kontrola logu, potíže na seznam.cz

[korjin]

Dobrý den, prosím o kontrolu logu, před časem problémy na seznam.cz, podivné žádosti o heslo
děkuji


Logfile of random's system information tool 1.10 (written by random/random)
Run by Michal at 2015-01-25 12:59:51
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 83 GB (69%) free of 120 GB
Total RAM: 4094 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:59:56, on 25.1.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17496)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe
C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc2.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe
C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Elex-tech\YAC\iDesk.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\Michal.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type= ... earchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type= ... earchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type= ... earchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type= ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Launcher3010] "C:\Program Files (x86)\Xerox Office Printing\WorkCentre SSW\Launcher\xrlaunch.exe" /S Xerox Phaser 3010
O4 - HKLM\..\Run: [3010 RUN] "C:\Program Files (x86)\Xerox Office Printing\WorkCentre SSW\PrintingScout\xrksmRun.exe"
O4 - HKLM\..\Run: [StatusAutoRun3010] "C:\Program Files (x86)\Xerox Office Printing\WorkCentre SSW\PrintingScout\xrksmpl.exe" Xerox Phaser 3010,hide,\S
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: YAC Service (iSafeService) - Elex do Brasil Participaçoes Ltda - C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: XRcnStatutsDatabase (XRNADB) - Xerox - C:\Program Files (x86)\Xerox Office Printing\WorkCentre SSW\PrintingScout\xrksmdb.exe

--
End of file - 9216 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
winlogon.exe
C:\Windows\system32\lsm.exe
c:\windows\system32\svchost.exe -k dcomlaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
c:\windows\system32\svchost.exe -k rpcss
c:\windows\system32\svchost.exe -k localservicenetworkrestricted
"C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe"
"C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc2.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted
c:\windows\system32\svchost.exe -k netsvcs
c:\windows\system32\svchost.exe -k gpsvcgroup
c:\windows\system32\svchost.exe -k localservice
c:\windows\system32\svchost.exe -k networkservice
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k localservicenonetwork
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
taskeng.exe {19C068B4-CE54-45FD-9923-6CCE213ED16F}
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\File Association Helper\FAHWindow.exe" register
taskeng.exe {7D3D291A-2A6E-4F24-9D53-3EB8947C7AD1}
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
c:\windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Xerox Office Printing\WorkCentre SSW\PrintingScout\xrksmdb.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss 4fa88040-567d-4e99-8327-6f5337eee28e 1
\??\C:\Windows\system32\conhost.exe "-2007499598-986143424-2005633836-154644483640872511313823759841893526495-184029568
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "79790532-1182147940104106184818842761741846333080706993240-1042812491-2098375292
c:\windows\system32\svchost.exe -k secsvcs
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-5ec0b953-8940-4ef5-b954-adb686f2c46e -SystemEventPortName:HostProcess-2843735c-836c-44fa-99dd-e028146a2591 -IoCancelEventPortName:HostProcess-3de0e606-5dd8-4a30-a847-caff715cffbc -NonStateChangingEventPortName:HostProcess-bac4d907-e015-4f21-82dc-bbe919ce098a -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:a49e35a2-6277-4d96-a441-294703d03a95 -DeviceGroupId:WpdFsGroup
"C:\Program Files (x86)\Xerox Office Printing\WorkCentre SSW\PrintingScout\xrksmW.exe"
\??\C:\Windows\system32\conhost.exe "1153271459-15657446931673529995786161977-8947072841757579326-16551418171321216234
"C:\Program Files (x86)\Xerox Office Printing\WorkCentre SSW\PrintingScout\xrksmpl.exe" Xerox Phaser 3010,hide,\S
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files (x86)\Elex-tech\YAC\iDesk.exe" -itrayautostart
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\CCleaner\CCleaner64.exe" /monitor
C:\Windows\system32\sppsvc.exe
"C:\Program Files\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2028 CREDAT:275457 /prefetch:2
C:\Windows\servicing\TrustedInstaller.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-2718237603-1386360757-3403469896-10002_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-2718237603-1386360757-3403469896-10002 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Windows\system32\SearchFilterHost.exe" 0 524 528 536 65536 532
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
wmiadap.exe /F /T /R
C:\Windows\system32\wbem\wmiprvse.exe
c:\windows\system32\svchost.exe -k sdrsvc
"C:\Users\Michal\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\3e9ec73d-64e9-4110-9509-fd31b9d7675a-1.job - C:\Program Files (x86)\SensePlus\SensePlus-codedownloader.exe /rawdata=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
C:\Windows\tasks\3e9ec73d-64e9-4110-9509-fd31b9d7675a-5.job - C:\Program Files (x86)\SensePlus\3e9ec73d-64e9-4110-9509-fd31b9d7675a-5.exe /rawdata=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
C:\Windows\tasks\3e9ec73d-64e9-4110-9509-fd31b9d7675a-5_user.job - C:\Program Files (x86)\SensePlus\3e9ec73d-64e9-4110-9509-fd31b9d7675a-5.exe /rawdata=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
C:\Windows\tasks\3e9ec73d-64e9-4110-9509-fd31b9d7675a-6.job - C:\Program Files (x86)\SensePlus\3e9ec73d-64e9-4110-9509-fd31b9d7675a-6.exe /rawdata=snVhq9xz3BhP+HOuG4sjcsKk2CDNtVOc4iYpAmGic4N7SLx7WdllkDwN8mtSKiR06CshgNvvS/KjLEq+ZuZyhbbD0G3hDzb3mVwBif1x8bZbST63bRG6xuCXD/3wuI2rliOzNNwJqtJ+Z0XVUitzkhaRKSD2S1vvY6s4BH+Wu+6JS9O6CjoFKH/30auWDKMj426HbSsVt4AOpxBLRxcVe+9Q5niD+H14C8jcLi7TTnSiw/qz/JdxVpeQWNLbSxo3wUpeQ9vGthOJi/CEMGINzWvZZumSCMJqoEi3MU5qbzqW5BNpNsTxtC/pQMC9yXGMdN3xTqzBisFPLMP0+2mgRwPMD1gVlvCdyXI0rp9QQAPAKAC3VPRQFIy8Nwhmt96gYUsjN2RQDy/Tr3DW2+Ccf2z/mnIWPPSqlYORugRQ7sQ+Yo0+6rLA06Kc9wxxPujxJa4QMBT2meI/Qi2ZQ7ZrjUhQVyJflJi9QZfArNeCVTuZkKpffeiirjx/nFDDVk7GJj/EAvL8noZ+TK19O8/X0m8sgl0yPad4BrugAFhRzJr2ouh2SC5PABMR6rWajt4mcfplc/ag2/NfEH5/5xEYvcQ9kzEoclg+Vy5aJHkZD1EYYof+McUn5KOTAPbP7rQCV2iCbVqYKPpDHOs1D1tyKEpC0SXkDAUAdjnp6IMsui5xtzlVINhXhsrMuRfDqbA07USGX359IvFiMVeHScxWoF6w4eoNaGyu3FyCK8znDJ4fle41yOPFnIjJ41GULan9Vofyy7XpMGj6t92IgpK1KqLfMpRi/St56Cb9JYcNKtBjtAW5PgNG4Jb0qbTnC3AtyHWjjQdIVrJWzUPMEd2Z/zTAcK6R8G8tYoJ2N55hvMXuKFyvQN/3a2I+qzEbUyGzH/bFpWzJqeDFIscUyQH/ZBvTixuYuJVvihXhylGQshcGTmMOL9Q918jA99ggpjj4pRQ+Y5lAPpcVFx64w6mxDRIBmbQRgzBiBiEMo+jmfjYNM7Tm+D9JQ7yXn4CEwpDEx2+1Ub8TO7Sfg0HF/0THD51Irt5527dsAQrVl+8+qSVzi7p3HWOlHYnMQ2OcFbI9KjYIPUDKp+2OFUBE32dX3XkWA036C/ZY9/o2rvxjU+YHULWAAYzPCD9YcFkjs9PaW2VuPCj0qh4pvn+GwsNimMiAzlWOeh/18FzU940HZ1txJEQ/Cn40lkDTw5ipdyQ1ntF3fAxhEh6qIcjJkg7JbTlUrSB3HW6/htx3cVtiQht86E4kXcxW8BdQFWMGVec29Y/K79SUZ1WKaVtyYbwRFT6LCnz7WftSRHgBPGt13Jg/OhXxE/fNx6o/0aIzFW/yvj1urYMUSGWIfO5/WzxIDmgCwrm2yF3uhPAytonQ8nmA/G8eJoV6YLjt76lBWRw/MMyDfMiReuWtbRptgvc7y8jdi0C24SebpP9azBYbeN4fSaA2OV2QmKn17KDbgpTTP/KCwWGrQbYC0fU26o4YXtT9UQJb4Qk7vl+slGtVF22jYj6qLDAO4xd2Ny1+pX2JY/RuMfjYQnWwizMte7Zg4Y5OG1sAl0h3GowklhgAf4E0WBk4G3Ji0/gR2BOtdQg7HVi48LOTgbC0AI7f1BoKV6q1b8uhRY45PMpLBQy8RPrq9pNrRHybMGthJVhhDxxlLDK5N1nM/uMZoEiK1eRg9R3mzdpx2D6Ev7b8PObwQ2VUE2m6u6Q71nZXQKV4AhQyfqbktFewwZPnD4/ulMLCtjZOTF9lVaBy4BzEzn1WPtk2Yrvs5Xt2b2x6J5bL0TYmjYhR9IRBb469e9L1KSTCxVd0SBvPx5Z0Y9dSrz0dLPP7ZGGtzL/+z6N2wwvJf2FaZxgmTQMRFd5F+9ygBSizricq+SULKBa5YKex8B2MGxfb/i8O6qwCsNknVNEAHrqOP5xVEB9vVeF1yD4XrzAtDxLuC0SakDU6hJdNeHjx+csxlTugbHunn8IV04zXiIFASPqy65A6ZBdWbwB5HxFTjy5CeZng31ZW/sZetOkjS6EXOD3isHCpmeO0/QbIbPZ+ZSYxUlD1GZ7jblM/OZ/dhKHW+wWuxcZAtvXOGltqljNoKbNlyCA3qmanqS2W4bOOOvKBSTYM484+DlRmbqyZzEZ5zkvfC1loAcSf9dpP5dKwWxJTNYWTumkoCWM0x1L9MA4V6lrUbJusJULVHR/Wiul2RMfdl1fK6y5nuQBiusk98AxCkrlKr/UauW+tQnDxyjHS2JZgaF4VceV1qF6MxcN2/X56aTX/RLffe8EzMro6VXsd/gxnmRn7khELYCeCvEsZEMvnrheDjZWU8L3iQJ7ACT9E1+0Vkb6X4P83XVpSpo3oMsvo5JQcMHdc4HA9R2ORvgc6lwtqIkok5s0Vd5+npmvGjt5nsQJ18iTYKt2MQFNR+YHPjmzpcFj8sNjq7rR8+q78YyqJzzI5t8ja0POpgZrfOElGLgHM43NaaWDFSww6g3Bs+MHa+AFFDSuqNPZ/wanxKbwq2+xbAlTyROd1eQAWf2+kXh/XZ2n1ieXgyzW5/bx8NckSEnKjIbStUWRbiknKiBMqhb2XMEkMWxzhWtQSyAQa/R1vy0m9LuLLnALf4Px/buM/K4LEWEECc4UqjE+A5Cv79zM7crMLjJ21oZM4mFTRyDfkzTHea5JbL83ldf/5ZHi4n7XrGw+dbA78iNQunaKkfYn51N2RLIsyw86ck4tE9m/wxLC9rUw=
C:\Windows\tasks\3e9ec73d-64e9-4110-9509-fd31b9d7675a-7.job - C:\Program Files (x86)\SensePlus\3e9ec73d-64e9-4110-9509-fd31b9d7675a-7.exe /rawdata=IRbhNV8Dq7Wtx5v0lVf343raDgc0p7NcoFQ8mfNNeG4iooxmO45z+A8IsTtLxLM56yD+jY0CnqPFkjGnAqx+uW9f1Mk13PKSOyvZEUAQGXKAFEw8mDPGnPf7HGVT6LBD6u+T3NIKsFR8GNQVlbkjw+VCyJrQL3Fwi1Hyi+Lf9JaEWCBTKRvk5RZ/tle3PLY3YocUR0rZufbMPldIqif5PBLNJVIP/0LuDbjDmoV8WnquZszJ0wZGOIMjVmQk806uw0d1nXCio6Gb6JTlEGHdwjpEMNJn4hN6teEJtpZTHxxi61/FRAA02EEfnrGmfJBy0MQEN/YiTFoZrxvx2kBkwL+6UINBOH3GF4qUEsQBPNBaQvSpM5a24q8e8IBqMn878kZotk/OszoFd8keQlfNTTdP+Vi6CoKJG2XCsOvjW5jNkPOTIiHVQ74qx8D7MKJzeVn8a9M8oCny9SkAoANun/Gy68asCc3GWEVIM4DPGwNSoe9x+BXKeADuJ7plSO9pbNLSkm1PERGvZtZkkebbSR+Jt+3slhyLdJBlvTHZD8DuY2NTEauzFq2l99oWWetXC8VLIs4xei/ibdQi1ACSBuW4LOxAN2z00b5bEMKTfSalR0M9wTZ3nKnzi9AbYQ1qz9lXJM79bYP4gh6S9qpxZd0WrpsmzHLswtE8KDxWq/Bsy98TbwMU4wDOR5lR7Mq3prcaFzv2WQ2j7Du5JnIf+t1JviHNRIz5EEqMa0o6lV6eD5eINvr+EC7MSE/OiWVPVScgWeyuxVNKRx+hlTTvXabovtOWi3Z0CIRzUiC++HpeK6QPqcgBpGxmi2eYjI3QGBJPkT3YFEy+zqZqIHvX3JPa49WZiqi3M0gpIxKN+sIRtho5yUh5noZG07nXQB2sCFQY0jE+tOPvyrjxWjOSy/WUf8GEgzv69H5fc8GsZ+N8dOa/+sN2BRu2XuQfURZ21+WonQIIvHc41I7GXSDeuxRfLQ8eLOJtHvZ80aGQArsTcR0Inyhk1Ze1fe2gh9n9Gz1INalMdIflLSlwHaUkIXR98SIkHkxr0E9okpXJvbE5+7i1zoMcAjLp9UGZXDyGYT5jGw8VFMp/q0LS0bQlO+4tI2arJQKgHZMakr0noByflHCNrOv2hxcKuhimbowms0sOXDyxIU74hI5Xv+BsLORePznC4Nd5TYiXOyLL7NAmTmzy6QfjUmmQPFGKF9a3qZC/3SRns8E4VITIinePTAFXkrG1vSO4sD7nGYn9oY3a0GRNu6mKrJbeowuzjrIAUTdAZpYVjMSdw6CT0NgTUEQyt3re/29vFTGEAlILPnJgNTmrcpsqWsNaYBM4N5ca0sUSUAxUx0Dc4LlIdaAGaZ7hwAgpUrCubTDbMz1eMegSlZTLKGc9mYJmHc2ev3+buQWQkGbq0CtqGfotrmh4IpsWB7jZDmijB3qrB+LmwQTQ+anXF/PHzv0rjFWUn1HqB9YncbhvNfGRT6VArRXpCGMiOsII2iM9FwVxAirQ9l2oI5ZikJzDl3PaigmUYrUqO+N5K0HT9anq2NuV0+9j7EpK2BBG+JQomm6C4OL1FSxC0aNStnBOqTOdI6+w45LAAIASKYe9G9a9QYgOaL/KIThQ0NlnJZsTVGhFdB8+2vQ1p8Mg8VjhWGe1fLFhcbcgJgJ/5HccjLGwNuu3qtNuQHkZQob5JxddOWBu4ws4L+YW5vt2V/cS1PWnR/S+kha5Otyqc0BkgGm7PMZeUuHwGwmBfw3TVp+rZenoDAap9vT5b8T9lQzVdnusbVty1/q/wpKqT2ljxFag37PlDSlWW5ud26WZLTbaA7gGciOI3jlvHbXjSHK81Rc3GJaA13j+9EBgWi96+li39ey/cAi/V2ZGsRCNjNhPZTkIFzxITvozChwUSTYoM31v4Rd4GqWF5v09R6emBWSku7J6adxj3KaHPBwvr7UjEc2Vm7Yl2a4CRkqX0q0bP4/g0TilTS9PaJ1mDXse49LG5XIyietKojDRLRyXAAEfxHKiJU4GX9x0WTCgXRG8icSPXTKMS0H1T4gR/K/b9fL8MXcTB1AeVB+1yqHMcUTUVrS+c3tO6wZhBnlJZyCm3oUOcUDYqNBVT4J5jpJOrFhanjnam3Ynhk2tcKdG2fjHOsAlkQNJsdsebIiKkG7xjg+o7lkDlgTx8qoxkRlMQDcndLmnVT7XTi/3fpXTZRI9Vr+9+xrFwRhwT7KE88wlOa6IYVyxxwxMoHavmS32QPoj2oqJOe0nENXcLHOQixYY/6WidomCOgRYYcXuua1O0UspzUIRQVy6y84Zqj8BWxFycOEc9Sfmn0vEWtq5piaWzYEv3EO1yvYG+L0vDob57q6KbDvTB2hlnZ1qndf4yaI2nvG5SlKqwLCj7VSxaqtvF/KDSmk5fv2mFz534OLs3F06OSVQ1VYH/2DBn05VoTXvSdXg7xBIe4QN9T9poYKwpPwlEKJxGbiwJzAwWXym4sZyTmPKYjdG2NkriYPLZks1NCLrkVj+RB7Vk1RIHjUVcKWFsrNdxeEvxLJ5Kv+27/xSXUnlg6iwhbE4oMpoP4FfUPrAM0WT5oGb+cGf8xnxPu3+ZQvphe568O3LzVR7y3h18WcS368Kw2zlzvrra8C7UbwwvHfHGJORYYXPs8HVwblzmky2M1HNwWXRqx4BAV7hYtAZ/qR6XMtFLZjJCKNpPcKJqXsMYPV6K89J9QlRDTzLRZJ6I8M=
C:\Windows\tasks\a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-1.job - C:\Program Files (x86)\SuperPlusRadio v2.1\SuperPlusRadio v2.1-codedownloader.exe /rawdata=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
C:\Windows\tasks\a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-10_user.job - C:\Program Files (x86)\SuperPlusRadio v2.1\a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-10.exe /rawdata=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
C:\Windows\tasks\a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-7.job - C:\Program Files (x86)\SuperPlusRadio v2.1\a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-7.exe /rawdata=QWsE4SE0cpZfA/b+I5lwDkr2V7ipPKMAD7zV25k9htzIugFlHEghP8tSBjQ2NceXsEqiOQ65tC3C0/PYkL8T32IP+7fa+amrgEffWYc61HE75GRCThkOyCv/ACbnVu5n8Q/5H3eEmSSiv6sAh7ROyAbi65Ko9IuMeZHYW206M+FmqLXc6ZmTNRHlZ53YtQPHdSZB9D6HfzfNvp4IdPAMxqnRMfd7Cdqi5eIfnrQH4dzWOQgUgPEVDcqje74P7U03mF/21dNDiYo7zreav/2OHv8UYa+ajtnwKOuFkouUpMWI15CqqUMXkYtfL05l3zb3JZBRubWpGVhe2ZbPvVCcfr92aShvWYQqHAXidKTHPWFZtT20CIxG/IpgTHmSHOPK0elFEbVXqYaHiZ7HGOP3fufSnSxKbTJ2ve9KNrcKF7sYomkeNUUoZwxgKbi9jwqv2RxNORgeTvhdg97cQtH2ZtziIJ1iA245KLsDiCQOMEVvNIew4c0IuZY7WfJ4Bf6pbuqQuZCAjB5W8i0tX9kk/XVlhcVsV6Ier5aNQ/8wflBWwdrFB0o/FpTohZEKcjLnxllf56ttbhH0yNkcN5xvTUkgQ63TTIxCUeFuIIW/vvh8BmbJFoNK78rzUsOkBtqZqrRrkDWLSlzYY7+PEooNygCBi+LErTNn5ekN7iRDAEvHqt9m70Ijwzve5jULmDbbn5ZPr1YArHib9l6PT7Y/sDMic2/gIcpTQNahgCUxdRsgE7HSLnbK8wrLJBeGnzpi3XVpN/4W20dmVdHbzC0QaMxNNexAOugquhSDFPmmyNuTM7V0EE3eDOq3iXr55eorMbbxjLY/WjryXBVuMlvnQLhNKfXada+IZ/aH07Gnicsnr++jfbpzBC1NZVtIFk6mOzbzmB/mDFrOQKKY2YDMRf5Z9t+0mNeMXla5a+HIsdyUBIBA9w3g1XuiXTmNM1gZ4xRx+Ulydwea8Anx5Ckf8HluR9YMOp3ckCCw0x4GwXDA/sH+RtwpvAI3VOycteobeLJ/ctg+C/1ZME+6szyQHzkmuTT/GiIaH9bUjMwtjHhcsuloCdy1BhuF10XOJz2ggsweBHqX4WOINrfgLbeSziwJuWJ41o3iTG56MAboLsW779BxKwSVMJd3SQLKi9cXhIRQ3BncgInGqHzaRBWq4DHKtgcp1jPqaf+4Uq44VMCZgKYNyJbXmHdxmZXehwcI1B8Yiro5uS8OslvddWs+f/+bccTjyz5Cmtn9PQJmDh63i5DCY8PmoiMP+58LRARQDmXq1W8cbRokpMvLLR6FYFoDdT7l/gDCne7XqRmuO4tdq3Oe2F6xfZQW/ulX2uy8lOIXG4/qjeLprdl+mmGbEy7KqNPu/LbnDbXfS5j86VWmbW9GdwX2BTM4uhCRjM55lZDRarqWVdFcRc1sIVHs38qipZ+UY2aJDlWE5Kz/kxjqxYUb15QAG6qMv+LlXptBdb/DdjDm2YyyJZy6mO2oubF9v2Kqn4RKRLIfyZIM+OU7pRedm7N64rcjVea4R0H/x1BKfaG+arSe0sIir8RZmstffCMZ5ikwMRxQ+g4C1zRNE/7/SNtLhFFEzN0oHh461mEEFPpgagXsSEMRKQ1Fd2o4STgw5li6vrcymmap0Tg4gO5H11nbjjyL3hN2oxAE+pwQQQOvi7wzbTU7OC1UL4TblB9Wy2GX/A4pyRYc5pZV9b6TfZy8/Wfwb+qzUkKqBN7c6gU9Fu2gjUW8jiiXdnquL20LPOBgZeGOwt9tSE7XOadeereKS8jKjl142QCGst/Oz8ZTPZJNv68tANZynSiI3v2uRP1lyhfxf2nEBJ3nxtvalqlnjgi3Eo8oYLFCxSEm08ciQJ8p2232bcwlVm6PMATIk66u0rXbBaaahuKmHO8Ip4P1vc1F4kVxCi6wmQlqGbbXIdMS+l2R+TyIQ2kvq0H1AIFYeB8b6ICMqta8m0QK0LEUZIXpckRj7rpN7zdk576D4rO/U4HmB3HqdQxBTOCtJXgPYwXKNohB0ntlcqfW0uqluy9tj3BVGOybODt9IJqyZ6Ty7bl1unJH7/ReJnPPcqFbmGcLfKmJ4hTffttonXLwUeX0zY/CeomfGc6W7w8WR1usc0YFNRVm4seipfiyUl3LijHkOBjwngx6xsb3b+3inPFV7kisohjW5lesn5OYO2GzKstzKQo3Cd/ExtdYb0fniRa5wN5omNx3LZSDxh4hu0KMTcDVfSupknf68klKpCcHPgvoXJHMJFocvJDSyAYG/loCWrTl1BIwQ0vD2KYzUwqEptYJs90UCZQflTUPTDxlsUbn0i6GmigPbom2SE3xvTOf6XK8MxvjGRiomKTrsZqjQOzznS3I8cd8Gu6tRsCdsCdaIOflKEbVi6NM6hqloWSrK7KXXZpkvN773kaq5UPKS8eeD4GkrXZGPRCtAFl4x11XhNoJ9eS4PGCg3sd6B6C9aqw1xUP+NE1FD/4bGRpQU3PIfpJ/NxvgIjGbAOXwAYGzzGguCepmK2egxcakdhwknnkUGAQmv3ruI0mH4vWMLbdmTDAL
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\d0f6e469-a573-473c-94d8-aab7e5f4f046-1.job - C:\Program Files (x86)\iWebar\iWebar-codedownloader.exe /rawdata=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
C:\Windows\tasks\d0f6e469-a573-473c-94d8-aab7e5f4f046-2.job - C:\Program Files (x86)\iWebar\d0f6e469-a573-473c-94d8-aab7e5f4f046-2.exe /rawdata=jskTr79dlzrJKnpfu/SJAsrNIfrxjTwEw1PcqXc2ABv8LESUAvCcKhAFwLmb2P6CTiz1n1kJoYJ3RufkP9G/caDBfCF3F86AJwRAm6Z/XVFVovkIuKWnNm+WUWqZNewegT00qmWXfthS2FN01zwGZ+21kxP4jRp6tgGQu4WI1bNqbnXYV0c9OiKJ2HixGsIUvnK7XHOGXXMA3LMAELg6oyScuNiWVAAnpNYVMZV6gwyw8J4+XecpQ3PyUXCUGLWCmTxUG1MZOO3mqtwNfqx9bmu3NgZkO/M62CBdTOQimtrii1ToirhPaMPxB9YKYkTUmOAMNaLdzyMe4sak+f41u7jdJizohT5XB6oyXyhzn4miikcA6OtgFd+zBTOgZPAnKErGNgz4WeWsaxFO8wK4X7HCGiFBKGU2C9PUHipvAP3cvxon4Bnur9mw89NKu9duuicBDpz6qQszu4bEhQ1PLBCVQ+MIkF0XKYeAo7Mg5XBd5S83VZ85ckYzWD8ppCLGqDIu7hN5s46brlV2SbxhpaVStbjaHZ8oZqAvMPyfKhP38VlEDyOKmAlY6ph69ZXMupyXhFSI2sEYZh9CfRvH5fSIF5hbzWD8yPo9O/CRTx8EHUskcSCrncoGGPvyom+RzpULvJlii/iFZmsS7P9JP+KKypp6yx1c80tNtnTiM7oTnjqSgcEo7O4F1RO20/BnQpwVLC/fwAOvaor7mftfrN3jXxOk+DZeUIPn7tWTxnSTtEetikARSd26onMxmUITDW5idFMDexNfDq74JeVLCSyHgdToG39oN/PnFcztxR/BpqYoC3CVqzjEykSAp3G+NZcSgGHB7MMd2AV32h7uUUQVOXs8V1ZCLrhnOh5AlbSFUXxrEW9yesjSMFI3zmD9W3MapaKqa3JeAvqJL8jTOTVcFJ3528XJHLmipgIy+/uAK4KMpCsykeQSQz9dQHx5klYrwvQS/8wH9kEnNIAQxcLs4mKU0uAHa8xESXac4iXEob7IQHFnB5db6a3BOffJ
C:\Windows\tasks\d0f6e469-a573-473c-94d8-aab7e5f4f046-5.job - C:\Program Files (x86)\iWebar\d0f6e469-a573-473c-94d8-aab7e5f4f046-5.exe /rawdata=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
C:\Windows\tasks\d0f6e469-a573-473c-94d8-aab7e5f4f046-5_user.job - C:\Program Files (x86)\iWebar\d0f6e469-a573-473c-94d8-aab7e5f4f046-5.exe /rawdata=JYJaxnXCnPf1JNBQQj8BgfNPSOoAh2ktHElFWEiLOHQYTvA4hZAKii3t/u6JPFuhs2VDCCa7sd//IW5gN5+ozGTUIKY8HAlr3S3vgWaPmLs2fiSqAH/QV2A+cJtA3gCV2+aeEMujlgJ7NuINKcf1sMveu2iAwUFnjQG+uBBYeXB2ff/8VguC4e/3EMspr/clM17FKnTMc1KeNenXzgMTJD9c8q1Ypg6SIq/wim2E8B4FnxYMuqRGDsEiH5+Di9bjQd9e8HvVH5uCo4spSnr111Cut2sAwp6nO3nU8zJg0q7KdJT6dHyWCu+lfjTxNDngqDPAXAa7S2MbDTgrKhZD+FfaQ1q35WmUNjNScAdt0qn7hRomZIAOfIzGmDaG+4IRPL0t87Lyer0R1FAW1qKRSn8r2CnIqidum4zc5OL+AU/GMA0ogm1iX2+tntWrrawzEU/ByEII3hrOT5LTsa1VGUuPtG7FnQ3KdUR7vy4G+5G56JJ48z/qRESrGotw5yOKbBe4HPwJZ/qvkRp04dFGQ0E5T1Sa9zL4orKT88LZHl5PH9Gjvw3FOYCZwz7kckS1k0kZ7lIo8zTfqnOns/UoRaV96qD3zu82PA3Pw4qry2Efdp75Hl4f3sTFWId29OsFfOO9PWJr5XrHAmbuBWVdfoDFOGjo+sV81y8qHwhuDAaXdTj9CzkSIsYI+gk+Rpt1fF/NfkCnWnbVgwM797LwajfvV2IpSObncQE8H8IAmZdIPtqvHSit3oOAS7xI9iivHyB5Js3MUnMqpgkam+Y8lB3u+MNRncmKAf62pvfUusK8r1Pp7s4se7wY9DfOD+slPEVMP0gXVda5tZOu2zZtAFQu7e4kb1D6wAsV0o0KK97jLT0GMDRm81jFVvSwrgfFdUYOj1B869+i2qif+l43nz6gY1arL2EgTWeaTjifVoz97lGzvtdv+BY8AcJq3gBiVn0427hiSY5UV4E2XloKRGOdacltiPXEr29i7E586Y2Ky1uU4vKo780bHkAVGCllN7KJsGNgYSb2Pk0R7aiOugDEM3iMdq1935OJlB/sFMFhWHpBveQddzm5pad/W4J67UsZUxz7QnwB7j0hTHeZFgXbtTNyw8oeQZ9db5RECAGn6w5JYZtrMbhYMhTKobfXKQdZNFJ6o9R3QAlkHDJWKKPyijwc6VhRpLAUVDXmNxM=
C:\Windows\tasks\d0f6e469-a573-473c-94d8-aab7e5f4f046-6.job - C:\Program Files (x86)\iWebar\d0f6e469-a573-473c-94d8-aab7e5f4f046-6.exe /rawdata=GhiCftPPiC/HtLUye9sHBDYotCAv9PdVnvUt4UbROh59/TnKdBkRrLFbQqLHvdIKoOUoptV4DGcogA2xCbSco/uONnPKiNEoeEPVx3AeAgYQL4ZpBmg8KJXOGIEwsoLc/A1rCpzGJXoFJZlsmTgp1/7OgJ3Rspl4/ewYnsiDZ26WbVx/R/uUQPfIrQnm0cH7OjJfUYRP9ys/qr9VVCAlJn35lpvEbX3fcgxk8hlbfDzCLBiFC3fVMYK6G0fRw8ZG6pyEpMiwAYJwtgpqbtyPCr+UZvLI7TCuK/GabGa448D2VBRKgnReRlHOfi7CllznP/o/gYqfGfIDNzuoK15aP7NL+6znA8XTAPEH6Rdp4N+d8xwjR3b8F2XIfGXNuKEdg3Z/wrSu0/XlWPcl1YmPII2FqjR+x18Wg9AEysvzzraTuxseQ51yUdtUU3D94Fn0d7VupGeSiKRIDaFkh2UqhY2JPdpsTEF04D/cgQ8njyrmT1nz9DGqVqniJ13yA++UaJ0si9HEL2f8hGwo3cx7v+hW+OzTjHahZe3AnlSA7dCw3XVU6sm05/mHOcNpwaIhkLCJshxGCUJGhveZvF9+7+o07S+kOMjCNEIzLUxpLefA6tkzOw/xNa0XfUVJsYPLFaYqn1VGueWsdWxUbDwIzYDJkpVnZtziKHcNJ8e3bJ2QMER7WBk2g+R6kEAwOOkCwR6VH7B0sbEHUkpwoMmG+Ysrvtzhsa4yj4s9dwDfSN+hEzY+Rrd0YPfvkjxg0CQR28r1OJkbhI6pQ4dIHAr/ST4PB5rE53hUK6kcx9UfMYu3weidzAlzT0yfP1FkOl9XiWR7jaU4p/v6fPLa2fTxp4RYM1kz9ZXjgAansOUIckXWzKuGa/XzkTOMEOWyeK7rbC+Bm3HS0+gj16Mtzbn+d2mWyaP0JhxdZcQ0WDumn2EA58N0ASpUt/o6FEIv7O9twyjLhGB1el7Lqi4cbZNkLDeBOK1M4RNa1g6FMSUjeFoevYaySo9wbCvqa+HtgkwBEdmVEOsst/H3b3RloDDMvER8V+fzHni8jJP3K8WKwZ8i4G7kNZspQb8ncNvUpDhmbEBMwsH3y6+3wsSalH9Fyt9YZjOuomvtRoo7WK5wb5Y2hzxDk+RM1Bpg7qdDOg153SbSL5s9k+mxExgUV+hhDXHsMwEf7sjGNM5cBav9zR0uVJUjfCAR5dhSursKYffooJaa/b7mqsUSAdg87VMOK5QqYxHSfdstQKmevoCr+3NfRE/k+3vFiEdkJ9xwgtkAKiW+e+31+Ki45odAr++f+PWgZxDKqkFgJvkuEC5fl/HKkZF8VHuedgnRbBISAv3qq106/ZA7Ym8ViLs934sKLLs+cWVmlleNmELAAXbDkChRFos/RiFn5j6rqMlKbJG3aA9CVudu8F+rS8sMCErhGHOao9j9A8kYopoayJypnxsXWI0zwPDG3gCadXBfz2WfUbvVZaeIBR5bpnvjbqwHqWYGs1rA6lMiu/ImCJNQ8Qq1BQuXSnjIKal61DQqt54KdP/zCf4OwquRAtrmQM0NFSiLS8hQzc2slSoDqhHaUDHbq8ojjvmMvM8ndU/z4V5GW+jfaRXcnyRfxOGZJ9+m9cBasZQ4iUlBqmQpkLUd8E9je2ii1BPAekR5g7IImBZ8oUkgwHgzhe/WY62WXXOiPOGVBh5QErOrmbwEqpFuECcDSXXLA0V7cMTYSp3pJpRGXlTeCHWrBrNpeoBVz6sTTLPtZxyi8A3Mw+yUmGONK9Vrj1HD5QnVPZAH521WDkPbjZmINwFVgRzVybLAOXVcEMvKRP12g6kRR3XUvz4b11ybRWT/FXhNniPRbKAjoDAhKs7niTfYvO1GDLuTL/iRSLTtgIRXy7WMCnOR0jBE1rEYqfb0Y6lmqdTBngaTzvj4E1rndrK6hcefV+GUG9gIaTNoEFFOOG3Vl3v0MviHnezXjY9CitglZdys1sJu7M9JMFgMWjwTLU/DihqDk4T/DvEuexqIgWulUsoysTKn6VGT4I1GU57qkYAlotpXNDSgn3h+NzV7gZpKjjYSNR9VOFTTUr2CUrlWPX44s3lOY/PYlA/UMZnwf+lt44Ad1vjwdURJYfu22pLGTfK1CxYIPBzA9BSkIzkNKUopHjXAONFGmNopS+q89Oeqc2Zx1XRaEB2LYDujwZql5YwV1wGbu09GTMAyRDFVMBHWLHtGAIN+AAmMBOcomqJVNTF8w/QMqZhqZkgpOxnhM1OSKGMsDmrR9NqQVBPmvhzEPlN86MuYopUvFs9G6Ys48DoEGsRtC+q7tYEb8kp1ZTrmSyCbUmgujl5jHe56U1XqAhTRjWlaTLcUffGcSGLHHLHyWYWhJKwurYDVFflOzXwDlR7O8bBbbSgn7hTzF6P7qq+SzdYtCkM/NulNQUHZ15xLYzuvCxSdCncAuzwWv0/Y8wV394sq8113hH9aBGDkVStMyOCLTamF44bDRXocKTJ9IrSvvgPasOXfdRSMpJ3tvvhnyicTWCGOfHNSE5NFlGvQ1cSOZYhEsSkkYFAGa4i32qo0Gm8lv5ne0M4yoVVnD05cFpSuwwskwgNub3dc9RfIC+uScSt4mT6nDIy/EER5quvTGI0MRlrdgumb+RGEgKpS1+uaj5t8l8uu4SpiCkhQ86ruuBNkL2JQwAkqIkUAwvidyuuEXmQSzcPIDZSYP9CH07xBoJgb8LVXgNdJdfAXe75aFoczDRXPNQcsW6HCx61erzFxLAPQ0+lYnM8EWaNTho0CP3m+YFzk3L/8wwLeswNAFtZURl8OrGkAF8D+IKBcPQ877X1Twsuebg/g6zpSBNiH+MFpyp04n30tnKnbOzCpGHhRDHra/puq0THUDnXGxoKchFi11gE+uP4S0gY9iw==
C:\Windows\tasks\d0f6e469-a573-473c-94d8-aab7e5f4f046-7.job - C:\Program Files (x86)\iWebar\d0f6e469-a573-473c-94d8-aab7e5f4f046-7.exe /rawdata=a38PbeVMtJT31TlBuE3RzVLHJhJhA/R2MQT0O5GILlR1yRYoh1qRCRn6ddr9KDbILs0itcspl2G5UC8/rxL8bzocrPMv4PKMtTS74bwhxlkoFsQbwRohP7yNcYim9i7wm9NdJgXngFsDvD7IrfWYyZ8CD7uiAdCwCDRmNh7IQCdVnyOnRCcav+1dYlY1NZaMwwVVgXhB82HxVYA2NOOlAIHSZmYdFC1HLUQOPJnzX9R0/i19YuNyil7W5HCawcjknf+JEnqN9qygxN8iAIML1sMRBrt/dxOMpOlPXjSy+VzVeWLRh0L5O06cbR/oEehlk8y1DuKnPK9286+SzE93wzcpT68q4wMj6PXfMPKCxqbN5fiUM7d8HS6zpcPsUmfo/Y08guK3R9c5U/7MJMQhlEGRsp3Kjqa/oQYc/QyeDIVrWH/fH1zSc3/X+Asc9/uUoC/niKJSU0C6qlheyGLpWPnnND78e8a7221mVFEaFjjj2/CngzePOIigysJCau3XfwGrrdGnJLOwk8M/RffQpDkIFu+XXneT/pAxm4/Fho1AVR7pVBXKoubk3BKNRHty9JkKEnzCtzfuQPha81tyPIWReL9RXlAAgSyfg3U/BnKvniNK82QhA9bv3aHKCt+ETqqYXMuCJP/8lAFmmWhOlEQE2imzCHbWrBEgqoHjhGtqaTveypFhPK3QhEBI1v9719IMzqYD4dv0I2DlPa/js2x/gFRfC2s/zLyeLoCDk0uvo5gZESLwQlneRI33EYer5UYdohrBXvgN5xY2Ay871YHMfPSv9RR+zw5YEU+YQE3xCf5SdDqJlg39akbicFhmpntSE6ACT4ZvPXUWAX3a17bF64UGi0A0l/tbTrQ/x5nYOIgV8TwPc1TDMYFd+U8xn5E56nPgJdjtTFvTzDq5GA9S3WPuO1IBxnzWfe/P9j+FcJyTIC+auTxue6vnPMLxS2uuQx/iM2h/VPnLKg9buhdK/BiEnekgQfzgHxzuZ1E8M+oG3XTztn66zXPs80aZOJnsvYOj5H4ZbNBIydf/ViO1L3FMajicSouGE+JbTfxt+7afQ/Ftlt5fHCwJnCCQt9MZTXByYUm+f/VeOJ6dyf8ewZEuExdxZ1uERJLx44hwWJxZ17Z45TfMJEVsTxEX7KxK/n6lJ7fQ+HB8AzGcJPEmLeUjnBKvvpRsrVYhLMcydoClEURjeM++jNSZjlfVCbTGfOiBNNfosA2yp9UCGTC49ayVl8/xBpHb94BPi7RHctbtIls3Cwg9YpLq+OpabIRKYidU+85EgWCitY6iL/byqYiQPFJn06eTaa9h7a+LLrcE0o9FXY9xtbbC0kIQiI6KU+YI1oPv6VV4dPiCTaPkLVnSjKivRTQsHnkzPpby3tBqPvSWxgxI72ZFJClg/ZCLXV8z2l4fZkzjFyncwCBxaNx0BWjUJqHy7MirO/b+TTs6etnJ1vtBEyNS1l98Ek6p+AfdUjD690k6SsolhlOZwMFFKWna8yF250eVF6rBIXCz4GlyF5atdCd4z9feuzX9Bk9tC4t7mcHiHg+4y8/t/dczxsDKxfpdLwXdKXV5YPh3nPUyx2x6PjR+PktwKfIaw5zqOBiF5xGswfvZzSnX3tarUuu4//WxBDo6L9qWT1ltc5DpNmhW9lmUUwVvSbAKgFu2c7aoUoMGEdiG9zL4GcU1IeAB4iBxMnyCYAkR2nz2UEMjCUS09+Z8KNU2fbqj/j1Uw50uNcAB9tgJQgsjmUvhiG1mSvMhDxnEtAdiAOM00919bUNcUn8w4ciaLM8hrfWSMqB2SZKitaVjG+SXHlj/BsVfJlaYigaTIf0ICOKcbSMorD496qgFxNGPwbW1ct796UC3nWQfCP/9Yxue2hong7xObEZ+gB6LGrYZh71DgmDnNh716DBhqP7ZwKE/A445bZW8Pq7nWM/Gdcw5NFOqtU5E65kOnvJoKyNg7+l8zCTH5Mj/I0Ztaxo/xyxrJ7L8aaLRvPiPQZIpx/jna5/1zIrqgG6qmEdwqgW9j/Btt3Jj9nBbhfSW4TuKdr2Gct5dEL9sIKYL9pRJ+HwVrQtvlN2jcfvTJM/dyMzMyWUbsdJMLGubY+A6YWokxmkMKLSMCDBJQJTDFw/TB0WeciGsoGfqU2bL/e0cqC5X3HEuoYpcH5vawqu/Ie+BCf1KQ9AC2f7lwnEJ/gYBzyKKuZqhVwvyYI8+p7U+JF4+eU6QKgzJODY2fWyk7YjZMCYoCDOFgAjv9v+54ZN9ma8oqgKY49GAIy1rTs0FBlq8OOXa4opmeKwToSjCxMf4R7jahQABFBRIPxGvaZeXUUh4Az1u19CV64NAA0bXO8pRcscGiT1z7IJcxGjzUPMVDawHnPakeA8KdaH2IrdQNMJdnp1pDs3i3GJK3hN2mmG5g48X4qO2lB+DN9Mw6hXnE2j4E8UMZnlYO/xgHXHx2VmewkwF4DTU/ZNkDXjvsNZUI75YOcbbIiZIkEByJCNfE+RJRLKFwxqJodiJ7iV0NoElTfiKGjXo5561d2nu5EAAAFHObLZzYWepn+AMVB5EMeDHj+vMB2QnSIqSnEGUkroX5HW/n9jUvTEsYw0rvfpi8O/OIiDZl7IRDcJglOwe0J+tkpHHQnur7jTHu0s1HAWua8Ta+4FtLq4QJns9nRKrjCrUJH35T8jnN270Ur214phFDu6seA4NSSFCMw/KA84PfodllFpgfmyhCKTKqrU=

=========Mozilla firefox=========

ProfilePath - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\y4cgmyn6.default

prefs.js - "browser.search.suggest.enabled" - false
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "about:blank"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.296 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.25.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.296 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL


C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\y4cgmyn6.default\searchplugins\
Google.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-01-20 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll [2015-01-10 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-01-20 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll [2015-01-10 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-12-13 2531472]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-12-13 2824504]
"FAHConsole"=C:\Program Files\File Association Helper\FAHConsole.exe [2014-01-28 729272]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2014-12-12 7394584]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Launcher3010"=C:\Program Files (x86)\Xerox Office Printing\WorkCentre SSW\Launcher\xrlaunch.exe [2011-04-19 2570752]
"3010 RUN"=C:\Program Files (x86)\Xerox Office Printing\WorkCentre SSW\PrintingScout\xrksmRun.exe [2013-07-30 355840]
"StatusAutoRun3010"=C:\Program Files (x86)\Xerox Office Printing\WorkCentre SSW\PrintingScout\xrksmpl.exe [2013-07-30 4277760]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-10-15 157480]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-01-20 5227112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-01-25 12:59:52 ----D---- C:\Program Files\trend micro
2015-01-25 12:59:51 ----D---- C:\rsit
2015-01-21 11:47:44 ----D---- C:\Users\Michal\AppData\Roaming\Macromedia
2015-01-20 21:15:56 ----D---- C:\ProgramData\McAfee
2015-01-20 21:15:52 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-01-20 21:15:49 ----D---- C:\Windows\SYSWOW64\Macromed
2015-01-20 21:15:46 ----D---- C:\Windows\system32\Macromed
2015-01-20 15:28:13 ----A---- C:\Windows\system32\drivers\iSafeNetFilter.sys
2015-01-20 15:28:13 ----A---- C:\Windows\system32\drivers\iSafeKrnlBoot.sys
2015-01-20 15:28:12 ----D---- C:\Windows\system32\log
2015-01-20 15:28:01 ----D---- C:\Users\Michal\AppData\Roaming\Elex-tech
2015-01-20 15:28:01 ----D---- C:\Program Files (x86)\Elex-tech
2015-01-20 15:27:31 ----D---- C:\Users\Michal\AppData\Roaming\eCyber
2015-01-20 15:15:09 ----D---- C:\Users\Michal\AppData\Roaming\Mozilla
2015-01-20 15:15:00 ----D---- C:\ProgramData\Mozilla
2015-01-20 15:15:00 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-20 15:14:57 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-01-20 11:03:57 ----D---- C:\Users\Michal\AppData\Roaming\AVAST Software
2015-01-20 11:01:44 ----A---- C:\Windows\system32\drivers\aswStm.sys
2015-01-20 11:01:43 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2015-01-20 11:01:42 ----A---- C:\Windows\system32\drivers\aswSP.sys
2015-01-20 11:01:39 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2015-01-20 11:01:36 ----A---- C:\Windows\system32\drivers\aswmonflt.sys
2015-01-20 11:01:35 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2015-01-20 11:01:33 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2015-01-20 11:01:25 ----A---- C:\Windows\system32\drivers\aswsnx.sys
2015-01-20 11:01:18 ----A---- C:\Windows\system32\aswBoot.exe
2015-01-20 11:00:54 ----A---- C:\Windows\avastSS.scr
2015-01-20 10:58:32 ----D---- C:\Program Files\AVAST Software
2015-01-20 10:57:34 ----D---- C:\ProgramData\AVAST Software
2015-01-18 20:33:37 ----D---- C:\Program Files (x86)\864449e0-cb9c-42df-b201-70ab11a8750f
2015-01-18 20:32:33 ----D---- C:\Program Files (x86)\1ccd2e0c-859b-4ff0-84b9-6e06e329f718
2015-01-18 20:24:58 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2015-01-18 20:24:46 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2015-01-18 20:22:58 ----AD---- C:\ProgramData\TEMP
2015-01-18 20:22:32 ----D---- C:\Program Files\Common Files\ShopperPro
2015-01-18 20:16:18 ----D---- C:\ProgramData\{f0d631a1-2626-f8ac-f0d6-631a1262c684}
2015-01-18 20:15:55 ----A---- C:\Windows\system32\drivers\{44219168-7340-43df-bbc2-89f0b26c112f}Gw64.sys
2015-01-18 20:09:34 ----D---- C:\Program Files (x86)\SourceApp
2015-01-18 18:44:18 ----D---- C:\Program Files (x86)\ea3837a7-4fd2-4d77-8ed6-85a2bc78186a
2015-01-18 18:44:12 ----A---- C:\Windows\system32\drivers\sptd.sys
2015-01-18 18:44:06 ----D---- C:\Program Files (x86)\SuperPlusRadio v2.1
2015-01-18 18:43:54 ----D---- C:\Users\Michal\AppData\Roaming\DAEMON Tools Lite
2015-01-18 18:43:20 ----D---- C:\ProgramData\DAEMON Tools Lite
2015-01-18 18:22:35 ----D---- C:\Program Files (x86)\uniiSSales
2015-01-18 18:22:24 ----D---- C:\ProgramData\mdpalooaaiffpgijfjkhahmecaefiipb
2015-01-18 18:17:02 ----D---- C:\Program Files (x86)\TampaGeneration
2015-01-18 18:16:09 ----D---- C:\Program Files (x86)\youtubeadblocker
2015-01-18 18:15:45 ----D---- C:\Program Files (x86)\uniSAles
2015-01-18 18:15:27 ----D---- C:\ProgramData\12973729350385939826
2015-01-18 18:15:24 ----D---- C:\Program Files (x86)\uniisales
2015-01-18 18:14:55 ----D---- C:\ProgramData\degpanfoemdmbpmlgogdhicfpjehbakh
2015-01-17 22:29:51 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2015-01-17 22:29:51 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2015-01-17 22:29:51 ----A---- C:\Windows\system32\xactengine2_0.dll
2015-01-17 22:29:51 ----A---- C:\Windows\system32\x3daudio1_0.dll
2015-01-17 22:29:47 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2015-01-17 22:29:47 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2015-01-17 22:29:47 ----A---- C:\Windows\system32\d3dx9_29.dll
2015-01-17 22:29:47 ----A---- C:\Windows\system32\d3dx9_28.dll
2015-01-17 22:29:46 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2015-01-17 22:29:46 ----A---- C:\Windows\system32\d3dx9_27.dll
2015-01-17 22:29:45 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2015-01-17 22:29:45 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2015-01-17 22:29:45 ----A---- C:\Windows\system32\d3dx9_26.dll
2015-01-17 22:29:45 ----A---- C:\Windows\system32\d3dx9_25.dll
2015-01-17 22:29:44 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2015-01-17 22:29:44 ----A---- C:\Windows\system32\d3dx9_24.dll
2015-01-17 10:25:54 ----D---- C:\Users\Michal\AppData\Roaming\AVG
2015-01-17 10:25:38 ----D---- C:\Program Files (x86)\AVG
2015-01-17 10:25:02 ----HD---- C:\ProgramData\Common Files
2015-01-17 10:25:02 ----D---- C:\ProgramData\AVG
2015-01-17 10:24:34 ----D---- C:\Users\Michal\AppData\Roaming\Opera Software
2015-01-17 10:24:09 ----D---- C:\Program Files (x86)\Opera
2015-01-14 09:20:58 ----A---- C:\Windows\system32\profsvc.dll
2015-01-14 09:20:57 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2015-01-14 09:20:57 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2015-01-14 09:20:57 ----A---- C:\Windows\system32\nlasvc.dll
2015-01-14 09:20:56 ----A---- C:\Windows\system32\TSWbPrxy.exe
2015-01-14 09:20:56 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2015-01-14 09:20:54 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-01-14 09:20:54 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-01-14 09:20:54 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-01-14 09:20:53 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-01-14 09:20:53 ----A---- C:\Windows\system32\srcore.dll
2015-01-14 09:20:53 ----A---- C:\Windows\system32\srclient.dll
2015-01-14 09:20:53 ----A---- C:\Windows\system32\rstrui.exe
2015-01-13 21:01:35 ----D---- C:\Users\Michal\AppData\Roaming\NVIDIA
2015-01-13 21:01:34 ----D---- C:\Users\Michal\AppData\Roaming\Stellarium
2015-01-13 21:01:18 ----D---- C:\Program Files (x86)\Stellarium
2015-01-10 22:40:40 ----D---- C:\ProgramData\Sun
2015-01-10 22:40:34 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2015-01-10 22:40:21 ----D---- C:\ProgramData\Oracle
2015-01-10 22:40:18 ----D---- C:\Program Files (x86)\Java
2015-01-06 11:58:41 ----D---- C:\Users\Michal\AppData\Roaming\Apple Computer
2015-01-06 11:58:14 ----DC---- C:\Windows\system32\DRVSTORE
2015-01-06 11:58:14 ----A---- C:\Windows\system32\drivers\GEARAspiWDM.sys
2015-01-06 11:57:46 ----D---- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-01-06 11:57:46 ----D---- C:\ProgramData\Apple Computer
2015-01-06 11:57:46 ----D---- C:\Program Files\iTunes
2015-01-06 11:57:46 ----D---- C:\Program Files\iPod
2015-01-06 11:57:46 ----D---- C:\Program Files (x86)\iTunes
2015-01-06 11:57:08 ----D---- C:\Program Files (x86)\Apple Software Update
2015-01-06 11:56:59 ----D---- C:\Program Files\Common Files\Apple
2015-01-06 11:56:50 ----D---- C:\Program Files\Bonjour
2015-01-06 11:56:50 ----D---- C:\Program Files (x86)\Bonjour
2015-01-06 11:56:35 ----D---- C:\ProgramData\Apple
2015-01-03 12:10:03 ----D---- C:\ProgramData\WinZip
2015-01-03 12:09:36 ----D---- C:\Program Files\File Association Helper
2014-12-31 13:23:50 ----D---- C:\Users\Michal\AppData\Roaming\WinRAR
2014-12-30 22:38:43 ----D---- C:\Program Files (x86)\WinRAR
2014-12-29 20:16:46 ----D---- C:\Program Files (x86)\Microsoft ASP.NET
2014-12-29 10:58:43 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2014-12-29 10:58:43 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2014-12-28 21:21:58 ----D---- C:\Program Files (x86)\oTweak
2014-12-28 21:21:40 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2014-12-28 21:21:40 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2014-12-28 21:21:40 ----A---- C:\Windows\system32\d3dx11_43.dll
2014-12-28 21:21:40 ----A---- C:\Windows\system32\d3dx10_43.dll
2014-12-28 21:21:39 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2014-12-28 21:21:39 ----A---- C:\Windows\system32\D3DX9_43.dll
2014-12-28 21:21:26 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2014-12-28 21:21:26 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll
2014-12-28 21:21:26 ----A---- C:\Windows\system32\nvspcap64.dll
2014-12-28 21:21:26 ----A---- C:\Windows\system32\nvspbridge64.dll
2014-12-28 21:21:11 ----D---- C:\Program Files (x86)\AGEIA Technologies
2014-12-28 21:20:42 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2014-12-28 21:18:55 ----A---- C:\Windows\system32\nvaudcap64v.dll

======List of files/folders modified in the last 1 month======

2015-01-25 12:59:56 ----D---- C:\Windows\Prefetch
2015-01-25 12:59:53 ----D---- C:\Windows\Temp
2015-01-25 12:59:52 ----RD---- C:\Program Files
2015-01-25 12:57:44 ----D---- C:\Windows\system32\config
2015-01-25 12:56:08 ----D---- C:\Program Files\CCleaner
2015-01-25 12:55:10 ----D---- C:\Windows\SysWOW64
2015-01-25 12:53:45 ----D---- C:\ProgramData\NVIDIA
2015-01-25 12:49:31 ----SHD---- C:\Windows\Installer
2015-01-25 12:49:24 ----RD---- C:\Program Files (x86)
2015-01-25 12:49:22 ----D---- C:\Windows\system32\drivers
2015-01-25 12:47:52 ----SHD---- C:\System Volume Information
2015-01-25 10:25:39 ----D---- C:\Windows\System32
2015-01-25 10:25:39 ----D---- C:\Windows\inf
2015-01-25 10:25:39 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-01-25 10:19:20 ----D---- C:\Windows
2015-01-24 20:39:26 ----D---- C:\Users\Michal\AppData\Roaming\vlc
2015-01-24 16:00:01 ----D---- C:\Windows\system32\LogFiles
2015-01-21 18:22:10 ----HD---- C:\ProgramData
2015-01-21 11:47:23 ----D---- C:\Windows\system32\Tasks
2015-01-21 11:46:27 ----D---- C:\Windows\Tasks
2015-01-20 18:21:47 ----D---- C:\Program Files\Google
2015-01-20 18:21:47 ----D---- C:\Program Files (x86)\Google
2015-01-20 14:52:22 ----D---- C:\Windows\system32\NDF
2015-01-20 11:01:23 ----D---- C:\Windows\winsxs
2015-01-20 10:47:30 ----A---- C:\Windows\win.ini
2015-01-19 20:39:40 ----D---- C:\Users\Michal\AppData\Roaming\uTorrent
2015-01-19 20:39:37 ----D---- C:\Windows\SYSWOW64\LogFiles
2015-01-18 22:05:44 ----SD---- C:\Users\Michal\AppData\Roaming\Microsoft
2015-01-18 22:05:43 ----D---- C:\ProgramData\Microsoft Help
2015-01-18 21:28:43 ----D---- C:\Windows\system32\GroupPolicy
2015-01-18 20:26:23 ----D---- C:\Windows\system32\catroot
2015-01-18 20:25:06 ----D---- C:\Windows\system32\DriverStore
2015-01-18 20:22:32 ----D---- C:\Program Files\Common Files
2015-01-18 20:19:43 ----D---- C:\Windows\system32\catroot2
2015-01-18 17:51:10 ----D---- C:\Windows\SYSWOW64\drivers
2015-01-18 17:45:45 ----D---- C:\Program Files (x86)\Common Files
2015-01-17 22:29:51 ----RSD---- C:\Windows\assembly
2015-01-17 22:29:48 ----D---- C:\Windows\Microsoft.NET
2015-01-17 19:37:00 ----D---- C:\Windows\system32\wdi
2015-01-15 12:21:07 ----D---- C:\Windows\debug
2015-01-14 22:15:23 ----D---- C:\Windows\system32\MRT
2015-01-01 14:47:35 ----D---- C:\Windows\system32\wfp
2015-01-01 14:47:32 ----D---- C:\Windows\system32\wbem
2015-01-01 14:45:45 ----D---- C:\Windows\AppCompat
2015-01-01 14:45:45 ----D---- C:\Users\Michal\AppData\Roaming\IrfanView
2015-01-01 14:45:45 ----D---- C:\Program Files\Internet Explorer
2015-01-01 14:45:38 ----HD---- C:\GrandeDevice
2015-01-01 14:45:37 ----D---- C:\Windows\registration
2014-12-31 13:12:54 ----A---- C:\Windows\system32\MRT.exe
2014-12-31 12:14:31 ----N---- C:\Windows\system32\MpSigStub.exe
2014-12-30 17:43:55 ----D---- C:\Windows\Logs
2014-12-29 10:58:58 ----D---- C:\Program Files\NVIDIA Corporation
2014-12-28 21:27:56 ----D---- C:\ProgramData\NVIDIA Corporation
2014-12-28 21:21:25 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-12-28 21:02:38 ----D---- C:\Users\Michal\AppData\Roaming\Adobe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-01-20 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-01-20 267632]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2015-01-18 386680]
R1 {44219168-7340-43df-bbc2-89f0b26c112f}Gw64;{44219168-7340-43df-bbc2-89f0b26c112f}Gw64; C:\Windows\system32\drivers\{44219168-7340-43df-bbc2-89f0b26c112f}Gw64.sys [2015-01-18 48784]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-01-20 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-01-20 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-01-20 436624]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2015-01-18 283064]
R1 iSafeKrnl;YAC Mini-Filter Driver; \??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys [2015-01-19 249000]
R1 iSafeKrnlKit;YAC Kit Driver; \??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys [2015-01-19 99496]
R1 iSafeKrnlMon;YAC Monitor Driver; \??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys [2015-01-19 42152]
R1 iSafeKrnlR3;YAC Ring3 Driver; \??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys [2015-01-19 93352]
R1 iSafeNetFilter;YAC NDIS Driver; C:\Windows\system32\DRIVERS\iSafeNetFilter.sys [2015-01-03 52392]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-01-20 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-01-20 87912]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-01-20 116728]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-10-03 33240]
R3 netr28ux;RT2870 USB Wireless LAN Card Driver for Vista; C:\Windows\system32\DRIVERS\netr28ux.sys [2009-06-10 867328]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-12-13 19600]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-11-22 38032]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-03-01 187392]
S0 prohlp02;StarForce Protection Helper Driver v2; C:\Windows\System32\drivers\prohlp02.sys []
S0 prosync1;StarForce Protection Synchronization Driver v1; C:\Windows\System32\drivers\prosync1.sys []
S0 sfhlp01;StarForce Protection Helper Driver; C:\Windows\System32\drivers\sfhlp01.sys []
S1 prodrv06;StarForce Protection Environment Driver v6; C:\Windows\System32\drivers\prodrv06.sys []
S3 a2twk28r;a2twk28r; C:\Windows\system32\drivers\a2twk28r.sys []
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 iSafeKrnlBoot;YAC Boot Driver; C:\Windows\system32\DRIVERS\iSafeKrnlBoot.sys [2015-01-19 45224]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2014-08-15 54784]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-10-07 60744]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-01-20 50344]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2014-12-13 1148560]
R2 iSafeService;YAC Service; C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [2015-01-19 120128]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-12-13 1701520]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-12-13 19823248]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-07-02 935368]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-07-02 411936]
R2 XRNADB;XRcnStatutsDatabase; C:\Program Files (x86)\Xerox Office Printing\WorkCentre SSW\PrintingScout\xrksmdb.exe [2013-07-30 141824]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-10-15 643880]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-25 267440]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-22 114688]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-01-09 114800]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-12-19 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

[vyosek]

Zdravim

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Po spusteni probehne stazeni databaze
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  resethosts;
  emptyclsid;
  IEdefaults;
  FFdefaults;
  CHRdefaults;
  emptyIEcache;
  emptyFFcache;
  emptyCHRcache;
  emptyalltemp;
  emptyflash;
  emptyjava;
  emptyrecycle.bin;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem