2567624206-476957557-1667233093-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2567624206-476957557-1667233093-1000 -> {21ECF58F-6B68-4161-9674-1B396DAE8254} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_16194
BHO: SMART Notebook Download Utility -> {67BCF957-85FC-4036-8DC4-D4D80E00A77B} -> C:\Program Files (x86)\SMART Technologies\Education Software\Win64\NotebookPlugin.dll (SMART Technologies ULC.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: SMART Notebook Download Utility -> {67BCF957-85FC-4036-8DC4-D4D80E00A77B} -> C:\Program Files (x86)\SMART Technologies\Education Software\Win32\NotebookPlugin.dll (SMART Technologies ULC.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 85.207.140.1 192.168.10.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2567624206-476957557-1667233093-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Kantor\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKU\S-1-5-21-2567624206-476957557-1667233093-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Kantor\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-2567624206-476957557-1667233093-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Kantor\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-09-13]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.msn.com/?pc=UP97&ocid=UP97DHP
CHR StartupUrls: Default -> "hxxp://www.msn.com/?pc=UP97&ocid=UP97DHP"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-21]
CHR Extension: (Dokumenty Google) - C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-21]
CHR Extension: (Disk Google) - C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-21]
CHR Extension: (YouTube) - C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-04-27]
CHR Extension: (Vyhledávání Google) - C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-04-27]
CHR Extension: (Peněženka Google) - C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (pflmllfnnabikmfkkaddkoolinlfninn) - C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflmllfnnabikmfkkaddkoolinlfninn [2014-11-16]
CHR Extension: (Gmail) - C:\Users\Kantor\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-04-27]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-27]
CHR StartMenuInternet: Google Chrome - C:\Users\Kantor\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-27] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [104416 2014-12-27] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-12-27] (Avast Software)
R2 Response Hardware; C:\Program Files (x86)\SMART Technologies\Education Software\ResponseHardwareService.exe [19312 2011-06-23] (SMART Technologies)
R2 SMARTHelperService; C:\Program Files (x86)\SMART Technologies\Education Software\SMARTHelperService.exe [475504 2011-10-04] (SMART Technologies ULC)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-27] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-12-27] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-27] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449936 2014-12-27] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-27] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-27] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-27] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-27] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-27] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-27] ()
R3 SMARTMouseFilterx64; C:\Windows\System32\DRIVERS\SMARTMouseFilterx64.sys [13168 2011-07-13] (SMART Technologies ULC)
R3 SMARTVHidMiniVistaAmd64; C:\Windows\System32\DRIVERS\SMARTVHidMiniVistaAmd64.sys [16368 2011-07-13] (SMART Technologies ULC)
R3 SMARTVTabletPCx64; C:\Windows\System32\DRIVERS\SMARTVTabletPCx64.sys [24944 2011-07-13] (SMART Technologies ULC)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-12-27] (Avast Software)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-04 18:50 - 2015-01-04 18:50 - 00019246 _____ () C:\Users\Kantor\Desktop\FRST.txt
2015-01-04 18:50 - 2015-01-04 18:50 - 00000000 ____D () C:\FRST
2015-01-04 18:49 - 2015-01-04 18:49 - 00112640 _____ (forum.viry.cz) C:\Users\Kantor\Desktop\FRSTLauncher.exe
2015-01-04 18:47 - 2015-01-04 18:47 - 02123776 _____ (Farbar) C:\Users\Kantor\Desktop\FRST64.exe
2015-01-04 16:23 - 2015-01-04 16:27 - 19803702 _____ () C:\Users\Kantor\Downloads\foto.zip
2015-01-03 12:07 - 2015-01-03 12:08 - 00000197 _____ () C:\windows\system32\2015-01-03-11-07-38.070-AvastVBoxSVC.exe-4608.log
2015-01-02 12:32 - 2015-01-02 12:33 - 00000197 _____ () C:\windows\system32\2015-01-02-11-32-46.093-AvastVBoxSVC.exe-5792.log
2015-01-01 19:15 - 2015-01-01 19:16 - 03349698 _____ () C:\Users\Kantor\Downloads\Outlook.com (5).zip
2015-01-01 18:47 - 2015-01-01 18:47 - 00018755 _____ () C:\Users\Kantor\Downloads\Faktura k Vasi objednavce (1).zip
2015-01-01 18:37 - 2015-01-01 18:37 - 00000197 _____ () C:\windows\system32\2015-01-01-17-37-35.006-AvastVBoxSVC.exe-4120.log
2015-01-01 13:14 - 2015-01-01 13:14 - 00018755 _____ () C:\Users\Kantor\Downloads\Faktura k Vasi objednavce.zip
2015-01-01 12:39 - 2015-01-01 12:39 - 00000197 _____ () C:\windows\system32\2015-01-01-11-39-16.075-AvastVBoxSVC.exe-5684.log
2014-12-29 17:02 - 2014-12-29 17:02 - 03349698 _____ () C:\Users\Kantor\Downloads\Outlook.com (4).zip
2014-12-29 17:01 - 2014-12-29 17:01 - 03349698 _____ () C:\Users\Kantor\Downloads\Outlook.com (3).zip
2014-12-29 16:52 - 2014-12-29 16:52 - 00000197 _____ () C:\windows\system32\2014-12-29-15-52-39.095-AvastVBoxSVC.exe-4316.log
2014-12-27 15:35 - 2014-12-27 15:35 - 00288899 _____ () C:\Users\Kantor\Downloads\Outlook.com (2).zip
2014-12-27 15:30 - 2014-12-27 15:30 - 00162950 _____ () C:\Users\Kantor\Downloads\Outlook.com (1).zip
2014-12-27 15:22 - 2014-12-27 15:22 - 00069174 _____ () C:\Users\Kantor\Downloads\Outlook.com.zip
2014-12-27 13:45 - 2014-12-27 13:45 - 00000247 _____ () C:\windows\system32\2014-12-27-12-45-13.064-aswFe.exe-3216.log
2014-12-27 13:39 - 2014-12-27 13:45 - 00000247 _____ () C:\windows\system32\2014-12-27-12-39-23.027-aswFe.exe-4316.log
2014-12-27 13:39 - 2014-12-27 13:39 - 00000197 _____ () C:\windows\system32\2014-12-27-12-39-15.011-AvastVBoxSVC.exe-7108.log
2014-12-27 13:13 - 2014-12-27 13:26 - 00000000 ____D () C:\windows\SysWOW64\vbox
2014-12-27 13:13 - 2014-12-27 13:26 - 00000000 ____D () C:\windows\system32\vbox
2014-12-27 12:42 - 2014-12-27 12:42 - 00001972 _____ () C:\Users\Public\Desktop\Avast SafeZone.lnk
2014-12-27 12:42 - 2014-12-27 12:42 - 00001912 _____ () C:\Users\Public\Desktop\Avast Premier.lnk
2014-12-27 12:42 - 2014-12-27 12:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-12-27 12:41 - 2014-12-27 12:41 - 00364512 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2014-12-27 12:41 - 2014-12-27 12:41 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr
2014-12-27 12:39 - 2014-12-27 12:39 - 00449936 _____ (AVAST Software) C:\windows\system32\Drivers\aswNdisFlt.sys
2014-12-27 11:50 - 2014-12-27 11:50 - 00003886 _____ () C:\windows\System32\Tasks\Adobe Acrobat Update Task
2014-12-24 10:10 - 2014-12-24 10:10 - 00003284 _____ () C:\windows\System32\Tasks\avastBCLRestartS-1-5-21-2567624206-476957557-1667233093-1000
2014-12-21 19:39 - 2014-12-21 19:39 - 00045565 _____ () C:\Users\Kantor\Desktop\zoek-results.txt
2014-12-21 19:35 - 2014-12-21 19:07 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-12-21 19:12 - 2014-12-21 19:38 - 00045565 _____ () C:\zoek-results.log
2014-12-21 19:07 - 2014-12-21 19:32 - 00000000 ____D () C:\zoek_backup
2014-12-21 19:05 - 2014-12-21 19:05 - 00009549 _____ () C:\Users\Kantor\Desktop\AdwCleaner[S1].txt
2014-12-21 18:43 - 2014-12-21 18:43 - 01295360 _____ () C:\Users\Kantor\Desktop\zoek.exe
2014-12-21 18:42 - 2014-12-21 18:43 - 02173952 _____ () C:\Users\Kantor\Desktop\adwcleaner_4.106.exe
2014-12-21 17:56 - 2014-12-21 17:56 - 01222144 _____ () C:\Users\Kantor\Downloads\RSITx64.exe
2014-12-21 17:44 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-12-21 17:44 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-12-14 20:51 - 2015-01-04 17:56 - 00000932 _____ () C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000UA.job
2014-12-14 20:51 - 2015-01-04 16:02 - 00000910 _____ () C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000Core.job
2014-12-13 03:33 - 2014-12-13 03:33 - 00000000 ____D () C:\windows\system32\appraiser
2014-12-13 03:06 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\windows\SysWOW64\mf.dll
2014-12-13 03:06 - 2014-07-07 03:06 - 00206848 _____ (Microsoft Corporation) C:\windows\system32\mfps.dll
2014-12-13 03:06 - 2014-07-07 03:06 - 00055808 _____ (Microsoft Corporation) C:\windows\system32\rrinstaller.exe
2014-12-13 03:06 - 2014-07-07 03:06 - 00024576 _____ (Microsoft Corporation) C:\windows\system32\mfpmp.exe
2014-12-13 03:06 - 2014-07-07 03:02 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\mferror.dll
2014-12-13 03:06 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfps.dll
2014-12-13 03:06 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\rrinstaller.exe
2014-12-13 03:06 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfpmp.exe
2014-12-13 03:06 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\mferror.dll
2014-12-13 03:05 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\windows\system32\mf.dll
2014-12-12 19:52 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-12-12 19:52 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2014-12-12 19:52 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-12-12 19:52 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-12-12 19:52 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-12-12 19:52 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-12-12 19:52 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-12-12 19:52 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-12-12 19:52 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-12-12 19:52 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2014-12-12 19:52 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-12-12 19:52 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-12-12 19:52 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-12-12 19:52 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-12-12 19:52 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-12-12 19:52 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-12-12 19:52 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-12-12 19:52 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-12-12 19:52 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-12-12 19:52 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-12-12 19:52 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2014-12-12 19:52 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-12-12 19:52 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-12-12 19:52 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-12-12 19:52 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-12-12 19:52 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-12-12 19:52 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-12-12 19:52 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2014-12-12 19:52 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-12-12 19:52 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-12-12 19:52 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-12-12 19:52 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-12-12 19:52 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-12-12 19:52 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-12-12 19:52 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-12-12 19:52 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2014-12-12 19:52 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-12-12 19:52 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-12-12 19:52 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-12-12 19:52 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-12 19:52 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-12-12 19:52 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-12-12 19:52 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-12-12 19:52 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-12-12 19:52 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-12-12 19:52 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-12-12 19:52 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-12-12 19:52 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2014-12-12 19:52 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-12-12 19:52 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-12-12 19:52 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-12-12 19:52 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-12-12 19:52 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-12-12 19:52 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-12-12 19:51 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2014-12-12 19:51 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2014-12-12 19:51 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2014-12-12 19:51 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2014-12-12 19:51 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-12-12 19:51 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll
2014-12-12 19:51 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-12-12 19:51 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\windows\system32\aitstatic.exe
2014-12-12 19:51 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2014-12-12 19:51 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll
2014-12-12 19:51 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdx.sys
2014-12-12 19:45 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\windows\system32\charmap.exe
2014-12-12 19:45 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\windows\SysWOW64\charmap.exe
2014-12-12 19:45 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\windows\system32\WsmSvc.dll
2014-12-12 19:45 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\windows\system32\WSManMigrationPlugin.dll
2014-12-12 19:45 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\windows\system32\WsmWmiPl.dll
2014-12-12 19:45 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\windows\system32\WsmAuto.dll
2014-12-12 19:45 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\windows\system32\WSManHTTPConfig.exe
2014-12-12 19:45 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmSvc.dll
2014-12-12 19:45 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSManMigrationPlugin.dll
2014-12-12 19:45 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmWmiPl.dll
2014-12-12 19:45 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmAuto.dll
2014-12-12 19:45 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSManHTTPConfig.exe
2014-12-12 19:42 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2014-12-12 19:42 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2014-12-07 17:47 - 2014-12-07 17:47 - 00000000 __SHD () C:\Users\Kantor\AppData\Local\EmieBrowserModeList

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-04 18:47 - 2012-04-27 21:10 - 00000000 ____D () C:\Users\Kantor\AppData\Roaming\Skype
2015-01-04 18:39 - 2012-07-15 08:31 - 00000914 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2015-01-04 18:14 - 2014-10-19 10:38 - 00000966 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000UA.job
2015-01-04 18:12 - 2011-10-05 05:15 - 01889127 _____ () C:\windows\WindowsUpdate.log
2015-01-04 16:49 - 2014-08-23 17:33 - 00000000 ____D () C:\Users\Kantor\Documents\Soubory aplikace Outlook
2015-01-04 16:14 - 2014-10-19 10:38 - 00000914 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000Core.job
2015-01-04 15:56 - 2012-04-24 07:54 - 00000422 _____ () C:\windows\Tasks\SystemToolsDailyTest.job
2015-01-04 15:55 - 2011-10-05 07:48 - 00669116 _____ () C:\windows\system32\perfh005.dat
2015-01-04 15:55 - 2011-10-05 07:48 - 00141744 _____ () C:\windows\system32\perfc005.dat
2015-01-04 15:55 - 2009-07-14 06:13 - 01584554 _____ () C:\windows\system32\PerfStringBackup.INI
2015-01-04 15:53 - 2012-04-30 20:33 - 00003488 _____ () C:\windows\System32\Tasks\PCDEventLauncher
2015-01-04 15:53 - 2012-04-24 07:54 - 00003442 _____ () C:\windows\System32\Tasks\SystemToolsDailyTest
2015-01-03 12:12 - 2009-07-14 05:45 - 00031536 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-03 12:12 - 2009-07-14 05:45 - 00031536 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-03 12:06 - 2013-09-13 09:11 - 00004182 _____ () C:\windows\System32\Tasks\avast! Emergency Update
2015-01-03 12:05 - 2011-10-05 06:26 - 00000000 ____D () C:\Program Files (x86)\Dell DataSafe Local Backup
2015-01-03 12:04 - 2012-04-24 07:52 - 00000000 ____D () C:\Users\Kantor\AppData\Local\SoftThinks
2015-01-03 12:04 - 2009-07-14 06:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2015-01-03 12:03 - 2009-07-14 05:51 - 00096946 _____ () C:\windows\setupact.log
2015-01-01 18:47 - 2011-10-05 06:14 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-01-01 18:46 - 2011-10-05 06:14 - 00000000 ____D () C:\ProgramData\Skype
2014-12-27 13:04 - 2010-11-21 04:47 - 00458472 _____ () C:\windows\PFRO.log
2014-12-27 12:48 - 2014-03-25 09:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Terasoft
2014-12-27 12:46 - 2012-06-13 16:13 - 00000000 ____D () C:\ProgramData\Stiefel
2014-12-27 12:43 - 2014-11-11 22:09 - 00000000 ____D () C:\Users\Kantor\AppData\Roaming\Seznam.cz
2014-12-27 12:43 - 2014-11-11 22:09 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-12-27 12:41 - 2014-07-19 07:53 - 00029208 _____ () C:\windows\system32\Drivers\aswHwid.sys
2014-12-27 12:41 - 2014-01-24 15:50 - 00116728 _____ (AVAST Software) C:\windows\system32\Drivers\aswStm.sys
2014-12-27 12:41 - 2013-09-13 09:11 - 01050432 _____ (AVAST Software) C:\windows\system32\Drivers\aswsnx.sys
2014-12-27 12:41 - 2013-09-13 09:11 - 00436624 _____ (AVAST Software) C:\windows\system32\Drivers\aswsp.sys
2014-12-27 12:41 - 2013-09-13 09:11 - 00267632 _____ () C:\windows\system32\Drivers\aswVmm.sys
2014-12-27 12:41 - 2013-09-13 09:11 - 00093568 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2014-12-27 12:41 - 2013-09-13 09:11 - 00083280 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2014-12-27 12:41 - 2013-09-13 09:11 - 00065776 _____ () C:\windows\system32\Drivers\aswRvrt.sys
2014-12-27 12:40 - 2013-01-02 17:59 - 00028184 _____ (AVAST Software) C:\windows\system32\Drivers\aswKbd.sys
2014-12-27 12:32 - 2014-11-01 21:12 - 00000000 ____D () C:\Users\Kantor\AppData\Roaming\uTorrent
2014-12-21 20:36 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\rescache
2014-12-21 19:35 - 2012-04-27 21:04 - 00002454 _____ () C:\Users\Kantor\Desktop\Google Chrome.lnk
2014-12-21 19:04 - 2012-04-24 07:54 - 00000564 _____ () C:\windows\Tasks\PCDoctorBackgroundMonitorTask.job
2014-12-21 19:01 - 2014-07-22 21:34 - 00000000 ____D () C:\AdwCleaner
2014-12-21 17:59 - 2014-07-22 20:32 - 00000000 ____D () C:\Program Files\trend micro
2014-12-21 17:53 - 2012-04-24 07:54 - 00004262 _____ () C:\windows\System32\Tasks\PCDoctorBackgroundMonitorTask
2014-12-21 17:35 - 2012-07-15 08:31 - 00701616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-12-21 17:35 - 2012-07-15 08:31 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-21 17:35 - 2012-07-15 08:31 - 00003852 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-12-14 21:07 - 2013-09-30 18:36 - 00000000 ____D () C:\Users\Kantor\Desktop\PRYWATNE
2014-12-14 20:51 - 2012-08-25 17:25 - 00003910 _____ () C:\windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000UA
2014-12-14 20:51 - 2012-08-25 17:25 - 00003542 _____ () C:\windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000Core
2014-12-14 20:51 - 2012-08-25 17:25 - 00000000 ____D () C:\Users\Kantor\AppData\Local\Facebook
2014-12-13 03:33 - 2014-05-18 15:49 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-12-13 03:33 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\PolicyDefinitions
2014-12-13 03:33 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\AppCompat
2014-12-13 03:17 - 2012-04-24 08:07 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-12-13 03:15 - 2013-08-22 22:11 - 00000000 ____D () C:\windows\system32\MRT
2014-12-13 03:09 - 2012-05-03 19:24 - 112710672 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-12-10 21:12 - 2014-05-18 15:57 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-12-10 21:12 - 2014-05-18 15:57 - 00002021 _____ () C:\Users\Public\Desktop\Adobe Reader X.lnk

Some content of TEMP:
====================
C:\Users\Kantor\AppData\Local\Temp\SkypeSetup.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

==================== MBR and Partition Table ==================

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000Core.job => C:\Users\Kantor\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000UA.job => C:\Users\Kantor\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000Core.job => C:\Users\Kantor\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000UA.job => C:\Users\Kantor\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\PCDoctorBackgroundMonitorTask.job => c:\Program Files\Dell Support Center\uaclauncher.exe
Task: C:\windows\Tasks\SystemToolsDailyTest.job => c:\Program Files\Dell Support Center\pcdrcui.exe

==================== Alternate Data Streams (whitelisted) ==================

==================== Security Center ==================

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Kantor\Desktop" je 27827 MB.

***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher
"C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Desktop Disc Tool
"c:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Facebook Update
"C:\Users\Kantor\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update
"C:\Users\Kantor\AppData\Local\Google\Update\GoogleUpdate.exe" /c [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDVD9LanguageShortcut
"C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl9
"C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Kantor^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^V��ezy obrazovky a spu�t�n� aplikace OneNote 2010.lnk
C:\PROGRA~2\MICROS~1\Office14\ONENOTEM.EXE /tsr [x]

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000

==================== End Of Log ==============================

#7 Příspěvek od **vyosek** » 04 led 2015 22:08

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKU\S-1-5-21-2567624206-476957557-1667233093-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30877280 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-2567624206-476957557-1667233093-1000\...\Run: [Google Update] => C:\Users\Kantor\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-04-27] (Google Inc.)
HKU\S-1-5-21-2567624206-476957557-1667233093-1000\...\Run: [Facebook Update] => C:\Users\Kantor\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-12-14] (Facebook Inc.)
HKU\S-1-5-21-2567624206-476957557-1667233093-1000\...\MountPoints2: {7d3ab80f-3711-11e2-912f-9439e5d2745e} - E:\AutoRun.exe {D2D77DC2-8299-11D1-8949-444553540000} 5.2066.1.A11B02 PID_0083
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File

HKU\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=UP97&ocid=UP97DHP
SearchScopes: HKLM -> {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL = http://www.bing.com/search?q={searchTerms}&form=DLSDF8&pc=MDDS&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL = http://www.bing.com/search?q={searchTerms}&form=DLSDF8&pc=MDDS&src=IE-SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

2015-01-04 18:50 - 2015-01-04 18:50 - 00019246 _____ () C:\Users\Kantor\Desktop\FRST.txt
2015-01-04 18:49 - 2015-01-04 18:49 - 00112640 _____ (forum.viry.cz) C:\Users\Kantor\Desktop\FRSTLauncher.exe
2015-01-03 12:07 - 2015-01-03 12:08 - 00000197 _____ () C:\windows\system32\2015-01-03-11-07-38.070-AvastVBoxSVC.exe-4608.log
2015-01-02 12:32 - 2015-01-02 12:33 - 00000197 _____ () C:\windows\system32\2015-01-02-11-32-46.093-AvastVBoxSVC.exe-5792.log
2015-01-01 18:37 - 2015-01-01 18:37 - 00000197 _____ () C:\windows\system32\2015-01-01-17-37-35.006-AvastVBoxSVC.exe-4120.log
2015-01-01 12:39 - 2015-01-01 12:39 - 00000197 _____ () C:\windows\system32\2015-01-01-11-39-16.075-AvastVBoxSVC.exe-5684.log
2014-12-29 16:52 - 2014-12-29 16:52 - 00000197 _____ () C:\windows\system32\2014-12-29-15-52-39.095-AvastVBoxSVC.exe-4316.log
2014-12-27 13:45 - 2014-12-27 13:45 - 00000247 _____ () C:\windows\system32\2014-12-27-12-45-13.064-aswFe.exe-3216.log
2014-12-27 13:39 - 2014-12-27 13:45 - 00000247 _____ () C:\windows\system32\2014-12-27-12-39-23.027-aswFe.exe-4316.log
2014-12-27 13:39 - 2014-12-27 13:39 - 00000197 _____ () C:\windows\system32\2014-12-27-12-39-15.011-AvastVBoxSVC.exe-7108.log
2014-12-21 19:39 - 2014-12-21 19:39 - 00045565 _____ () C:\Users\Kantor\Desktop\zoek-results.txt
2014-12-21 19:35 - 2014-12-21 19:07 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-12-21 19:12 - 2014-12-21 19:38 - 00045565 _____ () C:\zoek-results.log
2014-12-21 19:07 - 2014-12-21 19:32 - 00000000 ____D () C:\zoek_backup
2014-12-21 19:05 - 2014-12-21 19:05 - 00009549 _____ () C:\Users\Kantor\Desktop\AdwCleaner[S1].txt
2014-12-21 18:43 - 2014-12-21 18:43 - 01295360 _____ () C:\Users\Kantor\Desktop\zoek.exe
2014-12-21 18:42 - 2014-12-21 18:43 - 02173952 _____ () C:\Users\Kantor\Desktop\adwcleaner_4.106.exe
2014-12-21 17:56 - 2014-12-21 17:56 - 01222144 _____ () C:\Users\Kantor\Downloads\RSITx64.exe

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000Core.job => C:\Users\Kantor\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000UA.job => C:\Users\Kantor\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000Core.job => C:\Users\Kantor\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000UA.job => C:\Users\Kantor\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\PCDoctorBackgroundMonitorTask.job => c:\Program Files\Dell Support Center\uaclauncher.exe
Task: C:\windows\Tasks\SystemToolsDailyTest.job => c:\Program Files\Dell Support Center\pcdrcui.exe

REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Facebook Update" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDVD9LanguageShortcut" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl9" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched" /f

Hosts:
EmptyTemp:
Reboot:
End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

glutamen · #8 Příspěvek od **glutamen** » 04 led 2015 23:18

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 04-01-2015
Ran by Kantor at 2015-01-04 23:11:52 Run:1
Running from C:\Users\Kantor\Desktop
Loaded Profile: Kantor (Available profiles: Kantor)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKU\S-1-5-21-2567624206-476957557-1667233093-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30877280 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-2567624206-476957557-1667233093-1000\...\Run: [Google Update] => C:\Users\Kantor\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-04-27] (Google Inc.)
HKU\S-1-5-21-2567624206-476957557-1667233093-1000\...\Run: [Facebook Update] => C:\Users\Kantor\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-12-14] (Facebook Inc.)
HKU\S-1-5-21-2567624206-476957557-1667233093-1000\...\MountPoints2: {7d3ab80f-3711-11e2-912f-9439e5d2745e} - E:\AutoRun.exe {D2D77DC2-8299-11D1-8949-444553540000} 5.2066.1.A11B02 PID_0083
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File

HKU\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=UP97&ocid=UP97DHP
SearchScopes: HKLM -> {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKLM-x32 -> {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

2015-01-04 18:50 - 2015-01-04 18:50 - 00019246 _____ () C:\Users\Kantor\Desktop\FRST.txt
2015-01-04 18:49 - 2015-01-04 18:49 - 00112640 _____ (forum.viry.cz) C:\Users\Kantor\Desktop\FRSTLauncher.exe
2015-01-03 12:07 - 2015-01-03 12:08 - 00000197 _____ () C:\windows\system32\2015-01-03-11-07-38.070-AvastVBoxSVC.exe-4608.log
2015-01-02 12:32 - 2015-01-02 12:33 - 00000197 _____ () C:\windows\system32\2015-01-02-11-32-46.093-AvastVBoxSVC.exe-5792.log
2015-01-01 18:37 - 2015-01-01 18:37 - 00000197 _____ () C:\windows\system32\2015-01-01-17-37-35.006-AvastVBoxSVC.exe-4120.log
2015-01-01 12:39 - 2015-01-01 12:39 - 00000197 _____ () C:\windows\system32\2015-01-01-11-39-16.075-AvastVBoxSVC.exe-5684.log
2014-12-29 16:52 - 2014-12-29 16:52 - 00000197 _____ () C:\windows\system32\2014-12-29-15-52-39.095-AvastVBoxSVC.exe-4316.log
2014-12-27 13:45 - 2014-12-27 13:45 - 00000247 _____ () C:\windows\system32\2014-12-27-12-45-13.064-aswFe.exe-3216.log
2014-12-27 13:39 - 2014-12-27 13:45 - 00000247 _____ () C:\windows\system32\2014-12-27-12-39-23.027-aswFe.exe-4316.log
2014-12-27 13:39 - 2014-12-27 13:39 - 00000197 _____ () C:\windows\system32\2014-12-27-12-39-15.011-AvastVBoxSVC.exe-7108.log
2014-12-21 19:39 - 2014-12-21 19:39 - 00045565 _____ () C:\Users\Kantor\Desktop\zoek-results.txt
2014-12-21 19:35 - 2014-12-21 19:07 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-12-21 19:12 - 2014-12-21 19:38 - 00045565 _____ () C:\zoek-results.log
2014-12-21 19:07 - 2014-12-21 19:32 - 00000000 ____D () C:\zoek_backup
2014-12-21 19:05 - 2014-12-21 19:05 - 00009549 _____ () C:\Users\Kantor\Desktop\AdwCleaner[S1].txt
2014-12-21 18:43 - 2014-12-21 18:43 - 01295360 _____ () C:\Users\Kantor\Desktop\zoek.exe
2014-12-21 18:42 - 2014-12-21 18:43 - 02173952 _____ () C:\Users\Kantor\Desktop\adwcleaner_4.106.exe
2014-12-21 17:56 - 2014-12-21 17:56 - 01222144 _____ () C:\Users\Kantor\Downloads\RSITx64.exe

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000Core.job => C:\Users\Kantor\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000UA.job => C:\Users\Kantor\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000Core.job => C:\Users\Kantor\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000UA.job => C:\Users\Kantor\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\PCDoctorBackgroundMonitorTask.job => c:\Program Files\Dell Support Center\uaclauncher.exe
Task: C:\windows\Tasks\SystemToolsDailyTest.job => c:\Program Files\Dell Support Center\pcdrcui.exe

REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Facebook Update" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDVD9LanguageShortcut" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl9" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched" /f

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value deleted successfully.
HKU\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => value deleted successfully.
HKU\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update => value deleted successfully.
HKU\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Facebook Update => value deleted successfully.
"HKU\S-1-5-21-2567624206-476957557-1667233093-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7d3ab80f-3711-11e2-912f-9439e5d2745e}" => Key deleted successfully.
HKCR\CLSID\{7d3ab80f-3711-11e2-912f-9439e5d2745e} => Key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\DropboxExt1" => Key deleted successfully.
HKCR\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => Key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\DropboxExt2" => Key deleted successfully.
HKCR\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => Key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\DropboxExt3" => Key deleted successfully.
HKCR\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => Key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\DropboxExt4" => Key deleted successfully.
HKCR\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => Key not found.
HKU\S-1-5-21-2567624206-476957557-1667233093-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2F1E335A-858A-4BE9-8F6B-D0AF1D018B53}" => Key deleted successfully.
HKCR\CLSID\{2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{2F1E335A-858A-4BE9-8F6B-D0AF1D018B53}" => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} => Key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => value deleted successfully.
"HKCR\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}" => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => value deleted successfully.
HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => Key not found.
"HKCR\PROTOCOLS\Handler\skype-ie-addon-data" => Key deleted successfully.
"HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => Key deleted successfully.
HKCR\Wow6432Node\PROTOCOLS\Handler\skype-ie-addon-data => Key not found.
"HKCR\Wow6432Node\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => Key deleted successfully.
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
"C:\Users\Kantor\Desktop\FRST.txt" => File/Directory not found.
C:\Users\Kantor\Desktop\FRSTLauncher.exe => Moved successfully.
Could not move "C:\windows\system32\2015-01-03-11-07-38.070-AvastVBoxSVC.exe-4608.log" => Scheduled to move on reboot.
C:\windows\system32\2015-01-02-11-32-46.093-AvastVBoxSVC.exe-5792.log => Moved successfully.
C:\windows\system32\2015-01-01-17-37-35.006-AvastVBoxSVC.exe-4120.log => Moved successfully.
C:\windows\system32\2015-01-01-11-39-16.075-AvastVBoxSVC.exe-5684.log => Moved successfully.
C:\windows\system32\2014-12-29-15-52-39.095-AvastVBoxSVC.exe-4316.log => Moved successfully.
C:\windows\system32\2014-12-27-12-45-13.064-aswFe.exe-3216.log => Moved successfully.
C:\windows\system32\2014-12-27-12-39-23.027-aswFe.exe-4316.log => Moved successfully.
C:\windows\system32\2014-12-27-12-39-15.011-AvastVBoxSVC.exe-7108.log => Moved successfully.
C:\Users\Kantor\Desktop\zoek-results.txt => Moved successfully.
C:\windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Kantor\Desktop\AdwCleaner[S1].txt => Moved successfully.
C:\Users\Kantor\Desktop\zoek.exe => Moved successfully.
C:\Users\Kantor\Desktop\adwcleaner_4.106.exe => Moved successfully.
C:\Users\Kantor\Downloads\RSITx64.exe => Moved successfully.
C:\windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000Core.job => Moved successfully.
C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000UA.job => Moved successfully.
C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000Core.job => Moved successfully.
C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2567624206-476957557-1667233093-1000UA.job => Moved successfully.
C:\windows\Tasks\PCDoctorBackgroundMonitorTask.job => Moved successfully.
C:\windows\Tasks\SystemToolsDailyTest.job => Moved successfully.

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Facebook Update" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDVD9LanguageShortcut" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl9" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 918.7 MB temporary data.

=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-01-04 23:15:53)<=

C:\windows\system32\2015-01-03-11-07-38.070-AvastVBoxSVC.exe-4608.log => Is moved successfully.

==== End of Fixlog 23:15:54 ====

#9 Příspěvek od **vyosek** » 05 led 2015 06:18

Jak se chova ntb

VIRY.CZ

Reklamy,pomalý chod Ntb

Reklamy,pomalý chod Ntb

Re: Reklamy,pomalý chod Ntb

Re: Reklamy,pomalý chod Ntb

Re: Reklamy,pomalý chod Ntb

Re: Reklamy,pomalý chod Ntb

Re: Reklamy,pomalý chod Ntb

Re: Reklamy,pomalý chod Ntb

Re: Reklamy,pomalý chod Ntb

Re: Reklamy,pomalý chod Ntb