VIRY.CZ

Dobrý den, moc prosím o kontrolu logu. Počítač je celkově zpomalený a prohlížeče v podstatě nepoužitelné. Neustále vyskakují nějaká okna.
Děkuji předem za váš čas a ochotu mi pomoci.
Petr

Logfile of random's system information tool 1.10 (written by random/random)
Run by BURDA at 2015-02-10 12:33:43
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 377 GB (79%) free of 477 GB
Total RAM: 4095 MB (34% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:33:49, on 10.2.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17496)
Boot mode: Normal

Running processes:
C:\Windows\vVX1000.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe
C:\Program Files (x86)\Zrychleni Pocitace\PCSUNotifier.exe
C:\Program Files (x86)\XTab\cmdshell.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\BURDA.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type= ... earchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type= ... earchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type= ... earchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type= ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\XTab\SupTab.dll
O2 - BHO: CoouopExtensiona - {3d312810-7190-4916-93cb-3fd1ba18c694} - C:\Program Files (x86)\CoouopExtensiona\WvnRJ3qx3JArp6.dll (file missing)
O2 - BHO: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
O2 - BHO: DuiggiSaever - {a1dc1d9f-f52b-4548-a01d-2398b5e689cc} - C:\Program Files (x86)\DuiggiSaever\aciB7IYp9QcThn.dll (file missing)
O2 - BHO: Rich Media Downloader - {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - C:\Users\BURDA\AppData\Local\Rich Media Player\BrowserExtensions\IE\RichMediaDownloader.dll
O2 - BHO: 50CCoUUpoNs - {ae6ae595-eb2f-4fcb-85ff-fd236bd3d1b2} - C:\Program Files (x86)\50CCoUUpoNs\yAAUM1AgMRIJl1.dll (file missing)
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (file missing)
O2 - BHO: ?????????? ???????? - {D5FEC983-01DB-414a-9456-AF95AC9ED7B5} - (no file)
O2 - BHO: Rich Media Player - {FEB703F7-E7B2-4AB0-9566-87658AC70095} - C:\Users\BURDA\AppData\Local\Rich Media Player\BrowserExtensions\IE\PluginRichmediaplayer.dll
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKCU\..\Run: [PCSpeedUp] C:\Program Files (x86)\Zrychleni Pocitace\PCSUNotifier.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Stáhnout FDM - file://C:\Program Files (x86)\Free Download Manager\dllink.htm
O8 - Extra context menu item: Stáhnout video FDM - file://C:\Program Files (x86)\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Stáhnout vybrané FDM - file://C:\Program Files (x86)\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Stáhnout vše FDM - file://C:\Program Files (x86)\Free Download Manager\dlall.htm
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Rich Media Downloader - {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - C:\Users\BURDA\AppData\Local\Rich Media Player\BrowserExtensions\IE\RichMediaDownloader.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: IHProtect Service - XTab system - C:\Program Files (x86)\XTab\ProtectService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PC Speed Up Service (PCSUService) - Unknown owner - C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Reimage Real Time Protector (ReimageRealTimeProtector) - Reimage® - C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WindowsMangerProtect Service (WindowsMangerProtect) - SysTool PasSame LIMITED - C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 10204 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
"C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k NetworkService
C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe -service
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\Supporter\Supporter.dll",serv
"C:\Windows\vVX1000.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe"
"C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\Supporter\Supporter.dll",serv
"C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Zrychleni Pocitace\PCSUNotifier.exe" /pcm
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\XTab\ProtectService.exe"
"C:\Program Files\Microsoft LifeCam\MSCamS64.exe"
"C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe"
"C:\Program Files (x86)\XTab\cmdshell.exe"
"C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Reimage\Reimage Protector\ReiSystem.exe"
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-98609322-ced1-41ab-b081-a447d3ce6966 -SystemEventPortName:HostProcess-6aad1082-0f2c-4d02-b36e-0a79e0e076b3 -IoCancelEventPortName:HostProcess-5ae0d1d1-b14c-4bbf-ba3a-17155ad175ed -NonStateChangingEventPortName:HostProcess-5f9fac60-ed08-4284-93b7-f0cb05ae73a0 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:6b05b3da-7b16-42e1-9600-3f487c551f87 -DeviceGroupId:WpdFsGroup
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -p
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=1148.443cf000.644603634 "C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 1148 "\\.\pipe\gecko-crash-server-pipe.1148" plugin

"C:\Program Files\Internet Explorer\iexplore.exe" http://www.mystartsearch.com/?type=sc&t ... 0594905949
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2652 CREDAT:267521 /prefetch:2
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-1389227897-89279683-1822547642-10003_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-1389227897-89279683-1822547642-10003 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Users\BURDA\Desktop\odvirovani\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\PC SpeedUp Service Deactivator.job - C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe /dev0 /idle
C:\Windows\tasks\temp_45fade25-e234-4bf3-ae41-1595f99e2a45.job - C:\Program Files (x86)\Internet Speed Checker\45fade25-e234-4bf3-ae41-1595f99e2a45.exe 001726 031A7E0CF95044E3BBF5795C6B266452IE 61752 1409273953 93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 Internet Speed Checker

=========Mozilla firefox=========

ProfilePath - C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default

prefs.js - "browser.startup.homepage" - "http://www.google.com/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@richmediaplayer.com/nppluginrichmediaplayer]
"Description"=
"Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\nppluginrichmediaplayer.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.7.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll


C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\extensions\
1g@g2uP.net
4sYElv@P.edu
EWBNO58637124@CLP39222015.com
faststartff@gmail.com
GIVm@8BXO7v.org
jid0-wpCH2liWmuMjc8AV1VWejWvGjBI@jetpack
map@quickmaps.me
OIBMBKA115048682@HYKFIU97176590.com
u@DO.com
{E10A6337-382E-4FE6-96DE-936ADC34DD04}
{ea614400-e918-4741-9a97-7a972ff7c30b}

C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\searchplugins\
firmy.cz-211556.xml
mapy.cz-211556.xml
seznam.cz-211556.xml
videa.seznam.cz-211556.xml
yqs-barff-yandex.xml
zbozi.cz-211556.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3d312810-7190-4916-93cb-3fd1ba18c694}]
CoouopExtensiona - C:\Program Files (x86)\CoouopExtensiona\WvnRJ3qx3JArp6.x64.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-08-18 537576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a1dc1d9f-f52b-4548-a01d-2398b5e689cc}]
DuiggiSaever - C:\Program Files (x86)\DuiggiSaever\aciB7IYp9QcThn.x64.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ae6ae595-eb2f-4fcb-85ff-fd236bd3d1b2}]
50CCoUUpoNs - C:\Program Files (x86)\50CCoUUpoNs\yAAUM1AgMRIJl1.x64.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14 2117216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}]
Визуальные закладки

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-08-18 193512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}]
IETabPage Class - C:\Program Files (x86)\XTab\SupTab.dll [2015-01-16 210096]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3d312810-7190-4916-93cb-3fd1ba18c694}]
CoouopExtensiona - C:\Program Files (x86)\CoouopExtensiona\WvnRJ3qx3JArp6.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a1dc1d9f-f52b-4548-a01d-2398b5e689cc}]
DuiggiSaever - C:\Program Files (x86)\DuiggiSaever\aciB7IYp9QcThn.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}]
Rich Media Downloader - C:\Users\BURDA\AppData\Local\Rich Media Player\BrowserExtensions\IE\RichMediaDownloader.dll [2013-07-03 155928]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ae6ae595-eb2f-4fcb-85ff-fd236bd3d1b2}]
50CCoUUpoNs - C:\Program Files (x86)\50CCoUUpoNs\yAAUM1AgMRIJl1.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14 1709152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC59E0F9-7E43-44FA-9FAA-8377850BF205}]
Free Download Manager - C:\Program Files (x86)\Free Download Manager\iefdm2.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}]
Визуальные закладки

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FEB703F7-E7B2-4AB0-9566-87658AC70095}]
Rich Media Player - C:\Users\BURDA\AppData\Local\Rich Media Player\BrowserExtensions\IE\PluginRichmediaplayer.dll [2013-03-12 120600]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"VX1000"=C:\Windows\vVX1000.exe [2010-05-20 762736]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2014-08-22 1331288]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"PCSpeedUp"=C:\Program Files (x86)\Zrychleni Pocitace\PCSUNotifier.exe [2014-11-27 338888]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-12-11 30877280]
"AutoStartNPSAgent"=C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe [2010-07-04 95576]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"LifeCam"=C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [2010-05-20 119152]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2010-08-11 2472048]
"NPSStartup"= []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\comupdatus.exe]
"Debugger=""C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\skypebrowserhost.exe]
"Debugger=""C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\skypec2cautoupdatesvc.exe]
"Debugger=""C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\skypec2cpnrsvc.exe]
"Debugger=""C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wlmerger.exe]
"Debugger=""C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer9"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-02-10 12:33:43 ----D---- C:\rsit
2015-02-10 12:33:43 ----D---- C:\Program Files\trend micro
2015-02-09 02:34:34 ----D---- C:\ProgramData\Reimage Protector
2015-02-09 02:34:19 ----D---- C:\Program Files\Reimage
2015-02-09 02:34:09 ----D---- C:\rei
2015-02-09 02:33:34 ----A---- C:\Windows\Reimage.ini
2015-02-08 11:06:30 ----D---- C:\ProgramData\Block The Ads
2015-02-05 17:00:04 ----D---- C:\Program Files (x86)\ShopDroapi
2015-02-05 07:13:34 ----D---- C:\ProgramData\The AdBlocker
2015-02-04 21:06:36 ----D---- C:\Program Files (x86)\SaveLLots
2015-02-04 21:05:27 ----D---- C:\ProgramData\mkicidjmkbcfgffcchobhlgmecflhcki
2015-01-29 11:07:51 ----A---- C:\Windows\unvise32qt.exe
2015-01-29 11:07:04 ----D---- C:\Windows\SYSWOW64\QuickTime
2015-01-29 11:06:50 ----D---- C:\Windows\SYSWOW64\BWKDLogs
2015-01-28 20:28:09 ----D---- C:\Program Files (x86)\Supporter
2015-01-28 20:27:29 ----D---- C:\ProgramData\13981107772012322919
2015-01-28 20:27:05 ----D---- C:\ProgramData\IHProtectUpDate
2015-01-28 20:26:20 ----D---- C:\Program Files (x86)\XTab
2015-01-28 20:26:07 ----D---- C:\ProgramData\WindowsMangerProtect
2015-01-28 20:24:55 ----D---- C:\Users\BURDA\AppData\Roaming\mystartsearch
2015-01-25 14:09:56 ----D---- C:\ProgramData\McAfee
2015-01-15 20:23:15 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2015-01-14 20:36:50 ----A---- C:\Windows\system32\TSWbPrxy.exe
2015-01-14 20:36:50 ----A---- C:\Windows\system32\profsvc.dll
2015-01-14 20:36:48 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2015-01-14 20:36:48 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2015-01-14 20:36:48 ----A---- C:\Windows\system32\nlasvc.dll
2015-01-14 20:36:45 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-01-14 20:36:45 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-01-14 20:36:44 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-01-14 20:36:44 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-01-14 20:36:44 ----A---- C:\Windows\system32\srcore.dll
2015-01-14 20:36:44 ----A---- C:\Windows\system32\srclient.dll
2015-01-14 20:36:44 ----A---- C:\Windows\system32\rstrui.exe

======List of files/folders modified in the last 1 month======

2015-02-10 12:33:43 ----RD---- C:\Program Files
2015-02-10 12:33:15 ----D---- C:\Windows\Temp
2015-02-10 12:25:23 ----D---- C:\Users\BURDA\AppData\Roaming\Skype
2015-02-10 12:24:42 ----D---- C:\Windows\System32
2015-02-10 12:24:00 ----D---- C:\Program Files (x86)\Zrychleni Pocitace
2015-02-10 12:23:11 ----D---- C:\ProgramData\NVIDIA
2015-02-10 12:22:09 ----D---- C:\Windows\system32\config
2015-02-09 16:27:40 ----D---- C:\Windows\inf
2015-02-09 16:27:40 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-02-09 02:35:27 ----D---- C:\Windows\system32\Tasks
2015-02-09 02:34:34 ----HD---- C:\ProgramData
2015-02-09 02:33:34 ----D---- C:\Windows
2015-02-08 20:38:07 ----D---- C:\Users\BURDA\AppData\Roaming\Seznam.cz
2015-02-08 20:13:01 ----D---- C:\Program Files (x86)\Seznam.cz
2015-02-08 19:50:38 ----SD---- C:\Users\BURDA\AppData\Roaming\Microsoft
2015-02-08 15:08:52 ----RD---- C:\Program Files (x86)
2015-02-08 15:05:29 ----D---- C:\Program Files (x86)\Adobe
2015-02-08 15:02:04 ----SHD---- C:\System Volume Information
2015-02-08 04:10:50 ----D---- C:\Windows\system32\wfp
2015-02-08 04:10:48 ----D---- C:\Windows\system32\wbem
2015-02-08 04:10:10 ----D---- C:\Windows\system32\catroot2
2015-02-08 04:10:10 ----D---- C:\Windows\registration
2015-02-07 17:57:02 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-02-04 20:48:04 ----D---- C:\Program Files (x86)\Common Files
2015-02-04 20:26:26 ----D---- C:\Windows\SysWOW64
2015-02-03 17:05:08 ----SHD---- C:\Windows\Installer
2015-02-03 17:05:08 ----D---- C:\Windows\Tasks
2015-02-03 16:43:05 ----D---- C:\Users\BURDA\AppData\Roaming\QuickScan
2015-01-30 17:15:47 ----D---- C:\ProgramData\Kodak
2015-01-30 17:02:18 ----D---- C:\Windows\system32\drivers
2015-01-30 16:57:35 ----D---- C:\Windows\Help
2015-01-30 16:57:31 ----D---- C:\Program Files (x86)\Kodak
2015-01-30 16:57:14 ----D---- C:\Windows\SYSWOW64\color
2015-01-29 14:38:43 ----D---- C:\Windows\system32\wdi
2015-01-29 10:52:28 ----D---- C:\Users\BURDA\AppData\Roaming\Free Download Manager
2015-01-21 15:24:45 ----D---- C:\Windows\rescache
2015-01-16 11:11:23 ----D---- C:\Windows\winsxs
2015-01-14 21:52:17 ----D---- C:\Windows\system32\MRT
2015-01-14 21:45:43 ----A---- C:\Windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-07-17 269008]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-07-17 125584]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2009-11-27 67072]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-02-18 189288]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2010-08-04 1342064]
S0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys []
S1 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys []
S3 cpuz134;cpuz134; \??\C:\Users\BURDA\AppData\Local\Temp\cpuz134\cpuz134_x64.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys [2010-04-27 127488]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys [2010-04-27 18944]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys [2010-04-27 161280]
S3 TFsExDisk;TFsExDisk; \??\C:\Windows\System32\Drivers\TFsExDisk.sys [2010-06-14 16448]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 VX1000;VX-1000; C:\Windows\system32\DRIVERS\VX1000.sys [2010-05-20 2060144]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 IHProtect Service;IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [2015-01-16 158896]
R2 MSCamSvc;MSCamSvc; C:\Program Files\Microsoft LifeCam\MSCamS64.exe [2010-05-20 199536]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2014-08-22 23784]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-07-29 935208]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-01-18 884512]
R2 PCSUService;PC Speed Up Service; C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe [2014-11-27 437704]
R2 ReimageRealTimeProtector;Reimage Real Time Protector; C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [2015-01-14 7410024]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-01-18 383264]
R2 WindowsMangerProtect;WindowsMangerProtect Service; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [2015-01-28 464384]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2014-08-22 368624]
S2 be0fb33b;Supporter; C:\Windows\syswow64\rundll32.exe [2009-07-14 44544]
S2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-07-14 1390176]
S2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-07-14 1767520]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc []
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /medsvc []
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe []
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-22 114688]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-06-18 117144]
S3 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-02-25 1260320]
S3 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-08-04 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

# AdwCleaner v4.110 - Logfile created 10/02/2015 at 13:05:24
# Updated 05/02/2015 by Xplode
# Database : 2015-02-09.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : BURDA - BURDA-PC
# Running from : C:\Users\BURDA\Desktop\odvirovani\adwcleaner_4.110.exe
# Option : Cleaning

***** [ Services ] *****

Service Deleted : be0fb33b
Service Deleted : pcsuservice
Service Deleted : WindowsMangerProtect
Service Deleted : ReimageRealTimeProtector
Service Deleted : IHProtect Service

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\WindowsMangerProtect
Folder Deleted : C:\ProgramData\Reimage Protector
Folder Deleted : C:\ProgramData\Fighters
Folder Deleted : C:\ProgramData\IHProtectUpDate
Folder Deleted : C:\ProgramData\The AdBlocker
Folder Deleted : C:\ProgramData\13981107772012322919
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zrychleni Pocitace
Folder Deleted : C:\Program Files (x86)\AVG Security Toolbar
Folder Deleted : C:\Program Files (x86)\supporter
Folder Deleted : C:\Program Files (x86)\Zrychleni Pocitace
Folder Deleted : C:\Program Files (x86)\XTab
Folder Deleted : C:\Program Files (x86)\SaveLLots
Folder Deleted : C:\Program Files (x86)\ShopDroapi
Folder Deleted : C:\Program Files\Reimage
Folder Deleted : C:\Users\BURDA\AppData\Local\FileTypeAssistant
Folder Deleted : C:\Users\BURDA\AppData\Local\globalUpdate
Folder Deleted : C:\Users\BURDA\AppData\Local\Microsoft\Silverlight\OutOfBrowser\Speedchecker.PCSpeedUp
Folder Deleted : C:\Users\BURDA\AppData\Local\Rich Media Player
Folder Deleted : C:\Users\BURDA\AppData\Local\Doctor_PC
Folder Deleted : C:\Users\BURDA\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\BURDA\AppData\Roaming\mystartsearch
Folder Deleted : C:\Users\BURDA\AppData\Roaming\Fighters
Folder Deleted : C:\Users\BURDA\Documents\PCSpeedUp
Folder Deleted : C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\Extensions\faststartff@gmail.com
Folder Deleted : C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
Folder Deleted : C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\Extensions\1g@g2uP.net
Folder Deleted : C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\Extensions\4sYElv@P.edu
Folder Deleted : C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\Extensions\GIVm@8BXO7v.org
Folder Deleted : C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\Extensions\u@DO.com
Folder Deleted : C:\Users\BURDA\AppData\Local\Google\Chrome\User Data\Default\Extensions\doagiokpgboiomffjfhaiimafndmmpni
Folder Deleted : C:\ProgramData\mkicidjmkbcfgffcchobhlgmecflhcki
File Deleted : C:\Users\Public\Desktop\PC Scan & Repair by Reimage.lnk
File Deleted : C:\Windows\Reimage.ini
File Deleted : C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\user.js
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\mystartsearch.xml
File Deleted : C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\searchplugins\yqs-barff-yandex.xml

***** [ Scheduled tasks ] *****

Task Deleted : PC SpeedUp Service Deactivator
Task Deleted : ReimageUpdater
Task Deleted : Reimage Reminder
Task Deleted : DoctorPC_Popup
Task Deleted : DoctorPC_Start

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Shortcut Disinfected : C:\Users\BURDA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\BURDA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Shortcut Disinfected : C:\Users\BURDA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Shortcut Disinfected : C:\Users\BURDA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\BURDA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk

***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [faststartff@gmail.com]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\doagiokpgboiomffjfhaiimafndmmpni
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\fkcdbkhjcaljlfolhllfneigeepmjfim
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [pcspeedup]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Key Deleted : HKCU\Software\Mozilla\Extends
Key Deleted : HKLM\SOFTWARE\Classes\P13d70437_0d4c_4371_905c_687a9c53210e_.P13d70437_0d4c_4371_905c_687a9c53210e_
Key Deleted : HKLM\SOFTWARE\Classes\P13d70437_0d4c_4371_905c_687a9c53210e_.P13d70437_0d4c_4371_905c_687a9c53210e_.9
Key Deleted : HKLM\SOFTWARE\Classes\P1b1a3dbd_da31_410a_9915_e6aecb515425_.P1b1a3dbd_da31_410a_9915_e6aecb515425_
Key Deleted : HKLM\SOFTWARE\Classes\P1b1a3dbd_da31_410a_9915_e6aecb515425_.P1b1a3dbd_da31_410a_9915_e6aecb515425_.9
Key Deleted : HKLM\SOFTWARE\Classes\P3d312810_7190_4916_93cb_3fd1ba18c694_.P3d312810_7190_4916_93cb_3fd1ba18c694_
Key Deleted : HKLM\SOFTWARE\Classes\P3d312810_7190_4916_93cb_3fd1ba18c694_.P3d312810_7190_4916_93cb_3fd1ba18c694_.9
Key Deleted : HKLM\SOFTWARE\Classes\Pa1dc1d9f_f52b_4548_a01d_2398b5e689cc_.Pa1dc1d9f_f52b_4548_a01d_2398b5e689cc_
Key Deleted : HKLM\SOFTWARE\Classes\Pa1dc1d9f_f52b_4548_a01d_2398b5e689cc_.Pa1dc1d9f_f52b_4548_a01d_2398b5e689cc_.9
Key Deleted : HKLM\SOFTWARE\Classes\Pae6ae595_eb2f_4fcb_85ff_fd236bd3d1b2_.Pae6ae595_eb2f_4fcb_85ff_fd236bd3d1b2_
Key Deleted : HKLM\SOFTWARE\Classes\Pae6ae595_eb2f_4fcb_85ff_fd236bd3d1b2_.Pae6ae595_eb2f_4fcb_85ff_fd236bd3d1b2_.9
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{be0fb33b}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B89F5C49-51DB-4974-AB5A-E25901AA339C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E9B5B0D2-D08A-49FC-8B5C-159B60BAA268}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FEB703F7-E7B2-4AB0-9566-87658AC70095}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{13d70437-0d4c-4371-905c-687a9c53210e}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1b1a3dbd-da31-410a-9915-e6aecb515425}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3d312810-7190-4916-93cb-3fd1ba18c694}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{a1dc1d9f-f52b-4548-a01d-2398b5e689cc}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ae6ae595-eb2f-4fcb-85ff-fd236bd3d1b2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{079E2F0F-FCA0-4163-BC82-5355B879E86E}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{230332DF-D235-47EE-BC42-60860EF144CD}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FEB703F7-E7B2-4AB0-9566-87658AC70095}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3d312810-7190-4916-93cb-3fd1ba18c694}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a1dc1d9f-f52b-4548-a01d-2398b5e689cc}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ae6ae595-eb2f-4fcb-85ff-fd236bd3d1b2}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FEB703F7-E7B2-4AB0-9566-87658AC70095}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3d312810-7190-4916-93cb-3fd1ba18c694}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{a1dc1d9f-f52b-4548-a01d-2398b5e689cc}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ae6ae595-eb2f-4fcb-85ff-fd236bd3d1b2}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FEB703F7-E7B2-4AB0-9566-87658AC70095}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3d312810-7190-4916-93cb-3fd1ba18c694}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{a1dc1d9f-f52b-4548-a01d-2398b5e689cc}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ae6ae595-eb2f-4fcb-85ff-fd236bd3d1b2}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{13d70437-0d4c-4371-905c-687a9c53210e}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1b1a3dbd-da31-410a-9915-e6aecb515425}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3d312810-7190-4916-93cb-3fd1ba18c694}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{a1dc1d9f-f52b-4548-a01d-2398b5e689cc}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{ae6ae595-eb2f-4fcb-85ff-fd236bd3d1b2}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{13d70437-0d4c-4371-905c-687a9c53210e}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{1b1a3dbd-da31-410a-9915-e6aecb515425}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{3d312810-7190-4916-93cb-3fd1ba18c694}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{a1dc1d9f-f52b-4548-a01d-2398b5e689cc}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{ae6ae595-eb2f-4fcb-85ff-fd236bd3d1b2}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3d312810-7190-4916-93cb-3fd1ba18c694}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a1dc1d9f-f52b-4548-a01d-2398b5e689cc}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ae6ae595-eb2f-4fcb-85ff-fd236bd3d1b2}
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\0BE56D437737E65253DF727749AC9174
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\0DA03ABEB649EE0FA9721AF878C1DA2D
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\4B9AC8657BBACFAA86608D618909CFFC
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\9FC0D8FAE629ABFF3585BF76C469BD6F
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\D0A8BA3705BB0B48A0FD63C0CAC6AD5E
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{7369E1C8-B29E-42D3-B429-FEF28D97EAB5}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKCU\Software\1ClickDownload
Key Deleted : HKCU\Software\Bitberry Software
Key Deleted : HKCU\Software\FileTypeAssistant
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\Speedchecker Limited
Key Deleted : HKCU\Software\Reimage
Key Deleted : HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\Speedchecker Limited
Key Deleted : HKLM\SOFTWARE\SupDp
Key Deleted : HKLM\SOFTWARE\SupTab
Key Deleted : HKLM\SOFTWARE\supWindowsMangerProtect
Key Deleted : HKLM\SOFTWARE\mystartsearchSoftware
Key Deleted : HKLM\SOFTWARE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
Key Deleted : HKLM\SOFTWARE\IHProtect
Key Deleted : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{37476589-E48E-439E-A706-56189E2ED4C4}_is1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\mystartsearch uninstall
Key Deleted : [x64] HKLM\SOFTWARE\Speedchecker Limited
Key Deleted : [x64] HKLM\SOFTWARE\Reimage
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PCSU-SL_is1
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Reimage Repair
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\mystartsearch.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.mystartsearch.com

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17496

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Mozilla Firefox v22.0 (cs)

[b1thfvbp.default\prefs.js] - Line Deleted : user_pref("browser.newtab.url", "hxxp://www.mystartsearch.com/newtab/?type=nt&t ... 0594905949");
[b1thfvbp.default\prefs.js] - Line Deleted : user_pref("browser.search.defaultenginename", "mystartsearch");
[b1thfvbp.default\prefs.js] - Line Deleted : user_pref("browser.search.selectedEngine", "mystartsearch");
[b1thfvbp.default\prefs.js] - Line Deleted : user_pref("extensions.aEWBNO58637124CLP39222015com63313.63313.internaldb.Resources_meta.value", "%7B%22zoom.js%22%3A%7B%22id%22%3A798518%2C%22ver%22%3A1%2C%22status%22%3A1%2C%22name%22%3A%22zoom.js%22[...]
[b1thfvbp.default\prefs.js] - Line Deleted : user_pref("extensions.aEWBNO58637124CLP39222015com63313.63313.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%2C%22dealply_p%22%3A%7[...]
[b1thfvbp.default\prefs.js] - Line Deleted : user_pref("extensions.aOIBMBKA115048682HYKFIU97176590com69065.69065.internaldb.__ICM_LITE__blacklist_domain.value", "%7B%22SLIDERS%22%3A%5B%226pm.com%22%2C%22amazon.co.uk%22%2C%22amazon.com%22%2C%22an[...]
[b1thfvbp.default\prefs.js] - Line Deleted : user_pref("extensions.aOIBMBKA115048682HYKFIU97176590com69065.69065.internaldb.__ICM_LITE__fifty_test_rules.value", "%7B%22DE%22%3A%7B%22ALL%22%3A%5B%22anastasiadate.com%22%2C%22optionweb.com%22%2C%22[...]
[b1thfvbp.default\prefs.js] - Line Deleted : user_pref("extensions.aOIBMBKA115048682HYKFIU97176590com69065.69065.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%2C%22dealply_p%2[...]
[b1thfvbp.default\prefs.js] - Line Deleted : user_pref("extensions.crossrider.bic", "14b360eb9e27e52deecdc86ff374b976");

-\\ Google Chrome v40.0.2214.93

[C:\Users\BURDA\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}
[C:\Users\BURDA\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.mystartsearch.com/web/?type=dspp&ts ... earchTerms}
[C:\Users\BURDA\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.mystartsearch.com/web/?type=dspp&ts ... earchTerms}
[C:\Users\BURDA\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.mystartsearch.com/web/?type=dspp&ts ... earchTerms}
[C:\Users\BURDA\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.mystartsearch.com/web/?type=dspp&ts ... earchTerms}

-\\ Chromium v

[C:\Users\BURDA\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}
[C:\Users\BURDA\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.mystartsearch.com/web/?type=dspp&ts ... earchTerms}
[C:\Users\BURDA\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.mystartsearch.com/web/?type=dspp&ts ... earchTerms}
[C:\Users\BURDA\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.mystartsearch.com/web/?type=dspp&ts ... earchTerms}
[C:\Users\BURDA\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.mystartsearch.com/web/?type=dspp&ts ... earchTerms}

*************************

AdwCleaner[R0].txt - [20966 bytes] - [10/02/2015 13:01:40]
AdwCleaner[S0].txt - [20356 bytes] - [10/02/2015 13:05:24]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [20416 bytes] ##########

Zlepšení je viditelné, bohužel okna ve Firefoxu stále vyskakují.
Moc děkuji

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-02-2015
Ran by BURDA (administrator) on BURDA-PC on 10-02-2015 13:17:23
Running from C:\Users\BURDA\Desktop\odvirovani
Loaded Profiles: BURDA (Available profiles: BURDA & UpdatusUser)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\vVX1000.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [VX1000] => C:\Windows\vVX1000.exe [762736 2010-05-20] (Microsoft Corporation)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1331288 2014-08-22] (Microsoft Corporation)
HKLM-x32\...\Run: [LifeCam] => C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [119152 2010-05-20] (Microsoft Corporation)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2472048 2010-08-11] (VIA)
HKLM-x32\...\Run: [NPSStartup] => [X]
HKU\S-1-5-21-1389227897-89279683-1822547642-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30877280 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-1389227897-89279683-1822547642-1000\...\Run: [AutoStartNPSAgent] => C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe [95576 2010-07-04] (Samsung Electronics Co., Ltd.)
HKU\S-1-5-21-1389227897-89279683-1822547642-1000\...\MountPoints2: {4ac76a3e-fd03-11e2-9809-806e6f6e6963} - D:\Setup.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-08-05] (Microsoft Corporation)
IFEO\comupdatus.exe: [Debugger] "C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe
IFEO\skypebrowserhost.exe: [Debugger] "C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe
IFEO\skypec2cautoupdatesvc.exe: [Debugger] "C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe
IFEO\skypec2cpnrsvc.exe: [Debugger] "C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe
IFEO\wlmerger.exe: [Debugger] "C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKU\S-1-5-21-1389227897-89279683-1822547642-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1389227897-89279683-1822547642-1000 -> DefaultScope {A7D3A2F6-3ACD-4F90-ACF7-4599BFA64AC6} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1389227897-89279683-1822547642-1000 -> {A7D3A2F6-3ACD-4F90-ACF7-4599BFA64AC6} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1389227897-89279683-1822547642-1000 -> {E236702F-9993-4B46-87AB-B8CC20E60C7B} URL = https://www.google.com/search?q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Free Download Manager -> {CC59E0F9-7E43-44FA-9FAA-8377850BF205} -> C:\Program Files (x86)\Free Download Manager\iefdm2.dll No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default
FF Homepage: hxxp://www.google.com/
FF Plugin: @java.com/DTPlugin,version=10.7.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.7.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @richmediaplayer.com/nppluginrichmediaplayer -> C:\Program Files (x86)\Mozilla Firefox\plugins\nppluginrichmediaplayer.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll No File
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\searchplugins\firmy.cz-211556.xml
FF SearchPlugin: C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\searchplugins\mapy.cz-211556.xml
FF SearchPlugin: C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\searchplugins\seznam.cz-211556.xml
FF SearchPlugin: C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\searchplugins\videa.seznam.cz-211556.xml
FF SearchPlugin: C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\searchplugins\zbozi.cz-211556.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF Extension: The-Go-Photo-it-v11 - C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\Extensions\EWBNO58637124@CLP39222015.com [2015-01-30]
FF Extension: jid0wpCH2liWmuMjc8AV1VWejWvGjBIjetpack - C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\Extensions\jid0-wpCH2liWmuMjc8AV1VWejWvGjBI@jetpack [2015-02-02]
FF Extension: mapquickmapsme - C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\Extensions\map@quickmaps.me [2015-02-01]
FF Extension: CinemaP-1.9cV28.01 - C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\Extensions\OIBMBKA115048682@HYKFIU97176590.com [2015-01-28]
FF Extension: E10A6337382E4FE696DE936ADC34DD04 - C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\Extensions\{E10A6337-382E-4FE6-96DE-936ADC34DD04} [2015-02-03]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14]
FF HKLM-x32\...\Firefox\Extensions: [{3DF4B26D-DB19-45DF-962A-6719D071245B}] - C:\Users\BURDA\AppData\Local\Rich Media Player\BrowserExtensions\Firefox\{3DF4B26D-DB19-45DF-962A-6719D071245B}

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\BURDA\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Disk Google) - C:\Users\BURDA\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-04]
CHR Extension: (YouTube) - C:\Users\BURDA\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-04]
CHR Extension: (Vyhledávání Google) - C:\Users\BURDA\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-04]
CHR Extension: (DelugeSiphon) - C:\Users\BURDA\AppData\Local\Google\Chrome\User Data\Default\Extensions\gabdloknkpdefdpkkibplcfnkngbidim [2015-02-04]
CHR Extension: (Epic Soccer Barcelona) - C:\Users\BURDA\AppData\Local\Google\Chrome\User Data\Default\Extensions\kacgddpcndpmmpoepbdklplpfhlcgikn [2015-02-05]
CHR Extension: (Skype Click to Call) - C:\Users\BURDA\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2013-08-04]
CHR Extension: (Peněženka Google) - C:\Users\BURDA\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (Gmail) - C:\Users\BURDA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-04]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
S2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2014-08-22] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [368624 2014-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
S3 gusvc; "C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [269008 2014-07-17] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [125584 2014-07-17] (Microsoft Corporation)
S0 PxHlpa64; C:\Windows\SysWOW64\Drivers\PxHlpa64.sys [26720 2004-09-23] (Sonic Solutions) [File not signed]
S1 StarOpen; C:\Windows\SysWow64\Drivers\StarOpen.sys [5632 2006-07-24] ()
S3 cpuz134; \??\C:\Users\BURDA\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-10 13:17 - 2015-02-10 13:17 - 00000000 ____D () C:\FRST
2015-02-10 13:00 - 2015-02-10 13:05 - 00000000 ____D () C:\AdwCleaner
2015-02-10 12:33 - 2015-02-10 13:17 - 00000000 ____D () C:\Users\BURDA\Desktop\odvirovani
2015-02-10 12:33 - 2015-02-10 12:33 - 00000000 ____D () C:\rsit
2015-02-10 12:33 - 2015-02-10 12:33 - 00000000 ____D () C:\Program Files\trend micro
2015-02-10 12:25 - 2015-02-10 12:26 - 00001153 _____ () C:\Users\BURDA\Desktop\Mozilla Firefox.lnk
2015-02-09 02:34 - 2015-02-09 02:52 - 00000000 ____D () C:\rei
2015-02-09 02:34 - 2015-02-09 02:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair
2015-02-08 20:45 - 2015-02-08 20:45 - 00000244 _____ () C:\Users\BURDA\Desktop\Google (2).url
2015-02-08 20:26 - 2015-02-08 20:26 - 00003176 _____ () C:\Windows\System32\Tasks\{B289C3B2-01D2-408A-B072-53CE4AAD7CD3}
2015-02-08 20:21 - 2015-02-08 20:21 - 00003180 _____ () C:\Windows\System32\Tasks\{195840DC-78AA-44C7-B47E-38768EEF1DEB}
2015-02-08 20:17 - 2015-02-08 20:17 - 00000000 ____D () C:\Users\BURDA\Seznam.cz
2015-02-08 20:11 - 2015-02-08 20:11 - 00003172 _____ () C:\Windows\System32\Tasks\{2E4FF1DB-9919-43D4-A5AB-3EE526B44C11}
2015-02-08 20:09 - 2015-02-08 20:09 - 00000000 ____D () C:\Users\BURDA\Desktop\distribution
2015-02-08 11:06 - 2015-02-08 11:06 - 00000000 ____D () C:\ProgramData\Block The Ads
2015-02-05 07:13 - 2015-02-07 09:34 - 00000020 _____ () C:\Users\BURDA\AppData\Roaming\appdataFr3.bin
2015-02-04 04:00 - 2015-02-04 04:00 - 00000000 ____D () C:\Users\BURDA\.gimp-2.8
2015-01-30 17:16 - 2015-01-30 17:16 - 00003152 _____ () C:\Windows\System32\Tasks\{6890B6E7-3F3D-4FD7-B645-723101926786}
2015-01-30 16:59 - 2015-01-30 16:59 - 00000000 ____D () C:\Users\BURDA\Documents\DoctorPC
2015-01-29 15:25 - 2015-01-29 15:25 - 00003138 _____ () C:\Windows\System32\Tasks\{8EF6A8D9-F54F-4B5B-B740-DF6DC5EFA08C}
2015-01-29 11:28 - 2015-01-29 15:17 - 01253376 ____R () C:\Users\Public\Documents\ESBK.mbb
2015-01-29 11:28 - 2015-01-29 15:17 - 00916480 ____R () C:\Users\Public\Documents\ESBK.mb
2015-01-29 11:07 - 2015-01-29 15:24 - 00009203 _____ () C:\Windows\SysWOW64\QuickTime.qtp
2015-01-29 11:07 - 2015-01-29 15:24 - 00000000 ____D () C:\Windows\SysWOW64\QuickTime
2015-01-29 11:07 - 2015-01-29 11:07 - 00054156 ____H () C:\Windows\QTFont.qfn
2015-01-29 11:07 - 2015-01-29 11:07 - 00003829 _____ () C:\Windows\SysWOW64\qtplugin.log
2015-01-29 11:07 - 2015-01-29 11:07 - 00000427 _____ () C:\Windows\SysWOW64\QuickTimeFavorites.qtr
2015-01-29 11:07 - 1999-11-10 12:05 - 00086016 _____ (MindVision) C:\Windows\unvise32qt.exe
2015-01-29 11:05 - 2015-01-30 16:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kodak
2015-01-26 06:41 - 2015-01-26 06:41 - 00000476 _____ () C:\Users\BURDA\Documents\smd kody.htm
2015-01-25 14:09 - 2015-01-25 14:09 - 00000000 ____D () C:\ProgramData\McAfee
2015-01-15 20:23 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 20:36 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 20:36 - 2014-12-12 06:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-14 20:36 - 2014-12-12 06:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-01-14 20:36 - 2014-12-12 06:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-01-14 20:36 - 2014-12-12 06:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-01-14 20:36 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-01-14 20:36 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-01-14 20:36 - 2014-12-12 06:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-01-14 20:36 - 2014-12-11 18:47 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-14 20:36 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-14 20:36 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2015-01-14 20:36 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-10 13:14 - 2009-07-14 05:45 - 00023376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-10 13:14 - 2009-07-14 05:45 - 00023376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-10 13:10 - 2013-08-04 13:45 - 01085744 _____ () C:\Windows\WindowsUpdate.log
2015-02-10 13:07 - 2013-08-04 14:33 - 00000000 ____D () C:\Users\BURDA\AppData\Roaming\Skype
2015-02-10 13:06 - 2013-08-04 14:26 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-10 13:06 - 2013-08-04 14:15 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-02-10 13:06 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-10 13:06 - 2009-07-14 05:51 - 00099323 _____ () C:\Windows\setupact.log
2015-02-10 13:05 - 2013-08-04 14:12 - 00001061 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-02-10 13:05 - 2013-08-04 14:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-02-10 13:05 - 2013-08-04 14:02 - 00000969 _____ () C:\Users\BURDA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-02-10 12:19 - 2013-08-04 14:26 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-10 07:02 - 2013-10-28 15:09 - 00003970 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{DD63915D-1913-4897-8984-259E2D2A0AE7}
2015-02-09 16:27 - 2009-07-14 16:18 - 00668734 _____ () C:\Windows\system32\perfh005.dat
2015-02-09 16:27 - 2009-07-14 16:18 - 00141394 _____ () C:\Windows\system32\perfc005.dat
2015-02-09 16:27 - 2009-07-14 06:13 - 01584022 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-08 20:38 - 2014-08-17 16:30 - 00000000 ____D () C:\Users\BURDA\AppData\Roaming\Seznam.cz
2015-02-08 20:20 - 2013-08-04 14:01 - 00000000 ____D () C:\Users\BURDA
2015-02-08 20:13 - 2014-08-17 16:31 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2015-02-08 15:05 - 2013-08-04 15:10 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-02-08 04:11 - 2009-07-14 06:08 - 00032578 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-02-08 04:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2015-02-07 17:57 - 2013-08-04 14:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-02-04 20:49 - 2014-06-25 17:09 - 00000164 _____ () C:\Users\BURDA\AppData\Roaming\default.rss
2015-02-03 16:43 - 2014-08-17 16:35 - 00000000 ____D () C:\Users\BURDA\AppData\Roaming\QuickScan
2015-02-03 07:12 - 2013-08-04 14:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-01-30 17:15 - 2013-08-04 18:45 - 00000000 ____D () C:\ProgramData\Kodak
2015-01-30 17:15 - 2013-08-04 14:35 - 00128684 _____ () C:\Windows\PFRO.log
2015-01-30 16:57 - 2014-04-13 20:26 - 00000000 ____D () C:\Windows\SysWOW64\color
2015-01-30 16:57 - 2014-04-12 16:49 - 00000000 ____D () C:\Program Files (x86)\Kodak
2015-01-30 16:57 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2015-01-29 10:52 - 2013-08-04 18:51 - 00000000 ____D () C:\Users\BURDA\AppData\Roaming\Free Download Manager
2015-01-28 09:53 - 2013-08-04 15:06 - 00000000 ____D () C:\Users\BURDA\AppData\Local\Adobe
2015-01-26 21:32 - 2013-12-26 16:23 - 00008192 _____ () C:\Users\BURDA\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-01-21 15:24 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-01-14 21:52 - 2013-08-04 21:34 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-14 21:45 - 2013-08-04 19:34 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Files in the root of some directories =======

2015-02-05 07:13 - 2015-02-07 09:34 - 0000020 _____ () C:\Users\BURDA\AppData\Roaming\appdataFr3.bin
2014-06-25 17:09 - 2015-02-04 20:49 - 0000164 _____ () C:\Users\BURDA\AppData\Roaming\default.rss
2013-12-26 16:23 - 2015-01-26 21:32 - 0008192 _____ () C:\Users\BURDA\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-03-19 15:40 - 2014-03-19 15:40 - 0000877 _____ () C:\Users\BURDA\AppData\Local\recently-used.xbel
2014-10-26 16:31 - 2014-10-26 16:31 - 0007607 _____ () C:\Users\BURDA\AppData\Local\Resmon.ResmonCfg
2014-10-02 14:29 - 2014-10-02 15:42 - 0000000 _____ () C:\ProgramData\LauncherAccess.dt

Some content of TEMP:
====================
C:\Users\BURDA\AppData\Local\Temp\Quarantine.exe
C:\Users\BURDA\AppData\Local\Temp\ReimagePackage.exe
C:\Users\BURDA\AppData\Local\Temp\sqlite3.dll
C:\Users\BURDA\AppData\Local\Temp\sqlite3.exe
C:\Users\BURDA\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-10 07:26

==================== End Of Log ============================

Ještě jednou moc děkuji.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 08-02-2015
Ran by BURDA at 2015-02-10 14:51:00 Run:1
Running from C:\Users\BURDA\Desktop\odvirovani
Loaded Profiles: BURDA (Available profiles: BURDA & UpdatusUser)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
CreateRestorePoint:

IFEO\comupdatus.exe: [Debugger] "C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe
IFEO\skypebrowserhost.exe: [Debugger] "C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe
IFEO\skypec2cautoupdatesvc.exe: [Debugger] "C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe
IFEO\skypec2cpnrsvc.exe: [Debugger] "C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe
IFEO\wlmerger.exe: [Debugger] "C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
FF Extension: The-Go-Photo-it-v11 - C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\Extensions\EWBNO58637124@CLP39222015.com [2015-01-30]
FF Extension: jid0wpCH2liWmuMjc8AV1VWejWvGjBIjetpack - C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\Extensions\jid0-wpCH2liWmuMjc8AV1VWejWvGjBI@jetpack [2015-02-02]
FF Extension: mapquickmapsme - C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\Extensions\map@quickmaps.me [2015-02-01]
FF Extension: CinemaP-1.9cV28.01 - C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\Extensions\OIBMBKA115048682@HYKFIU97176590.com [2015-01-28]
FF Extension: E10A6337382E4FE696DE936ADC34DD04 - C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\Extensions\{E10A6337-382E-4FE6-96DE-936ADC34DD04} [2015-02-03]
CHR Extension: (DelugeSiphon) - C:\Users\BURDA\AppData\Local\Google\Chrome\User Data\Default\Extensions\gabdloknkpdefdpkkibplcfnkngbidim [2015-02-04]
CHR Extension: (Epic Soccer Barcelona) - C:\Users\BURDA\AppData\Local\Google\Chrome\User Data\Default\Extensions\kacgddpcndpmmpoepbdklplpfhlcgikn [2015-02-05]

Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\comupdatus.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\skypebrowserhost.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\skypec2cautoupdatesvc.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\skypec2cpnrsvc.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\wlmerger.exe" => Key deleted successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\Extensions\EWBNO58637124@CLP39222015.com => Moved successfully.
C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\Extensions\jid0-wpCH2liWmuMjc8AV1VWejWvGjBI@jetpack => Moved successfully.
C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\Extensions\map@quickmaps.me => Moved successfully.
C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\Extensions\OIBMBKA115048682@HYKFIU97176590.com => Moved successfully.
C:\Users\BURDA\AppData\Roaming\Mozilla\Firefox\Profiles\b1thfvbp.default\Extensions\{E10A6337-382E-4FE6-96DE-936ADC34DD04} => Moved successfully.
C:\Users\BURDA\AppData\Local\Google\Chrome\User Data\Default\Extensions\gabdloknkpdefdpkkibplcfnkngbidim => Moved successfully.
C:\Users\BURDA\AppData\Local\Google\Chrome\User Data\Default\Extensions\kacgddpcndpmmpoepbdklplpfhlcgikn => Moved successfully.


The system needed a reboot.

==== End of Fixlog 14:51:19 ====

Zatím vypadá vše OK a žádné nechtěné okno na mě zatím nevyskočilo.

Vše šlape jak hodinky
Hrozně moc děkuji za vaši ochotu a za Váš čas. Jste tady vážně všichni borci. Mít tak vaše znalosti ...
Děkuji a mějte se hezky.