VIRY.CZ

Logfile of random's system information tool 1.10 (written by random/random)
Run by kuba at 2015-02-27 18:31:37
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 6 GB (8%) free of 76 GB
Total RAM: 2046 MB (39% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:32:31, on 27.2.2015
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsGHost.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\ASScrPro.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files\AVG\AVG2015\avgui.exe
C:\Program Files\Western Digital\WD Quick View\WDDMStatus.exe
C:\Program Files\AVG Web TuneUp\vprot.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Samsung\Kies\Kies.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Windows\system32\ctfmon.exe
C:\Program Files\AVG Web TuneUp\avgcefrend.exe
C:\Windows\system32\conime.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\cmd.exe
C:\Program Files\Common Files\AVG Secure Search\ScriptHelperInstaller\18.4.0\ScriptHelper.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\kuba\Desktop\RSIT.exe
C:\Program Files\trend micro\kuba.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com/?cid={458FEBA5 ... 2014-08-30 19:44:43&v=4.1.0.411&pid=wtu&sg=&sap=hp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R3 - URLSearchHook: BS Player ControlBar B Toolbar - {31264a33-a653-46c4-af49-1232c59a7da5} - C:\Users\kuba\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: BS Player ControlBar B - {31264a33-a653-46c4-af49-1232c59a7da5} - C:\Users\kuba\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: AVG Web TuneUp - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Web TuneUp\4.1.0.411\AVG Web TuneUp.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: ASUS Security Protect Manager - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItIEAddIn.dll
O3 - Toolbar: BS Player ControlBar B Toolbar - {31264a33-a653-46c4-af49-1232c59a7da5} - C:\Users\kuba\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe C:\PROGRA~1\ASUSSE~1\ASUSSE~1\Bin\ASTSVCC.dll,RegisterModule
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe
O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\ASScrProlog.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
O4 - HKLM\..\Run: [DivXMediaServer] C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2015\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [WD Quick View] C:\Program Files\Western Digital\WD Quick View\WDDMStatus.exe
O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Web TuneUp\vprot.exe"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [KiesPreload] C:\Program Files\Samsung\Kies\Kies.exe /preload
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\18.3.0\ViProtocol.dll
O20 - AppInit_DLLs: APSHook.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2015\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2015\avgwdsvc.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: Syntek AVStream USB2.0 WebCam Service (StkSSrv) - Syntek America Inc. - C:\Windows\System32\StkCSrv.exe
O23 - Service: Toolbar Service (TBSrv) - ClientConnect Ltd. - C:\Program Files\Tbccint\ToolbarService\ToolbarService.exe
O23 - Service: vToolbarUpdater18.4.0 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\ToolbarUpdater.exe
O23 - Service: WD Backup (WDBackup) - Western Digital Technologies, Inc. - C:\Program Files\Western Digital\WD SmartWare\WDBackupEngine.exe
O23 - Service: WD Drive Manager (WDDriveService) - Western Digital Technologies, Inc. - C:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe
O23 - Service: WtuSystemSupport - Unknown owner - C:\Program Files\AVG Web TuneUp\WtuSystemSupport.exe

--
End of file - 9895 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\DriverEasy Scheduled Scan.job - C:\Program Files\Easeware\DriverEasy\DriverEasy.exe --scan
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\kuba\AppData\Roaming\Mozilla\Firefox\Profiles\bvflu3f4.default

prefs.js - "browser.startup.homepage" - "http://www.msn.com/en-us/?pc=UP97&ocid= ... 2014-08-30 19:44:43&v=4.1.0.411&pid=wtu&sg=&sap=hp"
prefs.js - "keyword.URL" - "http://www.bing.com/search?FORM=UP97DF&PC=UP97&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin]
"Description"=
"Path"=C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\18.4.0\\npsitesafety.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Web Player Plug-In,version=1.0.0]
"Description"=DivX Web Player
"Path"=C:\Program Files\DivX\DivX Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.51.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.2]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

C:\Program Files\Mozilla Firefox\components\
nsIQTScriptablePlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
QuickTimePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Users\kuba\AppData\Roaming\Mozilla\Firefox\Profiles\bvflu3f4.default\extensions\
{31264a33-a653-46c4-af49-1232c59a7da5}

C:\Users\kuba\AppData\Roaming\Mozilla\Firefox\Profiles\bvflu3f4.default\searchplugins\
avg-secure-search.xml
bingp.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31264a33-a653-46c4-af49-1232c59a7da5}]
BS Player ControlBar B Toolbar - C:\Users\kuba\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll [2014-09-30 423744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-02-28 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG Web TuneUp - C:\Program Files\AVG Web TuneUp\4.1.0.411\AVG Web TuneUp.dll [2015-02-26 2424856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-05-14 4531320]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-02-28 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DF21F1DB-80C6-11D3-9483-B03D0EC10000}]
ASUS Security Protect Manager - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItIEAddIn.dll [2006-11-20 71192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{31264a33-a653-46c4-af49-1232c59a7da5} - BS Player ControlBar B Toolbar - C:\Users\kuba\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll [2014-09-30 423744]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [2007-02-12 174872]
"RtHDVCpl"=RtHDVCpl.exe []
"ATKMEDIA"=C:\Program Files\ASUS\ATK Media\DMEDIA.EXE [2006-11-02 61440]
"CognizanceTS"=C:\PROGRA~1\ASUSSE~1\ASUSSE~1\Bin\ASTSVCC.dll [2003-12-21 17920]
"JMB36X IDE Setup"=C:\Windows\RaidTool\xInsIDE.exe [2007-03-20 36864]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-03-01 857648]
"ASUS Screen Saver Protector"=C:\Windows\ASScrPro.exe [2007-08-01 33136]
"ASUS Camera ScreenSaver"=C:\Windows\ASScrProlog.exe [2007-08-01 37232]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"KiesTrayAgent"=C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [2014-07-25 311616]
"DivXMediaServer"=C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [2014-02-14 450560]
"AVG_UI"=C:\Program Files\AVG\AVG2015\avgui.exe [2015-02-19 3710416]
"WD Quick View"=C:\Program Files\Western Digital\WD Quick View\WDDMStatus.exe [2014-11-14 5562736]
"vProt"=C:\Program Files\AVG Web TuneUp\vprot.exe [2015-02-26 3033112]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
"KiesPreload"=C:\Program Files\Samsung\Kies\Kies.exe [2014-07-25 1562264]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2014-12-11 30877280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD]
C:\Program Files\Nero\Nero 7\InCD\InCD.exe [2007-03-26 1057328]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nikon Message Center 2]
C:\Program Files\Nikon\Nikon Message Center 2\NkMC2.exe [2011-10-30 571392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerForPhone]
C:\Program Files\PowerForPhone\PowerForPhone.exe [2007-01-15 778240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^AVerQuick.lnk]
C:\PROGRA~1\COMMON~1\AVERME~1\AVERQU~1\AVERQU~1.EXE [2007-06-26 618496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="APSHook.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
ASWLNPkg

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll
"wave1"=serwvdrv.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.LAGS"=lagarith.dll
"VIDC.FFDS"=ff_vfw.dll
"VIDC.X264"=x264vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.l3codecp"=l3codecp.acm
"vidc.dvsd"=pdvcodec.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-02-26 21:12:35 ----D---- C:\ProgramData\Avg_Update_0215tb
2015-02-26 12:42:13 ----SHD---- C:\Config.Msi
2015-02-23 18:36:15 ----A---- C:\Windows\system32\WDPABKP.dat
2015-02-19 21:28:38 ----A---- C:\Windows\system32\drivers\avgidsdriverx.sys
2015-02-15 14:54:15 ----D---- C:\RK Software
2015-02-13 13:43:53 ----A---- C:\Windows\system32\jscript9.dll
2015-02-13 13:43:53 ----A---- C:\Windows\system32\jscript.dll
2015-02-12 09:01:56 ----A---- C:\Windows\system32\oleaut32.dll
2015-02-12 09:01:02 ----A---- C:\Windows\system32\win32k.sys
2015-02-12 09:00:05 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-02-12 08:52:51 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-02-12 08:52:12 ----A---- C:\Windows\system32\scesrv.dll
2015-02-11 09:43:35 ----A---- C:\Windows\system32\vbscript.dll
2015-02-11 09:43:35 ----A---- C:\Windows\system32\dxtmsft.dll
2015-02-11 09:43:34 ----A---- C:\Windows\system32\wininet.dll
2015-02-11 09:43:34 ----A---- C:\Windows\system32\ieui.dll
2015-02-11 09:43:33 ----A---- C:\Windows\system32\mshtmled.dll
2015-02-11 09:43:33 ----A---- C:\Windows\system32\dxtrans.dll
2015-02-11 09:43:31 ----A---- C:\Windows\system32\mshtml.dll
2015-02-11 09:43:29 ----A---- C:\Windows\system32\urlmon.dll
2015-02-11 09:43:29 ----A---- C:\Windows\system32\mshta.exe
2015-02-11 09:43:29 ----A---- C:\Windows\system32\msfeedssync.exe
2015-02-11 09:43:29 ----A---- C:\Windows\system32\msfeedsbs.dll
2015-02-11 09:43:29 ----A---- C:\Windows\system32\msfeeds.dll
2015-02-11 09:43:29 ----A---- C:\Windows\system32\jsproxy.dll
2015-02-11 09:43:28 ----A---- C:\Windows\system32\ieUnatt.exe
2015-02-11 09:43:28 ----A---- C:\Windows\system32\iertutil.dll
2015-02-11 09:43:27 ----A---- C:\Windows\system32\url.dll
2015-02-11 09:43:27 ----A---- C:\Windows\system32\ieframe.dll
2015-02-03 10:47:24 ----A---- C:\Windows\system32\drivers\avglogx.sys

======List of files/folders modified in the last 1 month======

2015-02-27 18:31:49 ----D---- C:\Windows\Prefetch
2015-02-27 18:31:40 ----D---- C:\Program Files\trend micro
2015-02-27 18:31:34 ----D---- C:\Windows\Temp
2015-02-27 17:46:43 ----D---- C:\Users\kuba\AppData\Roaming\Skype
2015-02-27 16:10:59 ----SHD---- C:\System Volume Information
2015-02-27 11:26:31 ----D---- C:\ProgramData\MFAData
2015-02-27 08:46:23 ----D---- C:\Windows\System32
2015-02-27 08:45:06 ----D---- C:\Windows\system32\drivers
2015-02-27 08:44:46 ----A---- C:\Windows\system32\acovcnt.exe
2015-02-26 21:20:10 ----D---- C:\Windows\Tasks
2015-02-26 21:18:56 ----D---- C:\Program Files\AVG Web TuneUp
2015-02-26 21:12:41 ----D---- C:\Windows\system32\Tasks
2015-02-26 21:12:35 ----HD---- C:\ProgramData
2015-02-26 12:43:00 ----SHD---- C:\Windows\Installer
2015-02-22 21:33:39 ----D---- C:\Windows\system32\catroot
2015-02-22 08:43:32 ----D---- C:\ProgramData\Package Cache
2015-02-22 08:42:12 ----D---- C:\ProgramData\Western Digital
2015-02-22 08:42:12 ----D---- C:\Program Files\Western Digital
2015-02-22 08:42:12 ----D---- C:\Program Files\Common Files\Western Digital
2015-02-15 20:34:11 ----D---- C:\ProgramData\firebird
2015-02-15 10:26:17 ----D---- C:\Windows\system32\catroot2
2015-02-14 10:23:54 ----D---- C:\Windows\winsxs
2015-02-12 09:37:14 ----D---- C:\Windows\system32\migration
2015-02-12 09:37:14 ----D---- C:\Program Files\Internet Explorer
2015-02-12 09:21:24 ----D---- C:\Windows\system32\MRT
2015-02-12 09:03:11 ----A---- C:\Windows\system32\mrt.exe
2015-02-12 09:01:47 ----D---- C:\ProgramData\Microsoft Help
2015-02-09 19:49:33 ----D---- C:\ProgramData\Skype
2015-02-09 19:49:27 ----RD---- C:\Program Files\Skype
2015-02-09 19:26:38 ----D---- C:\Users\kuba\AppData\Roaming\dvdcss
2015-02-06 19:16:12 ----AD---- C:\ProgramData\TEMP
2015-02-05 14:51:58 ----RD---- C:\Program Files
2015-02-04 20:53:16 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2015-01-29 18:36:21 ----D---- C:\Program Files\Common Files\AVG Secure Search
2015-01-28 17:57:41 ----D---- C:\Windows\Microsoft.NET
2015-01-28 17:21:05 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-01-28 17:20:54 ----D---- C:\Windows\inf

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHX;AVGIDSHX; C:\Windows\system32\DRIVERS\avgidshx.sys [2014-11-18 154904]
R0 Avglogx;AVG Logging Driver; C:\Windows\system32\DRIVERS\avglogx.sys [2015-02-03 265184]
R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx86.sys [2015-01-23 107488]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx86.sys [2014-06-18 27416]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2007-02-12 277784]
R0 JGOGO;JMicron Hot-Plug Driver; C:\Windows\system32\DRIVERS\JGOGO.sys [2006-02-07 6912]
R0 JRAID;JRAID; C:\Windows\system32\DRIVERS\jraid.sys [2007-04-11 48000]
R1 Avgdiskx;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiskx.sys [2014-06-18 121624]
R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdriverx.sys [2015-02-19 217568]
R1 AVGIDSShim;AVGIDSShim; C:\Windows\system32\DRIVERS\avgidsshimx.sys [2014-06-18 21272]
R1 Avgldx86;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx86.sys [2014-08-28 192792]
R1 Avgtdix;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdix.sys [2015-01-16 210400]
R1 InCDPass;InCDPass; C:\Windows\system32\drivers\InCDPass.sys [2007-03-26 37040]
R1 incdrm;InCD Reader; C:\Windows\system32\drivers\InCDRm.sys [2007-03-26 39472]
R1 ItSDisk;ItSDisk; C:\Windows\System32\Drivers\ItSDisk.sys [2006-05-16 23496]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2009-11-09 59388]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys [2007-02-05 11632]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-02-24 39936]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-01-23 42496]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-03-21 37376]
R3 AtcL001;NDIS Miniport Driver for Attansic L1 Gigabit Ethernet Controller; C:\Windows\system32\DRIVERS\atl01v32.sys [2007-03-15 48128]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2007-03-06 2411520]
R3 ATSWPDRV;AuthenTec TruePrint USB Driver (SwipeSensor); C:\Windows\system32\DRIVERS\ATSwpDrv.sys [2007-03-29 140424]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2007-01-24 5632]
R3 MODEMCSA;Unimodem Streaming Filter Device; C:\Windows\system32\drivers\MODEMCSA.sys [2008-01-19 18432]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2006-12-14 7680]
R3 NETw4v32;Intel(R) Wireless WiFi Link Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-02-25 2216448]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-22 982272]
R3 StkCMini;Syntek AVStream USB2.0 1.3M WebCam; C:\Windows\System32\Drivers\StkCMini.sys [2007-02-13 1245056]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-03-01 182456]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560]
R4 InCDfs;InCD File System; C:\Windows\system32\drivers\InCDFs.sys [2007-03-26 108592]
S2 ghaio;ghaio; \??\C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys [2006-11-16 15216]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-19 92160]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-21 508416]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-06-17 30208]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2014-05-14 3086040]
S3 lvupdtio;lvupdtio; \??\C:\Program Files\ASUS\ASUS Live Update\SYS\lvupdtio.sys []
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys []
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 NETw3v32;Intel(R) PRO/Wireless 3945BG Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw3v32.sys [2006-11-02 1781760]
S3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2006-10-14 4422560]
S3 R300;R300; C:\Windows\system32\DRIVERS\atikmdag.sys [2007-03-06 2411520]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
S3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2006-11-02 44544]
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\Windows\system32\DRIVERS\ss_bus.sys [2014-06-16 98560]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\Windows\system32\DRIVERS\ss_mdfl.sys [2014-06-16 14848]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\Windows\system32\DRIVERS\ss_mdm.sys [2014-06-16 123776]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys []
S3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2006-11-02 41064]
S3 USBAVCap;AVerMedia USB TV Tuner Device; C:\Windows\system32\drivers\USBAVCap.sys [2007-05-10 828288]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 35328]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam.sys [2013-04-22 11520]
S3 WinUSB;SAMSUNG Android USB Driver; C:\Windows\system32\DRIVERS\WinUSB.sys [2009-07-14 34944]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ASBroker;Logon Session Broker; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 ASChannel;Local Communication Channel; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 ASLDRService;ASLDR Service; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [2007-02-06 94208]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2007-03-06 565248]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-03-10 94208]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [2015-02-19 3411408]
R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [2015-02-19 308720]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [2007-02-21 643072]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe [2007-02-12 355096]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [2007-02-21 327680]
R2 spmgr;spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [2006-12-29 123248]
R2 StkSSrv;Syntek AVStream USB2.0 WebCam Service; C:\Windows\System32\StkCSrv.exe [2007-02-07 24576]
R2 TBSrv;Toolbar Service; C:\Program Files\Tbccint\ToolbarService\ToolbarService.exe [2014-09-30 350528]
R2 vToolbarUpdater18.4.0;vToolbarUpdater18.4.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\ToolbarUpdater.exe [2015-02-26 1875480]
R2 WDBackup;WD Backup; C:\Program Files\Western Digital\WD SmartWare\WDBackupEngine.exe [2014-12-02 1042808]
R2 WDDriveService;WD Drive Manager; C:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe [2014-06-02 296312]
R2 WtuSystemSupport;WtuSystemSupport; C:\Program Files\AVG Web TuneUp\WtuSystemSupport.exe [2015-02-26 620056]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-14 107912]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-04 267440]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-14 107912]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-03-05 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2014-04-11 772296]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2014-04-11 45744]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------

Zdravim

Odinstalujte

• Skype Click to Call - adware z instalace Skypu

V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )

• ukoncete vsechny programy
• kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
• kliknete na Scan, pote na Cleaning
• po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

# AdwCleaner v4.111 - Logfile created 28/02/2015 at 16:10:56
# Updated 18/02/2015 by Xplode
# Database : 2015-02-18.3 [Server]
# Operating system : Windows Vista (TM) Home Premium Service Pack 2 (x86)
# Username : kuba - KUBA-PC
# Running from : C:\Users\kuba\Desktop\adwcleaner_4.111.exe
# Option : Cleaning

***** [ Services ] *****

Service Deleted : TBSrv

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\AVG Secure Search
Folder Deleted : C:\ProgramData\AVG Security Toolbar
Folder Deleted : C:\ProgramData\Tbccint
Folder Deleted : C:\Program Files\Tbccint
Folder Deleted : C:\Program Files\Common Files\AVG Secure Search
Folder Deleted : C:\Users\kuba\AppData\Local\Temp\BS_Player_ControlBar_B
Folder Deleted : C:\Users\kuba\AppData\Local\Tbccint
Folder Deleted : C:\Users\kuba\AppData\Local\CrashRpt
Folder Deleted : C:\Users\kuba\AppData\LocalLow\Tbccint
Folder Deleted : C:\Users\kuba\AppData\LocalLow\BS_Player_ControlBar_B
Folder Deleted : C:\Users\kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfdnecihphmhljaaejmgoiahnihplgn
Folder Deleted : C:\Users\kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd
File Deleted : C:\END
File Deleted : C:\Users\kuba\AppData\Roaming\Mozilla\Firefox\Profiles\bvflu3f4.default\searchplugins\avg-secure-search.xml
File Deleted : C:\Users\kuba\AppData\Roaming\Mozilla\Firefox\Profiles\bvflu3f4.default\searchplugins\bingp.xml
File Deleted : C:\Program Files\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml

***** [ Scheduled tasks ] *****

Task Deleted : DriverEasy Scheduled Scan

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Classes\S
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IECT3329621
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3329621
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3A1209A4-8568-40F0-9B5E-4A06A2A06417}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31264A33-A653-46C4-AF49-1232C59A7DA5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31264A33-A653-46C4-AF49-1232C59A7DA5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31264A33-A653-46C4-AF49-1232C59A7DA5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3A1209A4-8568-40F0-9B5E-4A06A2A06417}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{31264A33-A653-46C4-AF49-1232C59A7DA5}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{31264A33-A653-46C4-AF49-1232C59A7DA5}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{31264A33-A653-46C4-AF49-1232C59A7DA5}]
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B5DDD302-3CF2-4BC8-B0FA-68D4361A0D1A}
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Tbccint
Key Deleted : HKCU\Software\Tbccint_HKLM
Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Tbccint
Key Deleted : HKCU\Software\AppDataLow\Software\TbccintSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\BS_Player_ControlBar_B
Key Deleted : HKLM\SOFTWARE\Conduit

***** [ Web browsers ] *****

-\\ Internet Explorer v9.0.8112.16609


-\\ Mozilla Firefox v26.0 (cs)

[bvflu3f4.default\prefs.js] - Line Deleted : user_pref("browser.search.defaultenginename", "AVG Secure Search");
[bvflu3f4.default\prefs.js] - Line Deleted : user_pref("browser.search.selectedEngine", "AVG Secure Search");
[bvflu3f4.default\prefs.js] - Line Deleted : user_pref("smartbar.machineId", "PTFKZ38B4TSRJBTKUH+YH9S0D4GITYUBXRFQUEVAV5YD62TP6KU9KIBOX3UACZM22CC5+CUOYWXL6MSDF17YLW");

-\\ Google Chrome v40.0.2214.115


*************************

AdwCleaner[R0].txt - [18303 bytes] - [01/09/2014 16:49:20]
AdwCleaner[R1].txt - [18364 bytes] - [02/09/2014 19:43:33]
AdwCleaner[R2].txt - [5948 bytes] - [28/02/2015 16:05:44]
AdwCleaner[S0].txt - [18432 bytes] - [02/09/2014 19:44:45]
AdwCleaner[S1].txt - [6030 bytes] - [28/02/2015 16:10:56]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [6089 bytes] ##########

Dejte log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 25-02-2015 01
Ran by kuba (administrator) on KUBA-PC on 28-02-2015 17:00:01
Running from C:\Users\kuba\Desktop
Loaded Profiles: kuba (Available profiles: kuba)
Platform: Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 9 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgcsrvx.exe
() C:\Program Files\AVG Web TuneUp\WtuSystemSupport.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
() C:\Program Files\ATK Hotkey\ASLDRSrv.exe
() C:\Program Files\ATKGFNEX\GFNEXSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Cognizance Corporation) C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\asghost.exe
() C:\Program Files\ASUS\ASUS Live Update\ALU.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(ASUSTeK Computer INC.) C:\Program Files\ASUS\ATK Media\DMedia.exe
(ATK0100) C:\Program Files\ATK Hotkey\HControl.exe
() C:\Program Files\ATKOSD2\ATKOSD2.exe
() C:\Program Files\Wireless Console 2\wcourier.exe
(ATK) C:\Program Files\ASUS\Splendid\ACMON.exe
(ATK) C:\Program Files\P4G\BatteryLife.exe
(ASUSTeK) C:\Windows\System32\ACEngSvr.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgidsagent.exe
() C:\Program Files\ATK Hotkey\ATKOSD.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgwdsvc.exe
() C:\Program Files\ATK Hotkey\KBFiltr.exe
(Intel Corporation) C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgemcx.exe
(Intel Corporation) C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
() C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
(Syntek America Inc.) C:\Windows\System32\StkCSrv.exe
(Western Digital Technologies, Inc.) C:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe
(Western Digital Technologies, Inc.) C:\Program Files\Western Digital\WD SmartWare\WDBackupEngine.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Windows\ASScrPro.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgui.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Samsung) C:\Program Files\Samsung\Kies\Kies.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgcfgex.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAAnotif] => C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [174872 2007-02-12] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] => RtHDVCpl.exe
HKLM\...\Run: [ATKMEDIA] => C:\Program Files\ASUS\ATK Media\DMEDIA.EXE [61440 2006-11-02] (ASUSTeK Computer INC.)
HKLM\...\Run: [CognizanceTS] => rundll32.exe C:\PROGRA~1\ASUSSE~1\ASUSSE~1\Bin\ASTSVCC.dll,RegisterModule
HKLM\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [857648 2007-03-01] (Synaptics, Inc.)
HKLM\...\Run: [ASUS Screen Saver Protector] => C:\Windows\ASScrPro.exe [33136 2007-08-01] ()
HKLM\...\Run: [ASUS Camera ScreenSaver] => C:\Windows\ASScrProlog.exe [37232 2007-08-01] ()
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311616 2014-07-25] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-02-14] (DivX, LLC)
HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2015\avgui.exe [3710416 2015-02-19] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [WD Quick View] => C:\Program Files\Western Digital\WD Quick View\WDDMStatus.exe [5562736 2014-11-14] (Western Digital Technologies, Inc.)
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-2139762894-2808136389-793043689-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-19] (Microsoft Corporation)
HKU\S-1-5-21-2139762894-2808136389-793043689-1000\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [1562264 2014-07-25] (Samsung)
HKU\S-1-5-21-2139762894-2808136389-793043689-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [30877280 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-2139762894-2808136389-793043689-1000\...\MountPoints2: F - F:\Setup.exe
HKU\S-1-5-21-2139762894-2808136389-793043689-1000\...\MountPoints2: H - H:\SETUP.EXE
HKU\S-1-5-21-2139762894-2808136389-793043689-1000\...\MountPoints2: {f44fea04-950c-11e2-88d5-0013e86fde41} - G:\unlock.exe autoplay=true
AppInit_DLLs: APSHook.dll => C:\Windows\system32\APSHook.dll [56832 2006-07-12] (Cognizance Corporation)
Lsa: [Notification Packages] scecli ASWLNPkg
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
ShellIconOverlayIdentifiers: [Encrypted Files] -> {666C7833-A9B6-4AB4-94ED-DC238C81E925} => C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\SFSShell.dll (Cognizance Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com
HKU\S-1-5-21-2139762894-2808136389-793043689-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com/?cid={458FEBA5 ... 2014-08-30 19:44:43&v=4.1.0.411&pid=wtu&sg=&sap=hp
HKU\S-1-5-21-2139762894-2808136389-793043689-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = https://mysearch.avg.com?cid={458FEBA5- ... 2014-08-30 19:44:43&v=4.0.6.10&pid=wtu&sg=&sap=hp
http://mysearch.avg.com?cid={8057E487-2 ... 2014-04-25 19:16:20&v=18.1.5.512&pid=safeguard&sg=&sap=hp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2139762894-2808136389-793043689-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.bing.com/search?FORM=UP97DF& ... -SearchBox
SearchScopes: HKU\S-1-5-21-2139762894-2808136389-793043689-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://mysearch.avg.com/search?cid={45 ... 2014-08-30 19:44:43&v=4.1.0.411&pid=wtu&sg=&sap=dsp&q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: ASUS Security Protect Manager -> {DF21F1DB-80C6-11D3-9483-B03D0EC10000} -> C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItIEAddIn.dll (Bioscrypt Inc.)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Winsock: Catalog5 02 C:\Windows\system32\napinsp.dll [50176] (Společnost Microsoft)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\kuba\AppData\Roaming\Mozilla\Firefox\Profiles\bvflu3f4.default
FF SearchEngineOrder.3: Bing
FF Homepage: hxxp://www.msn.com/en-us/?pc=UP97&ocid=UP97DHP ... 2014-08-30 19:44:43&v=4.1.0.411&pid=wtu&sg=&sap=hp
FF Keyword.URL: hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&q=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF Extension: BS Player ControlBar B - C:\Users\kuba\AppData\Roaming\Mozilla\Firefox\Profiles\bvflu3f4.default\Extensions\{31264a33-a653-46c4-af49-1232c59a7da5} [2015-01-03]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-03-05]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-03-05]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2012-05-19]
FF Extension: No Name - C:\Program Files\MediaWatchV1\MediaWatchV1home1896\ff [Not Found]
FF Extension: No Name - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.1.5.512 [Not Found]
FF Extension: No Name - C:\Users\kuba\AppData\Roaming\Mozilla\Firefox\Profiles\bvflu3f4.default\extensions\avg@toolbar [Not Found]

Chrome:
=======
CHR HomePage: Default -> https://mysearch.avg.com?cid={458FEBA5- ... 2014-08-30 19:44:43&v=3.2.0.14&pid=wtu&sg=&sap=hp
CHR StartupUrls: Default -> "https://mysearch.avg.com?cid={458FEBA5- ... 2014-08-30 19:44:43&v=3.2.0.14&pid=wtu&sg=&sap=hp"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\kuba\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (No Name) - C:\Users\kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfdnecihphmhljaaejmgoiahnihplgn [2015-02-28]
CHR Extension: (No Name) - C:\Users\kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkmdocpbnblchppecickbipihlkehdfg [2014-11-05]
CHR Extension: (No Name) - C:\Users\kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21]
CHR HKLM\...\Chrome\Extension: [cjmlepfdndnfglmnlfbdnamaljbfpmnc] - C:\Program Files\MediaWatchV1\MediaWatchV1home1896\ch\MediaWatchV1home1896.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-05-14]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ASBroker; C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWLNPkg.dll [74240 2007-02-06] (Cognizance Corporation) [File not signed]
R2 ASChannel; C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsChnl.dll [131584 2006-06-21] (Cognizance Corporation) [File not signed]
R2 ASLDRService; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [94208 2007-02-06] () [File not signed]
R2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-03-10] () [File not signed]
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [3411408 2015-02-19] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [308720 2015-02-19] (AVG Technologies CZ, s.r.o.)
R2 EvtEng; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [643072 2007-02-21] (Intel Corporation) [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [61440 2007-01-17] (Hewlett-Packard Company) [File not signed]
R2 RegSrvc; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [327680 2007-02-21] (Intel Corporation) [File not signed]
R2 spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [123248 2006-12-29] () [File not signed]
R2 StkSSrv; C:\Windows\System32\StkCSrv.exe [24576 2007-02-07] (Syntek America Inc.)
R2 WDBackup; C:\Program Files\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2014-12-02] (Western Digital Technologies, Inc.)
R2 WDDriveService; C:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe [296312 2014-06-02] (Western Digital Technologies, Inc.)
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-19] (Microsoft Corporation)
R2 WtuSystemSupport; C:\Program Files\AVG Web TuneUp\WtuSystemSupport.exe [620056 2015-02-26] ()
S2 vToolbarUpdater18.4.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\ToolbarUpdater.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ASMMAP; C:\Program Files\ATKGFNEX\ASMMAP.sys [11632 2007-02-05] () [File not signed]
R3 AtcL001; C:\Windows\System32\DRIVERS\atl01v32.sys [48128 2007-03-15] (Attansic Technology corporation.)
R3 ATSWPDRV; C:\Windows\System32\DRIVERS\ATSwpDrv.sys [140424 2007-03-29] (AuthenTec, Inc.)
R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [121624 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [217568 2015-02-19] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [154904 2014-11-18] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [21272 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [192792 2014-08-28] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [265184 2015-02-03] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [107488 2015-01-23] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [27416 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [210400 2015-01-16] (AVG Technologies CZ, s.r.o.)
R0 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [190424 2009-04-11] (Společnost Microsoft)
S2 ghaio; C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys [15216 2006-11-16] () [File not signed]
R4 InCDfs; C:\Windows\System32\drivers\InCDFs.sys [108592 2007-03-26] (Nero AG)
R1 InCDPass; C:\Windows\System32\drivers\InCDPass.sys [37040 2007-03-26] (Nero AG)
U1 InCDrec; C:\Windows\system32\Drivers\InCDrec.sys [16304 2007-03-26] (Nero AG)
R1 incdrm; C:\Windows\System32\drivers\InCDRm.sys [39472 2007-03-26] (Nero AG)
R1 ItSDisk; C:\Windows\System32\Drivers\ItSDisk.sys [23496 2006-05-16] (Cognizance Corporation)
R0 JGOGO; C:\Windows\System32\DRIVERS\JGOGO.sys [6912 2006-02-07] (JMicron )
R0 JRAID; C:\Windows\System32\DRIVERS\jraid.sys [48000 2007-04-11] (JMicron Technology Corp.)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [5632 2007-01-24] ( )
R3 MTsensor; C:\Windows\System32\DRIVERS\ATKACPI.sys [7680 2006-12-14] (ATK0100)
R3 Ntfs; C:\Windows\system32\Drivers\Ntfs.sys [1082232 2013-03-03] (Společnost Microsoft)
R1 SCDEmu; C:\Windows\system32\Drivers\SCDEmu.sys [59388 2009-11-09] (PowerISO Computing, Inc.) [File not signed]
R3 StkCMini; C:\Windows\System32\Drivers\StkCMini.sys [1245056 2007-02-13] (Syntek)
S3 USBAVCap; C:\Windows\System32\drivers\USBAVCap.sys [828288 2007-05-10] (AVerMedia TECHNOLOGIES, Inc.)
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S3 dg_ssudbus; system32\DRIVERS\ssudbus.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 lvupdtio; \??\C:\Program Files\ASUS\ASUS Live Update\SYS\lvupdtio.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 ssudmdm; system32\DRIVERS\ssudmdm.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-28 17:00 - 2015-02-28 17:01 - 00021877 _____ () C:\Users\kuba\Desktop\FRST.txt
2015-02-28 16:59 - 2015-02-28 17:00 - 00000000 ____D () C:\FRST
2015-02-28 16:57 - 2015-02-28 16:57 - 01127424 _____ (Farbar) C:\Users\kuba\Desktop\FRST.exe
2015-02-28 15:27 - 2015-02-28 15:28 - 02126848 _____ () C:\Users\kuba\Desktop\adwcleaner_4.111.exe
2015-02-27 18:58 - 2015-02-27 19:45 - 1013174272 _____ () C:\Users\kuba\Downloads\Dědictví aneb Kurva se neříká 2014.avi
2015-02-27 18:31 - 2015-02-27 18:31 - 01107968 _____ () C:\Users\kuba\Desktop\RSIT.exe
2015-02-27 16:28 - 2015-02-27 16:28 - 00000000 ____D () C:\Users\kuba\Downloads\Subs
2015-02-27 16:27 - 2015-02-27 16:46 - 906547060 _____ () C:\Users\kuba\Downloads\Tri Bratri 2014 CZ film.avi
2015-02-26 21:12 - 2015-02-26 21:12 - 00000000 ____D () C:\ProgramData\Avg_Update_0215tb
2015-02-26 18:58 - 2015-02-26 18:59 - 00000000 ____D () C:\Users\kuba\Desktop\Nová složka (3)
2015-02-23 18:36 - 2015-02-28 16:15 - 00008192 _____ () C:\Windows\system32\WDPABKP.dat
2015-02-19 21:28 - 2015-02-19 21:28 - 00217568 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdriverx.sys
2015-02-15 14:54 - 2015-02-15 14:54 - 00000000 ____D () C:\RK Software
2015-02-15 14:53 - 2015-02-15 14:53 - 24385296 _____ (Rastislav Korytár - RK Software ) C:\Users\kuba\Downloads\optimik_setup.exe
2015-02-13 13:43 - 2015-01-23 04:00 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-13 13:43 - 2015-01-23 03:51 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-02-12 09:01 - 2015-01-09 01:20 - 02063360 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-12 09:01 - 2014-11-26 03:05 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-12 09:00 - 2015-01-13 02:39 - 00974848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-12 08:52 - 2015-01-15 05:13 - 00440760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-12 08:52 - 2014-12-08 02:59 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 19:54 - 2015-02-11 19:55 - 01596416 _____ () C:\Users\kuba\Downloads\Šerý_Nedašov.xls
2015-02-11 09:43 - 2015-01-14 02:51 - 12371456 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 09:43 - 2015-01-14 02:49 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-02-11 09:43 - 2015-01-14 02:46 - 09742336 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 09:43 - 2015-01-14 02:43 - 01139712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 09:43 - 2015-01-14 02:42 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 09:43 - 2015-01-14 02:42 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 09:43 - 2015-01-14 02:41 - 01802752 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 09:43 - 2015-01-14 02:41 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 09:43 - 2015-01-14 02:41 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 09:43 - 2015-01-14 02:41 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-02-11 09:43 - 2015-01-14 02:41 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 09:43 - 2015-01-14 02:41 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 09:43 - 2015-01-14 02:40 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 09:43 - 2015-01-14 02:40 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 09:43 - 2015-01-14 02:40 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 09:43 - 2015-01-14 02:40 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 09:43 - 2015-01-14 02:40 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 09:43 - 2015-01-14 02:40 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-02-11 09:43 - 2015-01-14 02:40 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-02-11 09:43 - 2015-01-14 02:40 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-02-08 18:22 - 2015-02-08 18:22 - 00033280 _____ () C:\Users\kuba\Downloads\Pol_rozpocet_interier_omitky_Sery_Stipa_2015.xls
2015-02-03 10:47 - 2015-02-03 10:47 - 00265184 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avglogx.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-28 16:56 - 2013-02-18 14:01 - 00000940 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-28 16:53 - 2013-03-21 01:38 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-28 16:18 - 2007-08-01 14:56 - 02021559 _____ () C:\Windows\WindowsUpdate.log
2015-02-28 16:16 - 2012-07-23 18:57 - 00000000 ____D () C:\Users\kuba\AppData\Roaming\Skype
2015-02-28 16:14 - 2013-02-18 14:01 - 00000936 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-28 16:14 - 2006-11-02 14:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-28 16:14 - 2006-11-02 13:47 - 00003168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-28 16:14 - 2006-11-02 13:47 - 00003168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-28 16:12 - 2007-04-21 11:36 - 00000012 _____ () C:\Windows\bthservsdp.dat
2015-02-28 16:12 - 2006-11-02 14:01 - 00032630 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-02-28 16:11 - 2014-09-01 16:49 - 00000000 ____D () C:\AdwCleaner
2015-02-28 15:16 - 2014-04-23 10:12 - 00000000 ____D () C:\ProgramData\MFAData
2015-02-27 18:31 - 2012-10-09 18:36 - 00000000 ____D () C:\Program Files\trend micro
2015-02-27 08:44 - 2007-08-01 16:29 - 00045056 _____ () C:\Windows\system32\acovcnt.exe
2015-02-26 21:18 - 2014-11-06 12:38 - 00000000 ____D () C:\Program Files\AVG Web TuneUp
2015-02-26 12:37 - 2014-10-26 18:27 - 00000861 _____ () C:\Users\Public\Desktop\AVG 2015.lnk
2015-02-26 12:37 - 2014-04-23 10:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-02-23 18:35 - 2014-11-19 21:11 - 00081436 _____ () C:\Windows\PFRO.log
2015-02-22 08:43 - 2014-11-19 20:43 - 00027770 _____ () C:\Windows\DPINST.LOG
2015-02-22 08:43 - 2013-07-01 11:15 - 00000000 ____D () C:\ProgramData\Package Cache
2015-02-22 08:42 - 2013-07-01 11:16 - 00000000 ____D () C:\ProgramData\Western Digital
2015-02-22 08:42 - 2013-07-01 11:16 - 00000000 ____D () C:\Program Files\Western Digital
2015-02-22 08:42 - 2013-07-01 11:16 - 00000000 ____D () C:\Program Files\Common Files\Western Digital
2015-02-20 09:00 - 2012-07-18 20:40 - 00001978 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-15 20:34 - 2012-07-31 18:45 - 00000000 ____D () C:\ProgramData\firebird
2015-02-15 14:54 - 2012-07-31 18:44 - 00000697 _____ () C:\Users\Public\Desktop\Optimik.lnk
2015-02-15 14:54 - 2012-07-31 18:44 - 00000000 ____D () C:\Users\kuba\Documents\Optimik
2015-02-15 14:54 - 2012-07-31 18:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RK Software
2015-02-12 09:41 - 2006-11-02 13:47 - 00386400 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-12 09:21 - 2013-07-15 02:03 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-12 09:03 - 2006-11-02 11:24 - 113756392 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2015-02-12 09:01 - 2007-08-01 15:08 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-02-09 21:35 - 2013-01-28 14:14 - 00000000 ____D () C:\Users\kuba\AppData\Local\Facebook
2015-02-09 19:49 - 2012-07-23 18:57 - 00000000 ___RD () C:\Program Files\Skype
2015-02-09 19:49 - 2012-07-23 18:57 - 00000000 ____D () C:\ProgramData\Skype
2015-02-09 19:26 - 2014-01-31 12:42 - 00000000 ____D () C:\Users\kuba\AppData\Roaming\dvdcss
2015-02-06 19:16 - 2012-07-31 18:45 - 00000000 ____D () C:\ProgramData\TEMP
2015-02-04 20:53 - 2012-05-10 20:36 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-02-04 20:53 - 2012-05-10 20:36 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-02-01 21:01 - 2012-07-24 02:00 - 00000680 _____ () C:\Users\kuba\AppData\Local\d3d9caps.dat

==================== Files in the root of some directories =======

2013-01-08 08:08 - 2013-01-08 08:08 - 0000268 ___RH () C:\Users\kuba\AppData\Roaming\Grand Piano
2013-01-08 08:09 - 2013-01-08 08:09 - 0000268 ___RH () C:\Users\kuba\AppData\Roaming\Grapher
2013-01-08 08:08 - 2013-01-08 08:08 - 0000268 ___RH () C:\Users\kuba\AppData\Roaming\Graphics
2013-01-08 08:08 - 2013-01-08 08:08 - 0000268 ___RH () C:\Users\kuba\AppData\Roaming\Horn Section
2014-03-29 20:57 - 2014-03-31 15:20 - 0000082 _____ () C:\Users\kuba\AppData\Roaming\WB.CFG
2012-06-22 18:40 - 2012-06-22 18:40 - 0000552 _____ () C:\Users\kuba\AppData\Local\d3d8caps.dat
2012-07-24 02:00 - 2015-02-01 21:01 - 0000680 _____ () C:\Users\kuba\AppData\Local\d3d9caps.dat
2012-05-10 21:02 - 2013-02-14 17:00 - 0058880 _____ () C:\Users\kuba\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-01-11 18:47 - 2015-01-11 18:47 - 0000000 _____ () C:\Users\kuba\AppData\Local\{62A021F7-1867-4402-AA4D-4A39B37B672B}
2013-01-08 08:08 - 2013-01-08 08:08 - 0000268 ___RH () C:\ProgramData\Guitar
2013-01-08 08:09 - 2013-01-08 08:09 - 0000268 ___RH () C:\ProgramData\Guitars
2013-01-08 08:08 - 2013-01-08 08:08 - 0000268 ___RH () C:\ProgramData\HAL
2013-01-08 08:08 - 2013-01-08 08:08 - 0000012 ___RH () C:\ProgramData\Hybrid Morph
2013-01-08 08:09 - 2013-01-08 08:09 - 0000012 ___RH () C:\ProgramData\Icons
2013-01-08 08:08 - 2013-01-08 08:08 - 0000012 ___RH () C:\ProgramData\Image Manipulation
2013-01-08 08:08 - 2013-01-08 08:08 - 0000012 ___RH () C:\ProgramData\Limiter
2013-01-08 08:08 - 2013-01-08 08:08 - 0000020 ____H () C:\ProgramData\PKP_DLeo.DAT
2013-01-08 08:09 - 2013-02-15 06:20 - 0000020 ____H () C:\ProgramData\PKP_DLes.DAT
2013-01-08 08:08 - 2013-12-13 12:38 - 0000020 ____H () C:\ProgramData\PKP_DLet.DAT
2013-01-08 08:08 - 2013-12-13 12:41 - 0000020 ____H () C:\ProgramData\PKP_DLev.DAT

Some content of TEMP:
====================
C:\Users\kuba\AppData\Local\Temp\Quarantine.exe
C:\Users\kuba\AppData\Local\Temp\SkypeSetup.exe
C:\Users\kuba\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-28 16:20

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 25-02-2015 01
Ran by kuba at 2015-02-28 17:01:37
Running from C:\Users\kuba\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-2139762894-2808136389-793043689-1000\...\uTorrent) (Version: 3.4.2.34944 - BitTorrent Inc.)
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden
Adobe Flash Player 16 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Reader 7.0 (HKLM\...\{AC76BA86-7AD7-1033-7B44-A70000000000}) (Version: 7.0.0 - Adobe Systems Incorporated)
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0405-0000-0000000FF1CE}_PROHYBRIDR_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0405-0000-0000000FF1CE}_PROHYBRIDR_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0405-0000-0000000FF1CE}_PROHYBRIDR_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
Apple Application Support (HKLM\...\{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}) (Version: 2.1.7 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ArcSoft Panorama Maker 6 (HKLM\...\{DABFD34E-BE68-4BC6-9254-5D7A7FF76B99}) (Version: 6.0.8.85 - ArcSoft)
ASUS InstantFun (HKLM\...\{57B15AD4-8C9D-4164-82BB-E33D8644E757}) (Version: 1.0.0014 - ASUS)
ASUS Live Update (HKLM\...\{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}) (Version: 2.5.1 - ASUS)
ASUS Security Protect Manager (HKLM\...\{D8D4AF9A-6ADE-4B14-A7F5-BA858792729E}) (Version: 2.1.0.880.9 - ASUSTeK Computer Inc.)
ASUS Splendid Video Enhancement Technology (HKLM\...\{C0FC1C14-4824-4A73-87A6-9E888C9C3102}) (Version: 1.02.15 - ASUSTeK)
Asus_Camera_ScreenSaver (HKLM\...\Asus_Camera_ScreenSaver) (Version: 2.0.0006 - ASUS)
ATI Catalyst Install Manager (HKLM\...\{DE4768CC-C6BD-1E19-3A49-0C499B1E18DA}) (Version: 3.0.613.0 - ATI Technologies, Inc.)
ATI Uninstaller (HKLM\...\ATI Uninstaller) (Version: - ATI Technologies, Inc.)
ATK Generic Function Service (HKLM\...\{D3D54F3E-C5C3-443D-978F-87A72E5616E8}) (Version: 1.00.0005 - ATK)
ATK Hotkey (HKLM\...\{3912D529-02BC-4CA8-B5ED-0D0C20EB6003}) (Version: 1.00.0013 - ATK)
ATK Media (HKLM\...\{139B0FFA-187E-4BA1-BCA6-6B56B2B6AB8C}) (Version: - )
ATKOSD2 (HKLM\...\{5C1DB4ED-E9B4-402D-BB14-D75D97D6C1A6}) (Version: 6.64.1.4 - ATK)
Attansic Ethernet Utility (HKLM\...\{1F698102-5739-441E-96F0-74F4EA540F06}) (Version: 2.0.60.4 - Attansic)
AuthenTec Fingerprint Sensor Minimum Install (Version: 7.7.0.62 - AuthenTec, Inc.) Hidden
AVerTV (HKLM\...\InstallShield_{FC87BEA8-5582-476C-A754-41F3A9D976D4}) (Version: 6.0 - AVerMedia Technologies, Inc.)
AVerTV (Version: 6.0 - AVerMedia Technologies, Inc.) Hidden
AVG 2015 (HKLM\...\AVG) (Version: 2015.0.5751 - AVG Technologies CZ, s.r.o.)
AVG 2015 (Version: 15.0.4299 - AVG Technologies CZ, s.r.o.) Hidden
AVG 2015 (Version: 15.0.5751 - AVG Technologies CZ, s.r.o.) Hidden
AVG Web TuneUp (HKLM\...\AVG Web TuneUp) (Version: 4.1.0.411 - AVG Technologies)
Brother MFL-Pro Suite DCP-7057 (HKLM\...\{3ACCCFB3-7B17-4E9F-ACB0-46868FCD4487}) (Version: 1.1.3.0 - Brother Industries, Ltd.)
BS.Player FREE (HKLM\...\BSPlayerf) (Version: 2.68.1077 - AB Team, d.o.o.)
ccc-Branding (HKLM\...\{6E32B134-CA8D-49DD-B94C-0DB155CE70B5}) (Version: 1.00.0000 - ATI)
ccc-core-static (Version: 2007.0316.2332.40221 - ATI) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.17 - Piriform)
CDex - Open Source Digital Audio CD Extractor (HKLM\...\CDex) (Version: 1.70.4.2009 - Georgy Berdyshev)
CUT100 verze 7.10 Demo (HKLM\...\CUT100 demo csy_is1) (Version: - Ecru Software)
DivX Setup (HKLM\...\DivX Setup) (Version: 2.6.1.100 - DivX, LLC)
DriverEasy 4.7.9 (HKLM\...\DriverEasy_is1) (Version: 4.7.9.0 - Easeware)
Google Earth Plug-in (HKLM\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Chrome (HKLM\...\Google Chrome) (Version: 40.0.2214.115 - Google Inc.)
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden
HijackThis 2.0.2 (HKLM\...\HijackThis) (Version: 2.0.2 - TrendMicro)
Intel(R) Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - )
Intel(R) PROSet/Wireless Software (HKLM\...\ProInst) (Version: 11.01.0000 - Intel Corporation)
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
JMB36X Raid Configurer (HKLM\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.00.0000 - JMICRON Technology Corp.)
K-Lite Mega Codec Pack 9.7.5 (HKLM\...\KLiteCodecPack_is1) (Version: 9.7.5 - )
LifeFrame2 (HKLM\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 2.0.15 - ASUS)
LightScribe 1.4.142.1 (Version: 1.4.142.1 - http://www.lightscribe.com) Hidden
mCore (Version: 9.03.0000 - Intel Corporation) Hidden
mDriver (Version: 9.03.0000 - Intel) Hidden
mHelp (Version: 9.03.0000 - Intel) Hidden
Microsoft .NET Framework 3.5 SP1 – jazyková sada – CSY (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - csy) (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
mMHouse (Version: 9.03.0000 - Intel Corporation) Hidden
Motorola SM56 Speakerphone Modem (HKLM\...\SMSERIAL) (Version: - )
Mozilla Firefox 26.0 (x86 cs) (HKLM\...\Mozilla Firefox 26.0 (x86 cs)) (Version: 26.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 26.0 - Mozilla)
mPfMgr (Version: 9.03.0000 - Intel Corporation) Hidden
MSXML 4.0 SP2 (KB927978) (HKLM\...\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}) (Version: 4.20.9841.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML4 Parser (HKLM\...\{01501EBA-EC35-4F9F-8889-3BE346E5DA13}) (Version: 1.0.0 - Microsoft Game Studios)
MyFreeCodec (HKU\S-1-5-21-2139762894-2808136389-793043689-1000\...\MyFreeCodec) (Version: - )
NB Probe (HKLM\...\{6324A1EF-CEF4-43E3-8BCD-9EF3F67317FD}) (Version: - )
Nero 7 Essentials (HKLM\...\{97F32DF8-D66E-446A-A425-C1D7B45C1033}) (Version: 7.02.6782 - Nero AG)
Nikon Message Center 2 (HKLM\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.1.0 - Nikon)
Nikon Movie Editor (HKLM\...\{5CAD3393-EEC0-44CE-9F93-BCAA365B77FB}) (Version: 2.6.0 - Nikon)
Optimik (HKLM\...\Optimik_is1) (Version: - Rastislav Korytár - RK Software)
Picture Control Utility (HKLM\...\{87441A59-5E64-4096-A170-14EFE67200C3}) (Version: 1.4.7 - Nikon)
Poradce pro upgrade na systém Windows 7 (HKLM\...\{C3A13A35-63AC-427a-92E6-960C1D01FABB}) (Version: 2.0.5000.0 - Microsoft Corporation)
Power4Gear eXtreme (HKLM\...\{8CFEBE9C-F29F-4C49-80E0-7106970F8734}) (Version: 1.00.0010 - ATK)
PowerForPhone (HKLM\...\{FC3D290D-79BE-44B7-ABF9-FDD110925930}) (Version: 1.0.0.12 - PowerForPhone)
PowerISO (HKLM\...\PowerISO) (Version: 4.6 - PowerISO Computing, Inc.)
Price Meter (remove only) (HKU\S-1-5-21-2139762894-2808136389-793043689-1000\...\Price Meter) (Version: 1.0.5.8 - Price Meter) <==== ATTENTION
PRO100 verze 5.26 Demo (HKLM\...\PRO100 Demo verze 5_is1) (Version: - Ecru Software)
QuickTime (HKLM\...\{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}) (Version: 7.73.80.64 - Apple Inc.)
Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.1.13105_7 - Samsung Electronics Co., Ltd.)
Samsung Kies (Version: 2.6.1.13105_7 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)
SES Driver (HKLM\...\{0673654C-5296-453B-9798-B61CD7E03FEB}) (Version: 1.0.0 - Western Digital)
Skins (Version: 2007.0316.2332.40221 - ATI) Hidden
Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 6.9.12585 - Skype Technologies S.A.)
Skype™ 7.0 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 9.1.19.0 - Synaptics)
Tri-Peaks Solitaire To Go (HKLM\...\Tri_Deploy_0) (Version: - )
TurboCAD Professional 18 (HKLM\...\{52BCB854-9426-4B81-87FC-2883D228153C}) (Version: 18.1.0 - IMSIDesign)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
USB2.0 1.3M WebCam (HKLM\...\USB2.0 1.3M WebCam) (Version: - )
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
ViewNX 2 (HKLM\...\{E64C137C-D0B7-467A-B47F-460AAB30F0A3}) (Version: 2.6.0 - Nikon)
VistaFeaturePack (HKLM\...\InstallShield_{D7E04009-B191-4E9D-9D2D-1BBE57BD8A42}) (Version: 1.03.0000 - CSR)
VistaFeaturePack (Version: 1.03.0000 - CSR) Hidden
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
WD Quick View (HKLM\...\{0AE025C9-2E0B-4927-A64F-1FA7F294DBFA}) (Version: 2.4.6.3 - Western Digital Technologies, Inc.)
WD SES Driver Setup (Version: 1.0.1.6 - Western Digital) Hidden
WD SmartWare (HKLM\...\{0699336E-CDA7-4523-82C6-472F2F0A1CFC}) (Version: 2.4.6.3 - Western Digital Technologies, Inc.)
WD SmartWare Installer (HKLM\...\{1891b882-48f7-442d-98d0-c1ce533f25bd}) (Version: 2.4.6.3 - Western Digital Technologies, Inc.)
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinFlash (HKLM\...\{DE10AB76-4756-4913-BE25-55D1C1051F9A}) (Version: - )
WinRAR 5.01 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Wireless Console 2 (HKLM\...\{83F73CB1-7705-49D1-9852-84D839CA2A45}) (Version: 2.0.8 - ATK)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{056ADF40-C1D0-4CEB-94D2-4B82CB2C25F4}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Ties\SolidBodyTie.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{0871B3E4-9369-4125-94BC-0890A205CE20}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Regens\texture.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{0B91E172-6025-4EBD-A0A2-34552C05F100}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Regens\TextBox.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{0D818D11-C218-4799-AE9D-FCD1811B978A}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\OffsetPolyline.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{1030CDF2-4B81-47F2-A9A8-33AA24A753EC}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\TCmark.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{106A77C5-F766-4DA6-8448-66E7F74F24F7}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Ties\Fillet3D_Tie.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{130E8ABC-A163-43b5-B9E5-A31C1B1CB7B4}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\BPMngr.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{143B0747-4787-4D93-A4E2-FD5C40B507B1}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Regens\CoordText.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{14F2A484-4F52-4DB5-9EC4-E97E92131E58}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Regens\Nut3D.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{15544F60-D775-4962-BEB4-E580346B1591}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Ties\ScetchTie.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{19F2B16F-6559-4CB1-873A-04B9A95411E1}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\inetool.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{1BBF13E0-551E-42DD-91F4-1A547443FFDA}\InprocServer32 -> C:\Users\kuba\AppData\Local\Tbccint\Community Alerts\Alert.dll No File
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{1E72E725-BF17-43D0-BFF1-DBC70C53EC33}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Regens\DatumRef.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{2017F29F-68F4-11D5-B9BF-00C0DF0625A5}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\SpiralTool.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{28696026-B7E6-11D0-9B3B-444553540000}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Filters\Jpeg.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{28A80F2D-0869-4E55-B0B3-0E44E64DC4C6}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\ExtRefManager.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{2C10CA50-05D0-11D2-8697-0000B46B691D}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Ties\ObjectTie.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{2F015029-FB7C-11D1-B8AC-000021452DB6}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\InsSmObj.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{31264A33-A653-46C4-AF49-1232C59A7DA5}\InprocServer32 -> C:\Users\kuba\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll No File
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{39C82848-A4C6-462B-833D-48F6DA54A191}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Filters\MSEExport.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{3A1209A4-8568-40F0-9B5E-4A06A2A06417}\InprocServer32 -> C:\Users\kuba\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll No File
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{443E0383-3F0F-4ABF-93B8-885915F56C6F}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\JointPolyline.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{44B36608-6283-4B93-840D-5706FDAAC189}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Regens\Conn.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{45232FA2-65A2-11D2-8C4A-00403338C504}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Regens\RRectA.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{49E39851-1FC0-11D2-8698-0000B46B691D}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Ties\SmartHatch.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{4A5C2474-D597-48D4-A14A-3A13BC663BB9}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Regens\DatumTarget.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{554EDBD6-7585-40C5-9713-180E76DAC4FC}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Regens\TCImage.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{5B60CCED-F564-43BA-802B-01183FAA0A84}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\TCImageTool.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{5CB822B0-C4A9-4A03-9E26-0F14AC0C32BC}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Regens\TextAlong.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{5E5D3D44-3ADE-406F-98F8-D4AC5B539571}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Regens\Bolt3D.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{607CAF95-75AC-4C59-9E18-574DC62DB509}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\Fillet3D_Tool.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{63E27F54-B50D-439F-BF78-8CD04E6B0BDB}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\sobjinsert.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{6448A471-DD2A-4914-BB76-5A6E2B73F2DF}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Ties\CurveTextTie.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{6A3A61A2-D373-4B31-8164-263601C79016}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\TCRougness.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{6A481001-E531-11CF-A115-00A024158DAF}\localserver32 -> C:\Program Files\IMSIDesign\TCWP18\Program\tcw18.exe (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{6A481002-E531-11CF-A115-00A024158DAF}\localserver32 -> C:\Program Files\IMSIDesign\TCWP18\Program\tcw18.exe (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{6A481003-E531-11CF-A115-00A024158DAF}\localserver32 -> C:\Program Files\IMSIDesign\TCWP18\Program\tcw18.exe (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{6A481004-E531-11CF-A115-00A024158DAF}\localserver32 -> C:\Program Files\IMSIDesign\TCWP18\Program\tcw18.exe (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{6A481005-E531-11CF-A115-00A024158DAF}\localserver32 -> C:\Program Files\IMSIDesign\TCWP18\Program\tcw18.exe (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{6A481100-E531-11CF-A115-00A024158DAF}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\ImsigxPS18.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{6A481801-E531-11CF-A115-00A024158DAF}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\IMSIGX18.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{6A481802-E531-11CF-A115-00A024158DAF}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\IMSIGX18.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{6A481803-E531-11CF-A115-00A024158DAF}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\IMSIGX18.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{6A481804-E531-11CF-A115-00A024158DAF}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\IMSIGX18.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{6A481805-E531-11CF-A115-00A024158DAF}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\IMSIGX18.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{6A482001-E531-11CF-A115-00A024158DAF}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\imsigxext\gxext18.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{6A482002-E531-11CF-A115-00A024158DAF}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\imsigxext\gxext18.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{6A482003-E531-11CF-A115-00A024158DAF}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\imsigxext\gxext18.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{6E1099B5-A2D4-11D5-BA2B-00C0DF0625A5}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\RevisionCloud.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{71E21C97-83FB-4242-8997-A52627FFEFF9}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\TCWeldSm.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{7359A6F8-6AB6-4505-875C-15B129249370}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\CopyInPlace.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{7657D07B-63D1-480B-B9E5-839E458E659E}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Ties\DimensionTie.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{7724BB36-B671-11D0-9B3B-444553540000}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Regens\Rrect.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{7724BB46-B671-11D0-9B3B-444553540000}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Regens\MfcSplin.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{800C35EC-D94F-4A62-B1BF-3016DB1E2023}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Ties\SectionToPathTie.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{8188189D-6F33-48f2-B54B-936205216521}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Ties\DCMMarkTie.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{8301D8BD-0266-49AB-9D26-0AF9BEA278FB}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\MultiAddToolVB.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{87597A72-87F0-420E-BA7C-AB87D8FC0D55}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Regens\Cable.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{89E2E072-2AF3-414A-B2C5-CD75CB6B44DD}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\ToolTextAlong.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{90E611F0-DE07-11D2-ABC3-0000B46B691D}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Ties\ViewportTie.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{92454481-8DB8-4C5D-9F8F-1897A30E49C6}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Regens\Nut.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{99D040C9-BC79-44E2-BEC1-DE3636FA0320}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\ChainPolyline.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{ABEE7F9B-1215-4878-8F01-F0BAF4F211F7}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\Pipe_Tool.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{AFF6A5F1-41F6-4979-9D44-F1232D471F39}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\TcTools\DOCCompareLaunchTool.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{B1284809-2106-4B5A-8903-ECF3F9C7714A}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Regens\Welding.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{BC84096E-9118-41C8-8045-F940D4550DF5}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Regens\Fillet3D.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{BDA1344C-D91F-4557-BBB1-59C5B1AD1645}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\TCPssWiz.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{BF0BBC85-A311-11D3-A82D-00C0DF246524}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\TcTools\PalTool.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{C1A01196-80B3-46E0-B493-66ACB820BC17}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Regens\BoltNut.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{C1F35EEC-4BD8-4C2C-8BCF-6066EA37B6C3}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\PlaneParameters.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{C347BEE4-90D9-4641-A5BC-8B8982846576}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\SectOnPathTool.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{C5AA19CF-2F1A-42A3-886F-682FDAEF585A}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Regens\Hole.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{C9ACD2AA-AB9F-40DE-AFBE-1350D6BCB291}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\TCTrnTools.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{D4BEEB62-37D5-4FD3-8EAB-5B972F37EFB3}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\Thread3D.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{D732323E-7207-465d-9924-BCBAFE352435}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Ties\CompoundProfileTie.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{D8ADC55B-2CF1-45BC-8426-2685E150E89B}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Regens\Roundrect.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{E89833D1-0A9B-4EA2-B8E6-372353FFC763}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\GearContour.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{EC2CD23E-C474-476B-AA44-7C4C0D023D97}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Regens\Gear.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{EFFDB231-8367-11D2-82F5-006052012837}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\InsTool.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{F335199D-8E62-42E3-9F40-8A2459EA5576}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Regens\Screw.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{F792E5D4-834F-4BE5-9BA1-7397781858D2}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\TCFile.dll (IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-2139762894-2808136389-793043689-1000_Classes\CLSID\{FBA7169A-815C-4F32-85D1-FDB30E033827}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP18\Program\Draggers\rubyscripting.dll ()

==================== Restore Points =========================

24-02-2015 16:46:23 Naplánovaný kontrolní bod
25-02-2015 09:50:16 Naplánovaný kontrolní bod
26-02-2015 13:10:10 Naplánovaný kontrolní bod
27-02-2015 09:36:22 Naplánovaný kontrolní bod
28-02-2015 00:00:06 Naplánovaný kontrolní bod
28-02-2015 16:52:06 Naplánovaný kontrolní bod

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2006-11-02 11:23 - 2013-02-16 16:27 - 00000098 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0C3AF200-FADC-49E5-880E-DEE192C8B79A} - System32\Tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask => C:\Windows\system32\RAServer.exe [2008-01-19] (Společnost Microsoft)
Task: {3C0263F2-6D09-42E6-B1BC-B9C7DB48647E} - System32\Tasks\{B641BA32-8F43-4A4F-B6FD-E2027A497E93} => pcalua.exe -a "D:\Nová složka (4)\jakub záloha\KaM - The Peasants Rebellion\KaM-TPR_CZ_Full_v1.00.exe" -d "D:\Nová složka (4)\jakub záloha\KaM - The Peasants Rebellion"
Task: {5FF097B7-ADF7-48B0-A235-567FF78970DF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-14] (Google Inc.)
Task: {62EDC243-8A2E-4622-8577-354D70205172} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\VistaSP1CEIP => C:\Windows\servicing\vsp1ceip.exe [2008-01-19] (Microsoft Corporation)
Task: {75B3A95B-837A-47F3-B7FD-40B107645075} - System32\Tasks\Program k provádění aktualizací online DivX => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2014-01-10] ()
Task: {97FC056D-73CF-49B9-942B-E7CA47F549C6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-14] (Google Inc.)
Task: {A3295BDB-D8ED-472F-9E5D-B48620797608} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-08-21] (Piriform Ltd)
Task: {C5355016-B201-4138-A05E-0CD822F7ECB5} - System32\Tasks\{43097B78-18E7-460C-88F3-01A96B59E683} => pcalua.exe -a "C:\Users\kuba\Downloads\hdmi_r270 (1).exe" -d C:\Users\kuba\Downloads
Task: {DA205657-D345-4A17-8360-1B2AC9E88122} - System32\Tasks\ASUS Live Update => C:\Program Files\ASUS\ASUS Live Update\ALU.exe [2007-02-09] ()
Task: {E31815EA-8DE0-40B6-9DE7-ECC33A8D7105} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {E60E8F74-4D68-4B48-8444-67DC0D0879A0} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {FFE5FCB6-7922-40EF-9E3D-5C92756C831E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-04] (Adobe Systems Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2015-02-26 21:18 - 2015-02-26 21:18 - 00620056 ____N () C:\Program Files\AVG Web TuneUp\WtuSystemSupport.exe
2007-08-01 15:55 - 2007-02-06 02:13 - 00094208 _____ () C:\Program Files\ATK Hotkey\ASLDRSrv.exe
2007-08-01 15:56 - 2007-03-10 02:57 - 00094208 _____ () C:\Program Files\ATKGFNEX\GFNEXSrv.exe
2006-10-18 00:13 - 2006-10-18 00:13 - 01167360 _____ () C:\Program Files\Intel\Wireless\Bin\acAuth.dll
2007-02-21 19:13 - 2007-02-21 19:13 - 00118784 _____ () C:\Program Files\Intel\Wireless\Bin\IWMSPROV.DLL
2007-03-06 15:55 - 2007-03-06 15:55 - 00159744 _____ () C:\Windows\system32\atitmmxx.dll
2007-08-01 16:08 - 2007-02-09 18:38 - 00049520 _____ () C:\Program Files\ASUS\ASUS Live Update\ALU.exe
2007-08-01 15:55 - 2004-05-28 02:13 - 00057344 _____ () C:\Program Files\ATK Hotkey\CMSSC.dll
2007-08-01 15:57 - 2007-01-18 03:26 - 07708672 _____ () C:\Program Files\ATKOSD2\ATKOSD2.exe
2007-08-01 16:06 - 2006-12-21 07:03 - 01036288 _____ () C:\Program Files\Wireless Console 2\wcourier.exe
2007-08-01 16:10 - 2007-01-16 22:08 - 00009216 _____ () C:\Program Files\ASUS\Splendid\GLCDdll.dll
2007-08-01 15:55 - 2007-03-23 01:09 - 02420736 _____ () C:\Program Files\ATK Hotkey\ATKOSD.exe
2007-08-01 15:55 - 2007-04-17 21:39 - 00077824 _____ () C:\Program Files\ATK Hotkey\KBFiltr.exe
2007-08-01 16:09 - 2006-12-29 00:17 - 00123248 _____ () C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
2007-08-01 16:09 - 2006-09-01 19:11 - 00147456 _____ () C:\Program Files\ASUS\NB Probe\SPM\spdiskex.dll
2007-08-01 16:09 - 2003-11-28 10:11 - 00135168 _____ () C:\Program Files\ASUS\NB Probe\SPM\spos.dll
2007-08-01 16:09 - 2005-08-29 23:24 - 00081920 _____ () C:\Program Files\ASUS\NB Probe\SPM\spnbacpi.dll
2007-08-01 16:09 - 2005-04-08 03:25 - 00077824 _____ () C:\Program Files\ASUS\NB Probe\SPM\spmemory.dll
2007-08-01 16:32 - 2007-08-01 16:32 - 00033136 _____ () C:\Windows\ASScrPro.exe
2014-11-06 12:38 - 2014-11-06 12:37 - 01685528 ____N () C:\Program Files\AVG Web TuneUp\TBAPI.dll
2015-01-28 17:44 - 2015-01-28 17:44 - 00183296 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Commonc65c5a95#\44ed7ad43057ad7ab34027c2ebc8f6d2\Kies.Common.DeviceServiceLib.Interface.ni.dll
2015-01-28 17:45 - 2015-01-28 17:45 - 14992896 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Theme\b7ac337543fe9f08e68cb5c82ce2a31c\Kies.Theme.ni.dll
2015-01-28 17:44 - 2015-01-28 17:44 - 01834496 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.UI\66ba318f20218d4f013db30dfbc2a2a9\Kies.UI.ni.dll
2015-01-28 17:44 - 2015-01-28 17:44 - 00077824 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.MVVM\5a05f3859ea41d7871e9df6a12baedc0\Kies.MVVM.ni.dll
2015-01-28 17:45 - 2015-01-28 17:45 - 00233472 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ASF_cSharpAPI\de6a15348040911b2e63c8dbe3c77275\ASF_cSharpAPI.ni.dll
2015-02-20 09:00 - 2015-02-17 23:44 - 09171272 _____ () C:\Program Files\Google\Chrome\Application\40.0.2214.115\pdf.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:87C79266
AlternateDataStreams: C:\ProgramData\TEMP:F34493AA

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2139762894-2808136389-793043689-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\kuba\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta galerie Windows Fotogalerie.jpg
DNS Servers: 192.168.1.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^AVerQuick.lnk => C:\Windows\pss\AVerQuick.lnk.CommonStartup
MSCONFIG\startupreg: InCD => C:\Program Files\Nero\Nero 7\InCD\InCD.exe
MSCONFIG\startupreg: Nikon Message Center 2 => C:\Program Files\Nikon\Nikon Message Center 2\NkMC2.exe -s
MSCONFIG\startupreg: PowerForPhone => C:\Program Files\PowerForPhone\PowerForPhone.exe

==================== Accounts: =============================

Administrator (S-1-5-21-2139762894-2808136389-793043689-500 - Administrator - Disabled)
Guest (S-1-5-21-2139762894-2808136389-793043689-501 - Limited - Disabled)
kuba (S-1-5-21-2139762894-2808136389-793043689-1000 - Administrator - Enabled) => C:\Users\kuba

==================== Faulty Device Manager Devices =============

Name: isatap.{1FB0B6AE-215C-4E90-9F2C-A232D26D695F}
Description: Microsoft ISATAP Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: isatap.{1FB0B6AE-215C-4E90-9F2C-A232D26D695F}
Description: Microsoft ISATAP Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: isatap.{1FB0B6AE-215C-4E90-9F2C-A232D26D695F}
Description: Microsoft ISATAP Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Komunikační port (COM6)
Description: Komunikační port
Class Guid: {4d36e978-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní typy portů)
Service: Serial
Problem: : Windows cannot determine the settings for this device. Consult the documentation that came with this device and use the Resource tab to set the configuration. (Code 34)
Resolution: The device requires manual configuration. See the hardware documentation or contact the hardware vendor for instructions on manually configuring the device. After you configure the device itself, you can use the "Resources" tab in Device Manager to configure the resource settings in Windows.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/28/2015 04:15:08 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: PNRPsvcC:\Windows\system32\pnrpperf.dll4

Error: (02/28/2015 04:15:06 PM) (Source: Perflib) (EventID: 1010) (User: )
Description: EmdCacheC:\Windows\system32\emdmgmt.dll4

Error: (02/28/2015 04:14:56 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\system32\bitsperf.dll4

Error: (02/27/2015 08:45:11 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\system32\bitsperf.dll4

Error: (02/26/2015 00:13:17 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: PNRPsvcC:\Windows\system32\pnrpperf.dll4

Error: (02/26/2015 00:13:14 PM) (Source: Perflib) (EventID: 1010) (User: )
Description: EmdCacheC:\Windows\system32\emdmgmt.dll4

Error: (02/25/2015 00:11:59 PM) (Source: Windows Search Service) (EventID: 3013) (User: )
Description: Položka <C:\USERS\KUBA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BVFLU3F4.DEFAULT\EXTENSIONS\AVG@TOOLBAR\MODULES\LOCALE\ES-ES> v mapě algoritmu hash nebyla aktualizována.

Kontext: aplikace , katalog SystemIndex

Podrobnosti:
Zařízení připojené k systému nefunguje. (0x8007001f)

Error: (02/25/2015 00:11:59 PM) (Source: Windows Search Service) (EventID: 3013) (User: )
Description: Položka <C:\USERS\KUBA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BVFLU3F4.DEFAULT\EXTENSIONS\AVG@TOOLBAR\MODULES\LOCALE\ES-ES> v mapě algoritmu hash nebyla aktualizována.

Kontext: aplikace , katalog SystemIndex

Podrobnosti:
Zařízení připojené k systému nefunguje. (0x8007001f)

Error: (02/25/2015 00:11:58 PM) (Source: Windows Search Service) (EventID: 3013) (User: )
Description: Položka <C:\USERS\KUBA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BVFLU3F4.DEFAULT\EXTENSIONS\AVG@TOOLBAR\MODULES\LOCALE\ES> v mapě algoritmu hash nebyla aktualizována.

Kontext: aplikace , katalog SystemIndex

Podrobnosti:
Zařízení připojené k systému nefunguje. (0x8007001f)

Error: (02/25/2015 00:11:58 PM) (Source: Windows Search Service) (EventID: 3013) (User: )
Description: Položka <C:\USERS\KUBA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BVFLU3F4.DEFAULT\EXTENSIONS\AVG@TOOLBAR\MODULES\LOCALE\ES> v mapě algoritmu hash nebyla aktualizována.

Kontext: aplikace , katalog SystemIndex

Podrobnosti:
Zařízení připojené k systému nefunguje. (0x8007001f)


System errors:
=============
Error: (02/28/2015 04:24:18 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: lvupdtio%%2

Error: (02/28/2015 04:15:14 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: vToolbarUpdater18.4.0%%2

Error: (02/28/2015 04:15:14 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: ghaio%%193

Error: (02/28/2015 04:11:59 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F40211E8-05C9-4430-B832-041A5ECD7FA2}

Error: (02/27/2015 08:55:39 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: lvupdtio%%2

Error: (02/27/2015 08:45:44 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: ghaio%%193

Error: (02/26/2015 09:23:53 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F40211E8-05C9-4430-B832-041A5ECD7FA2}

Error: (02/26/2015 09:23:26 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {6295DF2D-35EE-11D1-8707-00C04FD93327}

Error: (02/26/2015 09:22:52 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (02/26/2015 00:29:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: lvupdtio%%2


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
Date: 2015-02-28 17:01:30.121
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\avgidsdriverx.sys because the set of per-page image hashes could not be found on the system.

Date: 2015-02-28 17:01:29.841
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\avgidsdriverx.sys because the set of per-page image hashes could not be found on the system.

Date: 2015-02-28 17:01:29.544
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\avgidsdriverx.sys because the set of per-page image hashes could not be found on the system.

Date: 2015-02-28 17:01:29.248
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\avgidsdriverx.sys because the set of per-page image hashes could not be found on the system.

Date: 2015-02-28 17:00:52.380
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys because the set of per-page image hashes could not be found on the system.

Date: 2015-02-28 17:00:52.115
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys because the set of per-page image hashes could not be found on the system.

Date: 2015-02-28 17:00:51.865
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys because the set of per-page image hashes could not be found on the system.

Date: 2015-02-28 17:00:51.460
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys because the set of per-page image hashes could not be found on the system.

Date: 2015-02-28 17:00:51.148
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\avgidsdriverx.sys because the set of per-page image hashes could not be found on the system.

Date: 2015-02-28 17:00:50.867
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\avgidsdriverx.sys because the set of per-page image hashes could not be found on the system.


==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 Duo CPU T7300 @ 2.00GHz
Percentage of memory in use: 61%
Total physical RAM: 2046.48 MB
Available physical RAM: 787.61 MB
Total Pagefile: 4335.95 MB
Available Pagefile: 2864.14 MB
Total Virtual: 2047.88 MB
Available Virtual: 1896.83 MB

==================== Drives ================================

Drive c: (VistaOS) (Fixed) (Total:74.52 GB) (Free:5 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:67.69 GB) (Free:8.16 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 149.1 GB) (Disk ID: F98D6E74)
Partition 1: (Not Active) - (Size=6.8 GB) - (Type=1C)
Partition 2: (Active) - (Size=74.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=67.7 GB) - (Type=OF Extended)

==================== End Of Log ============================

Odinstalujte starou a zranitelnou verzi javy Java 7 Update 51. Pokud javu potrebujete, pak nainstalujte novou z java.com - pozor na adware pri jeji instalaci http://forum.viry.cz/viewtopic.php?p=1374438#p1374438 . Z hlediska bezpecnosti (exploity) je lepsi ji nemit.

Aktualizujte Adobe Reader - spustte jej, nahore Napoveda, zkontrolovat aktualizace

• Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
• ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
• znovu spustte FRST a kliknete na Fix
• po restartu na Vas vyskoci fixlog (pripadne bude ulozen na Plose), jehoz obsah mi vlozte do pristi odpovedi

  Kód: Vybrat vše

  Start
  CloseProcesses:
  HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
  HKU\S-1-5-21-2139762894-2808136389-793043689-1000\...\MountPoints2: F - F:\Setup.exe
  HKU\S-1-5-21-2139762894-2808136389-793043689-1000\...\MountPoints2: H - H:\SETUP.EXE
  HKU\S-1-5-21-2139762894-2808136389-793043689-1000\...\MountPoints2: {f44fea04-950c-11e2-88d5-0013e86fde41} - G:\unlock.exe autoplay=true
  ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
  GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
  
  HKU\S-1-5-21-2139762894-2808136389-793043689-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com/?cid={458FEBA5-DC68-4601-8D2C-3DDCF68F81EA}&mid=b164bd6cfcda47d285d4d152ba1975b1-a5633b735e8585f4a241e369b4b89641180b987a&lang=cs&ds=AVG&coid=avgtbavg&cmpid=0215tb&pr=fr&d=2014-08-30 19:44:43&v=4.1.0.411&pid=wtu&sg=&sap=hp
  HKU\S-1-5-21-2139762894-2808136389-793043689-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = https://mysearch.avg.com?cid={458FEBA5-DC68-4601-8D2C-3DDCF68F81EA}&mid=b164bd6cfcda47d285d4d152ba1975b1-a5633b735e8585f4a241e369b4b89641180b987a&lang=cs&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-08-30 19:44:43&v=4.0.6.10&pid=wtu&sg=&sap=hp
  http://mysearch.avg.com?cid={8057E487-2FE4-4A38-8385-5F55A0B3CE09}&mid=b164bd6cfcda47d285d4d152ba1975b1-a5633b735e8585f4a241e369b4b89641180b987a&lang=cs&ds=AVG&coid=avgtbavg&cmpid=&pr=pr&d=2014-04-25 19:16:20&v=18.1.5.512&pid=safeguard&sg=&sap=hp
  SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  SearchScopes: HKU\S-1-5-21-2139762894-2808136389-793043689-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.bing.com/search?FORM=UP97DF&PC=UP97&q={searchTerms}&src=IE-SearchBox
  SearchScopes: HKU\S-1-5-21-2139762894-2808136389-793043689-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://mysearch.avg.com/search?cid={458FEBA5-DC68-4601-8D2C-3DDCF68F81EA}&mid=b164bd6cfcda47d285d4d152ba1975b1-a5633b735e8585f4a241e369b4b89641180b987a&lang=cs&ds=AVG&coid=avgtbavg&cmpid=0215tb&pr=fr&d=2014-08-30 19:44:43&v=4.1.0.411&pid=wtu&sg=&sap=dsp&q={searchTerms}
  Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  
  FF SearchEngineOrder.3: Bing
  FF Homepage: hxxp://www.msn.com/en-us/?pc=UP97&ocid= ... UP97&ocid={458FEBA5-DC68-4601-8D2C-3DDCF68F81EA}&mid=b164bd6cfcda47d285d4d152ba1975b1-a5633b735e8585f4a241e369b4b89641180b987a&lang=cs&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-08-30 19:44:43&v=4.1.0.411&pid=wtu&sg=&sap=hp
  FF Keyword.URL: hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&q=
  FF NetworkProxy: "type", 0
  FF Extension: BS Player ControlBar B - C:\Users\kuba\AppData\Roaming\Mozilla\Firefox\Profiles\bvflu3f4.default\Extensions\{31264a33-a653-46c4-af49-1232c59a7da5} [2015-01-03]
  FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-03-05]
  FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-03-05]
  FF Extension: No Name - C:\Program Files\MediaWatchV1\MediaWatchV1home1896\ff [Not Found]
  FF Extension: No Name - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.1.5.512 [Not Found]
  FF Extension: No Name - C:\Users\kuba\AppData\Roaming\Mozilla\Firefox\Profiles\bvflu3f4.default\extensions\avg@toolbar [Not Found]
  
  CHR HomePage: Default -> https://mysearch.avg.com?cid={458FEBA5-DC68-4601-8D2C-3DDCF68F81EA}&mid=b164bd6cfcda47d285d4d152ba1975b1-a5633b735e8585f4a241e369b4b89641180b987a&lang=cs&ds=AVG&coid=avgtbavg&pr=fr&d=2014-08-30 19:44:43&v=3.2.0.14&pid=wtu&sg=&sap=hp
  CHR StartupUrls: Default -> "https://mysearch.avg.com?cid={458FEBA5-DC68-4601-8D2C-3DDCF68F81EA}&mid=b164bd6cfcda47d285d4d152ba1975b1-a5633b735e8585f4a241e369b4b89641180b987a&lang=cs&ds=AVG&coid=avgtbavg&pr=fr&d=2014-08-30 19:44:43&v=3.2.0.14&pid=wtu&sg=&sap=hp"
  CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
  CHR Extension: (No Name) - C:\Users\kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfdnecihphmhljaaejmgoiahnihplgn [2015-02-28]
  CHR Extension: (No Name) - C:\Users\kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkmdocpbnblchppecickbipihlkehdfg [2014-11-05]
  CHR Extension: (No Name) - C:\Users\kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21]
  CHR HKLM\...\Chrome\Extension: [cjmlepfdndnfglmnlfbdnamaljbfpmnc] - C:\Program Files\MediaWatchV1\MediaWatchV1home1896\ch\MediaWatchV1home1896.crx [Not Found]
  CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-05-14]
  
  2015-02-28 15:27 - 2015-02-28 15:28 - 02126848 _____ () C:\Users\kuba\Desktop\adwcleaner_4.111.exe
  2015-02-27 18:31 - 2015-02-27 18:31 - 01107968 _____ () C:\Users\kuba\Desktop\RSIT.exe
  2015-02-28 16:11 - 2014-09-01 16:49 - 00000000 ____D () C:\AdwCleaner
  2015-02-27 18:31 - 2012-10-09 18:36 - 00000000 ____D () C:\Program Files\trend micro
  Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
  Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
  
  AlternateDataStreams: C:\ProgramData\TEMP:87C79266
  AlternateDataStreams: C:\ProgramData\TEMP:F34493AA
  C:\Program Files\Skype\Toolbars
  Hosts:
  EmptyTemp:
  End
  

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 25-02-2015 01
Ran by kuba at 2015-02-28 17:37:15 Run:1
Running from C:\Users\kuba\Desktop
Loaded Profiles: kuba (Available profiles: kuba)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKU\S-1-5-21-2139762894-2808136389-793043689-1000\...\MountPoints2: F - F:\Setup.exe
HKU\S-1-5-21-2139762894-2808136389-793043689-1000\...\MountPoints2: H - H:\SETUP.EXE
HKU\S-1-5-21-2139762894-2808136389-793043689-1000\...\MountPoints2: {f44fea04-950c-11e2-88d5-0013e86fde41} - G:\unlock.exe autoplay=true
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

HKU\S-1-5-21-2139762894-2808136389-793043689-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com/?cid={458FEBA5 ... 2014-08-30 19:44:43&v=4.1.0.411&pid=wtu&sg=&sap=hp
HKU\S-1-5-21-2139762894-2808136389-793043689-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = https://mysearch.avg.com?cid={458FEBA5- ... 2014-08-30 19:44:43&v=4.0.6.10&pid=wtu&sg=&sap=hp
http://mysearch.avg.com?cid={8057E487-2 ... 2014-04-25 19:16:20&v=18.1.5.512&pid=safeguard&sg=&sap=hp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2139762894-2808136389-793043689-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.bing.com/search?FORM=UP97DF& ... -SearchBox
SearchScopes: HKU\S-1-5-21-2139762894-2808136389-793043689-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://mysearch.avg.com/search?cid={45 ... 2014-08-30 19:44:43&v=4.1.0.411&pid=wtu&sg=&sap=dsp&q={searchTerms}
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

FF SearchEngineOrder.3: Bing
FF Homepage: hxxp://www.msn.com/en-us/?pc=UP97&ocid= ... UP97&ocid={458FEBA5-DC68-4601-8D2C-3DDCF68F81EA}&mid=b164bd6cfcda47d285d4d152ba1975b1-a5633b735e8585f4a241e369b4b89641180b987a&lang=cs&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-08-30 19:44:43&v=4.1.0.411&pid=wtu&sg=&sap=hp
FF Keyword.URL: hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&q=
FF NetworkProxy: "type", 0
FF Extension: BS Player ControlBar B - C:\Users\kuba\AppData\Roaming\Mozilla\Firefox\Profiles\bvflu3f4.default\Extensions\{31264a33-a653-46c4-af49-1232c59a7da5} [2015-01-03]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-03-05]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-03-05]
FF Extension: No Name - C:\Program Files\MediaWatchV1\MediaWatchV1home1896\ff [Not Found]
FF Extension: No Name - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.1.5.512 [Not Found]
FF Extension: No Name - C:\Users\kuba\AppData\Roaming\Mozilla\Firefox\Profiles\bvflu3f4.default\extensions\avg@toolbar [Not Found]

CHR HomePage: Default -> https://mysearch.avg.com?cid={458FEBA5- ... 2014-08-30 19:44:43&v=3.2.0.14&pid=wtu&sg=&sap=hp
CHR StartupUrls: Default -> "https://mysearch.avg.com?cid={458FEBA5- ... 2014-08-30 19:44:43&v=3.2.0.14&pid=wtu&sg=&sap=hp"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Extension: (No Name) - C:\Users\kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfdnecihphmhljaaejmgoiahnihplgn [2015-02-28]
CHR Extension: (No Name) - C:\Users\kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkmdocpbnblchppecickbipihlkehdfg [2014-11-05]
CHR Extension: (No Name) - C:\Users\kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21]
CHR HKLM\...\Chrome\Extension: [cjmlepfdndnfglmnlfbdnamaljbfpmnc] - C:\Program Files\MediaWatchV1\MediaWatchV1home1896\ch\MediaWatchV1home1896.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-05-14]

2015-02-28 15:27 - 2015-02-28 15:28 - 02126848 _____ () C:\Users\kuba\Desktop\adwcleaner_4.111.exe
2015-02-27 18:31 - 2015-02-27 18:31 - 01107968 _____ () C:\Users\kuba\Desktop\RSIT.exe
2015-02-28 16:11 - 2014-09-01 16:49 - 00000000 ____D () C:\AdwCleaner
2015-02-27 18:31 - 2012-10-09 18:36 - 00000000 ____D () C:\Program Files\trend micro
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

AlternateDataStreams: C:\ProgramData\TEMP:87C79266
AlternateDataStreams: C:\ProgramData\TEMP:F34493AA
C:\Program Files\Skype\Toolbars
Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\GrooveMonitor => value deleted successfully.
"HKU\S-1-5-21-2139762894-2808136389-793043689-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F" => Key deleted successfully.
"HKU\S-1-5-21-2139762894-2808136389-793043689-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\H" => Key deleted successfully.
"HKU\S-1-5-21-2139762894-2808136389-793043689-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f44fea04-950c-11e2-88d5-0013e86fde41}" => Key deleted successfully.
HKCR\CLSID\{f44fea04-950c-11e2-88d5-0013e86fde41} => Key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => Key deleted successfully.
HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => Key not found.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
HKU\S-1-5-21-2139762894-2808136389-793043689-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKU\S-1-5-21-2139762894-2808136389-793043689-1000\Software\Microsoft\Internet Explorer\Main\\Secondary Start Pages => value deleted successfully.
http://mysearch.avg.com?cid={8057E487-2 ... 2014-04-25 19:16:20&v=18.1.5.512&pid=safeguard&sg=&sap=hp => Error: No automatic fix found for this entry.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKU\S-1-5-21-2139762894-2808136389-793043689-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" => Key deleted successfully.
HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key not found.
"HKU\S-1-5-21-2139762894-2808136389-793043689-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}" => Key deleted successfully.
HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} => Key not found.
"HKCR\PROTOCOLS\Handler\skype-ie-addon-data" => Key deleted successfully.
"HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => Key deleted successfully.
Firefox SearchEngineOrder.3 deleted successfully.
Firefox homepage deleted successfully.
Firefox Keyword.URL deleted successfully.
Firefox Proxy settings were reset.
C:\Users\kuba\AppData\Roaming\Mozilla\Firefox\Profiles\bvflu3f4.default\Extensions\{31264a33-a653-46c4-af49-1232c59a7da5} => Moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} => Moved successfully.
C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} => Moved successfully.
C:\Program Files\MediaWatchV1\MediaWatchV1home1896\ff => not found.
C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.1.5.512 => not found.
C:\Users\kuba\AppData\Roaming\Mozilla\Firefox\Profiles\bvflu3f4.default\extensions\avg@toolbar => not found.
Chrome HomePage deleted successfully.
Chrome StartupUrls deleted successfully.
Chrome DefaultSuggestURL deleted successfully.
C:\Users\kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfdnecihphmhljaaejmgoiahnihplgn => Moved successfully.
C:\Users\kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkmdocpbnblchppecickbipihlkehdfg => Moved successfully.
C:\Users\kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda => Moved successfully.
"HKLM\SOFTWARE\Google\Chrome\Extensions\cjmlepfdndnfglmnlfbdnamaljbfpmnc" => Key deleted successfully.
"HKLM\SOFTWARE\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl" => Key deleted successfully.
C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx => Moved successfully.
C:\Users\kuba\Desktop\adwcleaner_4.111.exe => Moved successfully.
C:\Users\kuba\Desktop\RSIT.exe => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\ProgramData\TEMP => ":87C79266" ADS removed successfully.
C:\ProgramData\TEMP => ":F34493AA" ADS removed successfully.
C:\Program Files\Skype\Toolbars => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 1.4 GB temporary data.


The system needed a reboot.

==== End of Fixlog 17:38:46 ====

Takze jeste uklidime.

• Stahnete a spustte DelFix - https://toolslib.net/downloads/viewdownload/2-delfix/
• Oznacte jen moznost "Remove disinfection tools"
• kliknete na Run

A pokud nejsou dotazy ci jine problemy, je to ode mne vse.

Děkuji za pomoc.

Nemate zac, rad jsem pomohl


Mejte se krasne a treba zase nekdy